40000000090800054000010000080001976f1d6a7763370a7d1ba07b030b5ddc9771565e0f3310dbb74d3d65d19976162ac8bb483c7f001879ec531b8e8e595f84f0c7448610cfea83141b505d8741b94d9b8d7aad12b2179ba38bed7f3f60e1560b8589d3e2e0e52092a7e371b4cb31b6f7a38d0f69bebf104dcef360271d907c6b3916f1d301b2a7d343ad744909e854de9aa1db41e7d19dd667a8e6ded887d7eb01"], 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x8004) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read$hidraw(r6, &(0x7f0000000280)=""/98, 0x62) 17:50:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0x3}]}) 17:50:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x550b, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:12 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 17:50:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0x5}]}) [ 2969.212784][T29629] FAULT_INJECTION: forcing a failure. [ 2969.212784][T29629] name failslab, interval 1, probability 0, space 0, times 0 [ 2969.225443][T29629] CPU: 0 PID: 29629 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2969.235604][T29629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2969.245661][T29629] Call Trace: [ 2969.248951][T29629] dump_stack+0x14a/0x1ce [ 2969.253279][T29629] ? devkmsg_release+0x11c/0x11c [ 2969.258303][T29629] ? show_regs_print_info+0x12/0x12 [ 2969.263500][T29629] should_fail+0x6fb/0x860 [ 2969.267913][T29629] ? setup_fault_attr+0x3d0/0x3d0 [ 2969.272934][T29629] ? eth_get_headlen+0x250/0x250 [ 2969.277868][T29629] ? iov_iter_advance+0x707/0xee0 [ 2969.282889][T29629] ? __napi_alloc_skb+0xd6/0x520 [ 2969.287819][T29629] should_failslab+0x5/0x20 [ 2969.292355][T29629] kmem_cache_alloc+0x36/0x260 [ 2969.297117][T29629] __napi_alloc_skb+0xd6/0x520 [ 2969.301880][T29629] napi_get_frags+0x5c/0x100 [ 2969.306467][T29629] tun_get_user+0xa10/0x34e0 17:50:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5514, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2969.311060][T29629] ? tun_do_read+0x1ed0/0x1ed0 [ 2969.315820][T29629] ? unwind_get_return_address_ptr+0x130/0x130 [ 2969.321956][T29629] ? memset+0x1f/0x40 [ 2969.325954][T29629] ? unwind_next_frame+0x1c90/0x2330 [ 2969.331231][T29629] ? __rcu_read_lock+0x50/0x50 [ 2969.335984][T29629] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2969.342035][T29629] tun_chr_write_iter+0x121/0x1a0 [ 2969.347062][T29629] __vfs_write+0x59d/0x720 [ 2969.351475][T29629] ? __kernel_write+0x340/0x340 [ 2969.356308][T29629] ? __kernel_text_address+0x93/0x110 [ 2969.361691][T29629] __kernel_write+0x12c/0x340 [ 2969.366435][T29629] write_pipe_buf+0x148/0x1d0 [ 2969.371104][T29629] ? splice_from_pipe_next+0x9c/0x440 [ 2969.376466][T29629] ? default_file_splice_write+0x250/0x250 [ 2969.382255][T29629] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2969.388293][T29629] ? anon_pipe_buf_release+0x167/0x1c0 [ 2969.393723][T29629] __splice_from_pipe+0x2d3/0x870 [ 2969.398720][T29629] ? default_file_splice_write+0x250/0x250 [ 2969.404505][T29629] default_file_splice_write+0x18b/0x250 [ 2969.410117][T29629] ? default_file_splice_read+0x980/0x980 [ 2969.415810][T29629] ? avc_policy_seqno+0x17/0x70 [ 2969.420633][T29629] ? security_file_permission+0x128/0x300 [ 2969.426328][T29629] ? default_file_splice_read+0x980/0x980 [ 2969.432027][T29629] __se_sys_splice+0x7ee/0x1b70 [ 2969.436848][T29629] ? fput_many+0x42/0x1a0 [ 2969.441148][T29629] ? ksys_write+0x25d/0x2c0 [ 2969.445628][T29629] ? __x64_sys_splice+0xf0/0xf0 [ 2969.450466][T29629] ? __x64_sys_splice+0x1d/0xf0 [ 2969.455311][T29629] do_syscall_64+0xcb/0x150 [ 2969.459802][T29629] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2969.465663][T29629] RIP: 0033:0x45ce69 [ 2969.469529][T29629] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2969.489199][T29629] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2969.497598][T29629] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2969.505557][T29629] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2969.513508][T29629] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2969.521478][T29629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2969.529430][T29629] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0x8}]}) 17:50:13 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5ede, 0xfc802) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) socket$inet_udp(0x2, 0x2, 0x0) dup(r1) 17:50:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x551f, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x8000}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x1}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0xffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "745eac8f1e75d892", "df0bdfc1ab31d5778cfeb79b2a29987b79ad9271119821eccd7d9f8d4545a3ca", "587d0ba8", "380be7e5accf9377"}, 0x38) 17:50:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000c00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:13 executing program 0 (fault-call:9 fault-nth:3): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5521, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0x9}]}) 17:50:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0xb}]}) 17:50:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0xf}]}) 17:50:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5522, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) [ 2970.126697][T29722] FAULT_INJECTION: forcing a failure. [ 2970.126697][T29722] name failslab, interval 1, probability 0, space 0, times 0 [ 2970.144294][T29722] CPU: 1 PID: 29722 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2970.154468][T29722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2970.164511][T29722] Call Trace: [ 2970.167797][T29722] dump_stack+0x14a/0x1ce [ 2970.172117][T29722] ? devkmsg_release+0x11c/0x11c [ 2970.177050][T29722] ? show_regs_print_info+0x12/0x12 [ 2970.182240][T29722] should_fail+0x6fb/0x860 [ 2970.186647][T29722] ? setup_fault_attr+0x3d0/0x3d0 [ 2970.191841][T29722] ? tun_get_user+0xe99/0x34e0 [ 2970.196619][T29722] should_failslab+0x5/0x20 [ 2970.201116][T29722] __kmalloc_track_caller+0x5d/0x2c0 [ 2970.206392][T29722] ? __napi_alloc_skb+0xd6/0x520 [ 2970.211326][T29722] ? tun_get_user+0xe99/0x34e0 [ 2970.216084][T29722] pskb_expand_head+0x10d/0xfb0 [ 2970.220934][T29722] tun_get_user+0xe99/0x34e0 [ 2970.225521][T29722] ? _raw_spin_lock_bh+0x111/0x180 [ 2970.230623][T29722] ? __schedule+0x920/0xef0 [ 2970.235121][T29722] ? tun_do_read+0x1ed0/0x1ed0 [ 2970.239966][T29722] ? is_mmconf_reserved+0x420/0x420 [ 2970.245165][T29722] ? memset+0x1f/0x40 [ 2970.249138][T29722] ? unwind_next_frame+0x1c90/0x2330 [ 2970.254428][T29722] ? __rcu_read_lock+0x50/0x50 [ 2970.259182][T29722] ? preempt_schedule_irq+0xe7/0x140 [ 2970.264452][T29722] ? preempt_schedule_notrace+0x130/0x130 [ 2970.270142][T29722] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2970.276227][T29722] tun_chr_write_iter+0x121/0x1a0 [ 2970.281236][T29722] __vfs_write+0x59d/0x720 [ 2970.285631][T29722] ? __kernel_write+0x340/0x340 [ 2970.290490][T29722] ? __fsnotify_parent+0xca/0x310 [ 2970.295519][T29722] __kernel_write+0x12c/0x340 [ 2970.300169][T29722] write_pipe_buf+0x148/0x1d0 [ 2970.304816][T29722] ? splice_from_pipe_next+0x9c/0x440 [ 2970.310168][T29722] ? default_file_splice_write+0x250/0x250 [ 2970.315952][T29722] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2970.321991][T29722] ? anon_pipe_buf_release+0x167/0x1c0 [ 2970.327419][T29722] __splice_from_pipe+0x2d3/0x870 [ 2970.332441][T29722] ? default_file_splice_write+0x250/0x250 [ 2970.338220][T29722] default_file_splice_write+0x18b/0x250 [ 2970.343826][T29722] ? default_file_splice_read+0x980/0x980 [ 2970.349520][T29722] ? avc_policy_seqno+0x17/0x70 [ 2970.354344][T29722] ? security_file_permission+0x128/0x300 [ 2970.360032][T29722] ? default_file_splice_read+0x980/0x980 [ 2970.366338][T29722] __se_sys_splice+0x7ee/0x1b70 [ 2970.371175][T29722] ? fput_many+0x42/0x1a0 [ 2970.375477][T29722] ? ksys_write+0x25d/0x2c0 [ 2970.379962][T29722] ? file_open_root+0x450/0x450 [ 2970.384783][T29722] ? __x64_sys_splice+0xf0/0xf0 [ 2970.389618][T29722] ? __x64_sys_splice+0x1d/0xf0 [ 2970.394439][T29722] do_syscall_64+0xcb/0x150 [ 2970.398932][T29722] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2970.404796][T29722] RIP: 0033:0x45ce69 [ 2970.408662][T29722] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2970.428325][T29722] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2970.436705][T29722] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2970.444647][T29722] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2970.452600][T29722] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2970.460543][T29722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2970.468502][T29722] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:14 executing program 0 (fault-call:9 fault-nth:4): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x12) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x4041) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b0000000e81035e13d76440e7308ed1c370923fa7de20a1c0ba1f1baf374d23ea9f3cd3848089a9569bc4c1d0877b777eb8e730128bf838876dddad37a1d", @ANYRES16=r3, @ANYBLOB="00022bbd7000fddbdf250a000000080004000100000008000400ff7f00005000018014000300ac1e010100000000000000000000000008000b0073697000080006007772720008000b007369700008000b0073697000080009003400000008000b007369700006000100020000000c00018008000b00736970000c000380080003000300000008000400010000001c00028005000d000000000006000e004e20000006000b000a000000"], 0xb0}, 0x1, 0x0, 0x0, 0x30000085}, 0x20000000) 17:50:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5523, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000d00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x16) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) socket$inet(0x2, 0xa, 0x6) 17:50:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004550c, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:14 executing program 1: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000000c0)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x8181) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x100, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000002c0)=0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000140)={r3, 0x2, 0x0, 0xf86b}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat(r6, &(0x7f0000000240)='./file0\x00', 0x2ef6187bf58161dd, 0x6) ioctl$USBDEVFS_FREE_STREAMS(r7, 0xc0185500, &(0x7f0000000280)={0xa28b}) 17:50:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x19) [ 2970.944345][T29806] FAULT_INJECTION: forcing a failure. [ 2970.944345][T29806] name failslab, interval 1, probability 0, space 0, times 0 [ 2970.957018][T29806] CPU: 0 PID: 29806 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2970.967180][T29806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2970.977226][T29806] Call Trace: [ 2970.980517][T29806] dump_stack+0x14a/0x1ce [ 2970.984843][T29806] ? devkmsg_release+0x11c/0x11c 17:50:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x70, 0x103000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fd) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000140)=0x9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[]) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r8 = dup2(r6, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1e) getdents(r8, &(0x7f0000000200)=""/231, 0xe7) [ 2970.989794][T29806] ? show_regs_print_info+0x12/0x12 [ 2970.994984][T29806] should_fail+0x6fb/0x860 [ 2970.999398][T29806] ? setup_fault_attr+0x3d0/0x3d0 [ 2971.004415][T29806] ? eth_get_headlen+0x250/0x250 [ 2971.009346][T29806] ? iov_iter_advance+0x707/0xee0 [ 2971.014365][T29806] ? __napi_alloc_skb+0xd6/0x520 [ 2971.019292][T29806] should_failslab+0x5/0x20 [ 2971.023788][T29806] kmem_cache_alloc+0x36/0x260 [ 2971.028550][T29806] __napi_alloc_skb+0xd6/0x520 [ 2971.033318][T29806] napi_get_frags+0x5c/0x100 [ 2971.038013][T29806] tun_get_user+0xa10/0x34e0 [ 2971.042578][T29806] ? tun_do_read+0x1ed0/0x1ed0 [ 2971.047852][T29806] ? unwind_get_return_address_ptr+0x130/0x130 [ 2971.053978][T29806] ? memset+0x1f/0x40 [ 2971.057959][T29806] ? unwind_next_frame+0x1c90/0x2330 [ 2971.063230][T29806] ? __rcu_read_lock+0x50/0x50 [ 2971.068009][T29806] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2971.074051][T29806] tun_chr_write_iter+0x121/0x1a0 [ 2971.079075][T29806] __vfs_write+0x59d/0x720 [ 2971.083497][T29806] ? __kernel_write+0x340/0x340 [ 2971.088338][T29806] ? __kernel_text_address+0x93/0x110 [ 2971.093700][T29806] __kernel_write+0x12c/0x340 [ 2971.098359][T29806] write_pipe_buf+0x148/0x1d0 [ 2971.103039][T29806] ? default_file_splice_write+0x250/0x250 [ 2971.108826][T29806] ? __page_cache_release+0x41a/0x470 [ 2971.114182][T29806] __splice_from_pipe+0x2d3/0x870 [ 2971.119189][T29806] ? default_file_splice_write+0x250/0x250 [ 2971.124974][T29806] default_file_splice_write+0x18b/0x250 [ 2971.130590][T29806] ? default_file_splice_read+0x980/0x980 [ 2971.136278][T29806] ? avc_policy_seqno+0x17/0x70 [ 2971.141104][T29806] ? security_file_permission+0x128/0x300 [ 2971.146792][T29806] ? default_file_splice_read+0x980/0x980 [ 2971.152488][T29806] __se_sys_splice+0x7ee/0x1b70 [ 2971.157340][T29806] ? fput_many+0x42/0x1a0 [ 2971.161650][T29806] ? ksys_write+0x25d/0x2c0 [ 2971.166124][T29806] ? __x64_sys_splice+0xf0/0xf0 [ 2971.170945][T29806] ? __x64_sys_splice+0x1d/0xf0 [ 2971.175767][T29806] do_syscall_64+0xcb/0x150 [ 2971.180251][T29806] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2971.186124][T29806] RIP: 0033:0x45ce69 [ 2971.189995][T29806] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2971.209578][T29806] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2971.218005][T29806] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2971.225950][T29806] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2971.233894][T29806] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2971.241838][T29806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2971.249780][T29806] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:15 executing program 0 (fault-call:9 fault-nth:5): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:15 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x10a) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000200)='/dev/usbmon#\x00', 0x0, r3) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f00000000c0)=""/194, 0xc2}], 0x2, 0xff, 0xfffff001) 17:50:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x13, 0x8000, 0x4, 0x2, 0x400, &(0x7f0000000040)="8fb2"}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000e00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x1ff, 0x4000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000001c0)={0x4, {{0xa, 0x4e20, 0x3, @private1, 0x6}}, {{0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}, 0x108) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000100)=0x14) r5 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'veth0\x00', 0x3}, 0x18) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x8c0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x20000, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000040)={0x20, {{0xa, 0x4e22, 0x1f, @private2, 0x7f}}}, 0x88) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x21}) 17:50:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004550d, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2971.806663][T29867] FAULT_INJECTION: forcing a failure. [ 2971.806663][T29867] name failslab, interval 1, probability 0, space 0, times 0 [ 2971.840615][T29867] CPU: 0 PID: 29867 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 17:50:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = dup2(r1, r2) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000040)="1c3b537948e7a2f6e3a1", 0xa}], 0x1, 0x2) [ 2971.850790][T29867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2971.860854][T29867] Call Trace: [ 2971.864146][T29867] dump_stack+0x14a/0x1ce [ 2971.868468][T29867] ? devkmsg_release+0x11c/0x11c [ 2971.873415][T29867] ? show_regs_print_info+0x12/0x12 [ 2971.878604][T29867] should_fail+0x6fb/0x860 [ 2971.883008][T29867] ? setup_fault_attr+0x3d0/0x3d0 [ 2971.888022][T29867] ? tun_get_user+0xe99/0x34e0 [ 2971.892774][T29867] should_failslab+0x5/0x20 [ 2971.897288][T29867] __kmalloc_track_caller+0x5d/0x2c0 17:50:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2971.902561][T29867] ? __napi_alloc_skb+0xd6/0x520 [ 2971.907488][T29867] ? tun_get_user+0xe99/0x34e0 [ 2971.912256][T29867] pskb_expand_head+0x10d/0xfb0 [ 2971.917098][T29867] tun_get_user+0xe99/0x34e0 [ 2971.921686][T29867] ? tun_do_read+0x1ed0/0x1ed0 [ 2971.926473][T29867] ? unwind_get_return_address_ptr+0x130/0x130 [ 2971.932622][T29867] ? memset+0x1f/0x40 [ 2971.936594][T29867] ? unwind_next_frame+0x1c90/0x2330 [ 2971.941877][T29867] ? __rcu_read_lock+0x50/0x50 [ 2971.946635][T29867] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 17:50:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = accept4$tipc(r2, 0x0, &(0x7f0000000080), 0x80000) setsockopt(r3, 0x8, 0x80000001, &(0x7f00000000c0)="3927539a60f284d0ae5dffab6ba34c3730a206c1b747074ef42084b67a398cb9aaf0d546fde46373da9f74e1f18a68f0cc3b7c96fecc2ceab67f63b117927fab9cef6e0dde77da8636813f07ff881cbd836460977162d60de8d80031c0e438eac50b2736f456a7d649cb79a2fb54fe04ae871587291590cdbaba5b76d98bbbeb2674d09c8d21cbbf39a836e316a5f3ec931ac22d63", 0x95) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = timerfd_create(0x4, 0x80800) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r8 = dup2(r7, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x8) finit_module(r6, &(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="6c0793ea0100000000"]) [ 2971.952697][T29867] tun_chr_write_iter+0x121/0x1a0 [ 2971.957718][T29867] __vfs_write+0x59d/0x720 [ 2971.962483][T29867] ? __kernel_write+0x340/0x340 [ 2971.967353][T29867] ? __kernel_text_address+0x93/0x110 [ 2971.972723][T29867] __kernel_write+0x12c/0x340 [ 2971.977403][T29867] write_pipe_buf+0x148/0x1d0 [ 2971.982198][T29867] ? default_file_splice_write+0x250/0x250 [ 2971.988003][T29867] ? __page_cache_release+0x41a/0x470 [ 2971.993373][T29867] __splice_from_pipe+0x2d3/0x870 [ 2971.998401][T29867] ? default_file_splice_write+0x250/0x250 17:50:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RCLUNK(r4, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2972.004200][T29867] default_file_splice_write+0x18b/0x250 [ 2972.009824][T29867] ? default_file_splice_read+0x980/0x980 [ 2972.015548][T29867] ? avc_policy_seqno+0x17/0x70 [ 2972.020396][T29867] ? security_file_permission+0x128/0x300 [ 2972.026104][T29867] ? default_file_splice_read+0x980/0x980 [ 2972.031811][T29867] __se_sys_splice+0x7ee/0x1b70 [ 2972.036653][T29867] ? fput_many+0x42/0x1a0 [ 2972.041009][T29867] ? ksys_write+0x25d/0x2c0 [ 2972.045701][T29867] ? file_open_root+0x450/0x450 [ 2972.050544][T29867] ? __x64_sys_splice+0xf0/0xf0 17:50:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000040)=""/156) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2972.055394][T29867] ? __x64_sys_splice+0x1d/0xf0 [ 2972.060237][T29867] do_syscall_64+0xcb/0x150 [ 2972.064756][T29867] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2972.070646][T29867] RIP: 0033:0x45ce69 [ 2972.074560][T29867] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2972.094187][T29867] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2972.102617][T29867] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2972.110580][T29867] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2972.118650][T29867] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2972.126614][T29867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2972.134581][T29867] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:15 executing program 0 (fault-call:9 fault-nth:6): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:15 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getuid() setresuid(0xee01, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) r9 = getuid() setresuid(0xee01, r9, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40803, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x8}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/usbmon#\x00'}}, {@obj_type={'obj_type', 0x3d, '\'{'}}, {@euid_eq={'euid', 0x3d, r8}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@permit_directio='permit_directio'}, {@audit='audit'}, {@permit_directio='permit_directio'}]}}) 17:50:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x20041) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r5 = dup3(r1, r4, 0x80000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r5, &(0x7f00000001c0)="80fc46f8e5256a42d3810345df92f783f86a357e75da113c7d4dc6cdf36f6a6071f52c2abfa01c709565e7231618ab19295d0fbd73dcc0d98d4ad2d4a864b0176f44270c0059a1205086f896e27aea69f993dc28338145cbd27740e3628a3b15c960f937cc9ccc820ec5bbe68320362a471a45691ee91adb1f0f44c00265cedf84e49a8b84b091e94a5ee17833bec93975c48c9664c743844e3476dea668d89cd914cef0f90e8b3893754dca50dfb63a38ce531a73bee28a2e8df6d0fb5efdcbbda2fde5b78a25c43b8095295736b4dbdc5ea4dcd5475080cde9df1b0ba77fd63d79f30f0af8ce3942be33716c5b626691bbac76462f74c6f6ab57c9fb23fe42c3d3af77b6d2bd917c4cb40698d1cbd0ef19c997c3c2ccbeb656edcd4c8021a7c70ed94d1e6b275b927ee888e70cab4561c6af3261e63b05ef4a56a9f2c12cb05fbd2b0bdd49d9a313fd7998dc45b97d94fb2d9b182546bcf5a7e8336642be677f96c24e0d155d82496161c93926cf4f656ef4aea61b7d3a40e1b34f4790e817943ae92851ce254a69a6d9d6357ddf236350ba413d4101d68f33a6ddfe53f8d77faa2521f4cd1c96b77f5788a6cf99319ad75445d96c21ce03d99f2cb96214ac142ad3f34ee698ec7c6696c74a341a5bbdcda5e82d4351c3423f4afe346364ce95ebc0a80bcacf76621586b1fe3d2bf9b6d63dba4e33d18e974bbc3eaaf08223ef238a17870376bd3a40c900f22a70cd57c1ba56ac34eb746e31326674ba9b879f2558842e0672d0c5a8714b2ff2af047f3756e203236c95af0db48201857fad67634bb586d36aab537b97b6ed4e9371dbfa0d2d7ad89112196e8ff31bb3d63a7adaf413c082681a3df9ecc8c65dc6b6d2b51438291e52dad0102e5538a38640459198b34fc38b129f2704c967f3aa1275a3f85d0412a7b3943b7b823be6954e688a5dba9bdf61515c88c98858e9bcf26b5cd259a23998ef0df762b912e1e56392930e21e1a5ee2f94bec0234cef8d5bc65994f1dc68c2b7fcc126992d18149e4057582a98be2d9c2123b77ebdfd9cd993228125704f4f1eaad8f42c1ad6da040d85c736c8d96c6404e4150c1d602abaf1433efdd6698da54b3111c55ef0f52d7054a771e0d1f927f4035a8a9c289678e644022dcb7e863fbaa4c37cf3afc9ed7e734760dad15daf53e37f20dd63eb106914d992e5fa9a6157aa4492d9ec9057448b71c4ff376a0d5fce7527c5e784c6544371b7d58d411e702bc63948e8048dc5ab0333a45179e558b8981662e3e9e806f5c4f9998bc87a5df5d1f68b94a309d0a0afd5a6ddb5bab10ed457c7f463294a952675e0e19c56f845bc2fcb16503c882eabdf6f00bce2506fc09ce0e1314ad18642b53c5ee02f11470d08b335072296b082e6bf02b22c5ed6975b170c3b77effa99966b9a94bdd0c701b6d1b6d51c83b94376f38ce5069e02609afcb40874db62caa0a3e9a86f3ea311cf6f310d3fe5c4378ce46e560a0be2f95bf9794cb3fa153dd4b532943b663f028fee01f72c63a7ed0ef89bf5e9554055c2ba1ea880c4bb2d9593ac60f4fb102229116086db34f32b60965bb8d4a220ab37bc4ab9e719fee11df8eaacd83f9234e9e2616f24ebacc7a0bd485d06c7e177f62bf7ec84c51b8d075710e629f20c3a9a9be191514b52aa4acd04361cf6f5acbe451e067f03decd29ae38f0cf294101ef0b9e2edd043ea8e6f848fbda50e50d828c91cd22f29c66d4fec1da8cf37fc5f940662177dc6a3a9178c8717f57161174fb5d487cc58e0e86f866b64768da58d242ac5aa3024cb53476cdecf1469950599f8ea841795513e6b08b7cf3fd00bb727ce2179b08ea83ac4592193c2dffc65dbffd8dd4997ab614f5a72652cb327b26730d188c0a533fd693e2cfb65e1ebdc08d8bda8b4fe5cc5d5d47baa0c24a6d70989423b6068bf2f66e001165d9101d408a3c1b781e73f102ca24000406b3e50a27b278293cc06fc2eef112a1dc991dd11279d95568eeda931f448817ab8b5d6aa6f5e56af70c7b68d9b4c03a0d722d17fd87f2fa6524e58f4567658dc73a8786aad6754a0a75a2cc6119464f9e9e69c7d68f64822176f67e7339676b05161e556a911f92cef5d00a2578a733458c9527dc294e286ca064d41c4143cf75280d9c099f66181d7463b464ad2168553c321fc7a5d6a53928c295161224e53602c81c70f0cb306f253582e76c6ecc63bd9c9b54ad2de9214b9fc00b26c12a843a077a93c71f24841b607616a8d38528638e9232af850786a3e9ab7027a09f7e5fd48f7662a85e44935bbfea434d58a223e56a24a109fe18d02b96e0166f4f08eadf8d71977c013d55ffd670202f0ce6ff0edf837465733f799525f4832d78e0df290bd209a53dfc56fdd22e142ddd58014d18894f75a92625a10f1539a9bb4a2f9c3f77846227ee91857cebfd3c07ae727144d164be8f49ec929bb70df285e2d2884b2846b4502fe917b3c7d1402e4d7d0d4a4d5615e5ae5cfc271b0ca19a407f2631086e7b9a7b17ea31d9535d39c422e752bb0f1e6af6eb9e12ec547d4aa9572c3dbef683dae3e20fbadd12ec74ca448455ae3d13bdcdd6f93444c1f9624c28b6dc02762409535cdd18897da5194095af03d8db43e5b292a258dccdef3c608136d03f8d5388543cd860785c18e639cfb8741e1fa422b457790b4b66364a585d96614c3b3c12e89c7d7128fa539d4fcf489f8aff6b157bf369f47d9773fb3e622682ed9c0070c67e4f2807c4398b969ea0b697ad94f522c9b35b1ae8b4f028c571e6adac057b34181c1010269e82cc686f267b93fd819adf934fa0eb0243bb947c99f6498dfa4fb9ae818dc9aece1fffa49ac5029b1c3e097c36f84fe9ebb9abe7b44033c00cf129c4d5dbdb46ae0c6d9724b8fb68e0be60a62f993ee024744ba89228315a29df98b8002b32a41be8121f03cd2278a551da6183f4447ef28be99aeee6cdd0e1b29ee01facebf43eeee14f9306519e90a9b731fa59cc4c1b414d32b9a33ef3615a16470606fe36457892a1fe7615328cb116d1ef729c414fe802eb2964e9501347eada6078ba339a08f5f9ea0e79245e5d885c8897ea24d8d85749dc66a923f031db69809d511d9c5ecdf4583172a48714b02ac050a763b7ea6b2e16193f0cd9887e899e9e674056130d2f9587b6ab1d4c5faefc268076a76dacf5e1bef7943ad799b50470cff7e842c973000d5cbdcc74e5dea205ba428fae480a77a46b3f98723bdbab4b262d41ed07c37103b5dce6319339da0f849791dea8ac0fa91b22567143dd922dd6468e97e6907af6e6c0a31572346f0e1db886ee705e47498172a88e688e28543573cb6f9834e845fbb27e3dafc5fc2b4e8534be1512580181eb1aa894e90a4db706113d29a0edc8c2a8e94cf828345a8348df9da5d05ff4f9f0166fc0d1af025f110c936d57996778a61de9401e1e22721c80c2bfd2fb60338378bb3aa0e6063d03656d885b21b7aa8ed683d333464e8c8d7d1d959d33e685fbf8c3ed10a31c688e9d86a3df4c35bd61c0310289d405d5b299b4a96e7cd1c4c994bacad1d7f77a1dc576b64b7fe12a0d0f2d418e339be3cb364a684c609c0dcc844bc40ee6673e45d92e4efea124396062622696f593ff1655075eed701d083110ff4da34a00ae0763f94ecf28a2a69dbc3604937e7d2f190122137f86c383e1105dc3f3c139bcecd785930b2349e59eb1b10b9e86773e212d77574c741b0508a4a80284a1d872fd91a25639cb536a61aa7b4fc483492ddc7b5de6bbc81e22eb888204f95467ff9f31f2bca89e816c9e41f0d044c5f480519cf52d5b3e67375959bcca60cb0917b10b621252d84dffc42d2fec34fab3525945b2a041fe60ab0be8eccada3a4484d1060fbe9313491912ac0f94dc83405db8769f72cd443585d1a8aa0b63028e396fba8ead947df6f622261c175268c21b52f51cc092b129051a3fea97c22b84b8802a033fc17ed34095e13476845e8dcaf630445c6517e13012e8e0ebc5355dd4562a6236f37527c9267e70ae4acaca7756750fee2f8d2036e17455ec08034e75185ccb96138de3815055f53c66f87b7b4c9b1f900aaf8e897e11ed8db6e9aca57f0e343ac8502af7ec3a37e2dc94256f04db3a4f65e2e675c0d3ed58e1f2598fbc7361ed60b1afdec600fab67407721f858da25003f220f4152da97ef899fb674cc0352a15a13a1ab6970881c68c198f4c7020746a545a38196cc119f682b2b964976e538d09c0099558e115ff35be8d646eabe01e870d392f816de044dee251694be4f70b34bcdba3bbe9c9298574abb9317960a9f4b0796edd61bdfd58a6c680c07d78e2495bb8db9d131edd10b811369dbfa173a803cf3958ce4519a0c71b687dd424a89bd542f144eb6abfca0a0f6d0ad3d1b3c539f05de04842864144e73ccc2b5a6e10b72e450fb6e41fa4e719ab62c518f7af9baf059c1a0422cd37c0557aea1e312fe8efebe03883824ae9c3fb866c22abe6585c08ec88db2cdd432dd2fd2a0a7707898331f7d781d65e227391df87e174243590ee24c4ed77adc45ff60b20ad744dd7bea5c638480570d71c94c318819f31a742be5f9a8d229efe1721efc65a40bdbebce394bb869c3faf8e34c17d291bac2cac91175cda6a66345dbe572a547e9ff4ac7a2051b2a6385f33ed5f794035726c16345f854994339d26b61b43cc39f6f474a69ec996b8b0abff0c3360bf7643f566a1c868ed5822958917465c53b5bcc1157b48edabc859fe7f9207efa168dd21a6eb9c4f4e6c4e0379cafcb8674ea9bb5c1779f79bab495d97dd598dbd0c9816d26d30a67810a45d6743afa28796caf030913a129e62b0982ef199d750351260fbd8cbcbfdb9e01e3fed5dbd6097d3af7fdb799bd3a5f65499a2e2ec5997973e6af887e4e08424d33acf5d759a6e57a585e6e4602ae6f32910fa169b2b5c03d755d09253ef31b216572ac8fde0d2ca29947df6417622480e03f35c3e2b3d26337f8fd0ed9c78f5cf6c0196afdedbca8af3ac8bced0e1dc86baeb60a82e469e9309d9239f4a4ba19fabf4228a8fe16f8d23ae3de14cd6aec3ea96d790ae20932f0de168b7c0186a6a10967a86edc8374c8abf82dd682316affaf8c2267adbc2f5f097e929318aabaa68cb76fefbd625b9c562d46579d4e1fabdab445c625cff222a3a7937f4f4510fde575bd170076750f170814e8489c8b593050250152f9a992989607f2b3f29cc00abc5be7feb0b55513fc3368bc7c3f08c4ac12f7025d1c30c5f23bb2114eade9166cd3d5b6a4fc58479ae6c03846b3d7f9d95766c4a0907ab2200e882f81eb37e8be534cd5a45f2c2360816d6391b7611dd96eaa9c72b26318005d16e536575e0001d66b533c6aa64766752c4fb9a68614b89772303105b79177179467ea53b7cc50c0e1c7c1d5d39d0126ba4bb23be336f0ca429c088b24b8248ca03ebd5c5e4d95c31d06cde4f12a29dee5300c8f89ed114a4a299f5e3dda11b5d48ce57746e512316a51acf6e6f11e89bcf69eade98c845b7336e423cee25e71efaad7107b0d8ef1096595074c8c8040fefa5a0511b12b71a48b3fdcef1b9d96ea6a61e52ccd9615605d1f0b01571760b48853ea95f079b66265d0cb240ed8f11a2dacb3dba8803297e19e12edb8657bf676a7282bceaf38b49f3802233b420277ca7e2d3802e3f1c0d373b3998e5349f4b33904ca41862356ae0ba40ca8e0206cfb6585a636f9af7827c76aa01ab1bd87765a8fe18c3ed76fe4c7231a3ec5a", &(0x7f00000011c0)=""/232}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000001580)=ANY=[@ANYBLOB="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"]) 17:50:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4004551e, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000001100010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r2}, 0x8) r4 = creat(&(0x7f0000000ac0)='./file0\x00', 0x9) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = perf_event_open(&(0x7f0000000b40)={0x2, 0x70, 0x7f, 0x5, 0x3, 0x9c, 0x0, 0x6, 0x20, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000b00), 0x7}, 0x2000, 0x4, 0x2fa, 0x6, 0x800, 0xf4c, 0xeee}, r5, 0xe, r7, 0xb) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)="024e81de026e425a333b0708de57a70ad27a765b7bc06e426e90e5a0e5e643757696b2b7e12d81eea7a4c2f593aa6bbf5e488955cd8f3a508d391aa6a23deaadc6a20031afd2b19ff2e98036d2e44abf6d4b8ea01115bfdb84ad8902b66cb4d4e75be39b9df5b676010af630bedd5caeaa061740cb68395270ea6e7a2579e92e6409e4dd415a73b3c639362422daa3072b2eb0ca58537991738f9b50ccab692399c84dbdffedaee0196851f93a93b275d205b3388dc598596b71e46301e559f3450e93c1da8081fd729fe1d13a86475f885f62dfe996ea049e3376d262e3cffcace910df9fec39cd12aafea3", 0xec}], 0x1, 0x0, 0x0, 0x4000000}, {&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)="382b5fe8cf5d3bfb4d844557cad747414b75ae5473bfc286f571e28545f41d03e31c823753861c08afd55256bf847dd3055080b51f660140c67b9b7cbcc1aa8f97d57083cba7f7ab3cb014a2f60a44dda52b75faf731ff4e0a95dd58a04a15db8d178ba08e539e6d40a6dae7b0", 0x6d}], 0x1, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, 0xffffffffffffffff]}}], 0xc0, 0x4005}, {&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000900)="5c26de5ff41a45457980ef3de37692a3d3e77e98", 0x14}, {&(0x7f0000000940)="5d4b133b29402ac73d25ca019ea6a20f0506ec7995cf0d056331c9c0152e90871d6da62f0d8d5e90d942ea49450041d25bb139af8ef3ef7875f75efb3683d4b2", 0x40}], 0x2, &(0x7f0000000bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r0, r8]}}], 0x98, 0x20040880}, {&(0x7f0000000c80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000000d00)="3623359dd9ff0ab5a80e43a4ce4ccff68c9050355c6b6b4b6392ddf29c557242f93cffc684640b6bef2863a86a3ea0b5a3574b56abd05a0eb7b1e8ff0f7357a649d30277a4c319a44fbe08ff9aaa586ab15e40145b3bc89f9a91794340a354808118cb741caf8c859a", 0x69}, {&(0x7f0000000d80)="e882dabf40c6c312f2c7312377bed0a23ce5fbb25ed383ac797f00321436ac5ba0751f3bbb6e7a3095b2c198a06f7a45b871ccea3b0feef69e5bcc657fdffa4c070c643da636c825ff60bb245ec58af64e701540e3c773ed6d5207e664d8c02d836a034ebf535e816f68f8fd2ebdc6ca99efbac8c53f5b6348041a37a70ebf942917f492a0b451dfc899b04204db4583496bd47db4785f0e2e6799ae62a73cfcb6056b706f6b6f27beb1de4f3394dd1567ae9683d8e4f90404f6b5ea7100dfc5f11dba01119cdda8e2941fc4a41cf50e5ab14cb5b4ea1e48bfcd", 0xda}, {&(0x7f0000000e80)="772c630e3c910bd2d82fcaf8d41a2ec026fe221b20a89ed64a6cac7d881143fa6555927c47bd2c57fbefd218904a11b0320b024da2f3af1a65063bb754c5f145c6bb73b6533dd80cae611412fb32bab8a05e1f1f5fb8a669f11b71251b67935716158d0511972674bc522fbb68f1bc64b58e97fdea99180115837757dda676b8e9d05294d08a293182564ace8ab534ba99050bf8fd6c00ee8f813dfc3e431cea44151ce8e08d9c4504edba83ff97cb", 0xaf}, {&(0x7f0000000f40)="8c45c37fa58773f979df01f9b1d53ad8e3fc0b08581d73b2301dc5f4008d497d81cdaba2c8ed45afec6226d989a89f5676fbe3d875372be98c7e5fc5115afcd1e97a29ea0d024fcef1c2805e5d576e5804651778372706b49396ba20367921e6b31244a5c82e087609ca038ac23c04cbcd6eea17342e2680c817e8d474d5d758f2e8ef8ab66957c2733724fb3a3913db7641ed57960665bcb10b12637da22ec6cbe70df987ac0e2605d82ca08178c0a0f9ca78c96904aa0577aceebb0125d05955305a91183e40306ede48ed8c3b808f761ad8aad9dec428763e88011d34898b0d38", 0xe2}, {&(0x7f0000001040)="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", 0x1000}], 0x5, 0x0, 0x0, 0x4000}], 0x4, 0x80) 17:50:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000080003d35"]) 17:50:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x40049409, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:16 executing program 2: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0185500, &(0x7f0000000000)={0x4, 0x10, [{0xc}, {0xb, 0x1}, {0x7, 0x1}, {0x6}, {0x2, 0x1}, {0x9, 0x1}, {0x4}, {0x5, 0x1}, {0xb}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0xe, 0x1}, {0xe, 0x1}, {0xd}]}) 17:50:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4008550c, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2972.679894][T29963] FAULT_INJECTION: forcing a failure. [ 2972.679894][T29963] name failslab, interval 1, probability 0, space 0, times 0 [ 2972.692546][T29963] CPU: 0 PID: 29963 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2972.702686][T29963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2972.712731][T29963] Call Trace: [ 2972.716028][T29963] dump_stack+0x14a/0x1ce [ 2972.720369][T29963] ? devkmsg_release+0x11c/0x11c [ 2972.725346][T29963] ? show_regs_print_info+0x12/0x12 [ 2972.730544][T29963] should_fail+0x6fb/0x860 [ 2972.734955][T29963] ? setup_fault_attr+0x3d0/0x3d0 [ 2972.739978][T29963] ? eth_get_headlen+0x250/0x250 [ 2972.745062][T29963] ? iov_iter_advance+0x707/0xee0 [ 2972.750083][T29963] ? __napi_alloc_skb+0xd6/0x520 [ 2972.755018][T29963] should_failslab+0x5/0x20 [ 2972.759522][T29963] kmem_cache_alloc+0x36/0x260 [ 2972.764284][T29963] __napi_alloc_skb+0xd6/0x520 [ 2972.769068][T29963] napi_get_frags+0x5c/0x100 [ 2972.773652][T29963] tun_get_user+0xa10/0x34e0 [ 2972.778245][T29963] ? tun_do_read+0x1ed0/0x1ed0 [ 2972.783106][T29963] ? unwind_get_return_address_ptr+0x130/0x130 [ 2972.790213][T29963] ? memset+0x1f/0x40 [ 2972.794278][T29963] ? unwind_next_frame+0x1c90/0x2330 [ 2972.799559][T29963] ? __rcu_read_lock+0x50/0x50 [ 2972.804318][T29963] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2972.810384][T29963] tun_chr_write_iter+0x121/0x1a0 [ 2972.815412][T29963] __vfs_write+0x59d/0x720 [ 2972.819824][T29963] ? __kernel_write+0x340/0x340 [ 2972.824665][T29963] ? __kernel_text_address+0x93/0x110 [ 2972.830028][T29963] __kernel_write+0x12c/0x340 [ 2972.834720][T29963] write_pipe_buf+0x148/0x1d0 [ 2972.839405][T29963] ? default_file_splice_write+0x250/0x250 [ 2972.845206][T29963] ? __page_cache_release+0x41a/0x470 [ 2972.850587][T29963] __splice_from_pipe+0x2d3/0x870 [ 2972.856558][T29963] ? default_file_splice_write+0x250/0x250 [ 2972.862361][T29963] default_file_splice_write+0x18b/0x250 [ 2972.867994][T29963] ? default_file_splice_read+0x980/0x980 [ 2972.873727][T29963] ? avc_policy_seqno+0x17/0x70 [ 2972.878573][T29963] ? security_file_permission+0x128/0x300 [ 2972.884283][T29963] ? default_file_splice_read+0x980/0x980 [ 2972.889991][T29963] __se_sys_splice+0x7ee/0x1b70 [ 2972.894855][T29963] ? fput_many+0x42/0x1a0 [ 2972.899188][T29963] ? ksys_write+0x25d/0x2c0 [ 2972.903682][T29963] ? file_open_root+0x450/0x450 [ 2972.908524][T29963] ? __x64_sys_splice+0xf0/0xf0 [ 2972.913362][T29963] ? __x64_sys_splice+0x1d/0xf0 [ 2972.918212][T29963] do_syscall_64+0xcb/0x150 [ 2972.922716][T29963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2972.928599][T29963] RIP: 0033:0x45ce69 [ 2972.932489][T29963] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2972.952089][T29963] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2972.960519][T29963] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2972.968506][T29963] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 17:50:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x2) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x180, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xdd6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x6115}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xffffffff}, {0xc, 0x90, 0x800}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfc}, {0xc, 0x90, 0xffff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xce6}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x1fc, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb7}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x1ff}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x8}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x3f}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x43, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x58}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x80000000}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x7ff}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x34}, {0x5, 0x14, 0x1}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x10000008}, {0x5, 0x14, 0x1}}, {@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008804) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) write$tun(r0, &(0x7f0000000380)={@val={0x0, 0x8}, @void, @mpls={[{0x3}, {0x2, 0x0, 0x1}, {0xb7f, 0x0, 0x1}, {0x7ff}], @ipv6=@udp={0x2, 0x6, "b69b16", 0x240, 0x11, 0x0, @loopback, @mcast2, {[@hopopts={0x2b, 0x1d, [], [@calipso={0x7, 0x50, {0x0, 0x12, 0x49, 0x1, [0x7, 0x7, 0xba1, 0xfffffffffffff3a9, 0x7, 0x8, 0x3fa6400e, 0x7ff, 0x4]}}, @generic={0x1, 0x98, "6b7cac0029be23864b37a2b966aee8d1c8dea7f3860a7be01d652f88961cdf9063718708688bfec6a27e370b65df5c72c76f91d303478bbf97b74895db254e76521597f60e13ccc252c97e8a2e8d290b67dfd7a9ed894cd7d2030dbe743571b287b28f2300ee661ea7539d34021a55d559062b16d685e007633f8cb4c36dc9e8933ed18787a4ece9d27a5d07945903655595930848789951"}]}, @srh={0x2f, 0x10, 0x4, 0x8, 0x3, 0x38, 0x5, [@mcast2, @mcast2, @dev={0xfe, 0x80, [], 0x36}, @ipv4={[], [], @loopback}, @private0, @empty, @private0={0xfc, 0x0, [], 0x1}, @ipv4={[], [], @multicast2}]}], {0x4e21, 0x4e23, 0xc0, 0x0, @gue={{0x1, 0x1, 0x0, 0x5, 0x100, @void}, "6639609cc41ebf8b2798230a5b5a73eb10c798f3c101d5418580168b2238ddb78a6d71a06ad8aadefaecd1b2c4d1ba7e1b77480e53d3da852515816c51c9fc7eb336e850b14f5b4deb40058f8aa0cc7647ca0db66c5b646b7a920c64e5d0f7f79352611463451ca4e5242cb661a1ce226f993a505045d8ea751c995ba16120557f4a68f623cfc24cf1a076c256675c7b7f9de4e585803c9182729b805648caa6b3d59fe386d008e9598e4931e5251f7ecb19c4bf"}}}}}}, 0x27c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x1ff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0x10, 0x0, 0xc6e}, &(0x7f00000001c0)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x7}}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0x800, r1}, 0x8) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) [ 2972.976470][T29963] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2972.984436][T29963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2972.992769][T29963] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:16 executing program 0 (fault-call:9 fault-nth:7): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000040)={0x80000001, "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"}) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000001200010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xf}, {0xf, 0xd}, {0x10, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r6 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x0, 0xc) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000280)=r6) 17:50:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1f0, 0x0, 0x210, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "2cefc9da19d62e46cbef650d797d8944e26869fd46fff2a8d26aa87eab779b78357aeef1d53a644cbccc5b9754a81488ef1880e420c9592c097defc50e56a80a9fbf7a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "d82d839b1c69b684eff225db5faa"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "51df7430eadf54514cc3c28f99cb134d24245fefaeef98886cffa2e590a12cb1d986964c5cd0a42492a8a387091b18214a7a3fa3b3b655ef89aeac1641dfbd7fbc43bae6f4055d66c337084c07f25bbae16e1c8cabc69b306b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "e0955a25009dd6fda0fdf3919c7f26aacd0feadeb0106b6028ff328ae824b50be3e70a8f82af411d62a64642eab24aa99bd99c835ac80d68e8abe472cba364d2b0af4a78fb198730ca40f09c3c61f011a48a3e3d241dc4bc897c11b9920364e952fa929ce6f3b6fd9eb84c46a7e2306dd948520a420176d1c45d731f458e7c71ff0d885f1ab19fd1ceb29e7be43661d15d095249032777c7"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x5f, 0x4, "870b0739765dbeb24a7a5d7794153bd4e1114f6d846c4e0ff361de2b26d06c2e31627e2924785c68024d860daea5c88164420fe0a6e4272c80b28e88995c288dd51b8407506dc20d774b5444848f53b3d544e9edee48cf3c1b56fc"}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000303010200000000000000000c00000008000340fffffffe0c000200fffffffc00f425cf08000340000000040c000200fffffffb0000e2a9"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, 0x8, 0x0, 0x3, 0x5, 0x5, 0x2}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000000040)={0x5c3d, 0x11, [{0xa, 0x1}, {0xa}, {0xe}, {0xc}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0xd, 0x1}, {0x6, 0x1}, {0xd, 0x1}, {0x2, 0x1}, {0xf, 0x1}, {0x4, 0x1}, {0x9, 0x1}, {0x9}, {0xf, 0x1}, {0x7, 0x1}]}) 17:50:16 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) sync_file_range(r0, 0xffffffffffffffff, 0x4c, 0x5) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCEXCL(r3, 0x540c) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x101) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="000000800100210000"]) 17:50:16 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2973.559753][T30050] FAULT_INJECTION: forcing a failure. [ 2973.559753][T30050] name failslab, interval 1, probability 0, space 0, times 0 [ 2973.573034][T30050] CPU: 1 PID: 30050 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2973.583185][T30050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2973.593234][T30050] Call Trace: [ 2973.597652][T30050] dump_stack+0x14a/0x1ce [ 2973.601982][T30050] ? devkmsg_release+0x11c/0x11c [ 2973.606924][T30050] ? show_regs_print_info+0x12/0x12 [ 2973.612125][T30050] should_fail+0x6fb/0x860 [ 2973.616538][T30050] ? setup_fault_attr+0x3d0/0x3d0 [ 2973.622346][T30050] ? tun_get_user+0xe99/0x34e0 [ 2973.627106][T30050] should_failslab+0x5/0x20 [ 2973.631605][T30050] __kmalloc_track_caller+0x5d/0x2c0 [ 2973.636891][T30050] ? __napi_alloc_skb+0xd6/0x520 [ 2973.641825][T30050] ? tun_get_user+0xe99/0x34e0 [ 2973.646576][T30050] pskb_expand_head+0x10d/0xfb0 [ 2973.651408][T30050] tun_get_user+0xe99/0x34e0 [ 2973.655986][T30050] ? tun_do_read+0x1ed0/0x1ed0 [ 2973.660727][T30050] ? unwind_get_return_address_ptr+0x130/0x130 [ 2973.666852][T30050] ? memset+0x1f/0x40 [ 2973.670819][T30050] ? unwind_next_frame+0x1c90/0x2330 [ 2973.676110][T30050] ? __rcu_read_lock+0x50/0x50 [ 2973.680872][T30050] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2973.686914][T30050] tun_chr_write_iter+0x121/0x1a0 [ 2973.691919][T30050] __vfs_write+0x59d/0x720 [ 2973.696311][T30050] ? __kernel_write+0x340/0x340 [ 2973.701132][T30050] ? __kernel_text_address+0x93/0x110 [ 2973.706479][T30050] __kernel_write+0x12c/0x340 [ 2973.711328][T30050] write_pipe_buf+0x148/0x1d0 [ 2973.716004][T30050] ? default_file_splice_write+0x250/0x250 [ 2973.721803][T30050] ? __page_cache_release+0x41a/0x470 [ 2973.727161][T30050] __splice_from_pipe+0x2d3/0x870 [ 2973.732179][T30050] ? default_file_splice_write+0x250/0x250 [ 2973.738046][T30050] default_file_splice_write+0x18b/0x250 [ 2973.743740][T30050] ? default_file_splice_read+0x980/0x980 [ 2973.749872][T30050] ? avc_policy_seqno+0x17/0x70 [ 2973.754717][T30050] ? security_file_permission+0x128/0x300 [ 2973.760424][T30050] ? default_file_splice_read+0x980/0x980 [ 2973.766131][T30050] __se_sys_splice+0x7ee/0x1b70 [ 2973.770961][T30050] ? fput_many+0x42/0x1a0 [ 2973.775269][T30050] ? ksys_write+0x25d/0x2c0 [ 2973.779745][T30050] ? file_open_root+0x450/0x450 [ 2973.784571][T30050] ? __x64_sys_splice+0xf0/0xf0 [ 2973.789418][T30050] ? __x64_sys_splice+0x1d/0xf0 [ 2973.794250][T30050] do_syscall_64+0xcb/0x150 [ 2973.798758][T30050] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2973.804856][T30050] RIP: 0033:0x45ce69 [ 2973.808730][T30050] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2973.828677][T30050] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2973.837178][T30050] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2973.845130][T30050] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2973.853088][T30050] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 17:50:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000010000000067655b7630e04bdfadc8b5896b9da65eb24f355d86c27e86b2707f95e37037b17527434c0b7544eba0a0f0817e66f5694c79b43e73cd094694ce3fa606000000000000399d446b04d800"/92]) 17:50:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4008550d, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000, 0x7ff, &(0x7f00000000c0)) [ 2973.861038][T30050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2973.868983][T30050] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:17 executing program 0 (fault-call:9 fault-nth:8): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) socket$nl_route(0x10, 0x3, 0x0) r2 = signalfd(r1, &(0x7f0000000040)={[0x6]}, 0x8) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000000c0)={0x33, 0x6, 0x0, {0x3, 0x3, 0xa, 0x0, '!\xf1/+}@[!@\''}}, 0x33) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x40085511, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:17 executing program 1: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x404a20) 17:50:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, r1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$KDADDIO(r3, 0x4b34, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB]) 17:50:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000001f00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002180)=""/4103, 0x1007}], 0x1, 0x0, 0x0) 17:50:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x12c41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="000020000100000000d1ea22719e03"]) 17:50:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80, 0x0) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$unix(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x200, 0x0, 0x7, 0x149, r7, 0x8c26, [], 0x0, 0xffffffffffffffff, 0x3, 0x10000000}, 0x40) fcntl$dupfd(r5, 0x406, r8) r9 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x40087602, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2974.450303][T30137] FAULT_INJECTION: forcing a failure. [ 2974.450303][T30137] name failslab, interval 1, probability 0, space 0, times 0 [ 2974.463586][T30137] CPU: 0 PID: 30137 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2974.473902][T30137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2974.483953][T30137] Call Trace: [ 2974.487252][T30137] dump_stack+0x14a/0x1ce [ 2974.491612][T30137] ? devkmsg_release+0x11c/0x11c [ 2974.496546][T30137] ? show_regs_print_info+0x12/0x12 [ 2974.501737][T30137] should_fail+0x6fb/0x860 [ 2974.506146][T30137] ? setup_fault_attr+0x3d0/0x3d0 [ 2974.511193][T30137] ? eth_get_headlen+0x250/0x250 [ 2974.516133][T30137] ? iov_iter_advance+0x707/0xee0 [ 2974.521155][T30137] ? __napi_alloc_skb+0xd6/0x520 [ 2974.526090][T30137] should_failslab+0x5/0x20 [ 2974.530629][T30137] kmem_cache_alloc+0x36/0x260 [ 2974.535419][T30137] __napi_alloc_skb+0xd6/0x520 [ 2974.540172][T30137] napi_get_frags+0x5c/0x100 [ 2974.544747][T30137] tun_get_user+0xa10/0x34e0 [ 2974.549327][T30137] ? tun_do_read+0x1ed0/0x1ed0 [ 2974.554087][T30137] ? unwind_get_return_address_ptr+0x130/0x130 [ 2974.560278][T30137] ? memset+0x1f/0x40 [ 2974.564234][T30137] ? unwind_next_frame+0x1c90/0x2330 [ 2974.569519][T30137] ? __rcu_read_lock+0x50/0x50 [ 2974.574259][T30137] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2974.580319][T30137] tun_chr_write_iter+0x121/0x1a0 [ 2974.585443][T30137] __vfs_write+0x59d/0x720 [ 2974.589865][T30137] ? __kernel_write+0x340/0x340 [ 2974.594691][T30137] ? __kernel_text_address+0x93/0x110 [ 2974.600210][T30137] __kernel_write+0x12c/0x340 [ 2974.604913][T30137] write_pipe_buf+0x148/0x1d0 [ 2974.609580][T30137] ? default_file_splice_write+0x250/0x250 [ 2974.615624][T30137] ? __page_cache_release+0x41a/0x470 [ 2974.621009][T30137] __splice_from_pipe+0x2d3/0x870 [ 2974.626025][T30137] ? default_file_splice_write+0x250/0x250 [ 2974.631805][T30137] default_file_splice_write+0x18b/0x250 [ 2974.637413][T30137] ? default_file_splice_read+0x980/0x980 [ 2974.643117][T30137] ? avc_policy_seqno+0x17/0x70 [ 2974.647970][T30137] ? security_file_permission+0x128/0x300 [ 2974.653676][T30137] ? default_file_splice_read+0x980/0x980 [ 2974.659366][T30137] __se_sys_splice+0x7ee/0x1b70 [ 2974.664208][T30137] ? fput_many+0x42/0x1a0 [ 2974.668524][T30137] ? ksys_write+0x25d/0x2c0 [ 2974.673008][T30137] ? __x64_sys_splice+0xf0/0xf0 [ 2974.677863][T30137] ? __x64_sys_splice+0x1d/0xf0 [ 2974.682724][T30137] do_syscall_64+0xcb/0x150 [ 2974.687204][T30137] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2974.693083][T30137] RIP: 0033:0x45ce69 [ 2974.697141][T30137] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2974.716751][T30137] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2974.725148][T30137] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2974.733096][T30137] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2974.741042][T30137] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2974.749006][T30137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 2974.756967][T30137] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:18 executing program 0 (fault-call:9 fault-nth:9): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4020940d, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x40011) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000180)=ANY=[@ANYBLOB="006c1d65cd00000300ca4aca7a8ee16e81"]) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/150) 17:50:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x3611}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000100)) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r5 = dup2(r1, r4) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="3633d45a782eb1422f111818bfc1f9b075a4300b7cdc1d9fccbdbbaa9d021e4dd197c560eb273c25", 0x28}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="54b3f9fce847f5be66a6c0291107ca6bb8864b14ed62f8211eaf7b450bcf5530a8a423c9190b5d4ebf2863c0ea40cd522cf6f3f913213328efe6bcc152e4b84f6545a158d705bf24c029b3484f59e541e69426a23683fe42140eff8e5c1b7cf29a4ca0848c6ececdcd0e108c615daeeb10fe8a174a84a4ff5f17f4c259250b6401b1f55f8733e842a0a9811328a98aa75c7acbb477532b8fffd872bb76f206381c61b42c41d46480380f", 0xaa}], 0x3, 0x4, 0x103) 17:50:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000002500010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:18 executing program 1: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "005bb0b6d36f2fb2", "1ecc34635942447863e7b9bde5774822", "ec75ce56", "f71c1998142b5788"}, 0x28) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000000)={0x18, 0x1c, 0x8, 0x1, 0x0, 0x0, 0x6, 0x6d}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x200000, 0x0) write$P9_RATTACH(r2, &(0x7f00000004c0)={0x14, 0x69, 0x1, {0x40, 0x0, 0x5}}, 0x14) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) preadv(r3, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f00000001c0)=""/179, 0xb3}, {&(0x7f0000000340)=""/199, 0xc7}], 0x3, 0x0, 0x0) 17:50:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x41045508, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045503, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:18 executing program 1: setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x90400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x6, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x608, 0x240, 0x310, 0xffffffff, 0x240, 0x310, 0x538, 0x538, 0xffffffff, 0x538, 0x538, 0x5, &(0x7f0000000540), {[{{@ipv6={@private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xff000000], [0x80000080, 0xffffff00, 0xff, 0xff0000ff], 'bridge_slave_0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2c, 0x5, 0x0, 0x4}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0xffff], 0x5bc, 0x2, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2}}}}, {{@ipv6={@empty, @loopback, [0xff, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xff000000], 'macvtap0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x1f, 0x4}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x2, 0x3ff], 0x0, 0x1, 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv4=@remote, @port=0x4e24, @icmp_id=0x64}}}, {{@ipv6={@ipv4={[], [], @multicast2}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0x0, 0xff000000], 'batadv0\x00', 'wg1\x00', {}, {0xff}, 0x21, 0x7f, 0x3, 0x50}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xea, 0xe000, 0x2}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff000000, 0xffffffff, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xffffffff], 'rose0\x00', 'vxcan1\x00', {}, {0xff}, 0x2c, 0x6, 0x3, 0x28}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x800, [], 0x8, 0x10, 0x1, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @private1={0xfc, 0x1, [], 0x1}, @mcast1, @rand_addr=' \x01\x00', @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @local, @empty, @private2, @loopback, @local, @remote, @dev={0xfe, 0x80, [], 0x3a}], 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0xf337}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x668) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000440)=0xe8) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8], 0x18}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$FIOCLEX(r1, 0x5451) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'netpci0\x00', {}, 0x401}) [ 2975.308622][T30207] FAULT_INJECTION: forcing a failure. [ 2975.308622][T30207] name failslab, interval 1, probability 0, space 0, times 0 [ 2975.352221][T30207] CPU: 1 PID: 30207 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2975.362393][T30207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2975.372440][T30207] Call Trace: [ 2975.375734][T30207] dump_stack+0x14a/0x1ce [ 2975.380051][T30207] ? devkmsg_release+0x11c/0x11c [ 2975.384994][T30207] ? show_regs_print_info+0x12/0x12 [ 2975.390197][T30207] should_fail+0x6fb/0x860 [ 2975.394598][T30207] ? setup_fault_attr+0x3d0/0x3d0 [ 2975.399612][T30207] ? tun_get_user+0xe99/0x34e0 [ 2975.404381][T30207] should_failslab+0x5/0x20 [ 2975.408887][T30207] __kmalloc_track_caller+0x5d/0x2c0 [ 2975.414157][T30207] ? __napi_alloc_skb+0xd6/0x520 [ 2975.419078][T30207] ? tun_get_user+0xe99/0x34e0 [ 2975.423824][T30207] pskb_expand_head+0x10d/0xfb0 [ 2975.428662][T30207] tun_get_user+0xe99/0x34e0 [ 2975.433257][T30207] ? tun_do_read+0x1ed0/0x1ed0 [ 2975.438007][T30207] ? unwind_get_return_address_ptr+0x130/0x130 [ 2975.444147][T30207] ? memset+0x1f/0x40 [ 2975.448118][T30207] ? unwind_next_frame+0x1c90/0x2330 [ 2975.453398][T30207] ? __rcu_read_lock+0x50/0x50 [ 2975.458157][T30207] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2975.464219][T30207] tun_chr_write_iter+0x121/0x1a0 [ 2975.469242][T30207] __vfs_write+0x59d/0x720 [ 2975.473654][T30207] ? __kernel_write+0x340/0x340 [ 2975.478502][T30207] ? __kernel_text_address+0x93/0x110 [ 2975.483886][T30207] __kernel_write+0x12c/0x340 [ 2975.488560][T30207] write_pipe_buf+0x148/0x1d0 [ 2975.493239][T30207] ? default_file_splice_write+0x250/0x250 [ 2975.499036][T30207] ? __page_cache_release+0x41a/0x470 [ 2975.506139][T30207] __splice_from_pipe+0x2d3/0x870 [ 2975.511161][T30207] ? default_file_splice_write+0x250/0x250 [ 2975.517047][T30207] default_file_splice_write+0x18b/0x250 [ 2975.522675][T30207] ? default_file_splice_read+0x980/0x980 [ 2975.528393][T30207] ? avc_policy_seqno+0x17/0x70 [ 2975.533247][T30207] ? security_file_permission+0x128/0x300 [ 2975.538960][T30207] ? default_file_splice_read+0x980/0x980 [ 2975.544671][T30207] __se_sys_splice+0x7ee/0x1b70 [ 2975.549523][T30207] ? fput_many+0x42/0x1a0 [ 2975.553848][T30207] ? ksys_write+0x25d/0x2c0 [ 2975.558643][T30207] ? file_open_root+0x450/0x450 [ 2975.563489][T30207] ? __x64_sys_splice+0xf0/0xf0 [ 2975.568332][T30207] ? __x64_sys_splice+0x1d/0xf0 [ 2975.573179][T30207] do_syscall_64+0xcb/0x150 [ 2975.577680][T30207] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2975.583564][T30207] RIP: 0033:0x45ce69 17:50:19 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, 0x0, 0x0, 0x4) syz_io_uring_complete(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x202000, 0x0) syz_io_uring_complete(r1) syz_io_uring_complete(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f00000001c0)=ANY=[@ANYBLOB="980000000000cffc89aed211f5238aa1575eb6d34152f6746fad6ed031d0ddc64ccd81c0cfd1ed76e42c156264cdc0e8663a3526ac8d541853f6fc5fbe5ff37b45e85c01623d09753f07125b43c9df74398906bc341349fa9f5dd30d9666392ed22ef9a93f2cb7a242273595e2b1d62ba9ce268a6bcfa7fb562bdce999cc15167d1b38"]) [ 2975.587462][T30207] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2975.607064][T30207] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2975.615476][T30207] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2975.623441][T30207] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2975.631407][T30207] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2975.639368][T30207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2975.647359][T30207] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:19 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x5277c0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x5c3d}) 17:50:19 executing program 0 (fault-call:9 fault-nth:10): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_vs_stats\x00') 17:50:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045505, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:19 executing program 2: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0185500, &(0x7f0000000040)={0x1}) 17:50:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000002800010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:19 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x1, 0x1, 0x4, 0x0, 0xffffffff, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="008000000194040007"]) 17:50:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='macsec0\x00') r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3f, 0x101101) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004550f, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045510, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2976.211828][T30295] FAULT_INJECTION: forcing a failure. [ 2976.211828][T30295] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.224474][T30295] CPU: 1 PID: 30295 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2976.234697][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2976.244747][T30295] Call Trace: [ 2976.248037][T30295] dump_stack+0x14a/0x1ce [ 2976.252376][T30295] ? devkmsg_release+0x11c/0x11c [ 2976.257310][T30295] ? show_regs_print_info+0x12/0x12 [ 2976.262522][T30295] should_fail+0x6fb/0x860 [ 2976.266934][T30295] ? setup_fault_attr+0x3d0/0x3d0 [ 2976.271953][T30295] ? eth_get_headlen+0x250/0x250 [ 2976.276887][T30295] ? iov_iter_advance+0x707/0xee0 [ 2976.281905][T30295] ? __napi_alloc_skb+0xd6/0x520 [ 2976.286834][T30295] should_failslab+0x5/0x20 [ 2976.291329][T30295] kmem_cache_alloc+0x36/0x260 [ 2976.296094][T30295] __napi_alloc_skb+0xd6/0x520 [ 2976.300856][T30295] napi_get_frags+0x5c/0x100 [ 2976.305442][T30295] tun_get_user+0xa10/0x34e0 [ 2976.310033][T30295] ? tun_do_read+0x1ed0/0x1ed0 [ 2976.314919][T30295] ? unwind_get_return_address_ptr+0x130/0x130 [ 2976.321070][T30295] ? memset+0x1f/0x40 [ 2976.325045][T30295] ? unwind_next_frame+0x1c90/0x2330 [ 2976.330330][T30295] ? __rcu_read_lock+0x50/0x50 [ 2976.335090][T30295] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2976.341148][T30295] tun_chr_write_iter+0x121/0x1a0 [ 2976.346165][T30295] __vfs_write+0x59d/0x720 [ 2976.350597][T30295] ? __kernel_write+0x340/0x340 [ 2976.355444][T30295] ? __kernel_text_address+0x93/0x110 [ 2976.360816][T30295] __kernel_write+0x12c/0x340 [ 2976.365490][T30295] write_pipe_buf+0x148/0x1d0 [ 2976.370198][T30295] ? default_file_splice_write+0x250/0x250 [ 2976.376003][T30295] ? __page_cache_release+0x41a/0x470 [ 2976.381388][T30295] __splice_from_pipe+0x2d3/0x870 [ 2976.386408][T30295] ? default_file_splice_write+0x250/0x250 [ 2976.392205][T30295] default_file_splice_write+0x18b/0x250 [ 2976.397829][T30295] ? default_file_splice_read+0x980/0x980 [ 2976.403538][T30295] ? avc_policy_seqno+0x17/0x70 [ 2976.408381][T30295] ? security_file_permission+0x128/0x300 [ 2976.414090][T30295] ? default_file_splice_read+0x980/0x980 [ 2976.419799][T30295] __se_sys_splice+0x7ee/0x1b70 [ 2976.424638][T30295] ? fput_many+0x42/0x1a0 [ 2976.428955][T30295] ? ksys_write+0x25d/0x2c0 [ 2976.433447][T30295] ? file_open_root+0x450/0x450 [ 2976.438286][T30295] ? __x64_sys_splice+0xf0/0xf0 [ 2976.443122][T30295] ? __x64_sys_splice+0x1d/0xf0 [ 2976.447959][T30295] do_syscall_64+0xcb/0x150 [ 2976.452454][T30295] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2976.458333][T30295] RIP: 0033:0x45ce69 [ 2976.462226][T30295] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2976.481996][T30295] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2976.490400][T30295] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2976.498373][T30295] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2976.506356][T30295] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2976.514405][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 2976.522388][T30295] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000002d00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045515, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:20 executing program 0 (fault-call:9 fault-nth:11): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045518, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xb0a) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)=0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f00000000c0)=ANY=[@ANYBLOB="002fca3c8efee420c409dc17e25d3a717e20226b5207e9e12675f17260db8ae410dab182a45eeb61eb4f1cc40d228c59d3ccf1f234a5aa1c0aa88abc1d"]) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x18}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8], 0x18}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r10], 0x18}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000b00)={0x88c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x42af}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x34d9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xf0000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r10}}}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x801}, 0x20000041) 17:50:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000ea0900000a940a4578546f270257d9eee20000009e0001000000007c819798bc8484aae6236f6c1b1afde055d8dfba79ce95cbf53fd3e7da989954e8b4cb27745757d44ba0ccf417000b9c14b12c271ac8d7ef8066e894e03ccbfe1dcf2725700009bc4febdc4c5fee7bac964e6f2afe99e558e8c3ac05cc41cb98bed8f691f138ed1386c215e3b4bc392f95a43045e700e33e9b89923406891f392c0effb18640e92684884638d5837740acf7175227f61c13d29cbeeb2c9b9fa600e295edb5305ed481647feea3baefc97e7e0f235662caa017b48e02ee437f9f01000000000000000000cc0c82f2d9c5"]) 17:50:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045519, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x1, 0x6, 0x40, 0x2}, {0x5, 0x3f, 0xce}, {0xffff, 0x0, 0x6, 0xfbff}, {0x2, 0x8, 0x91, 0x8001}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x3, 0x1}, 0x6, 0xe0, &(0x7f0000000340)={0x1f, 0x16, 0xfd0, 0x8, 0x6}, 0x8, 0x400, 0x4, 0x0, 0x7, 0xaa89, &(0x7f0000000380)="81d2949f5e90c4f511c9835f0248e8a24ad8c77861a08c4d93092107e3afeb21fe804044e0e15c98f09ca5f628a28196d863008bd295bccf2f01ceceb23e5c25b956c5b358af9b6c1d644cbafd08aceb263e76269b385ec23411c0fe079fdc76557d1e80d1aa4ffb59230fe5db4ec20fbb5accea54f0414972e7ad3bef8c4568dad3b880a7cc0d0935d886bff05a6f7fbcfe949c7d473b29a39d22cfc683bfb9a8448b6cc59b1bb304950eb340d4d6548a98"}) dup2(r3, r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'macvlan1\x00', {0x3d}, 0x3b}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="800000000100000000"]) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) syncfs(r4) read$hidraw(r2, &(0x7f0000000040)=""/198, 0xc6) [ 2977.084717][T30394] FAULT_INJECTION: forcing a failure. [ 2977.084717][T30394] name failslab, interval 1, probability 0, space 0, times 0 [ 2977.103034][T30394] CPU: 1 PID: 30394 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2977.113187][T30394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2977.123237][T30394] Call Trace: [ 2977.126555][T30394] dump_stack+0x14a/0x1ce [ 2977.130884][T30394] ? devkmsg_release+0x11c/0x11c [ 2977.135820][T30394] ? show_regs_print_info+0x12/0x12 [ 2977.141013][T30394] should_fail+0x6fb/0x860 [ 2977.145429][T30394] ? setup_fault_attr+0x3d0/0x3d0 [ 2977.150450][T30394] ? tun_get_user+0xe99/0x34e0 [ 2977.155206][T30394] should_failslab+0x5/0x20 [ 2977.159724][T30394] __kmalloc_track_caller+0x5d/0x2c0 [ 2977.165000][T30394] ? __napi_alloc_skb+0xd6/0x520 [ 2977.169935][T30394] ? tun_get_user+0xe99/0x34e0 [ 2977.174714][T30394] pskb_expand_head+0x10d/0xfb0 [ 2977.179560][T30394] tun_get_user+0xe99/0x34e0 [ 2977.184179][T30394] ? tun_do_read+0x1ed0/0x1ed0 [ 2977.188943][T30394] ? unwind_get_return_address_ptr+0x130/0x130 [ 2977.195086][T30394] ? memset+0x1f/0x40 [ 2977.199059][T30394] ? unwind_next_frame+0x1c90/0x2330 [ 2977.204335][T30394] ? __rcu_read_lock+0x50/0x50 [ 2977.209092][T30394] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2977.215152][T30394] tun_chr_write_iter+0x121/0x1a0 [ 2977.220180][T30394] __vfs_write+0x59d/0x720 [ 2977.224587][T30394] ? __kernel_write+0x340/0x340 [ 2977.229428][T30394] ? __kernel_text_address+0x93/0x110 17:50:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0xc, 0x1e, 0x9a, &(0x7f0000000480)}) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r4, 0x20, 0x70bd2c, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x1]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3aff43b5, 0x9]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x20004050) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r4, 0x1, 0x70bd2f, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3e}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xd3, 0x8]}, @SEG6_ATTR_DST={0xffffffffffffff39, 0x1, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x4855}, 0x4040) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)={0x98, r5, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0xcc1}, 0x4010) [ 2977.234801][T30394] __kernel_write+0x12c/0x340 [ 2977.239475][T30394] write_pipe_buf+0x148/0x1d0 [ 2977.244196][T30394] ? default_file_splice_write+0x250/0x250 [ 2977.250005][T30394] ? __page_cache_release+0x41a/0x470 [ 2977.255376][T30394] __splice_from_pipe+0x2d3/0x870 [ 2977.260419][T30394] ? default_file_splice_write+0x250/0x250 [ 2977.266220][T30394] default_file_splice_write+0x18b/0x250 [ 2977.271921][T30394] ? default_file_splice_read+0x980/0x980 [ 2977.277634][T30394] ? avc_policy_seqno+0x17/0x70 [ 2977.282483][T30394] ? security_file_permission+0x128/0x300 [ 2977.288215][T30394] ? default_file_splice_read+0x980/0x980 [ 2977.293930][T30394] __se_sys_splice+0x7ee/0x1b70 [ 2977.298786][T30394] ? fput_many+0x42/0x1a0 [ 2977.303142][T30394] ? ksys_write+0x25d/0x2c0 [ 2977.307661][T30394] ? file_open_root+0x450/0x450 [ 2977.312524][T30394] ? __x64_sys_splice+0xf0/0xf0 [ 2977.317387][T30394] ? __x64_sys_splice+0x1d/0xf0 [ 2977.322231][T30394] do_syscall_64+0xcb/0x150 [ 2977.326759][T30394] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2977.332643][T30394] RIP: 0033:0x45ce69 [ 2977.336529][T30394] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2977.356129][T30394] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2977.364532][T30394] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2977.372496][T30394] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2977.380460][T30394] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2977.388422][T30394] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 2977.396388][T30394] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) nanosleep(&(0x7f0000000140)={r4, r5+10000000}, &(0x7f0000000180)) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xd714, 0x340) r7 = dup2(r6, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat(r7, &(0x7f0000000000)='./file0\x00', 0x155201, 0x100) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) r9 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x383e03) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000004000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, r2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0xa38) 17:50:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004551a, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$inet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f00000000c0)={0x1, 'veth0_to_team\x00', {}, 0x8}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:21 executing program 0 (fault-call:9 fault-nth:12): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x40000080072, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000001000000009cdc4d2e5d1a0b14d1d6f0349a1ae475b99cc046a946ab3961ce5a3ff5db8ed26f9d1c0fd92e6231b8ba02b47e384fe7f8a18a699e8060"]) 17:50:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80085504, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) setresgid(r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = getuid() setresuid(0xee01, r3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) r6 = getuid() setresuid(0xee01, r6, 0x0) getresgid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f00000016c0)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x150, 0x31, 0x800, 0x70bd27, 0x25dfdbfe, "", [@nested={0x13e, 0x4d, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @fd=r0}, @generic="a17ea809b98b2933b7831affec96384b6762b597770a865160ce281516d056a57885dbdaa6639746c0a05bd16a2c23eae382aa4adcc639a474d5dc668a3b0a293a3588197e724f8b55b27136ff686c70124a38c3a450a85878aa274e2ad1930e482312ca5a970ac8", @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="0c46711d228efa7d037ffb32d61a2d59d036c7aae4e1e579d75f578481f0617659afb66ba5d54307fa8384ed8c9c1356186b881b1465705b5281c541c2815c11e40ef9db881103d5762832c3ec7dcc9744eb5ce175a03bd3d51cfecdb2b38917a090b2b13516c83abc11ceee83d53e7d7d85aec7f0b34defe7761753", @typed={0x4, 0xd}, @generic="17271e9c111cb558e74fe8c1778c57f374875690df8fbb57c47f4171159291e620cb8c24011174e909ce90dcb859c0f2a1027c8f41593c0abcccd675588c0fd444e1"]}]}, 0x150}, {&(0x7f0000000040)={0x24, 0x41, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0xe, 0x0, 0x0, @pid}, @typed={0xc, 0x8a, 0x0, 0x0, @u64=0xa06}]}, 0x24}, {&(0x7f0000000680)={0x1010, 0x1f, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@generic="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"]}, 0x1010}], 0x3, &(0x7f0000001700)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x140}, 0x44811) 17:50:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000005f00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="00008b245e4b390905"]) 17:50:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x4, 0x5e48e560e2301e9) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[]) [ 2977.972061][T30480] FAULT_INJECTION: forcing a failure. [ 2977.972061][T30480] name failslab, interval 1, probability 0, space 0, times 0 [ 2977.984803][T30480] CPU: 1 PID: 30480 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2977.994940][T30480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2978.004988][T30480] Call Trace: [ 2978.008279][T30480] dump_stack+0x14a/0x1ce [ 2978.012598][T30480] ? devkmsg_release+0x11c/0x11c [ 2978.017522][T30480] ? show_regs_print_info+0x12/0x12 [ 2978.022706][T30480] should_fail+0x6fb/0x860 [ 2978.027110][T30480] ? setup_fault_attr+0x3d0/0x3d0 [ 2978.032127][T30480] ? eth_get_headlen+0x250/0x250 [ 2978.037054][T30480] ? iov_iter_advance+0x707/0xee0 [ 2978.042067][T30480] ? __napi_alloc_skb+0xd6/0x520 [ 2978.046996][T30480] should_failslab+0x5/0x20 [ 2978.051489][T30480] kmem_cache_alloc+0x36/0x260 [ 2978.056250][T30480] __napi_alloc_skb+0xd6/0x520 [ 2978.061011][T30480] napi_get_frags+0x5c/0x100 [ 2978.065685][T30480] tun_get_user+0xa10/0x34e0 [ 2978.070274][T30480] ? tun_do_read+0x1ed0/0x1ed0 [ 2978.075031][T30480] ? unwind_get_return_address_ptr+0x130/0x130 [ 2978.081172][T30480] ? memset+0x1f/0x40 [ 2978.085143][T30480] ? unwind_next_frame+0x1c90/0x2330 [ 2978.090441][T30480] ? __rcu_read_lock+0x50/0x50 [ 2978.095198][T30480] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2978.101281][T30480] tun_chr_write_iter+0x121/0x1a0 [ 2978.106301][T30480] __vfs_write+0x59d/0x720 [ 2978.110739][T30480] ? __kernel_write+0x340/0x340 [ 2978.115584][T30480] ? __kernel_text_address+0x93/0x110 [ 2978.120954][T30480] __kernel_write+0x12c/0x340 [ 2978.125631][T30480] write_pipe_buf+0x148/0x1d0 [ 2978.130305][T30480] ? default_file_splice_write+0x250/0x250 [ 2978.136110][T30480] ? __page_cache_release+0x41a/0x470 [ 2978.141476][T30480] __splice_from_pipe+0x2d3/0x870 [ 2978.146498][T30480] ? default_file_splice_write+0x250/0x250 [ 2978.152337][T30480] default_file_splice_write+0x18b/0x250 [ 2978.157963][T30480] ? default_file_splice_read+0x980/0x980 [ 2978.163678][T30480] ? avc_policy_seqno+0x17/0x70 [ 2978.168531][T30480] ? security_file_permission+0x128/0x300 [ 2978.174249][T30480] ? default_file_splice_read+0x980/0x980 [ 2978.179964][T30480] __se_sys_splice+0x7ee/0x1b70 [ 2978.184817][T30480] ? fput_many+0x42/0x1a0 [ 2978.189142][T30480] ? ksys_write+0x25d/0x2c0 [ 2978.193645][T30480] ? file_open_root+0x450/0x450 [ 2978.198494][T30480] ? __x64_sys_splice+0xf0/0xf0 [ 2978.203340][T30480] ? __x64_sys_splice+0x1d/0xf0 [ 2978.208192][T30480] do_syscall_64+0xcb/0x150 [ 2978.212697][T30480] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2978.218585][T30480] RIP: 0033:0x45ce69 [ 2978.222513][T30480] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2978.242119][T30480] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2978.250526][T30480] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2978.258490][T30480] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 17:50:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) accept(r1, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000000)=0x80) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r3 = add_key$fscrypt_provisioning(&(0x7f0000000040)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x0, 0x0, "9690f06d3e34a154d6d974ae20ac95fc7c2dc358a6a19400b8765c20f928b317a07338ad83dd70b6361ca5d2b387d94aea0e1652995da87213942a44ad6b5da624b08db978278c2e739ee53ecb4882ab7200b8cdb5b8d790ba5bca039027828e002cd694982d872244b0945893c304bf0cfa4543ae952309e787ff0a4467e2d83dcf6d0969b3e0b8412a48ce46355bfc733fb557d04b58f374a4d590fbcf6b7bf35c4fe6005e669c7132d3eece"}, 0xb5, 0xfffffffffffffff9) r4 = add_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="4090c9487da19c14655dd7bb52f91d668414f0863f34772b79743fe1345cd8fb65444f8f776971762ed69452f0628f16e38a4c4d238c6be9e0ee6780d7799c954624f3d58b96eac2a7b14e2afc7fce2927c251c3a73f7ac6f992c6b880a608d955cd5955ea5df1bfb064aaf3abf5ad3b0a446159eb603c608d22046014e97a93", 0x80, 0xfffffffffffffff9) keyctl$negate(0xd, r3, 0x100, r4) 17:50:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008550e, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x33, 0x37, 0x2, {0x0, 0x80000001, 0x1, r3, 0x15, '/dev/bus/usb/00#/00#\x00'}}, 0x33) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2978.266455][T30480] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2978.274419][T30480] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 2978.282368][T30480] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:22 executing program 0 (fault-call:9 fault-nth:13): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:22 executing program 2: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000000)={0x3509, 0xda59, 0x8, 0x7f}) r3 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x0, [], [{0x3ff, 0x4, 0x0, 0x39, 0xe5, 0x1000}, {0xfffff801, 0xfffffff7, 0x81, 0x3, 0x48, 0x20}], [[], [], [], [], [], []]}) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0185500, &(0x7f0000000080)) 17:50:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000080010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000300)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$xdp(0x2c, 0x3, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)=0x3) ioctl$FIOCLEX(r2, 0x5451) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x9) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000002c0)='system_u:object_r:mail_spool_t:s0\x00', 0x54) finit_module(r5, &(0x7f0000000100)='bridge_slave_0\x00', 0x2) r6 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x9) 17:50:22 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) fcntl$setflags(r3, 0x2, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000140)=ANY=[@ANYBLOB="77d0e6395fce90070000000000000087feccdff0"]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f00000001c0)={0x800, {{0xa, 0x4e20, 0xc8, @mcast1, 0xff}}}, 0x88) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) sendfile(r0, r7, &(0x7f0000000100)=0x5, 0x0) 17:50:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80086601, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2978.809504][T30589] FAULT_INJECTION: forcing a failure. [ 2978.809504][T30589] name failslab, interval 1, probability 0, space 0, times 0 [ 2978.824462][T30589] CPU: 1 PID: 30589 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2978.834606][T30589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2978.844661][T30589] Call Trace: [ 2978.847989][T30589] dump_stack+0x14a/0x1ce [ 2978.852319][T30589] ? devkmsg_release+0x11c/0x11c [ 2978.857255][T30589] ? show_regs_print_info+0x12/0x12 [ 2978.862451][T30589] should_fail+0x6fb/0x860 [ 2978.866868][T30589] ? setup_fault_attr+0x3d0/0x3d0 [ 2978.871895][T30589] ? tun_get_user+0xe99/0x34e0 [ 2978.876655][T30589] should_failslab+0x5/0x20 [ 2978.881159][T30589] __kmalloc_track_caller+0x5d/0x2c0 [ 2978.886439][T30589] ? __napi_alloc_skb+0xd6/0x520 [ 2978.891370][T30589] ? tun_get_user+0xe99/0x34e0 [ 2978.896113][T30589] pskb_expand_head+0x10d/0xfb0 [ 2978.900964][T30589] tun_get_user+0xe99/0x34e0 [ 2978.905530][T30589] ? tun_do_read+0x1ed0/0x1ed0 [ 2978.910271][T30589] ? unwind_get_return_address_ptr+0x130/0x130 [ 2978.916401][T30589] ? memset+0x1f/0x40 [ 2978.920376][T30589] ? unwind_next_frame+0x1c90/0x2330 [ 2978.925648][T30589] ? __rcu_read_lock+0x50/0x50 [ 2978.930420][T30589] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2978.936474][T30589] tun_chr_write_iter+0x121/0x1a0 [ 2978.941482][T30589] __vfs_write+0x59d/0x720 [ 2978.945912][T30589] ? __kernel_write+0x340/0x340 [ 2978.950737][T30589] ? __kernel_text_address+0x93/0x110 [ 2978.956084][T30589] __kernel_write+0x12c/0x340 [ 2978.960899][T30589] write_pipe_buf+0x148/0x1d0 [ 2978.965557][T30589] ? default_file_splice_write+0x250/0x250 [ 2978.971381][T30589] ? __page_cache_release+0x41a/0x470 [ 2978.976728][T30589] __splice_from_pipe+0x2d3/0x870 [ 2978.981756][T30589] ? default_file_splice_write+0x250/0x250 [ 2978.987593][T30589] default_file_splice_write+0x18b/0x250 [ 2978.993235][T30589] ? default_file_splice_read+0x980/0x980 [ 2978.998959][T30589] ? avc_policy_seqno+0x17/0x70 [ 2979.003793][T30589] ? security_file_permission+0x128/0x300 [ 2979.009489][T30589] ? default_file_splice_read+0x980/0x980 [ 2979.015199][T30589] __se_sys_splice+0x7ee/0x1b70 [ 2979.020057][T30589] ? fput_many+0x42/0x1a0 [ 2979.024393][T30589] ? ksys_write+0x25d/0x2c0 [ 2979.028875][T30589] ? file_open_root+0x450/0x450 [ 2979.033742][T30589] ? __x64_sys_splice+0xf0/0xf0 [ 2979.038585][T30589] ? __x64_sys_splice+0x1d/0xf0 [ 2979.043409][T30589] do_syscall_64+0xcb/0x150 [ 2979.047899][T30589] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2979.053777][T30589] RIP: 0033:0x45ce69 [ 2979.057655][T30589] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2979.077254][T30589] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2979.085668][T30589] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2979.094235][T30589] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2979.102229][T30589] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2979.110241][T30589] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 2979.118218][T30589] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:22 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xa, 0x901) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0x14, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000100)=""/20}, &(0x7f0000000140)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x3336, 0x1) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x184, &(0x7f0000000480)={@empty, @dev={[], 0x19}, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "b414b0", 0x14e, 0x6, 0x1, @mcast1, @loopback, {[@srh={0x6c, 0x2, 0x4, 0x1, 0x5, 0x8, 0xfff9, [@private1]}, @routing={0x2b, 0xa, 0x0, 0x13, 0x0, [@private2={0xfc, 0x2, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, [], 0x41}, @remote, @local]}, @hopopts={0x1, 0xe, [], [@generic={0xf8, 0x75, "22eb1f75c2925aefd0f6097da8f9365f7b668e2e5a0b3ed23cce93888e5cdfa2823e55147780f614e885289bff4d27479f772b9f43e745f2e99ffe7fdf02bec60461b2e0f72091d2c95c9d99574a11ee1071cabc81d5dd69e712c9d3076f86b9cfd1784814e370ffd2dd8b9a5322298f50b2aa7cbd"}]}], {{0x4e23, 0x4e20, r4, r5, 0x0, 0x0, 0xd, 0xe1, 0x7fff, 0x0, 0xfffd, {[@nop, @exp_fastopen={0xfe, 0x4}, @exp_fastopen={0xfe, 0x8, 0xf989, "50940e5e"}, @timestamp={0x8, 0xa, 0x1, 0x3}, @exp_smc={0xfe, 0x6}]}}, {"e320cdc4e5e098ef82cdef414888ab8f9fb34eb6ff669ef7cccccbc2e8b79f44b7e23bf16e63d91571bb"}}}}}}}, &(0x7f0000000440)={0x0, 0x4, [0xa80, 0x172, 0x25, 0x8a7]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000240)=ANY=[@ANYBLOB="20010020010000000d", @ANYRESDEC=r3, @ANYRESDEC=r1]) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:50:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80087601, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x1007}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x33, 0x0, 0x7, 0x0, 0x0, 0x9, 0x66}, 0x8) 17:50:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'wg2\x00', 0x100}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000020016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:22 executing program 0 (fault-call:9 fault-nth:14): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8010550e, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:22 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fsetxattr(r3, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)='[\x00', 0x2, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000140)=0xffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="0000e6f6352dab3a8e6505a409115b708a0209873209230b24baea17214593b9a831c5cf40fdd1c0dc1adf6cad68ef865aeff61029a4349631f6f2508e65c5111fd4b2a38cc6c658e3acbcb87ba8ff6b051ff1f5a28e20d54d19db7e2bb345e1cc329b3c3d3a3930a3508695187662d26294110237d8f3ea"]) 17:50:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000030016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'vlan0\x00', 0x1000}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f00000001c0)=0x4) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:dhcpd_exec_t:s0\x00', 0x22) r3 = dup2(r2, r1) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r5) setresgid(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r7) setresgid(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r9, 0x0) setgroups(0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="13c865486587eae657fccd37d105e69169ac1d34b8ea73d3cd062fd1868f6632aba1c1b73482aae30fb3f06f671cd23bf96a3a8487d3db539fbb"]) 17:50:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2979.650759][ T22] audit: type=1400 audit(1597254623.012:1329): avc: denied { getopt } for pid=30660 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dhcpd_exec_t:s0 tclass=netlink_route_socket permissive=1 [ 2979.682356][T30668] FAULT_INJECTION: forcing a failure. [ 2979.682356][T30668] name failslab, interval 1, probability 0, space 0, times 0 [ 2979.695010][T30668] CPU: 0 PID: 30668 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2979.705157][T30668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2979.715467][T30668] Call Trace: [ 2979.718762][T30668] dump_stack+0x14a/0x1ce [ 2979.723089][T30668] ? devkmsg_release+0x11c/0x11c [ 2979.728024][T30668] ? show_regs_print_info+0x12/0x12 [ 2979.733219][T30668] should_fail+0x6fb/0x860 [ 2979.737633][T30668] ? setup_fault_attr+0x3d0/0x3d0 [ 2979.742653][T30668] ? eth_get_headlen+0x250/0x250 17:50:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', r6, 0x2f, 0x1, 0x2, 0x1000, 0xe, @remote, @mcast2, 0x8, 0x10, 0xfff, 0xa3a1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r4, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r7}, 0xc) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r7}, 0xc) r9 = accept$inet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x4, 0x4, 0x2, 0x8}, {0x101, 0x4, 0x9, 0x800}, {0x4, 0x5, 0x3f, 0x4}]}, 0x10) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r8) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:23 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x401) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000c06050000000000000000000c0000060900020073797a30000000000900020073797a32000000000900020073797a32000000000900020073797a31000000000900020073797a320000000061cf7afe2e293b063d5f9191ce4209bedf6999a87abec174b88afc91f5847b0bdf49399e86868fdd3f48603c34e52e914ab547e478edc39cdde5811e2e6d0c98a11a37fa550aab1cc3de2eee40ca18b2b2470d30ba8ba3d1632110f24da26e7010be2c5eaf704863dc0ce9c5ddfc24efa830864b0814fa864626af80506422d63f396120968bafb6c08790c9ccc5205152c8075ff7bd86117a2101fdf4d5a0d90d1767e46c742b46c1af2e5a5715f1"], 0x50}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) [ 2979.747586][T30668] ? iov_iter_advance+0x707/0xee0 [ 2979.752601][T30668] ? __napi_alloc_skb+0xd6/0x520 [ 2979.757529][T30668] should_failslab+0x5/0x20 [ 2979.762057][T30668] kmem_cache_alloc+0x36/0x260 [ 2979.766813][T30668] __napi_alloc_skb+0xd6/0x520 [ 2979.771574][T30668] napi_get_frags+0x5c/0x100 [ 2979.776160][T30668] tun_get_user+0xa10/0x34e0 [ 2979.780773][T30668] ? tun_do_read+0x1ed0/0x1ed0 [ 2979.785543][T30668] ? unwind_get_return_address_ptr+0x130/0x130 [ 2979.792386][T30668] ? memset+0x1f/0x40 [ 2979.796385][T30668] ? unwind_next_frame+0x1c90/0x2330 [ 2979.801673][T30668] ? __rcu_read_lock+0x50/0x50 [ 2979.806436][T30668] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2979.812506][T30668] tun_chr_write_iter+0x121/0x1a0 [ 2979.817540][T30668] __vfs_write+0x59d/0x720 [ 2979.821943][T30668] ? __kernel_write+0x340/0x340 [ 2979.826775][T30668] ? __kernel_text_address+0x93/0x110 [ 2979.832131][T30668] __kernel_write+0x12c/0x340 [ 2979.836792][T30668] write_pipe_buf+0x148/0x1d0 [ 2979.841473][T30668] ? default_file_splice_write+0x250/0x250 [ 2979.847260][T30668] ? __page_cache_release+0x41a/0x470 [ 2979.852611][T30668] __splice_from_pipe+0x2d3/0x870 [ 2979.857619][T30668] ? default_file_splice_write+0x250/0x250 [ 2979.863410][T30668] default_file_splice_write+0x18b/0x250 [ 2979.869025][T30668] ? default_file_splice_read+0x980/0x980 [ 2979.874727][T30668] ? avc_policy_seqno+0x17/0x70 [ 2979.879564][T30668] ? security_file_permission+0x128/0x300 [ 2979.885264][T30668] ? default_file_splice_read+0x980/0x980 [ 2979.890964][T30668] __se_sys_splice+0x7ee/0x1b70 [ 2979.895800][T30668] ? fput_many+0x42/0x1a0 [ 2979.900116][T30668] ? ksys_write+0x25d/0x2c0 [ 2979.904600][T30668] ? __x64_sys_splice+0xf0/0xf0 [ 2979.909429][T30668] ? __x64_sys_splice+0x1d/0xf0 [ 2979.914259][T30668] do_syscall_64+0xcb/0x150 [ 2979.918748][T30668] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2979.924633][T30668] RIP: 0033:0x45ce69 [ 2979.928511][T30668] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:50:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000000)) 17:50:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8038550a, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7, 0x7, 0x5, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000040), 0x0}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2979.948099][T30668] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2979.956499][T30668] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2979.964473][T30668] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2979.972431][T30668] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2979.980385][T30668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 2979.988357][T30668] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:23 executing program 0 (fault-call:9 fault-nth:15): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x400, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000640)='S', 0x1}, {&(0x7f0000000080)="dcb6ff", 0x3}, {&(0x7f0000000780)="095e3bc9c0048b3981024be3ad2f3ef09dfaecacb5aa2df6bb1b4db4fbb431e00803e119ba0391233f267b453d8434d65ab485cdac7e5e5c0e97c407f20d3da8aba61c88863dda971c1138d492ddb7c6701f4d04f72a7692b962602c816da4349e132c89920f486830f8f17500b12aed3f88fdbf835c484c500432954006d8a9a487bdb4b0b95be25288f57b3901640cbea53cc1b5f5bcfc759c12c8560f201a707cd27692ff683335cd59f0a95b61376c16e2c46a5e4fe8d2a1b07f5a085e502cded4543de8c3be126b8e9b655936dd71e237e9af761d13", 0xd8}, {&(0x7f0000000680)="3c2ae135c3fb3178eb947fe5c250625c11c8c92739059372470f51c767e2794768b1414731b4b1b9a2ce3c25a3226298b5bdd90d983d07323f3f0e380525115baca07c820891bf10b384e6523242618e579cdda9f83c8e1755d018392514316ea06be40630d95b0552f88bbcfa4177f7c60d4f2ffe2dc5218c5b52b0fea022126029a3e34e272dc63db50f8c48f2076f755c2cf1da7d6d9b7dc3ec1bbb98baa9c2e190b01cd222d3acbde9ed436a836cea1dc440ea391c0906de6b07", 0xbc}], 0x4, 0x0, 0x2) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x130, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ip={@loopback, @multicast2, 0x0, 0xffffffff, 'bond0\x00', 'veth0_to_bond\x00', {}, {}, 0xc, 0x2, 0x304ca6b1b21d51df}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x3, 0x0, 0x2, 0x63c63541ac150102, 0x4], 0x0, 0x2}, {0x4, [0x5, 0x3, 0x1, 0x1, 0x4, 0x4], 0x2, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$selinux_attr(0xffffffffffffffff, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x401, 0x2, 0x2000000000003f}) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000001c0)='system_u:object_r:mqueue_spool_t:s0\x00', 0x24) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(0x0, 0x35) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) write$FUSE_LK(r3, &(0x7f00000004c0)={0x28, 0x0, 0x2, {{0x5, 0xb1, 0x0, r6}}}, 0x28) 17:50:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000080016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r4, 0x109}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x19c, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x941}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x956}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x84}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1271}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3e2800000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40040}, 0xc080) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self\x00', 0x400, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000080)=""/141) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x200, 0x870bd26, 0x25dfd3fd, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) sendmmsg$inet6(r2, &(0x7f00000052c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x40}, 0x2}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000200)="e32f27d5e498cb039d6328abc216cfda5dcf5d3772e1413ebd6f1da1b38f6254dbc2f637030a4c35104f7d255cc00fed2aa5b4b11d90c4abc572f3d6015c470e464223d86b86c9047b2f7d506153edcac28fd96ee783c89d0a13559022d800d2a5f6fa56635094237469010c8613fe1eaed1b0787ab120a966d0473a835dff9dba00c901aa44c44df55f0f7198b67e8563507a20eb8f4915ac69771f35320cc25019090805fcdd12f1558dafb3d3011b2b6a0072c0722408ddcfdb9b1e2497a55f585ba44ef20e31b8583112ab4d22e1b1a4c3496b67a1db8acc0c607737ea9f0a6b969ba4", 0xe5}, {&(0x7f0000000300)="dfc3695a71d8f1eb3734845f5055070cd37b939c6c4ae81188782a26660c8136fc70b36b74734544d7e379f6ec91d97a3d7ec251c1c7ef93bb47b18a99edf144e5f4e8bc9da9a3eca07c2ccdae72309e000474f4df8aeeeb3800c7e85bf29e52eac3b4d64a3881c22a26b140fee646bb936ed5c541978eeeff313fb122b67c6713a1405b30da24d9fe8ada2d73a707cccd848889d3696bd9502a5db9a5d219958e5c1e77a9a5a97deda1c15dd7d61711b8e67abab41739277ffa045ef4f01d1121be2e04f68e7c1a3a2fe2cc1c3498b114244df559b987f44a13a960", 0xdc}, {&(0x7f0000000400)="f4ae4b59b5b08b9aed1907c1207a258bff4481ff5f760e37ccc2668f3ec9b28ea11c06ab5a8b61be1bd14ab49a12db6b0b61f05997cf8c9e95662cccdf37880a05aae95b2dcdd79feb1c741058ddc2e1a13b71e47c21607be597f3a47caaae6e8b136367e7ca26a870a280407628dacb22a47a110a831e7442a153fb0ae2a3c79b446a834fb77c9da9cce4a7dc75141584715fc74a148f1d65f152fc96d9caeae41ebb1a98dc1072ecbd5d68b29364f539d63042f4eb932fff9cf4c1dd37c0dc18", 0xc1}, {&(0x7f0000000500)="e54ae357967e05db7b496a7edf0881331fd3f1b3efbf11792ce3a1da93403637dc0da2e1fbb75969ece2bd8d2824774f51dcf66122103585451cb0570c1b1531d30858d736c6fa8b2412ebdb27c4f585dd13b02955eee3086c653f72805f54f29816f5939b1d3d867bce12c73a0a9326e18c97230e35db53b997efee5d61efa00d6bd0a7ca00669e8c525b90e7d485847951647dfe4378195e4aebf499fa6c8390c944412c8a5b3c10e3", 0xaa}], 0x4}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0xffffffc5, @dev={0xfe, 0x80, [], 0x23}, 0x8}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="d807f0999f8d2522f60b0ee8f64a12f425ca3cbe5ad3", 0x16}], 0x1, &(0x7f00000006c0)=[@dstopts_2292={{0xc8, 0x29, 0x4, {0x21, 0x15, [], [@pad1, @jumbo={0xc2, 0x4, 0x80000001}, @hao={0xc9, 0x10, @remote}, @generic={0x3c, 0x8e, "7fcf7bc9c1704f685fdd1d903f897038ce909646ed376ee8bd68a3bc577d5754b3de1670517812295c6e0115fc78749c90e12df70a8ca35e24a1c964d37f2b00d05facea63f9ec247d2490a49f053d7431276023b431f62c816984e26c2f83bc2e17f6af40e0437c502b67da0ea6b04f1d1396229c7b6bec23e9f939971c6f08b15e3d17a770ee2fa10282aee4fa"}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x62, 0x1, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x2, 0x6, [], [@calipso={0x7, 0x30, {0x1, 0xa, 0x3f, 0x5, [0x100, 0x8, 0x81, 0x5, 0x1]}}, @enc_lim={0x4, 0x1, 0xaf}]}}}], 0x140}}, {{&(0x7f0000000800)={0xa, 0x4e20, 0x7f, @dev={0xfe, 0x80, [], 0x2c}, 0x5}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000840)="f397963e588bcac9d701073c47ad74e510dc6ba74c553fc971ff11d1202276d3a4131704a447a0dff7050de29b753e23624b846c2fc76a076c0d74baa53112072b42fc0e7b291badd889e6884e3e95a99ef19898fad20c58be125aff6d536ec89ab9c93c996f3a89e9e9940bb02c3b9efe9c740b89ebb702402036aced2870dc23811d0f90619fb61c48924bd56c000e7e38f8144861488a7313d02ac193c35dc421463bbc17b382ed529e288bec69cdda55993a1434b80b4fe62e4141790e71fed2f6564b8d0e92e2f0329d2e42199569188aacf73925e406e663eb057251496a1eae91a9083b", 0xe7}, {&(0x7f0000000940)="b64c0ad877d057466551c3e009eb57394437cf23b4919ad4c56391f207696b30dd66cac724fdcb3f228f96774fa9e88cc7ba1780c959ae4c93158e5a2ac1abe509be4846d5c2338ec3b21a7c4e91799793330492804c0c589696615492a7c6c7e06a02117afb2fdd8724715d36f60ca42d14bbbc", 0x74}, {&(0x7f00000009c0)="239973c6b9c0ecf64d912a7b3615df180318a65a2aafc4fa21b824a1f71a730de759ddae4543355995d415c25e7ae8ee4ddd8c11a55e182bb8d97378cc778db1dd5c9addad34c8b674e4", 0x4a}, {&(0x7f0000000a40)="f7bc4ae89e6acc60b6b9c06284c688afa19bc306d603bef7a1e88e0b144638f1b9efb47b2322be259cb443320d453350de9400553c74a630d042540e97c2291c19c13799bfb11358ec35130239a82ab49fe18e6a96a484f11b3ff1438cda3dd4bc471570c0fe7f8bbf02086d41e2f9e4612bc03d2cc88f9af19ee9c55c5fb7a754f819e394acb0ceffcecf2df07b968c4bc0979d7e1d368c812358b2223ece37e1691ed6f01c1a3af57e43ff", 0xac}, {&(0x7f0000000b00)="eff96e93c51ce0af3b260df814e075c230a23674b5cae6c9058231eb081eb24cf20abaf32f07bdeefa0aa6ca07045399df1a7cbe915388a4194daf42ce4f7a46d566a52beb5c59b52c5336a1114127b20e76", 0x52}, {&(0x7f0000000b80)="75566cea06f3db1074518346759176132538da06ea9fa2546d35f2c44ea037371260ee76f9e109c5b8026ea8cddd70d28ab3845ddcb9fdd57de2b2335e5dccf96985d5efbb4455243959", 0x4a}, {&(0x7f0000000c00)="dee27dd57bc8c7dada87b12ac59493817a3627a5aad83dfd6a252085cd544c46ba1a0cc60b8c8d1ea1f23b0a6f24127aca444ae92401b57ff7844db061d208f0bf16c8743db4eb1a10428679fb530e5ca206fcee41fd3f78d95c9de9f16182c97c3ee33a820f21a461ae2165d11377ecc4aeb555b257fee40e99", 0x7a}, {&(0x7f0000000c80)="f68c89508307ca5940f3c62e17f5c667f822b43d48b6e122393c8b833d5e3b09e6192c27d55527b5dc37c013762238528bc0d19583b30fcdb6eb2360dbcf26fce4d8a6c03817be3c102cd6fc416c3bef8899258d958fba7f628acbe4c15a790e2c0d375b879114c1a631ab5377ddda7b61e891bc2b4e5f9c59e2750772d748f6af29c1103a299347320ab771b83a5411064da9c4c681e8a1dc7f819b3c0b77b374362f45800d2a63a27a268c763a66bebf0e3bfb353e2e8531284261d400813ec003a77a2080bf9055d2f8d3061c0fd97eecca2859d5798896a1212e127c2ea3aff2efea0c9da17333197e6a1ce87826c51ecadeecfee2b9", 0xf8}], 0x8, &(0x7f0000000e00)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @rthdrdstopts={{0x130, 0x29, 0x37, {0x0, 0x22, [], [@calipso={0x7, 0x50, {0x2, 0x12, 0x3, 0x20, [0xfff, 0x85, 0x2, 0xff, 0x1, 0x401, 0x4, 0x2, 0x4]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x81, 0xa98, [0x81]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x9, [0x6, 0x0, 0x8]}}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0xbe}, @enc_lim, @ra={0x5, 0x2, 0x1}, @enc_lim, @generic={0x40, 0x7b, "df1fd7ecb9c3a8c61f23efa9416a77c2d6667c936d19da9b5b2f512e3cd5668decabcec0f1b3e20de2403651e333721e6073748906957f10164ef8407666c6f9caada52f50424f717ba9df3d41c337306c2612b1477ab03184a38aa2b6cc720cd8e5ebb20a6e462c7016e7d9602871313fe6f7ebff809acc40211b"}]}}}], 0x148}}, {{&(0x7f0000000f80)={0xa, 0x4e21, 0x3, @empty, 0x7fffffff}, 0x1c, &(0x7f0000000fc0), 0x0, &(0x7f0000001000)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x0, 0x3, 0x0, [@remote]}}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x2b, 0x21, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x3f, 0x7, [0x8, 0x8001]}}, @ra={0x5, 0x2, 0x8}, @generic={0x7, 0xe4, "06f06ef328cf952d1b6e5f4b1490f6f09c0658105b19e2e1225c1270b7555e01eb0cf4e73fb0e2d3aae677561aec902c08353fffbd1c14717d0874ae916b1b4d73aae17e69b86d77ae1e5df79154134a85efd30d2ca99dbdf84917fa2d5c4a95581554177f47925d332f9a9d08d138a03782cf884c517cb36fbd902e8dd02dc1d00cb8b457f0b6f96675ed343d15eaf4d7bdfaddf16076dbae070e231a373c97888e45166818202b18ab5f67b67b5452929f473d2b5ed7de58b8646fe431eb098870627f4b79b1b65a3bf287e93c3cecd591b1a4fa47161c57e830c010f1565187400354"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3a, 0xa, 0x2, 0xfc, 0x0, [@remote, @private0, @loopback, @private2={0xfc, 0x2, [], 0x1}, @local]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x3c, 0x12, 0x2, 0xb8, 0x0, [@private0={0xfc, 0x0, [], 0x1}, @mcast2, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x31}, @remote, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x278}}, {{&(0x7f0000001280)={0xa, 0x4e22, 0x1000, @private1={0xfc, 0x1, [], 0x1}, 0x1}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000012c0)="ae6f2e0715794cb89c728b4b1d0803719ec904fd1424a9f8928f947de75178f3e0f4fb62f6c16879d0cdf280a156ef864f060e291ac6c703c759d5ce14cd1a4979c8c496f99c8a3f8b8c20e96d4cfa6569e09787b49124d0a8055e93c026805c853150a0c10eb0e222814da4cf64ed6d70791c545bc7ba22f43dd3e3ca7e3783c29d27ddb5504937358bd236b819306c757cd843e0ef58e59092c5b4003f22c7ce3fbcf37eea940a41782a736c770c96d5006d461e8dbf19a17193a46e41b913fd0ac5922601e989b0eea36805f0344c268ce4c564679c944075e79cd8921c36e5ff81066636f09477616663d1801eec78ecfbbe76c2a9", 0xf7}], 0x1, &(0x7f0000001400)=[@dstopts_2292={{0xd8, 0x29, 0x4, {0x32, 0x17, [], [@jumbo={0xc2, 0x4, 0x101}, @generic={0x81, 0x4, "a2566eb8"}, @generic={0x3, 0xa5, "37ad350ca6dec9c21928952601073e26e9039eeb9ec173651a633917972dc484d5b5a1757522133ad3b784bf4dde54032b5f63725fcee044de8cf9be6f262928bba6ec32e73869e3d93144948d3934ec63ede851693de6a7917807165810b58bbab958c42a6b560db5d1a2682a0360ee1b0616c01107b490f5d67c61e395f289b10c6bc30cbcba03a1b7cdb19ef502aae5ec49aa3731bf076c30a0ef4634ff14b0a864e128"}, @enc_lim={0x4, 0x1, 0xfb}, @enc_lim={0x4, 0x1, 0x9}]}}}], 0xd8}}, {{&(0x7f0000001500)={0xa, 0x4e22, 0x5, @loopback, 0x400}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001540)="ed94ee4b1fbe575c1058d5037ba82f21917e7621c40a1940c263d79fba8bf1861f5a289086af7549d1e26c275a04540eaf40a578102a1e523b3d188653829695622fbcfa8f1d4765d1c0d6e17de80718cf5abdc6193960cf8c1cf43469a1e1c2193bbba267d6cf04bccde987bc7887cd1cd0753e7df645505711e28ed6f6bd2a449531fa714631be178bfbeb357d088229d72321b61c3ddce1c946649fdc69f9f1d7e44a9157e2aa3fa8cb389471d47cd569c2ffd175bb3550", 0xb9}], 0x1, &(0x7f00000031c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x61}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x16, 0x3, [], [@jumbo, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}}}, @hopopts_2292={{0x1020, 0x29, 0x36, {0x32, 0x200, [], [@padn={0x1, 0x1, [0x0]}, @generic={0x40, 0x1000, "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"}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x33, 0x2, [], [@jumbo={0xc2, 0x4, 0x3ff}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x2}, @pad1, @ra={0x5, 0x2, 0x2}]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x3a, 0x6, [], [@calipso={0x7, 0x30, {0x2, 0xa, 0x3f, 0x9, [0x2, 0x5, 0x2d, 0x0, 0x3ff]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x89f6}}], 0x1100}}, {{&(0x7f0000001640)={0xa, 0x4e23, 0x8001, @empty, 0xffffffc0}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000001680)="879a0c92dc59411b7b28e4558ad0cc5d22b1b6e3d19e3cbfa45e2763efba37ae6e81363540cd2e233eacadc7448e4f8838d62fd31ada7ea4ad55c1a6098a3340bdd426d7b3c0c5f64a23e1db3e5b4d644ecdd37d679e7e59cdfa9a4bc32846874cb7efb6d1bcbc744e3549253b8d3723ed38a2806f30e65dfbb9c03a1a00e78b014d47ef88fc5501f1c27137d9b47b77706cb86d01b2fea12aeb4092fbd7a9bbe29f141a2875df2fd60241586c786c4551f9ccb454d38ad2bbaa1c0623eab126fa5d", 0xc2}, {&(0x7f00000042c0)="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", 0x1000}, {&(0x7f0000001780)="6b3db30dd56695834a2ec2b4a865d8ca7eb9b2aaa47202162d3fbc61f9d1f067188d30f487c6bbee2763fda521ddf71786dc55cc0f5dcaa8076506b07fb35c92559893dc43b46b805d1045ccf1ea35a6843bf245cb04e244f02529f2f08179b2f0f3af01496e5d75f7178cb23f279c7c335b66b1589923f73ca21f4f05444dbb76e3c74e2117647c62d39ff7157e97b8f9f42a12b3", 0x95}, {&(0x7f0000001840)="6fb1b76b14e6d471898f676bdbdd070d91b5606b7ebe78a59664c7d0b1d0c02a47b2f19528155f0d52bc8845a4a1bef3d51add87d11021b399bd6b5b49f7b11174d8748d03185c3330f5b5e78cb9b733b31134b79be44ec2f2042845fc02f466eaefaa8e07e98f270bb6c93e0a1ea9edb09837c578f515288142cd40db8e0b71c51a1ea3baf2b11ed08e869cadae695907d057aa7ab47cb01df0e0c77a6d2d323f97cd603ad4b4a1371cde977c54d2337f522bf6fe00aa9b8aa4a7dc6512046ce23d3a81059ca4217f0c31a503a1a704e80bd31f57017b75ff9ec4c79cc8f17dd84acd894a9508e763514baacd0565", 0xef}, {&(0x7f0000001940)="8d844c7dd2a8491799aca02d0973be4a25553a261aede2dc383a891882a083afe723df3bd547", 0x26}, {&(0x7f0000001980)="0abeeb0be390de77d2cbe54631827a3e57611d3011ba5b079ebe9a556da0c650357a5aa3a6fe99a2c2877c0f0bd899e0c286b4f88011fa13ac36f076d0a308e215981ebf3b5276f4247ce9ccaf1d00cfe938cbb98b8e9e5b8985c25826293905b38e89a8ed62b3a9e7f427d39a", 0x6d}, {&(0x7f0000001a00)="cb325eb6a6ed41f1a0e7b28a64f60ceb579fe525ab587a135b08e19150f9508e0213f0c4a0b5752bc3477eaad26d0c97e9a29660394fe151704ce19515d83eb17c42fb964e9aa4f1e3e6dd6723da31b7d61706b8d444a56dcdf1486993022f934b8d58b619e1d5efee6642ad8fc3b91e5a0897ad6ddfe9d70d37a8102740ddf3dc610bad66830416163f6fcc9e29d522033e6b5d72c5ada1d8a559edc53a3421b6791c6002fa1c90b7fa68617a8de92c96f084146cb4daab0ce20b56cc506714724cdfd7057a9d91b8411f3508ff03", 0xcf}, {&(0x7f0000001b00)="24a46731c86627920b62ff600a74bef2a02b51f1b3e273e3f48f6314e5d080baf8f6003e8034849ee5d0aae2b27ea9544d7c7e083f3b7af716da6c585dee19c3e3702a7f62cff4b843e5bb5aacf378105719d8bc8c31af4057a4835421958b040856ae8f600433acd6a5b58936", 0x6d}], 0x8}}, {{&(0x7f0000001c00)={0xa, 0x4e22, 0x1, @private2, 0x5}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001c40)="85815fbfa59b4fe7816df88684e2f70db8bb8af6b1ae362ac31be3e5aba1519aaedaca2cbf0bdfd50de2439acce7b959ef667790a4be851bb3e3904caa5a7a25a5e570457d99ccf8d920ceec64fffbbe7f6b99384dc7a6db4d034fc5cbd894fa9c56fff7", 0x64}, {&(0x7f0000001cc0)="f78ab4b3a0e3ea14b59f5552954f9ff2cbdf5b0c17e4373d34acefc4271719ec45636852e71fcd1433a9fe84bb2f6885ad582a2611dd533c329eea0ab15c461ff21ef452717033e7f904f8f47b18aa01c2f70721b305382075cdbb64812592", 0x5f}, {&(0x7f0000001d40)="2f1489c33cc28c96cf926c4fb1b1ad980d07c284230bce57bd94e54deae98af605fdcfee8eead92bb038e5c47c6d9cf139fcfcaa2771b1ebc1f45a9d5b592f5e61fcf3449eb86d4aaa2cb739b8f758c812bdf1d713e50bfe7d5b3f6bdd727da96ded51f1438bf3310e141a0e117c2bb7a3f81bd97e64fc5485b5123496a26cf91b076b7d6230922b5dbab5eaeb66bd4042b3d11cf74b891636847a0e3db60d1dfa92127ee9329c9249c3dfe16b4f979f9bdcf37dd7c676c14dbcd59a66b6323babfa35ed063b7ca00a628ad4b8f1919f502e8d1b40848e4f09017ed8c0208015baa4b4fb0a", 0xe5}], 0x3, &(0x7f0000001e80)=[@hopopts_2292={{0xa0, 0x29, 0x36, {0x67, 0x10, [], [@calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x2, [0x5, 0x3]}}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x58, {0x1, 0x14, 0x3f, 0x1, [0x9, 0x9, 0x4, 0x0, 0x7, 0x500000000000000, 0x2, 0x8, 0x6, 0x1ff]}}, @ra={0x5, 0x2, 0x200}, @ra={0x5, 0x2, 0xec73}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x0, 0x10, 0x1, 0x1f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @loopback, @dev={0xfe, 0x80, [], 0x15}, @private1]}}}, @hopopts_2292={{0x120, 0x29, 0x36, {0x2c, 0x20, [], [@jumbo={0xc2, 0x4, 0x8001}, @generic={0x54, 0xb4, "14050445a02c36294467792801e03db4cf84e1765d7682eac1405c79e336a8db3730b6dc38dd61941f826915cbf7a58f682ce062114fdf23a1b1cbb16e3d928d17fe03f9e8424e467f9c6d83647f708c8f058683b5abea00eaffddb6b115a48ded3a458a2a714d0e0b75429eed44f458f4e5797d5e983aae35d11d09642e4e42a96aa4b4b17e50eca5de7cbec93a4e6fe38743afd1fe1a1885748d7dc2381f136a663d361b2347eb27c2ee6cd47fab8d7a0e0df0"}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x4, [0x66cc, 0x8001, 0x1]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x270}}], 0x8, 0x4004011) [ 2980.548397][T30751] FAULT_INJECTION: forcing a failure. [ 2980.548397][T30751] name failslab, interval 1, probability 0, space 0, times 0 [ 2980.561957][T30751] CPU: 1 PID: 30751 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2980.572130][T30751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2980.582270][T30751] Call Trace: [ 2980.585564][T30751] dump_stack+0x14a/0x1ce [ 2980.589891][T30751] ? devkmsg_release+0x11c/0x11c [ 2980.594913][T30751] ? show_regs_print_info+0x12/0x12 [ 2980.600140][T30751] should_fail+0x6fb/0x860 [ 2980.604557][T30751] ? setup_fault_attr+0x3d0/0x3d0 [ 2980.609579][T30751] ? tun_get_user+0xe99/0x34e0 [ 2980.614335][T30751] should_failslab+0x5/0x20 [ 2980.618867][T30751] __kmalloc_track_caller+0x5d/0x2c0 [ 2980.624155][T30751] ? __napi_alloc_skb+0xd6/0x520 [ 2980.629093][T30751] ? tun_get_user+0xe99/0x34e0 [ 2980.633851][T30751] pskb_expand_head+0x10d/0xfb0 [ 2980.638727][T30751] tun_get_user+0xe99/0x34e0 [ 2980.643320][T30751] ? tun_do_read+0x1ed0/0x1ed0 17:50:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x480001, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r6 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RMKDIR(r8, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x10, 0x1}}, 0x14) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000000001, 0x90301) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000100)=ANY=[@ANYBLOB="8c0ec76200f8000000a2852236750daf89d426ea159bfffd185fb39ef7b492e68c570476f8ec60fad2fa95b625dcfe6bf11711e35cfa480ba5b6bcbb5839424bb15db736ce4e2b4f"]) 17:50:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, r1, 0x0) add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, r2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r5 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f00000001c0)=ANY=[@ANYBLOB="9b92abbac3cea8b72411f6cc3fedf496454190fb54ca7f27636d3bef69aeb7cd3884269364c99d576d17da1ea48b486458f198d79a7c933f5ff79f673310063c2d32288091bbce80a2b0d43df6a2e94738303e5af90d6db20e2186387a1f8453b01cb20addc1017866d58f1d5121ee844fd4807f7f435d9ccd683463139ef8f889eb683fceecf7b7295578ac65c7445baebc50f43b33af41e6437b5861e819569c34b2746d611fbf108df695669f1f8517d87a"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r5}, 0x8) fchmod(r7, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) [ 2980.648080][T30751] ? unwind_get_return_address_ptr+0x130/0x130 [ 2980.654230][T30751] ? memset+0x1f/0x40 [ 2980.658205][T30751] ? unwind_next_frame+0x1c90/0x2330 [ 2980.663511][T30751] ? __rcu_read_lock+0x50/0x50 [ 2980.668292][T30751] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2980.674334][T30751] tun_chr_write_iter+0x121/0x1a0 [ 2980.679338][T30751] __vfs_write+0x59d/0x720 [ 2980.683730][T30751] ? __kernel_write+0x340/0x340 [ 2980.688657][T30751] ? __kernel_text_address+0x93/0x110 [ 2980.694005][T30751] __kernel_write+0x12c/0x340 [ 2980.698655][T30751] write_pipe_buf+0x148/0x1d0 [ 2980.703305][T30751] ? default_file_splice_write+0x250/0x250 [ 2980.709100][T30751] ? __page_cache_release+0x41a/0x470 [ 2980.714445][T30751] __splice_from_pipe+0x2d3/0x870 [ 2980.719447][T30751] ? default_file_splice_write+0x250/0x250 [ 2980.725227][T30751] default_file_splice_write+0x18b/0x250 [ 2980.730832][T30751] ? default_file_splice_read+0x980/0x980 [ 2980.736547][T30751] ? avc_policy_seqno+0x17/0x70 [ 2980.741374][T30751] ? security_file_permission+0x128/0x300 [ 2980.747153][T30751] ? default_file_splice_read+0x980/0x980 [ 2980.752844][T30751] __se_sys_splice+0x7ee/0x1b70 [ 2980.757757][T30751] ? fput_many+0x42/0x1a0 [ 2980.762062][T30751] ? ksys_write+0x25d/0x2c0 [ 2980.766537][T30751] ? __x64_sys_splice+0xf0/0xf0 [ 2980.771358][T30751] ? __x64_sys_splice+0x1d/0xf0 [ 2980.776205][T30751] do_syscall_64+0xcb/0x150 [ 2980.780704][T30751] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2980.786566][T30751] RIP: 0033:0x45ce69 [ 2980.790433][T30751] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2980.810012][T30751] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2980.818398][T30751] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2980.826345][T30751] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2980.834301][T30751] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2980.842267][T30751] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 2980.850231][T30751] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:24 executing program 0 (fault-call:9 fault-nth:16): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4020000}, 0x4008010) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000090016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSKBLED(r3, 0x4b65, 0x9) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000)=0x5, 0x4) 17:50:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x40000c002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000100)) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x2044) 17:50:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x71, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6bba45825a570e80e9649fced16db574dd5a49d3145698a6e6995b025f1e868d251f24", @ANYRES16=r4, @ANYRES64=r5], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x284, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x144, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff0c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x25}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe3, 0x4, "b7c3488e94888e031027958b0e934a886b7d64be0dcb2d00dc08e0d81920eaa4c65fee45a996afd09c850a3fcf87bbad6d7aab0c98aebcb02b75a578ca8aeb148aca91651f5f560810fa68bdd41548a5d9d846b8a990f32562541b7a8577229c671691efcb18e542b136e67bfc359c0d377917733af0b68f954e4c12010e0e949f397203314f6e494d789b97eb3a19aa69c05fe89d1d728f9a8faee9144c0abf29e85e4307bf276e94527f0ad4a584b4af0853e3bc8146d2e0d69eb44cdd85b7db624f952ac6322cb98a95dfce7fae78e1cdd57d26833ade2e41aa2426f554"}]}, @ETHTOOL_A_FEATURES_WANTED={0x12c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}, @ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "dc3f88131afd95e3f9246c3d553a489e12f3268a4c701e8af51fada68177818bc222b578e942137ee9401ac985fea4ee68c6012af1188d1b49ce4f254d485b3a739c77f25ee693a690d3f4135954a91a4825c5525841d64d72d607bd3abaacb215fb4c5f7f0216cbf5927f05b14a526c3b25615a978d0548a7f0a4ad6d1866107e"}, @ETHTOOL_A_BITSET_MASK={0x95, 0x5, "4d1fce7629e6674b380ec1ddc1ab212006428226f5ec5fc9baa265a8063d1730ebcb5e48b01af96649b80e24fe1cd6f5d79149cc289c6bde1a37843bffe6fd9992d101e4b4c00ff897b436325bff4bcf0d0a6cae54fdade4bfc7c79a884279ebcb3b824b436edbb78e1dbea1f50d94ccf1be527a2017694e1ed3d3d673704e15c7689b64722e2ff3786cbe02a56962baad"}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x80}, 0xaa8014e90bae717e) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000040)='unconfined\x00', 0xb) r7 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="5cad4c101125144a00"]) 17:50:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x90, 0x1}, {0x7, 0x10000}]}, 0x14, 0x0) 17:50:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc00c5512, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="000000001a00000000"]) 17:50:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd7000000000001b0016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 2981.444462][T30801] FAULT_INJECTION: forcing a failure. [ 2981.444462][T30801] name failslab, interval 1, probability 0, space 0, times 0 [ 2981.457131][T30801] CPU: 0 PID: 30801 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2981.467270][T30801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2981.477314][T30801] Call Trace: [ 2981.480602][T30801] dump_stack+0x14a/0x1ce [ 2981.484930][T30801] ? devkmsg_release+0x11c/0x11c [ 2981.489883][T30801] ? show_regs_print_info+0x12/0x12 [ 2981.495081][T30801] ? is_bpf_text_address+0x290/0x2b0 [ 2981.500354][T30801] should_fail+0x6fb/0x860 [ 2981.504747][T30801] ? setup_fault_attr+0x3d0/0x3d0 [ 2981.509758][T30801] ? ipt_do_table+0x189b/0x1b10 [ 2981.514590][T30801] ? dst_alloc+0x137/0x4f0 [ 2981.518993][T30801] should_failslab+0x5/0x20 [ 2981.523476][T30801] kmem_cache_alloc+0x36/0x260 [ 2981.528223][T30801] dst_alloc+0x137/0x4f0 [ 2981.532504][T30801] ip_route_input_rcu+0x16c1/0x3540 [ 2981.537697][T30801] ? ip_route_input_noref+0x110/0x110 [ 2981.543062][T30801] ? __rcu_read_lock+0x50/0x50 [ 2981.547856][T30801] ? nf_hook_slow+0x1a6/0x1f0 [ 2981.552510][T30801] ip_route_input_noref+0xbd/0x110 [ 2981.557701][T30801] ? ip_mc_validate_source+0x350/0x350 [ 2981.563138][T30801] ? ip_rcv_finish_core+0xee0/0xee0 [ 2981.568318][T30801] ? ip_rcv_core+0xa30/0xa30 [ 2981.572920][T30801] ip_rcv_finish_core+0x1fe/0xee0 [ 2981.577930][T30801] ip_sublist_rcv+0x259/0x760 [ 2981.582596][T30801] ? ip_list_rcv+0x500/0x500 [ 2981.587166][T30801] ip_list_rcv+0x4b2/0x500 [ 2981.591555][T30801] ? ip_rcv_finish+0xd0/0xd0 [ 2981.596119][T30801] ? ip_rcv_finish+0xd0/0xd0 [ 2981.600682][T30801] __netif_receive_skb_list_core+0x717/0x940 [ 2981.606636][T30801] ? __netif_receive_skb_list+0x5f0/0x5f0 [ 2981.612332][T30801] ? __kasan_kmalloc+0x12c/0x1c0 [ 2981.617262][T30801] ? __kmalloc_track_caller+0x201/0x2c0 [ 2981.622786][T30801] ? tun_get_user+0xe99/0x34e0 [ 2981.627521][T30801] ? tun_chr_write_iter+0x121/0x1a0 [ 2981.632708][T30801] ? __vfs_write+0x59d/0x720 [ 2981.637270][T30801] ? write_pipe_buf+0x148/0x1d0 [ 2981.642187][T30801] ? __splice_from_pipe+0x2d3/0x870 [ 2981.647377][T30801] ? default_file_splice_write+0x18b/0x250 [ 2981.653166][T30801] __netif_receive_skb_list+0x51c/0x5f0 [ 2981.658693][T30801] ? __netif_receive_skb+0x4f0/0x4f0 [ 2981.663972][T30801] ? __rcu_read_lock+0x50/0x50 [ 2981.668738][T30801] netif_receive_skb_list_internal+0x4c6/0x7a0 [ 2981.674893][T30801] ? netif_receive_skb_list+0x340/0x340 [ 2981.680427][T30801] ? eth_get_headlen+0x250/0x250 [ 2981.685347][T30801] napi_gro_frags+0xadc/0x1dd0 [ 2981.690112][T30801] tun_get_user+0x1fa0/0x34e0 [ 2981.694777][T30801] ? tun_do_read+0x1ed0/0x1ed0 [ 2981.699541][T30801] ? unwind_get_return_address_ptr+0x130/0x130 [ 2981.705674][T30801] ? memset+0x1f/0x40 [ 2981.709640][T30801] ? unwind_next_frame+0x1c90/0x2330 [ 2981.714934][T30801] ? __rcu_read_lock+0x50/0x50 [ 2981.719673][T30801] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2981.725721][T30801] tun_chr_write_iter+0x121/0x1a0 [ 2981.733079][T30801] __vfs_write+0x59d/0x720 [ 2981.737494][T30801] ? __kernel_write+0x340/0x340 [ 2981.742332][T30801] ? __kernel_text_address+0x93/0x110 [ 2981.747678][T30801] __kernel_write+0x12c/0x340 [ 2981.752327][T30801] write_pipe_buf+0x148/0x1d0 [ 2981.756977][T30801] ? default_file_splice_write+0x250/0x250 [ 2981.762773][T30801] ? __page_cache_release+0x41a/0x470 [ 2981.768123][T30801] __splice_from_pipe+0x2d3/0x870 [ 2981.773137][T30801] ? default_file_splice_write+0x250/0x250 [ 2981.778920][T30801] default_file_splice_write+0x18b/0x250 [ 2981.784532][T30801] ? default_file_splice_read+0x980/0x980 [ 2981.790234][T30801] ? avc_policy_seqno+0x17/0x70 [ 2981.795074][T30801] ? security_file_permission+0x128/0x300 [ 2981.800780][T30801] ? default_file_splice_read+0x980/0x980 [ 2981.806489][T30801] __se_sys_splice+0x7ee/0x1b70 [ 2981.811319][T30801] ? fput_many+0x42/0x1a0 [ 2981.815621][T30801] ? ksys_write+0x25d/0x2c0 [ 2981.820094][T30801] ? __x64_sys_splice+0xf0/0xf0 [ 2981.824919][T30801] ? __x64_sys_splice+0x1d/0xf0 [ 2981.829742][T30801] do_syscall_64+0xcb/0x150 [ 2981.834223][T30801] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2981.840091][T30801] RIP: 0033:0x45ce69 [ 2981.844009][T30801] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2981.863607][T30801] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2981.871998][T30801] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2981.880646][T30801] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2981.888591][T30801] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2981.896631][T30801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 2981.904574][T30801] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:25 executing program 0 (fault-call:9 fault-nth:17): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) r3 = getuid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) setresuid(0xee01, r3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r7, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)={0xb0, 0xffffffffffffffda, 0x4, [{{0x6, 0x0, 0x6db, 0x100000000, 0x6, 0x401, {0x4, 0xcc, 0x6, 0x3, 0x80, 0x100000001, 0x5, 0x0, 0x6, 0x2, 0xc7, r3, r7, 0x40, 0x9}}, {0x2, 0xfffffffffffffffc, 0x4, 0x1, '#\xd6-]'}}]}, 0xb0) 17:50:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="f2ffffff0000000000"]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000080)=0x4) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x5, 0x4, @tid=r3}, &(0x7f0000000100)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x5eb5d8908776abed, &(0x7f0000000040)=0x3, 0x0, 0x4) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r5, 0x109}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x210, r5, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7e489492}]}, @TIPC_NLA_NODE={0x1b8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "7c10d478875f282fb251243b2f9217fc657c50d30ac67fab4fbd374d2e5475a60b12a6b5652aa800a4fe147dc3f5dc69e026652a22327cd79db7068048003d4ca675a62f6d0279a7702a0ddbe4743ef27fab1071772d249a378d4450d0e5b3be567b6464996f7b49005cfbbba3f02d06b6f061be8a00e25405e7eb360fb62ea988d6fd34b2581956c0e2c6e34b07527dcee4cfa7cc76b67c1bae58b22ad37aebd2cc633ba3179e4fdf644cb7bdacb36fa300981b28cf06e1b7af2e493f74e02508b880edc979609f0f1382fdf2464430f8c65713cadb02ffff7509960c6832c9"}, @TIPC_NLA_NODE_ID={0xa, 0x3, "8877dca4d6ea"}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "0eb9b19b6d9fba47dd063ef8b83412a3803b4fac276a57e60a39be023890c0bccb416cf2b0ea5f7874af35fcafbe2af40faa3e8c7f5b79eeb5e8b7725558df91d7537e1c1c817df325de0390f465a44ecd9554f8ad25bfcac36c65680eab0a3cf29d87e7fa98c411fdb010d8dd402b91b4c91c1254e4ea79f7725b404097013e6583352fbbd0d3f4186ead1ed5f0562ed6793aec556fb5497d9ee3378b0e8be950442736d549c5fe0122bbf972453656"}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 17:50:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffdffffffffffffe, 0x105241) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000400016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f00000000c0)={0x5, {{0x2, 0x4e21, @remote}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000001) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x80800) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x70, 0x8, 0xc5, 0x5, 0x9, 0x0, 0x9, 0x44001, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp, 0x20, 0x200, 0xee, 0x2, 0x1f, 0xffffffff, 0xc37d}, r1, 0xc, r3, 0x1) r4 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105502, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x434000, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000100)={0xfffffffffffffffd, 0x1, 0x0, [{0x9, 0xbd2, 0x0, 0x7f, 0xa0, 0x7, 0x40}]}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000f30dd31c4114d7d93c4cf107030efc321d762e046f49ed172682bd762d4093656d07f6de7a99a566f7cd0b4ea0893a2b7df18de671325b805e"]) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) 17:50:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000200010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 2982.314833][T30840] FAULT_INJECTION: forcing a failure. [ 2982.314833][T30840] name failslab, interval 1, probability 0, space 0, times 0 [ 2982.327488][T30840] CPU: 1 PID: 30840 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2982.337622][T30840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2982.347669][T30840] Call Trace: [ 2982.350968][T30840] dump_stack+0x14a/0x1ce [ 2982.355326][T30840] ? devkmsg_release+0x11c/0x11c [ 2982.360263][T30840] ? show_regs_print_info+0x12/0x12 [ 2982.365465][T30840] should_fail+0x6fb/0x860 [ 2982.370078][T30840] ? setup_fault_attr+0x3d0/0x3d0 [ 2982.375101][T30840] ? _local_bh_enable+0x30/0x30 [ 2982.379946][T30840] ? skb_ext_add+0x116/0x5b0 [ 2982.384560][T30840] should_failslab+0x5/0x20 [ 2982.389061][T30840] kmem_cache_alloc+0x36/0x260 [ 2982.393825][T30840] skb_ext_add+0x116/0x5b0 [ 2982.398243][T30840] xfrm_input+0x405/0x60c0 [ 2982.402665][T30840] ? ip_route_input_noref+0x110/0x110 [ 2982.408038][T30840] ? xfrm_parse_spi+0x570/0x570 [ 2982.412899][T30840] xfrm4_esp_rcv+0x7b/0x100 [ 2982.417426][T30840] ip_protocol_deliver_rcu+0x2bd/0x620 [ 2982.422907][T30840] ip_local_deliver+0x44c/0x5b0 [ 2982.427753][T30840] ? ip_protocol_deliver_rcu+0x620/0x620 [ 2982.433383][T30840] ? ip_local_deliver+0x5b0/0x5b0 [ 2982.438393][T30840] ? ip_rcv_finish_core+0x500/0xee0 [ 2982.443599][T30840] ip_sublist_rcv+0x6f6/0x760 [ 2982.448366][T30840] ? ip_list_rcv+0x500/0x500 [ 2982.452964][T30840] ip_list_rcv+0x4b2/0x500 [ 2982.457353][T30840] ? ip_rcv_finish+0xd0/0xd0 [ 2982.461919][T30840] ? ip_rcv_finish+0xd0/0xd0 [ 2982.466524][T30840] __netif_receive_skb_list_core+0x717/0x940 [ 2982.472479][T30840] ? __netif_receive_skb_list+0x5f0/0x5f0 [ 2982.478173][T30840] ? __kasan_kmalloc+0x12c/0x1c0 [ 2982.483128][T30840] ? __kmalloc_track_caller+0x201/0x2c0 [ 2982.488921][T30840] ? tun_get_user+0xe99/0x34e0 [ 2982.494622][T30840] ? tun_chr_write_iter+0x121/0x1a0 [ 2982.499802][T30840] ? __vfs_write+0x59d/0x720 [ 2982.504368][T30840] ? write_pipe_buf+0x148/0x1d0 [ 2982.509227][T30840] ? __splice_from_pipe+0x2d3/0x870 [ 2982.514493][T30840] ? default_file_splice_write+0x18b/0x250 [ 2982.520288][T30840] __netif_receive_skb_list+0x51c/0x5f0 [ 2982.526009][T30840] ? __netif_receive_skb+0x4f0/0x4f0 [ 2982.531291][T30840] ? __rcu_read_lock+0x50/0x50 [ 2982.536029][T30840] netif_receive_skb_list_internal+0x4c6/0x7a0 [ 2982.542158][T30840] ? netif_receive_skb_list+0x340/0x340 [ 2982.547683][T30840] ? eth_get_headlen+0x250/0x250 [ 2982.552611][T30840] napi_gro_frags+0xadc/0x1dd0 [ 2982.557371][T30840] tun_get_user+0x1fa0/0x34e0 [ 2982.562061][T30840] ? tun_do_read+0x1ed0/0x1ed0 [ 2982.566819][T30840] ? unwind_get_return_address_ptr+0x130/0x130 [ 2982.573055][T30840] ? memset+0x1f/0x40 [ 2982.577067][T30840] ? unwind_next_frame+0x1c90/0x2330 [ 2982.582341][T30840] ? __rcu_read_lock+0x50/0x50 [ 2982.587078][T30840] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2982.593120][T30840] tun_chr_write_iter+0x121/0x1a0 [ 2982.598381][T30840] __vfs_write+0x59d/0x720 [ 2982.602787][T30840] ? __kernel_write+0x340/0x340 [ 2982.607622][T30840] ? __kernel_text_address+0x93/0x110 [ 2982.612987][T30840] __kernel_write+0x12c/0x340 [ 2982.617636][T30840] write_pipe_buf+0x148/0x1d0 [ 2982.622300][T30840] ? default_file_splice_write+0x250/0x250 [ 2982.628091][T30840] ? __page_cache_release+0x41a/0x470 [ 2982.633442][T30840] __splice_from_pipe+0x2d3/0x870 [ 2982.638441][T30840] ? default_file_splice_write+0x250/0x250 [ 2982.644219][T30840] default_file_splice_write+0x18b/0x250 [ 2982.649853][T30840] ? default_file_splice_read+0x980/0x980 [ 2982.655560][T30840] ? avc_policy_seqno+0x17/0x70 [ 2982.660386][T30840] ? security_file_permission+0x128/0x300 [ 2982.666492][T30840] ? default_file_splice_read+0x980/0x980 [ 2982.672205][T30840] __se_sys_splice+0x7ee/0x1b70 [ 2982.677033][T30840] ? fput_many+0x42/0x1a0 [ 2982.681419][T30840] ? ksys_write+0x25d/0x2c0 [ 2982.685910][T30840] ? file_open_root+0x450/0x450 [ 2982.690828][T30840] ? __x64_sys_splice+0xf0/0xf0 [ 2982.695666][T30840] ? __x64_sys_splice+0x1d/0xf0 [ 2982.700531][T30840] do_syscall_64+0xcb/0x150 [ 2982.705105][T30840] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2982.711075][T30840] RIP: 0033:0x45ce69 [ 2982.715570][T30840] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2982.735160][T30840] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2982.743653][T30840] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2982.751626][T30840] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2982.760359][T30840] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2982.768306][T30840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 2982.776261][T30840] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:26 executing program 0 (fault-call:9 fault-nth:18): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:26 executing program 1: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x40) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x1000, 0x804) 17:50:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105512, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 17:50:26 executing program 4: socket$inet_icmp(0x2, 0x2, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000300010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002180)=""/4103, 0x1007}], 0x1, 0x0, 0x0) 17:50:26 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000010c0)=@add_del={0x2, &(0x7f0000001080)='batadv_slave_1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4067, 0xfe3}], 0x1, 0x3, 0xc) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000001100)=""/185) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x10100, 0x0) 17:50:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f00000001c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00') accept$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c) r9 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="6043839ed53c0070001f844b2b29c237de0c90b6000800000000824ea247431f5e9e61464f000028943a7900009c6f"]) 17:50:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) io_setup(0x8964, &(0x7f0000000000)=0x0) io_getevents(r1, 0x9, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000100)={0x77359400}) 17:50:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185502, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185503, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2983.204993][T30946] FAULT_INJECTION: forcing a failure. [ 2983.204993][T30946] name failslab, interval 1, probability 0, space 0, times 0 [ 2983.217653][T30946] CPU: 1 PID: 30946 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2983.227792][T30946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2983.237838][T30946] Call Trace: [ 2983.241133][T30946] dump_stack+0x14a/0x1ce [ 2983.245462][T30946] ? devkmsg_release+0x11c/0x11c [ 2983.250395][T30946] ? show_regs_print_info+0x12/0x12 [ 2983.255679][T30946] ? netif_receive_skb_list_internal+0x4cb/0x7a0 [ 2983.262099][T30946] should_fail+0x6fb/0x860 [ 2983.266546][T30946] ? setup_fault_attr+0x3d0/0x3d0 [ 2983.271565][T30946] ? eth_get_headlen+0x250/0x250 [ 2983.276497][T30946] ? iov_iter_advance+0x707/0xee0 [ 2983.281519][T30946] ? __napi_alloc_skb+0xd6/0x520 [ 2983.286457][T30946] should_failslab+0x5/0x20 [ 2983.290988][T30946] kmem_cache_alloc+0x36/0x260 [ 2983.295754][T30946] __napi_alloc_skb+0xd6/0x520 [ 2983.300520][T30946] napi_get_frags+0x5c/0x100 [ 2983.305115][T30946] tun_get_user+0xa10/0x34e0 [ 2983.309680][T30946] ? tun_do_read+0x1ed0/0x1ed0 [ 2983.314546][T30946] ? unwind_get_return_address_ptr+0x130/0x130 [ 2983.320691][T30946] ? memset+0x1f/0x40 [ 2983.324648][T30946] ? unwind_next_frame+0x1c90/0x2330 [ 2983.329930][T30946] ? __rcu_read_lock+0x50/0x50 [ 2983.334679][T30946] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2983.340740][T30946] tun_chr_write_iter+0x121/0x1a0 [ 2983.345744][T30946] __vfs_write+0x59d/0x720 [ 2983.350161][T30946] ? __kernel_write+0x340/0x340 [ 2983.355030][T30946] ? __kernel_text_address+0x93/0x110 [ 2983.360390][T30946] __kernel_write+0x12c/0x340 [ 2983.365043][T30946] write_pipe_buf+0x148/0x1d0 [ 2983.369693][T30946] ? default_file_splice_write+0x250/0x250 [ 2983.375483][T30946] ? __page_cache_release+0x41a/0x470 [ 2983.380830][T30946] __splice_from_pipe+0x2d3/0x870 [ 2983.385878][T30946] ? default_file_splice_write+0x250/0x250 [ 2983.391660][T30946] default_file_splice_write+0x18b/0x250 [ 2983.397299][T30946] ? default_file_splice_read+0x980/0x980 [ 2983.403090][T30946] ? avc_policy_seqno+0x17/0x70 [ 2983.407946][T30946] ? security_file_permission+0x128/0x300 [ 2983.413994][T30946] ? default_file_splice_read+0x980/0x980 [ 2983.419694][T30946] __se_sys_splice+0x7ee/0x1b70 [ 2983.424517][T30946] ? fput_many+0x42/0x1a0 [ 2983.428866][T30946] ? ksys_write+0x25d/0x2c0 [ 2983.433389][T30946] ? file_open_root+0x450/0x450 [ 2983.438253][T30946] ? __x64_sys_splice+0xf0/0xf0 [ 2983.443083][T30946] ? __x64_sys_splice+0x1d/0xf0 [ 2983.447904][T30946] do_syscall_64+0xcb/0x150 [ 2983.452395][T30946] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2983.458365][T30946] RIP: 0033:0x45ce69 [ 2983.462257][T30946] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2983.482007][T30946] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2983.490596][T30946] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2983.498662][T30946] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2983.506608][T30946] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2983.514566][T30946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 2983.522787][T30946] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:27 executing program 0 (fault-call:9 fault-nth:19): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x18}}, 0x0) bind$xdp(r5, &(0x7f0000000140)={0x2c, 0xc, r7, 0x34}, 0x10) fstatfs(r3, &(0x7f0000000040)=""/218) 17:50:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185505, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) getpeername(r0, &(0x7f0000000200)=@pppoe, &(0x7f0000000280)=0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000040)}, 0x4, &(0x7f0000000100)}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000400010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f00000001c0)=""/4096, 0x3ff}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185509, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0xd000, 0x1000, 0x9, 0x2, 0xa, "81aa5fddab6fadf1"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000100)={0x6}, 0x4) r4 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r7 = dup(r6) ioctl$HIDIOCSUSAGE(r7, 0x4018480c, &(0x7f00000000c0)={0x3, 0x203, 0x7ff, 0x5, 0xfff, 0x3}) 17:50:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x3, 0x0) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xd, 0xc, 0x9, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_lifetime={0x4, 0x2, 0x3, 0x4, 0x9, 0xbbf3}, @sadb_sa={0x2, 0x1, 0x4d3, 0xf6, 0xff, 0xf7, 0x4}, @sadb_ident={0x2, 0xa, 0x81, 0x0, 0xffffffffffffaf36}]}, 0x50}}, 0x2000c881) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2984.046121][T31013] FAULT_INJECTION: forcing a failure. [ 2984.046121][T31013] name failslab, interval 1, probability 0, space 0, times 0 [ 2984.062654][T31013] CPU: 1 PID: 31013 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2984.072930][T31013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2984.083081][T31013] Call Trace: [ 2984.086364][T31013] dump_stack+0x14a/0x1ce [ 2984.090678][T31013] ? devkmsg_release+0x11c/0x11c [ 2984.095623][T31013] ? show_regs_print_info+0x12/0x12 [ 2984.100820][T31013] should_fail+0x6fb/0x860 [ 2984.105231][T31013] ? setup_fault_attr+0x3d0/0x3d0 [ 2984.110254][T31013] ? tun_get_user+0xe99/0x34e0 [ 2984.115014][T31013] should_failslab+0x5/0x20 [ 2984.119514][T31013] __kmalloc_track_caller+0x5d/0x2c0 [ 2984.124797][T31013] ? __napi_alloc_skb+0xd6/0x520 [ 2984.129731][T31013] ? tun_get_user+0xe99/0x34e0 [ 2984.134488][T31013] pskb_expand_head+0x10d/0xfb0 [ 2984.139337][T31013] tun_get_user+0xe99/0x34e0 17:50:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 17:50:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) getpgrp(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='attr/prev\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000140)='%)\')^\\\x00', 0x0, r1) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f00000000c0)) fcntl$setlease(r4, 0x400, 0x0) [ 2984.143929][T31013] ? tun_do_read+0x1ed0/0x1ed0 [ 2984.148688][T31013] ? unwind_get_return_address_ptr+0x130/0x130 [ 2984.154839][T31013] ? memset+0x1f/0x40 [ 2984.158820][T31013] ? unwind_next_frame+0x1c90/0x2330 [ 2984.164099][T31013] ? __rcu_read_lock+0x50/0x50 [ 2984.168858][T31013] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2984.174920][T31013] tun_chr_write_iter+0x121/0x1a0 [ 2984.179940][T31013] __vfs_write+0x59d/0x720 [ 2984.184363][T31013] ? __kernel_write+0x340/0x340 [ 2984.189191][T31013] ? __kernel_text_address+0x93/0x110 [ 2984.194589][T31013] __kernel_write+0x12c/0x340 [ 2984.199240][T31013] write_pipe_buf+0x148/0x1d0 [ 2984.203892][T31013] ? default_file_splice_write+0x250/0x250 [ 2984.209711][T31013] ? __page_cache_release+0x41a/0x470 [ 2984.215065][T31013] __splice_from_pipe+0x2d3/0x870 [ 2984.220074][T31013] ? default_file_splice_write+0x250/0x250 [ 2984.225863][T31013] default_file_splice_write+0x18b/0x250 [ 2984.231479][T31013] ? default_file_splice_read+0x980/0x980 [ 2984.237180][T31013] ? avc_policy_seqno+0x17/0x70 [ 2984.242027][T31013] ? security_file_permission+0x128/0x300 [ 2984.247726][T31013] ? default_file_splice_read+0x980/0x980 [ 2984.253438][T31013] __se_sys_splice+0x7ee/0x1b70 [ 2984.258308][T31013] ? fput_many+0x42/0x1a0 [ 2984.262623][T31013] ? ksys_write+0x25d/0x2c0 [ 2984.267111][T31013] ? file_open_root+0x450/0x450 [ 2984.271936][T31013] ? __x64_sys_splice+0xf0/0xf0 [ 2984.276761][T31013] ? __x64_sys_splice+0x1d/0xf0 [ 2984.281615][T31013] do_syscall_64+0xcb/0x150 [ 2984.286096][T31013] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2984.291981][T31013] RIP: 0033:0x45ce69 [ 2984.295871][T31013] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2984.315492][T31013] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2984.323900][T31013] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2984.331856][T31013] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 17:50:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc018550b, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2984.339803][T31013] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2984.347748][T31013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 2984.355716][T31013] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:28 executing program 0 (fault-call:9 fault-nth:20): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) statx(r5, &(0x7f0000000040)='./file0\x00', 0x800, 0x1, &(0x7f0000000080)) r6 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00']) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r9 = fcntl$dupfd(r7, 0x406, r8) ioctl$USBDEVFS_DISCSIGNAL(r9, 0x8010550e, &(0x7f0000000200)={0x0, &(0x7f00000001c0)="572adc"}) 17:50:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc018550f, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000500010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xbf2) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000001c0)=""/187) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, 0x0, 0x0, 0x4) syz_io_uring_complete(r1) syz_io_uring_complete(r1) r2 = syz_io_uring_complete(r1) read$hidraw(r2, &(0x7f0000000000)=""/34, 0x22) 17:50:28 executing program 1: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x1007}], 0x1, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x20800, 0x0) 17:50:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x64}], 0x1, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2200, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x1, r2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'wg0\x00', {0x3}, 0x401}) 17:50:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc01855a1, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2984.939253][T31104] FAULT_INJECTION: forcing a failure. [ 2984.939253][T31104] name failslab, interval 1, probability 0, space 0, times 0 [ 2984.951918][T31104] CPU: 0 PID: 31104 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2984.962054][T31104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2984.972122][T31104] Call Trace: [ 2984.975502][T31104] dump_stack+0x14a/0x1ce [ 2984.979837][T31104] ? devkmsg_release+0x11c/0x11c 17:50:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x18}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x18}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8], 0x18}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000880)={&(0x7f00000000c0), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffe1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xf3c1}}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000) r9 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000000)=0x200000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="7b7e4f57f7a0649c9b936b000000ea0000000000"]) 17:50:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000000)={0x280, 0x5, [0x115, 0x7c8, 0x2, 0x31, 0x208], 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0185500, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000001000000002560a38395b8fd0b4c53a88e4ca6e315c925d284c202abc689ac06cd63f9a492d0a07e0525599559d217175c26ceb3360b91790be681745d52e30c9930afc4fa07f22aac441787991cbf8a67ff6c65d69017bd22f6f92b47201dcc263a6e9e54c4d8d13da32aaec06add130af02bf841ab59c7d52b19b9477b3090920344b4f4d51ecd093d353de2fa17ac1beaff20f9fc38f0796aa86a7fe6cc7658c9b310fbfbcadcbdf27e3e38f76209b9eeaf4b716819b2d2c3f1198dce1654270571751bdfa2531c2db0a37d7b4ed777000b73f36e"]) 17:50:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4e, r4, 0x5, 0x70bd29, 0x0, {{}, {}, {0xc, 0x18, {0x6, @bearer=@udp='udp:syz2\x00'}}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x44080) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) dup2(r8, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000040)={'wg0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2984.984773][T31104] ? show_regs_print_info+0x12/0x12 [ 2984.989967][T31104] should_fail+0x6fb/0x860 [ 2984.994380][T31104] ? setup_fault_attr+0x3d0/0x3d0 [ 2984.999402][T31104] ? _local_bh_enable+0x30/0x30 [ 2985.004255][T31104] ? skb_ext_add+0x116/0x5b0 [ 2985.008838][T31104] should_failslab+0x5/0x20 [ 2985.013339][T31104] kmem_cache_alloc+0x36/0x260 [ 2985.018191][T31104] skb_ext_add+0x116/0x5b0 [ 2985.022606][T31104] xfrm_input+0x405/0x60c0 [ 2985.027092][T31104] ? ip_route_input_noref+0x110/0x110 [ 2985.032459][T31104] ? xfrm_parse_spi+0x570/0x570 [ 2985.037310][T31104] xfrm4_esp_rcv+0x7b/0x100 [ 2985.041806][T31104] ip_protocol_deliver_rcu+0x2bd/0x620 [ 2985.047264][T31104] ip_local_deliver+0x44c/0x5b0 [ 2985.052114][T31104] ? ip_protocol_deliver_rcu+0x620/0x620 [ 2985.057741][T31104] ? ip_local_deliver+0x5b0/0x5b0 [ 2985.062762][T31104] ? ip_rcv_finish_core+0x500/0xee0 [ 2985.067960][T31104] ip_sublist_rcv+0x6f6/0x760 [ 2985.072642][T31104] ? ip_list_rcv+0x500/0x500 [ 2985.077243][T31104] ip_list_rcv+0x4b2/0x500 [ 2985.081660][T31104] ? ip_rcv_finish+0xd0/0xd0 [ 2985.086246][T31104] ? ip_rcv_finish+0xd0/0xd0 [ 2985.090830][T31104] __netif_receive_skb_list_core+0x717/0x940 [ 2985.096808][T31104] ? __netif_receive_skb_list+0x5f0/0x5f0 [ 2985.102527][T31104] ? __kasan_kmalloc+0x12c/0x1c0 [ 2985.107460][T31104] ? __kmalloc_track_caller+0x201/0x2c0 [ 2985.113004][T31104] ? tun_get_user+0xe99/0x34e0 [ 2985.117763][T31104] ? tun_chr_write_iter+0x121/0x1a0 [ 2985.122957][T31104] ? __vfs_write+0x59d/0x720 [ 2985.127547][T31104] ? write_pipe_buf+0x148/0x1d0 [ 2985.132481][T31104] ? __splice_from_pipe+0x2d3/0x870 [ 2985.137677][T31104] ? default_file_splice_write+0x18b/0x250 [ 2985.143511][T31104] __netif_receive_skb_list+0x51c/0x5f0 [ 2985.149062][T31104] ? __netif_receive_skb+0x4f0/0x4f0 [ 2985.154343][T31104] ? __rcu_read_lock+0x50/0x50 [ 2985.159107][T31104] netif_receive_skb_list_internal+0x4c6/0x7a0 [ 2985.165261][T31104] ? netif_receive_skb_list+0x340/0x340 [ 2985.170816][T31104] ? eth_get_headlen+0x250/0x250 [ 2985.175738][T31104] napi_gro_frags+0xadc/0x1dd0 [ 2985.180490][T31104] tun_get_user+0x1fa0/0x34e0 [ 2985.185152][T31104] ? tun_do_read+0x1ed0/0x1ed0 [ 2985.189894][T31104] ? unwind_get_return_address_ptr+0x130/0x130 [ 2985.196021][T31104] ? memset+0x1f/0x40 [ 2985.202846][T31104] ? unwind_next_frame+0x1c90/0x2330 [ 2985.208139][T31104] ? __rcu_read_lock+0x50/0x50 [ 2985.212879][T31104] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2985.218919][T31104] tun_chr_write_iter+0x121/0x1a0 [ 2985.223919][T31104] __vfs_write+0x59d/0x720 [ 2985.228313][T31104] ? __kernel_write+0x340/0x340 [ 2985.233155][T31104] ? __kernel_text_address+0x93/0x110 [ 2985.238533][T31104] __kernel_write+0x12c/0x340 [ 2985.243215][T31104] write_pipe_buf+0x148/0x1d0 [ 2985.247885][T31104] ? default_file_splice_write+0x250/0x250 [ 2985.253665][T31104] ? __page_cache_release+0x41a/0x470 [ 2985.259024][T31104] __splice_from_pipe+0x2d3/0x870 [ 2985.264037][T31104] ? default_file_splice_write+0x250/0x250 [ 2985.269817][T31104] default_file_splice_write+0x18b/0x250 [ 2985.275449][T31104] ? default_file_splice_read+0x980/0x980 [ 2985.281161][T31104] ? avc_policy_seqno+0x17/0x70 [ 2985.285989][T31104] ? security_file_permission+0x128/0x300 [ 2985.291680][T31104] ? default_file_splice_read+0x980/0x980 [ 2985.297405][T31104] __se_sys_splice+0x7ee/0x1b70 [ 2985.302244][T31104] ? fput_many+0x42/0x1a0 [ 2985.306562][T31104] ? ksys_write+0x25d/0x2c0 [ 2985.311037][T31104] ? file_open_root+0x450/0x450 [ 2985.315857][T31104] ? __x64_sys_splice+0xf0/0xf0 [ 2985.320678][T31104] ? __x64_sys_splice+0x1d/0xf0 [ 2985.325499][T31104] do_syscall_64+0xcb/0x150 [ 2985.329977][T31104] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2985.336191][T31104] RIP: 0033:0x45ce69 [ 2985.340094][T31104] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2985.359682][T31104] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2985.368083][T31104] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2985.376037][T31104] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2985.383995][T31104] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2985.391942][T31104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 2985.399895][T31104] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:29 executing program 0 (fault-call:9 fault-nth:21): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']) 17:50:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fsmount(0xffffffffffffffff, 0x0, 0x82) recvfrom$inet(r1, &(0x7f00000010c0)=""/211, 0xd3, 0x2000, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/4095, 0xfff}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fc) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 17:50:29 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x509000, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000100)={0x9, 0x6, 0x1fffffffe00000, 0x80000001, 0x0, 0x100000001}) modify_ldt$read(0x0, &(0x7f0000000040)=""/55, 0x37) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000600010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:29 executing program 2: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000040)=""/48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$USBDEVFS_RESET(r5, 0x5514) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000000)) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0185500, &(0x7f00000001c0)=ANY=[@ANYRES16=r8]) 17:50:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x4) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) sendfile(r3, r4, &(0x7f00000000c0)=0xa7, 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x3436}) 17:50:29 executing program 1: getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)="ec44ffff0aff7385f2e9742f6fe2832170cd4a569c4a91add77edcdea729c962fd2303", 0x13eee81d}], 0x10000000000000e5, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) iopl(0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r3, 0x5, 0x2, 0x100000000}) getsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 2985.842088][T31169] FAULT_INJECTION: forcing a failure. [ 2985.842088][T31169] name failslab, interval 1, probability 0, space 0, times 0 [ 2985.855722][T31169] CPU: 0 PID: 31169 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2985.865867][T31169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2985.875939][T31169] Call Trace: [ 2985.879226][T31169] dump_stack+0x14a/0x1ce [ 2985.883551][T31169] ? devkmsg_release+0x11c/0x11c [ 2985.888486][T31169] ? show_regs_print_info+0x12/0x12 [ 2985.893686][T31169] should_fail+0x6fb/0x860 [ 2985.898104][T31169] ? setup_fault_attr+0x3d0/0x3d0 [ 2985.903130][T31169] ? tun_get_user+0xe99/0x34e0 [ 2985.907896][T31169] should_failslab+0x5/0x20 [ 2985.912397][T31169] __kmalloc_track_caller+0x5d/0x2c0 [ 2985.917678][T31169] ? __napi_alloc_skb+0xd6/0x520 [ 2985.922619][T31169] ? tun_get_user+0xe99/0x34e0 [ 2985.927379][T31169] pskb_expand_head+0x10d/0xfb0 [ 2985.932234][T31169] tun_get_user+0xe99/0x34e0 [ 2985.936854][T31169] ? tun_do_read+0x1ed0/0x1ed0 [ 2985.941622][T31169] ? unwind_get_return_address_ptr+0x130/0x130 [ 2985.947772][T31169] ? memset+0x1f/0x40 [ 2985.951839][T31169] ? unwind_next_frame+0x1c90/0x2330 [ 2985.957126][T31169] ? __rcu_read_lock+0x50/0x50 [ 2985.961895][T31169] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2985.967950][T31169] tun_chr_write_iter+0x121/0x1a0 [ 2985.972964][T31169] __vfs_write+0x59d/0x720 [ 2985.977358][T31169] ? __kernel_write+0x340/0x340 [ 2985.982224][T31169] ? __kernel_text_address+0x93/0x110 [ 2985.987617][T31169] __kernel_write+0x12c/0x340 [ 2985.992269][T31169] write_pipe_buf+0x148/0x1d0 [ 2985.996930][T31169] ? default_file_splice_write+0x250/0x250 [ 2986.002721][T31169] ? __page_cache_release+0x41a/0x470 [ 2986.008070][T31169] __splice_from_pipe+0x2d3/0x870 [ 2986.013074][T31169] ? default_file_splice_write+0x250/0x250 [ 2986.018942][T31169] default_file_splice_write+0x18b/0x250 [ 2986.024547][T31169] ? default_file_splice_read+0x980/0x980 [ 2986.030239][T31169] ? avc_policy_seqno+0x17/0x70 [ 2986.035067][T31169] ? security_file_permission+0x128/0x300 [ 2986.040768][T31169] ? default_file_splice_read+0x980/0x980 [ 2986.046470][T31169] __se_sys_splice+0x7ee/0x1b70 [ 2986.051310][T31169] ? fput_many+0x42/0x1a0 [ 2986.055618][T31169] ? ksys_write+0x25d/0x2c0 [ 2986.060115][T31169] ? file_open_root+0x450/0x450 [ 2986.064961][T31169] ? __x64_sys_splice+0xf0/0xf0 [ 2986.069788][T31169] ? __x64_sys_splice+0x1d/0xf0 [ 2986.074615][T31169] do_syscall_64+0xcb/0x150 [ 2986.079191][T31169] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2986.085062][T31169] RIP: 0033:0x45ce69 [ 2986.088944][T31169] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2986.109004][T31169] RSP: 002b:00007f901a340c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2986.117392][T31169] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2986.125336][T31169] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2986.133284][T31169] RBP: 00007f901a340ca0 R08: 0000000000010005 R09: 0000000000000000 [ 2986.141250][T31169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 2986.149223][T31169] R13: 00007fffebcc070f R14: 00007f901a3419c0 R15: 000000000118bf2c 17:50:29 executing program 0 (fault-call:9 fault-nth:22): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x10, 0x8, 0x1d4, &(0x7f00000001c0)="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"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x1, [{}]}) 17:50:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000001090102000000000000000001000008080003400000001f0c000480fdff0040800000000c0002000600034000030000"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040000) ioctl$sock_ifreq(0xffffffffffffffff, 0x307b6aaf16909c2a, &(0x7f0000000040)={'vcan0\x00', @ifru_mtu=0x4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000700010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002180)=""/4103, 0x1007}, {&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000000140)=""/42, 0x2a}], 0x3, 0x0, 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)=@random={'os2.', '/dev/usbmon#\x00'}, &(0x7f00000001c0)=""/165, 0xa5) 17:50:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000040)={0x7, 0x0, 0x8, 0x7ff, 0x6, "94ae483aab65163e3a31f742bda9f33960eb19", 0xff, 0x1000}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x3, 0x1, [{}]}) 17:50:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x71, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$cdc_ncm(0x3, 0x146, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x134, 0x2, 0x1, 0x2, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "8958"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x1f, 0x9, 0x59}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mdlm_detail={0xae, 0x24, 0x13, 0x2, "5f6bf5de1e8fead2a1648d622926feac9dc23b68ddf8bc1775ca459a8dfe5da316b07832e63517d16f474291cf1a93d9f36df5c8ee2cfe69a3b67b856fefbe28f339d93e3e52f084c7680628c57788067af5bdac766c2ffdd4db0687b18626b7b62221250f3ad2e220ca174242baef141a121eb4eebf3b2275c7be21d8f990aaa09cc2db52dbf44892c07d837ed4ff3dcc9dca34ffb267f25079443eb15d9d8ca06ae2993102140f3f8f"}, @mbim_extended={0x8, 0x24, 0x1c, 0xc56}, @country_functional={0x8, 0x24, 0x7, 0x3, 0x7f, [0x2]}, @obex={0x5, 0x24, 0x15, 0x5}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x194, 0x3ff, 0x1, 0x8, 0x82c3, 0x89}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x1, 0xbd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2e, 0x4b}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x20, 0x40, 0x8, 0x20}, 0x4e, &(0x7f0000000080)={0x5, 0xf, 0x4e, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x53, 0x0, 0x4, 0x4ae7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "3315d2139b6ea9bc710158454bd70dad"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "20a2d40056f3b56868ae024960385c16"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0xe5, 0xf00, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x1, 0x3}]}, 0x5, [{0xdd, &(0x7f0000000340)=@string={0xdd, 0x3, "afb9b4dcd999f544e4649347660b12787d4cb7eb9c73506984e101959f89a40cb4745f3f895b63a2213c0b3735c72a9aea2eda5735735c5e06125e905ac006d74a049d1a38cb451fbb8ecb18975973bce50630de2ae88b39f3e5f09c5004e828ee358194a7a150964ca9d86d77533977bf544155efc06b7a25b60e600ae29973bbc162990bbc11a941fa16a78dd455d0bd982c35459d318ce7fbb645d9348ae5b05f6de086c330033010d08de3e26714d13c7117c70e1c59c42194607393237d5486a9f0cdf66925634c48785933c089ef162ed8de2f6c23215ac8"}}, {0x25, &(0x7f0000000100)=@string={0x25, 0x3, "2bb5e2ff49f5be29ec81322efa5f9b19ac65ac128ab852ae7c1d3633c166204309d24a"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x83e}}, {0x100, &(0x7f0000000480)=@string={0x100, 0x3, "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"}}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000a0000040deec830ac6973743a736574200000000c000300686173683a69700085000400000000000200000000000000000000004000"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x40800) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000200)={0xffffffff, {{0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}}}, 0x88) 17:50:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0x1e, 0x4) preadv(r0, &(0x7f0000000040), 0x0, 0x10, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000000c0)=""/115) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x7) 17:50:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 2986.689295][T31277] FAULT_INJECTION: forcing a failure. [ 2986.689295][T31277] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2986.702637][T31277] CPU: 0 PID: 31277 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2986.712778][T31277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2986.722851][T31277] Call Trace: [ 2986.726145][T31277] dump_stack+0x14a/0x1ce [ 2986.730478][T31277] ? devkmsg_release+0x11c/0x11c [ 2986.735456][T31277] ? arch_stack_walk+0xd8/0x120 [ 2986.740306][T31277] ? show_regs_print_info+0x12/0x12 [ 2986.745529][T31277] should_fail+0x6fb/0x860 [ 2986.749943][T31277] ? setup_fault_attr+0x3d0/0x3d0 [ 2986.754983][T31277] ? switch_mm_irqs_off+0x4d7/0x9a0 [ 2986.760183][T31277] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2986.765556][T31277] ? kmem_cache_alloc+0x1d5/0x260 [ 2986.770579][T31277] ? __napi_alloc_skb+0xd6/0x520 [ 2986.775515][T31277] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2986.781054][T31277] ? __kernel_write+0x12c/0x340 [ 2986.785906][T31277] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2986.791986][T31277] alloc_slab_page+0x3a/0x3a0 [ 2986.796650][T31277] new_slab+0x97/0x450 [ 2986.800694][T31277] ? should_fail+0x182/0x860 [ 2986.805276][T31277] ___slab_alloc+0x2e0/0x450 [ 2986.809856][T31277] ? tun_get_user+0xe99/0x34e0 [ 2986.814641][T31277] ? tun_get_user+0xe99/0x34e0 [ 2986.819383][T31277] __kmalloc_track_caller+0x297/0x2c0 [ 2986.824756][T31277] ? __napi_alloc_skb+0xd6/0x520 [ 2986.829691][T31277] ? tun_get_user+0xe99/0x34e0 [ 2986.834428][T31277] pskb_expand_head+0x10d/0xfb0 [ 2986.839255][T31277] tun_get_user+0xe99/0x34e0 [ 2986.843823][T31277] ? tun_do_read+0x1ed0/0x1ed0 [ 2986.848565][T31277] ? unwind_get_return_address_ptr+0x130/0x130 [ 2986.854690][T31277] ? memset+0x1f/0x40 [ 2986.858645][T31277] ? unwind_next_frame+0x1c90/0x2330 [ 2986.863911][T31277] ? __rcu_read_lock+0x50/0x50 [ 2986.868662][T31277] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2986.874721][T31277] tun_chr_write_iter+0x121/0x1a0 [ 2986.879733][T31277] __vfs_write+0x59d/0x720 [ 2986.884137][T31277] ? __kernel_write+0x340/0x340 [ 2986.888962][T31277] ? __kernel_text_address+0x93/0x110 [ 2986.894311][T31277] __kernel_write+0x12c/0x340 [ 2986.898993][T31277] write_pipe_buf+0x148/0x1d0 [ 2986.903662][T31277] ? default_file_splice_write+0x250/0x250 [ 2986.909442][T31277] ? __page_cache_release+0x41a/0x470 [ 2986.914785][T31277] __splice_from_pipe+0x2d3/0x870 [ 2986.919784][T31277] ? default_file_splice_write+0x250/0x250 [ 2986.925562][T31277] default_file_splice_write+0x18b/0x250 [ 2986.931168][T31277] ? default_file_splice_read+0x980/0x980 [ 2986.936886][T31277] ? avc_policy_seqno+0x17/0x70 [ 2986.941730][T31277] ? security_file_permission+0x128/0x300 [ 2986.947442][T31277] ? default_file_splice_read+0x980/0x980 [ 2986.953131][T31277] __se_sys_splice+0x7ee/0x1b70 [ 2986.957958][T31277] ? fput_many+0x42/0x1a0 [ 2986.962278][T31277] ? ksys_write+0x25d/0x2c0 [ 2986.966759][T31277] ? file_open_root+0x450/0x450 [ 2986.971586][T31277] ? __x64_sys_splice+0xf0/0xf0 [ 2986.976416][T31277] ? __x64_sys_splice+0x1d/0xf0 [ 2986.981248][T31277] do_syscall_64+0xcb/0x150 [ 2986.985748][T31277] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2986.991625][T31277] RIP: 0033:0x45ce69 [ 2986.995514][T31277] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2987.015118][T31277] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2987.023541][T31277] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2987.031494][T31277] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2987.039445][T31277] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2987.047430][T31277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 2987.055378][T31277] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc [ 2987.369362][T26726] usb 3-1: new high-speed USB device number 34 using dummy_hcd 17:50:30 executing program 0 (fault-call:9 fault-nth:23): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x10001, 0x339, 0x2}) 17:50:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x5, 0x1, [{}]}) 17:50:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400183001, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) r1 = syz_open_dev$mouse(&(0x7f0000001c00)='/dev/input/mouse#\x00', 0x20, 0x20000) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000001c40)={@private, @empty}, &(0x7f0000001c80)=0x8) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = dup3(r0, r2, 0x80000) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) ioctl$RTC_AIE_ON(r3, 0x7001) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x0, 0xcb37, 0x1ff, 0x0, 0x5}) 17:50:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000800010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) 17:50:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x9, 0x1, [{}]}) 17:50:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x1) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x28000004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x4, 0x40, 0xf9, 0x2, 0x20, @local, @rand_addr=' \x01\x00', 0x20, 0x7, 0x200, 0x3}}) dup2(r5, r4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000000c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$UHID_DESTROY(r8, &(0x7f0000000000), 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) [ 2987.567744][T31363] FAULT_INJECTION: forcing a failure. [ 2987.567744][T31363] name failslab, interval 1, probability 0, space 0, times 0 [ 2987.580394][T31363] CPU: 0 PID: 31363 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2987.590531][T31363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2987.600580][T31363] Call Trace: [ 2987.603868][T31363] dump_stack+0x14a/0x1ce [ 2987.608194][T31363] ? devkmsg_release+0x11c/0x11c [ 2987.613218][T31363] ? show_regs_print_info+0x12/0x12 [ 2987.618416][T31363] should_fail+0x6fb/0x860 [ 2987.622826][T31363] ? setup_fault_attr+0x3d0/0x3d0 [ 2987.627849][T31363] ? eth_get_headlen+0x250/0x250 [ 2987.632785][T31363] ? iov_iter_advance+0x707/0xee0 [ 2987.637809][T31363] ? __napi_alloc_skb+0xd6/0x520 [ 2987.642745][T31363] should_failslab+0x5/0x20 [ 2987.647295][T31363] kmem_cache_alloc+0x36/0x260 [ 2987.652047][T31363] __napi_alloc_skb+0xd6/0x520 [ 2987.656789][T31363] napi_get_frags+0x5c/0x100 [ 2987.661360][T31363] tun_get_user+0xa10/0x34e0 [ 2987.665935][T31363] ? tun_do_read+0x1ed0/0x1ed0 [ 2987.670680][T31363] ? unwind_get_return_address_ptr+0x130/0x130 [ 2987.676805][T31363] ? memset+0x1f/0x40 [ 2987.680797][T31363] ? unwind_next_frame+0x1c90/0x2330 [ 2987.686102][T31363] ? __rcu_read_lock+0x50/0x50 [ 2987.690855][T31363] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2987.696900][T31363] tun_chr_write_iter+0x121/0x1a0 [ 2987.701916][T31363] __vfs_write+0x59d/0x720 [ 2987.706326][T31363] ? __kernel_write+0x340/0x340 [ 2987.711175][T31363] ? __kernel_text_address+0x93/0x110 [ 2987.716540][T31363] __kernel_write+0x12c/0x340 [ 2987.721193][T31363] write_pipe_buf+0x148/0x1d0 [ 2987.725894][T31363] ? default_file_splice_write+0x250/0x250 [ 2987.731683][T31363] ? __page_cache_release+0x41a/0x470 [ 2987.737282][T31363] __splice_from_pipe+0x2d3/0x870 [ 2987.742327][T31363] ? default_file_splice_write+0x250/0x250 [ 2987.748115][T31363] default_file_splice_write+0x18b/0x250 [ 2987.753726][T31363] ? default_file_splice_read+0x980/0x980 [ 2987.759438][T31363] ? avc_policy_seqno+0x17/0x70 [ 2987.764284][T31363] ? security_file_permission+0x128/0x300 [ 2987.769988][T31363] ? default_file_splice_read+0x980/0x980 [ 2987.775730][T31363] __se_sys_splice+0x7ee/0x1b70 [ 2987.780560][T31363] ? fput_many+0x42/0x1a0 [ 2987.784863][T31363] ? ksys_write+0x25d/0x2c0 [ 2987.789348][T31363] ? file_open_root+0x450/0x450 [ 2987.794223][T31363] ? __x64_sys_splice+0xf0/0xf0 [ 2987.799073][T31363] ? __x64_sys_splice+0x1d/0xf0 [ 2987.803929][T31363] do_syscall_64+0xcb/0x150 [ 2987.808489][T31363] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2987.814362][T31363] RIP: 0033:0x45ce69 [ 2987.818259][T31363] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2987.837846][T31363] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2987.846225][T31363] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2987.854204][T31363] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2987.862168][T31363] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2987.870112][T31363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 2987.878087][T31363] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc [ 2987.920315][T26726] usb 3-1: Using ep0 maxpacket: 32 [ 2988.120693][T26726] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 2988.130600][T26726] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 2988.290952][T26726] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2988.299998][T26726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2988.308662][T26726] usb 3-1: Product: ᐇ [ 2988.313185][T26726] usb 3-1: Manufacturer: 딫￢⦾臬⸲忺ᦛ斬ኬ뢊깒ᵼ㌶曁䌠툉 [ 2988.323119][T26726] usb 3-1: SerialNumber: ࠾ [ 2993.549066][T26726] cdc_ncm 3-1:1.0: bind() failure [ 2993.554834][T26726] cdc_ncm 3-1:1.1: bind() failure [ 2993.565760][T32524] usb 3-1: USB disconnect, device number 34 17:50:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fsync(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RMKNOD(r2, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x2, 0x3, 0x3}}, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0xec, 0x0, &(0x7f00000000c0)="51dbd8b9940f39996305c9a835a36b1dcabfb212fd03bea28282eaa982b21ac4925872fe8a4426e5317f23bb99a03b8945eb3ccf56c2811d9c86049f81ca83d849da810a8b66a3ab0822adb3cac50adb78f72634da4a5da52a3a77e4448038caf647a51e428296429970d6faccc5d84426162904709d12f373c7bc79ef4d7c62c92c892b2f629bcb8b0127b0527efeb915f5adc2bdb9ab073847b9ce7cbcc959c8c8cb42fe1a2fa4790ce86a63aab75176fba3e30de046e83cd4953f5f2095825fcd856c31f1083f23bf55c011884ad1f506d36d0449410ab9c5f77e09386eb12c8f6365f0fe67559f2c3340"}) 17:50:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xb, 0x1, [{}]}) 17:50:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x20, 0x20, 0x3, 0x10000, {{0x1f, 0x4, 0x3, 0x8, 0x7c, 0x68, 0x0, 0xc2, 0x29, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x53, 0x1, [{0x6, 0x2}, {0x5, 0x6, "2199bd5b"}, {0x0, 0x12, "cf145a6fefa7a437a282d5dc7dce29e6"}, {0x0, 0x11, "7dfbbc8114d3ba25728e87360966ff"}, {0x7, 0xa, "5eed7fe2b62e828b"}, {0x0, 0xc, "82eb8fb3f4e276c7f100"}, {0x1, 0x9, "2858845e911ebd"}, {0x2, 0x3, "ea"}]}, @lsrr={0x83, 0x13, 0xfc, [@multicast1, @multicast2, @empty, @local]}]}}}}}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000900010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:37 executing program 0 (fault-call:9 fault-nth:24): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000040)="1f88c9024ef35a2d8ad353f7fcfd666b78e229b2dda534649c70b533", &(0x7f0000000080)=@udp=r8, 0x2}, 0x20) ioctl$VT_RELDISP(r4, 0x5605) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$char_usb(r1, &(0x7f0000000000), 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4093, 0xffd}], 0x1, 0x200, 0x0) 17:50:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xf, 0x1, [{}]}) 17:50:37 executing program 2: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000100)=@secondary='builtin_and_secondary_trusted\x00') lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '/dev/bus/usb/00#/00#\x00'}, &(0x7f00000000c0)='\']&#(}#(.^(\\\\\x00', 0xe, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x18}}, 0x0) r6 = getuid() setresuid(0xee01, r6, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@empty, @in=@remote, 0x4e21, 0x7, 0x4e22, 0x24, 0xa, 0x20, 0x90, 0x68, r5, r6}, {0x1ff, 0xbd, 0x2, 0x5, 0x5, 0x1, 0x5450, 0xab}, {0x3, 0x0, 0x38, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x35}, 0x4d2, 0xff}, 0xa, @in6=@private1, 0x67f2, 0x3, 0x1, 0x5, 0x0, 0xefa, 0xff}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002180)=""/4103, 0x1007}], 0x1, 0x0, 0x0) [ 2993.864909][T31432] FAULT_INJECTION: forcing a failure. [ 2993.864909][T31432] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.877561][T31432] CPU: 1 PID: 31432 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2993.887701][T31432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2993.897751][T31432] Call Trace: [ 2993.901046][T31432] dump_stack+0x14a/0x1ce [ 2993.905367][T31432] ? devkmsg_release+0x11c/0x11c [ 2993.910296][T31432] ? show_regs_print_info+0x12/0x12 [ 2993.915503][T31432] should_fail+0x6fb/0x860 [ 2993.919910][T31432] ? setup_fault_attr+0x3d0/0x3d0 [ 2993.924934][T31432] ? eth_get_headlen+0x250/0x250 [ 2993.929883][T31432] ? iov_iter_advance+0x707/0xee0 [ 2993.934918][T31432] ? __napi_alloc_skb+0xd6/0x520 [ 2993.939849][T31432] should_failslab+0x5/0x20 [ 2993.944343][T31432] kmem_cache_alloc+0x36/0x260 [ 2993.949098][T31432] __napi_alloc_skb+0xd6/0x520 [ 2993.953857][T31432] napi_get_frags+0x5c/0x100 [ 2993.958442][T31432] tun_get_user+0xa10/0x34e0 [ 2993.963057][T31432] ? tun_do_read+0x1ed0/0x1ed0 [ 2993.967814][T31432] ? unwind_get_return_address_ptr+0x130/0x130 [ 2993.973995][T31432] ? memset+0x1f/0x40 [ 2993.977978][T31432] ? unwind_next_frame+0x1c90/0x2330 [ 2993.983255][T31432] ? __rcu_read_lock+0x50/0x50 [ 2993.988107][T31432] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2993.994163][T31432] tun_chr_write_iter+0x121/0x1a0 [ 2993.999188][T31432] __vfs_write+0x59d/0x720 [ 2994.003604][T31432] ? __kernel_write+0x340/0x340 [ 2994.008450][T31432] ? __kernel_text_address+0x93/0x110 [ 2994.013818][T31432] __kernel_write+0x12c/0x340 [ 2994.018493][T31432] write_pipe_buf+0x148/0x1d0 [ 2994.023192][T31432] ? default_file_splice_write+0x250/0x250 [ 2994.029022][T31432] ? __page_cache_release+0x41a/0x470 [ 2994.034391][T31432] __splice_from_pipe+0x2d3/0x870 [ 2994.039415][T31432] ? default_file_splice_write+0x250/0x250 [ 2994.045213][T31432] default_file_splice_write+0x18b/0x250 [ 2994.050860][T31432] ? default_file_splice_read+0x980/0x980 [ 2994.056570][T31432] ? avc_policy_seqno+0x17/0x70 [ 2994.061416][T31432] ? security_file_permission+0x128/0x300 [ 2994.067132][T31432] ? default_file_splice_read+0x980/0x980 [ 2994.072854][T31432] __se_sys_splice+0x7ee/0x1b70 [ 2994.077696][T31432] ? fput_many+0x42/0x1a0 [ 2994.082023][T31432] ? ksys_write+0x25d/0x2c0 [ 2994.086516][T31432] ? file_open_root+0x450/0x450 [ 2994.091382][T31432] ? __x64_sys_splice+0xf0/0xf0 [ 2994.096219][T31432] ? __x64_sys_splice+0x1d/0xf0 [ 2994.101062][T31432] do_syscall_64+0xcb/0x150 [ 2994.105564][T31432] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2994.111448][T31432] RIP: 0033:0x45ce69 [ 2994.115335][T31432] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2994.135021][T31432] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2994.143424][T31432] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2994.151388][T31432] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 17:50:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x10, 0x6fd8, 0x81, 0xc8, 0x8001, &(0x7f0000000240)="9596363716b2a5dd526c2c1d6c7e4ed4ec354df5fb4aabc00668fda44493733bbe618b4f74754c0fb8a231c1c10bab34e95723a73ed8f7d7d1ad314e62256d99cdc51d646dbb5c462078b08f68a86312c4f1836f4b9c833fff33c46710cbeb7f5f08b386999cf3c976d083c94303b711899b8c8c39c29465f8ced6254b88a61019041a57646a40baa125f41cb8f295b5be6f89000c0ccaae7ebd30ff1430c7ab9427b3180cace6cafe51286cccee34713aeab2470ae57a45d34182328986c1a0ff28b6f3b2612cd8"}) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f00000001c0)=ANY=[@ANYBLOB="aec141fcf82d9e1a392dc7c48f696b757f00000000d87d9915f9f212274e4ad30f24c1fc07bb2c5698910c75f2979c4eb86ae2be1d6654b74d92ba0113f58397beb191f9bccc05cca3be66f1f3b0843ee398cf5dc9"]) 17:50:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x102, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x7) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000040)={0x8, 0x3, "2b8e442710100acc12373bdc3e360b3f121ae8818f028dc2ba6ff8d4b22349cd01a6b79a26e433fb28b6e8138dfd708ed01d07e957223521e3f61a73e2af5e294c9c25d372ac4d553ad46d8d47b99642dbb15ce1d9bfa44316dd5421dccebd30351c8dc19e9bfc41886b160a1ecbbb3fc34e2cbead69fbcce7612a3f94e65cdd984ee101b614405cc56d2454bc47f8d8a53da29374595ceade011a26b6b1498bcf71eed2bdabfc4a617e687803c7176f0e4ada47fc88a01b25ece7a8b4a8797e94690205aa2ee52c72758250cd7bcc56ba01998ef6d98b83451b0e3a7f61f7183a0da7da74d0e8d9ca8fa7a62c71d5d6d049379ea72291cfa1b244cb68cc792b"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2994.159348][T31432] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2994.167460][T31432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 2994.175424][T31432] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x10, 0x1, [{}]}) 17:50:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x5ec00, 0x0) getsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) alarm(0xffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/llc/socket\x00') r4 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r5, 0x0, 0x7, 0x2, 0x4, 0x10, @local, @empty, 0x40, 0x80, 0x7092, 0x401}}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r6, 0x1, 0x6, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x678942, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) dup2(r7, r8) getsockname$tipc(r4, &(0x7f0000000280), &(0x7f0000000080)=0x1b) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2994.526927][ T22] audit: type=1400 audit(1597254637.866:1330): avc: denied { getattr } for pid=31481 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:systemd_notify_exec_t:s0 tclass=netlink_route_socket permissive=1 17:50:38 executing program 0 (fault-call:9 fault-nth:25): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000a00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002180)=""/4103, 0x30}], 0x1, 0x0, 0x0) 17:50:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x1, [{}]}) 17:50:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fsync(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000100000000db80234d8d00f9fea8972eb789ae48b19f7a8e15e88fc874188b7ba3c694b5ab3a1f2029cf636be79b6df6aac04d8c5f77ea2ef57d4992a82305df7c41d1af405caaf2d7b67e5cf1d6d95ae1cf11f0e8adcfae8c4ecf1aee918e4efaf0699d5efd6a3f6a58d4efca6bccdadb9cc16179d5963250c8e2a5ed66"]) 17:50:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'hsr0\x00', 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', r6}) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r8 = signalfd(r7, &(0x7f0000000040)={[0x9]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r8, 0x9204, 0x72baa) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) 17:50:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x3611}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000100)) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r5 = dup2(r1, r4) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="3633d45a782eb1422f111818bfc1f9b075a4300b7cdc1d9fccbdbbaa9d021e4dd197c560eb273c25", 0x28}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="54b3f9fce847f5be66a6c0291107ca6bb8864b14ed62f8211eaf7b450bcf5530a8a423c9190b5d4ebf2863c0ea40cd522cf6f3f913213328efe6bcc152e4b84f6545a158d705bf24c029b3484f59e541e69426a23683fe42140eff8e5c1b7cf29a4ca0848c6ececdcd0e108c615daeeb10fe8a174a84a4ff5f17f4c259250b6401b1f55f8733e842a0a9811328a98aa75c7acbb477532b8fffd872bb76f206381c61b42c41d46480380f", 0xaa}], 0x3, 0x4, 0x103) 17:50:38 executing program 1 (fault-call:4 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 2994.819967][T31506] FAULT_INJECTION: forcing a failure. [ 2994.819967][T31506] name failslab, interval 1, probability 0, space 0, times 0 [ 2994.842404][T31506] CPU: 0 PID: 31506 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2994.852573][T31506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2994.862740][T31506] Call Trace: [ 2994.866037][T31506] dump_stack+0x14a/0x1ce 17:50:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 17:50:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xf0, 0x1, [{}]}) [ 2994.870364][T31506] ? devkmsg_release+0x11c/0x11c [ 2994.875319][T31506] ? show_regs_print_info+0x12/0x12 [ 2994.880516][T31506] should_fail+0x6fb/0x860 [ 2994.884927][T31506] ? setup_fault_attr+0x3d0/0x3d0 [ 2994.889952][T31506] ? tun_get_user+0xe99/0x34e0 [ 2994.894711][T31506] should_failslab+0x5/0x20 [ 2994.899243][T31506] __kmalloc_track_caller+0x5d/0x2c0 [ 2994.904524][T31506] ? __napi_alloc_skb+0xd6/0x520 [ 2994.909465][T31506] ? tun_get_user+0xe99/0x34e0 [ 2994.914222][T31506] pskb_expand_head+0x10d/0xfb0 17:50:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x80000) write$hidraw(r3, &(0x7f0000000080)="d1310fb240b755f597f2bc63fc82f2a7dda8ad12d986ea5f7de58504674f4fcda08cc6db4e38d387bd703baa88d44bbc3c094fe69cbdc58608730ac954ddff542b4da1963c0d", 0x46) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r5) setresgid(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r7) setresgid(r7, 0x0, 0x0) r8 = getegid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000240)=[r5, r7, r8, r9]) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000100)=ANY=[@ANYBLOB="00af1e0001e9815229079ece7649a05ffbf2701991b63d5268905a3f00000000"]) 17:50:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x102, 0x1, [{}]}) [ 2994.919067][T31506] tun_get_user+0xe99/0x34e0 [ 2994.923655][T31506] ? tun_do_read+0x1ed0/0x1ed0 [ 2994.928412][T31506] ? unwind_get_return_address_ptr+0x130/0x130 [ 2994.934556][T31506] ? memset+0x1f/0x40 [ 2994.938533][T31506] ? unwind_next_frame+0x1c90/0x2330 [ 2994.943817][T31506] ? __rcu_read_lock+0x50/0x50 [ 2994.948579][T31506] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2994.954643][T31506] tun_chr_write_iter+0x121/0x1a0 [ 2994.959676][T31506] __vfs_write+0x59d/0x720 [ 2994.964094][T31506] ? __kernel_write+0x340/0x340 [ 2994.968938][T31506] ? __kernel_text_address+0x93/0x110 [ 2994.974307][T31506] __kernel_write+0x12c/0x340 [ 2994.976934][T31576] FAULT_INJECTION: forcing a failure. [ 2994.976934][T31576] name failslab, interval 1, probability 0, space 0, times 0 [ 2994.979001][T31506] write_pipe_buf+0x148/0x1d0 [ 2994.979015][T31506] ? default_file_splice_write+0x250/0x250 [ 2994.979033][T31506] ? __page_cache_release+0x41a/0x470 [ 2995.007395][T31506] __splice_from_pipe+0x2d3/0x870 [ 2995.012407][T31506] ? default_file_splice_write+0x250/0x250 [ 2995.018194][T31506] default_file_splice_write+0x18b/0x250 [ 2995.023809][T31506] ? default_file_splice_read+0x980/0x980 [ 2995.029514][T31506] ? avc_policy_seqno+0x17/0x70 [ 2995.034372][T31506] ? security_file_permission+0x128/0x300 [ 2995.040075][T31506] ? default_file_splice_read+0x980/0x980 [ 2995.045773][T31506] __se_sys_splice+0x7ee/0x1b70 [ 2995.050607][T31506] ? fput_many+0x42/0x1a0 [ 2995.055028][T31506] ? ksys_write+0x25d/0x2c0 [ 2995.059511][T31506] ? file_open_root+0x450/0x450 [ 2995.064343][T31506] ? __x64_sys_splice+0xf0/0xf0 [ 2995.069174][T31506] ? __x64_sys_splice+0x1d/0xf0 [ 2995.074032][T31506] do_syscall_64+0xcb/0x150 [ 2995.078523][T31506] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2995.084400][T31506] RIP: 0033:0x45ce69 [ 2995.088277][T31506] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2995.107886][T31506] RSP: 002b:00007f901a340c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2995.116279][T31506] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2995.124230][T31506] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2995.132187][T31506] RBP: 00007f901a340ca0 R08: 0000000000010005 R09: 0000000000000000 [ 2995.140142][T31506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 2995.148114][T31506] R13: 00007fffebcc070f R14: 00007f901a3419c0 R15: 000000000118bf2c [ 2995.156080][T31576] CPU: 1 PID: 31576 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2995.166223][T31576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2995.176408][T31576] Call Trace: [ 2995.179686][T31576] dump_stack+0x14a/0x1ce [ 2995.184005][T31576] ? devkmsg_release+0x11c/0x11c [ 2995.188917][T31576] ? show_regs_print_info+0x12/0x12 [ 2995.194098][T31576] ? unwind_get_return_address_ptr+0x130/0x130 [ 2995.200241][T31576] ? stack_trace_save+0x1f0/0x1f0 [ 2995.205283][T31576] should_fail+0x6fb/0x860 [ 2995.209684][T31576] ? setup_fault_attr+0x3d0/0x3d0 [ 2995.214693][T31576] ? unwind_next_frame+0x1c90/0x2330 [ 2995.219964][T31576] ? getname_flags+0xb8/0x610 [ 2995.224612][T31576] should_failslab+0x5/0x20 [ 2995.229088][T31576] kmem_cache_alloc+0x36/0x260 [ 2995.233834][T31576] getname_flags+0xb8/0x610 [ 2995.238329][T31576] user_path_at_empty+0x28/0x50 [ 2995.243152][T31576] kernel_quotactl+0x1ec/0x6400 [ 2995.247986][T31576] ? unwind_next_frame+0x1c90/0x2330 [ 2995.253266][T31576] ? qtype_enforce_flag+0x70/0x70 [ 2995.258261][T31576] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2995.264316][T31576] ? __rcu_read_lock+0x50/0x50 [ 2995.269052][T31576] ? unwind_get_return_address_ptr+0x130/0x130 [ 2995.275277][T31576] ? is_bpf_text_address+0x290/0x2b0 [ 2995.280540][T31576] ? stack_trace_save+0x1f0/0x1f0 [ 2995.285536][T31576] ? __kernel_text_address+0x93/0x110 [ 2995.290900][T31576] ? unwind_get_return_address+0x48/0x90 [ 2995.296501][T31576] ? arch_stack_walk+0xd8/0x120 [ 2995.301338][T31576] ? stack_trace_save+0x123/0x1f0 [ 2995.306331][T31576] ? stack_trace_snprint+0x150/0x150 [ 2995.311592][T31576] ? stack_trace_save+0x123/0x1f0 [ 2995.316596][T31576] ? __rcu_read_lock+0x50/0x50 [ 2995.321329][T31576] ? stack_trace_snprint+0x150/0x150 [ 2995.326607][T31576] ? avc_has_perm_noaudit+0x37d/0x400 [ 2995.332035][T31576] ? avc_has_perm_noaudit+0x30c/0x400 [ 2995.337378][T31576] ? avc_denied+0x1c0/0x1c0 [ 2995.341866][T31576] ? proc_pident_instantiate+0x71/0x2f0 [ 2995.347407][T31576] ? avc_has_perm+0xd5/0x280 [ 2995.352020][T31576] ? avc_has_perm+0x176/0x280 [ 2995.356798][T31576] ? avc_has_perm_noaudit+0x400/0x400 [ 2995.362190][T31576] ? memset+0x1f/0x40 [ 2995.366145][T31576] ? unwind_next_frame+0x1c90/0x2330 [ 2995.371416][T31576] ? arch_stack_walk+0xb8/0x120 [ 2995.376257][T31576] ? unwind_get_return_address_ptr+0x130/0x130 [ 2995.382394][T31576] ? memset+0x1f/0x40 [ 2995.386366][T31576] ? unwind_next_frame+0x1c90/0x2330 [ 2995.391649][T31576] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2995.397705][T31576] ? __rcu_read_lock+0x50/0x50 [ 2995.402460][T31576] ? unwind_get_return_address_ptr+0x130/0x130 [ 2995.408661][T31576] ? is_bpf_text_address+0x290/0x2b0 [ 2995.413942][T31576] ? stack_trace_save+0x1f0/0x1f0 [ 2995.418938][T31576] ? __kernel_text_address+0x93/0x110 [ 2995.426053][T31576] ? unwind_get_return_address+0x48/0x90 [ 2995.431654][T31576] ? arch_stack_walk+0xd8/0x120 [ 2995.436476][T31576] ? _kstrtoull+0x38d/0x490 [ 2995.440951][T31576] ? kstrtouint_from_user+0x22d/0x2b0 [ 2995.446309][T31576] ? kstrtol_from_user+0x320/0x320 [ 2995.451402][T31576] ? __kasan_slab_free+0x1f2/0x230 [ 2995.456502][T31576] ? __rcu_read_lock+0x50/0x50 [ 2995.461257][T31576] ? trace_event_raw_event_ext4_mballoc_alloc+0x28a/0xaa0 [ 2995.468362][T31576] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2995.474497][T31576] ? get_pid_task+0x86/0x90 [ 2995.478978][T31576] ? proc_fail_nth_write+0x18f/0x250 [ 2995.484244][T31576] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2995.489415][T31576] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2995.494612][T31576] ? memset+0x1f/0x40 [ 2995.498575][T31576] ? fsnotify+0x13a0/0x1460 [ 2995.503059][T31576] ? __kernel_write+0x340/0x340 [ 2995.507897][T31576] ? __fsnotify_parent+0x310/0x310 [ 2995.512991][T31576] ? security_file_permission+0x128/0x300 [ 2995.518699][T31576] ? __sb_end_write+0xa4/0xf0 [ 2995.523374][T31576] ? vfs_write+0x427/0x4f0 [ 2995.527809][T31576] ? fput_many+0x42/0x1a0 [ 2995.532110][T31576] ? ksys_write+0x25d/0x2c0 [ 2995.536591][T31576] ? __ia32_sys_read+0x80/0x80 [ 2995.541360][T31576] __x64_sys_quotactl+0x97/0xb0 [ 2995.546201][T31576] do_syscall_64+0xcb/0x150 [ 2995.550695][T31576] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2995.556563][T31576] RIP: 0033:0x45ce69 [ 2995.560429][T31576] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2995.580027][T31576] RSP: 002b:00007fd00700ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 2995.588408][T31576] RAX: ffffffffffffffda RBX: 0000000000025180 RCX: 000000000045ce69 [ 2995.596365][T31576] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000002080000201 [ 2995.604318][T31576] RBP: 00007fd00700aca0 R08: 0000000000000000 R09: 0000000000000000 [ 2995.612268][T31576] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000000 [ 2995.620220][T31576] R13: 00007fff19be879f R14: 00007fd00700b9c0 R15: 000000000118bf2c 17:50:39 executing program 0 (fault-call:9 fault-nth:26): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:39 executing program 1 (fault-call:4 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="f51d7f2f2c853585d8"]) 17:50:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x120, 0x1, [{}]}) 17:50:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000b00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 2995.709212][T31593] FAULT_INJECTION: forcing a failure. [ 2995.709212][T31593] name failslab, interval 1, probability 0, space 0, times 0 [ 2995.741307][T31593] CPU: 0 PID: 31593 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 17:50:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x74, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x100000800002, 0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0x8a) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x4040) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000827bd7000fcdbdf250100000014000900fc010000000000000000000000000001981c84c8863c7a6fd8891bc53da2644b923889e3d0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="000040000100000000"]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc081) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000480)=""/54, 0x36}, {&(0x7f00000004c0)=""/110, 0x6e}], 0x5, 0x2, 0xfffffffc) 17:50:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x123, 0x1, [{}]}) [ 2995.751484][T31593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2995.761530][T31593] Call Trace: [ 2995.764819][T31593] dump_stack+0x14a/0x1ce [ 2995.769144][T31593] ? devkmsg_release+0x11c/0x11c [ 2995.774082][T31593] ? show_regs_print_info+0x12/0x12 [ 2995.779277][T31593] should_fail+0x6fb/0x860 [ 2995.783774][T31593] ? setup_fault_attr+0x3d0/0x3d0 [ 2995.788794][T31593] ? __d_alloc+0x2a/0x6b0 [ 2995.793205][T31593] should_failslab+0x5/0x20 [ 2995.797708][T31593] kmem_cache_alloc+0x36/0x260 [ 2995.802475][T31593] __d_alloc+0x2a/0x6b0 [ 2995.806630][T31593] d_alloc_parallel+0xf3/0x1440 [ 2995.811483][T31593] ? lockref_get_not_dead+0x1d6/0x340 [ 2995.816854][T31593] ? __rcu_read_lock+0x50/0x50 [ 2995.821647][T31593] ? __d_lookup_rcu+0x609/0x650 [ 2995.826497][T31593] ? __legitimize_mnt+0x77/0x1d0 [ 2995.831434][T31593] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2995.836568][T31593] ? unlazy_walk+0x385/0x610 [ 2995.841188][T31593] ? lookup_fast+0x52f/0xfd0 [ 2995.846136][T31593] __lookup_slow+0x169/0x490 [ 2995.850725][T31593] ? lookup_one_len2+0x2d0/0x2d0 [ 2995.855662][T31593] walk_component+0x3ee/0x970 [ 2995.860340][T31593] ? follow_managed+0x950/0x950 [ 2995.865201][T31593] ? security_inode_permission+0xda/0x110 [ 2995.870916][T31593] link_path_walk+0x72b/0x1500 [ 2995.875677][T31593] ? path_init+0x4f3/0x1220 [ 2995.880179][T31593] ? path_init+0x1220/0x1220 [ 2995.884761][T31593] ? path_init+0xab7/0x1220 [ 2995.889261][T31593] path_lookupat+0xd2/0xa60 [ 2995.893792][T31593] ? kmem_cache_alloc+0x1d5/0x260 [ 2995.898814][T31593] ? getname_flags+0xb8/0x610 [ 2995.903486][T31593] ? user_path_at_empty+0x28/0x50 17:50:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="0005000040b10cc700"]) [ 2995.908508][T31593] ? kernel_quotactl+0x1ec/0x6400 [ 2995.913526][T31593] ? __x64_sys_quotactl+0x97/0xb0 [ 2995.918556][T31593] ? do_syscall_64+0xcb/0x150 [ 2995.923232][T31593] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2995.929290][T31593] ? filename_lookup+0x6e0/0x6e0 [ 2995.934226][T31593] filename_lookup+0x254/0x6e0 [ 2995.938986][T31593] ? hashlen_string+0x120/0x120 [ 2995.940918][T31641] FAULT_INJECTION: forcing a failure. [ 2995.940918][T31641] name failslab, interval 1, probability 0, space 0, times 0 [ 2995.943860][T31593] ? getname_flags+0x20d/0x610 [ 2995.943877][T31593] kernel_quotactl+0x1ec/0x6400 [ 2995.943899][T31593] ? unwind_next_frame+0x1c90/0x2330 [ 2995.971343][T31593] ? qtype_enforce_flag+0x70/0x70 [ 2995.976355][T31593] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2995.982409][T31593] ? __rcu_read_lock+0x50/0x50 [ 2995.987177][T31593] ? unwind_get_return_address_ptr+0x130/0x130 [ 2995.993314][T31593] ? is_bpf_text_address+0x290/0x2b0 [ 2995.998591][T31593] ? stack_trace_save+0x1f0/0x1f0 [ 2996.003623][T31593] ? __kernel_text_address+0x93/0x110 [ 2996.008979][T31593] ? unwind_get_return_address+0x48/0x90 [ 2996.014595][T31593] ? arch_stack_walk+0xd8/0x120 [ 2996.019428][T31593] ? stack_trace_save+0x123/0x1f0 [ 2996.024431][T31593] ? stack_trace_snprint+0x150/0x150 [ 2996.029695][T31593] ? stack_trace_save+0x123/0x1f0 [ 2996.034716][T31593] ? __rcu_read_lock+0x50/0x50 [ 2996.039479][T31593] ? stack_trace_snprint+0x150/0x150 [ 2996.044745][T31593] ? avc_has_perm_noaudit+0x37d/0x400 [ 2996.050095][T31593] ? avc_has_perm_noaudit+0x30c/0x400 [ 2996.055445][T31593] ? avc_denied+0x1c0/0x1c0 [ 2996.059930][T31593] ? proc_pident_instantiate+0x71/0x2f0 [ 2996.065460][T31593] ? avc_has_perm+0xd5/0x280 [ 2996.070032][T31593] ? avc_has_perm+0x176/0x280 [ 2996.074692][T31593] ? avc_has_perm_noaudit+0x400/0x400 [ 2996.080046][T31593] ? memset+0x1f/0x40 [ 2996.084009][T31593] ? unwind_next_frame+0x1c90/0x2330 [ 2996.089286][T31593] ? arch_stack_walk+0xb8/0x120 [ 2996.094125][T31593] ? unwind_get_return_address_ptr+0x130/0x130 [ 2996.100257][T31593] ? memset+0x1f/0x40 [ 2996.104220][T31593] ? unwind_next_frame+0x1c90/0x2330 [ 2996.109490][T31593] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2996.115547][T31593] ? __rcu_read_lock+0x50/0x50 [ 2996.120316][T31593] ? unwind_get_return_address_ptr+0x130/0x130 [ 2996.126452][T31593] ? is_bpf_text_address+0x290/0x2b0 [ 2996.131730][T31593] ? stack_trace_save+0x1f0/0x1f0 [ 2996.136831][T31593] ? __kernel_text_address+0x93/0x110 [ 2996.142189][T31593] ? unwind_get_return_address+0x48/0x90 [ 2996.147801][T31593] ? arch_stack_walk+0xd8/0x120 [ 2996.152635][T31593] ? _kstrtoull+0x38d/0x490 [ 2996.157123][T31593] ? kstrtouint_from_user+0x22d/0x2b0 [ 2996.162485][T31593] ? kstrtol_from_user+0x320/0x320 [ 2996.167575][T31593] ? __kasan_slab_free+0x1f2/0x230 [ 2996.172685][T31593] ? __rcu_read_lock+0x50/0x50 [ 2996.177443][T31593] ? trace_event_raw_event_ext4_mballoc_alloc+0x28a/0xaa0 [ 2996.184533][T31593] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2996.190681][T31593] ? get_pid_task+0x86/0x90 [ 2996.195168][T31593] ? proc_fail_nth_write+0x18f/0x250 [ 2996.200432][T31593] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2996.205607][T31593] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2996.210781][T31593] ? memset+0x1f/0x40 [ 2996.214753][T31593] ? fsnotify+0x13a0/0x1460 [ 2996.219236][T31593] ? __kernel_write+0x340/0x340 [ 2996.224065][T31593] ? __fsnotify_parent+0x310/0x310 [ 2996.229165][T31593] ? security_file_permission+0x128/0x300 [ 2996.234864][T31593] ? __sb_end_write+0xa4/0xf0 [ 2996.239525][T31593] ? vfs_write+0x427/0x4f0 [ 2996.243919][T31593] ? fput_many+0x42/0x1a0 [ 2996.248226][T31593] ? ksys_write+0x25d/0x2c0 [ 2996.252709][T31593] ? __ia32_sys_read+0x80/0x80 [ 2996.257457][T31593] __x64_sys_quotactl+0x97/0xb0 [ 2996.262291][T31593] do_syscall_64+0xcb/0x150 [ 2996.266777][T31593] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2996.272648][T31593] RIP: 0033:0x45ce69 [ 2996.276524][T31593] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2996.296110][T31593] RSP: 002b:00007fd00700ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 2996.304498][T31593] RAX: ffffffffffffffda RBX: 0000000000025180 RCX: 000000000045ce69 [ 2996.312450][T31593] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000002080000201 [ 2996.320401][T31593] RBP: 00007fd00700aca0 R08: 0000000000000000 R09: 0000000000000000 [ 2996.328351][T31593] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2996.336302][T31593] R13: 00007fff19be879f R14: 00007fd00700b9c0 R15: 000000000118bf2c [ 2996.344283][T31641] CPU: 1 PID: 31641 Comm: syz-executor.0 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2996.354451][T31641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2996.364494][T31641] Call Trace: [ 2996.367781][T31641] dump_stack+0x14a/0x1ce [ 2996.372105][T31641] ? devkmsg_release+0x11c/0x11c [ 2996.377035][T31641] ? show_regs_print_info+0x12/0x12 [ 2996.382226][T31641] should_fail+0x6fb/0x860 [ 2996.386634][T31641] ? setup_fault_attr+0x3d0/0x3d0 [ 2996.391653][T31641] ? eth_get_headlen+0x250/0x250 [ 2996.396614][T31641] ? iov_iter_advance+0x707/0xee0 [ 2996.401632][T31641] ? __napi_alloc_skb+0xd6/0x520 [ 2996.406562][T31641] should_failslab+0x5/0x20 [ 2996.411058][T31641] kmem_cache_alloc+0x36/0x260 [ 2996.415819][T31641] __napi_alloc_skb+0xd6/0x520 [ 2996.420580][T31641] napi_get_frags+0x5c/0x100 [ 2996.425211][T31641] tun_get_user+0xa10/0x34e0 [ 2996.429891][T31641] ? tun_do_read+0x1ed0/0x1ed0 [ 2996.434636][T31641] ? unwind_get_return_address_ptr+0x130/0x130 [ 2996.440797][T31641] ? trace_event_raw_event_rcu_utilization+0x180/0x180 [ 2996.447680][T31641] ? _raw_spin_lock+0xa1/0x170 [ 2996.452444][T31641] ? _raw_spin_trylock_bh+0x190/0x190 [ 2996.457797][T31641] ? __rcu_read_lock+0x50/0x50 [ 2996.462554][T31641] tun_chr_write_iter+0x121/0x1a0 [ 2996.467557][T31641] __vfs_write+0x59d/0x720 [ 2996.471949][T31641] ? __kernel_write+0x340/0x340 [ 2996.476774][T31641] ? _raw_spin_lock+0xa1/0x170 [ 2996.481530][T31641] ? _raw_spin_trylock_bh+0x190/0x190 [ 2996.486951][T31641] __kernel_write+0x12c/0x340 [ 2996.491605][T31641] write_pipe_buf+0x148/0x1d0 [ 2996.496258][T31641] ? default_file_splice_write+0x250/0x250 [ 2996.502037][T31641] ? __page_cache_release+0x41a/0x470 [ 2996.507426][T31641] ? preempt_schedule_notrace+0x130/0x130 [ 2996.513133][T31641] __splice_from_pipe+0x2d3/0x870 [ 2996.518145][T31641] ? default_file_splice_write+0x250/0x250 [ 2996.523933][T31641] default_file_splice_write+0x18b/0x250 [ 2996.529538][T31641] ? default_file_splice_read+0x980/0x980 [ 2996.535245][T31641] ? avc_policy_seqno+0x17/0x70 [ 2996.540155][T31641] ? security_file_permission+0x128/0x300 [ 2996.545844][T31641] ? default_file_splice_read+0x980/0x980 [ 2996.551561][T31641] __se_sys_splice+0x7ee/0x1b70 [ 2996.556831][T31641] ? fput_many+0x42/0x1a0 [ 2996.561168][T31641] ? ksys_write+0x25d/0x2c0 [ 2996.565649][T31641] ? file_open_root+0x450/0x450 [ 2996.570473][T31641] ? __x64_sys_splice+0xf0/0xf0 [ 2996.575294][T31641] ? __x64_sys_splice+0x1d/0xf0 [ 2996.580125][T31641] do_syscall_64+0xcb/0x150 [ 2996.584622][T31641] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2996.590492][T31641] RIP: 0033:0x45ce69 [ 2996.594505][T31641] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2996.615403][T31641] RSP: 002b:00007f901a31fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2996.623786][T31641] RAX: ffffffffffffffda RBX: 0000000000032bc0 RCX: 000000000045ce69 [ 2996.631748][T31641] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2996.639711][T31641] RBP: 00007f901a31fca0 R08: 0000000000010005 R09: 0000000000000000 [ 2996.647684][T31641] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 2996.655626][T31641] R13: 00007fffebcc070f R14: 00007f901a3209c0 R15: 000000000118bfcc 17:50:40 executing program 2: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000340)={0x0, 0x0, 0xfffffffffffffe7e}, &(0x7f0000000780)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x40000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x201, 0x1, [{}]}) 17:50:40 executing program 1 (fault-call:4 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) write$P9_RGETATTR(r1, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x8, {0x4, 0x1, 0x8}, 0x0, r3, r5, 0x8, 0x80, 0xfffffffffffffffc, 0x80000000, 0x5, 0x8, 0x11df7240000000, 0x0, 0x8, 0x8001, 0x2, 0x8, 0x9, 0x3, 0x7f}}, 0xa0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="98", 0x1}, {&(0x7f0000000040)="e7e510234b21a2e00bcc9a04aa8df2", 0xf}], 0x2, 0x0, 0x0) [ 2996.699201][T31657] FAULT_INJECTION: forcing a failure. [ 2996.699201][T31657] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.714832][T31657] CPU: 0 PID: 31657 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2996.724991][T31657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2996.735045][T31657] Call Trace: [ 2996.738342][T31657] dump_stack+0x14a/0x1ce [ 2996.742680][T31657] ? devkmsg_release+0x11c/0x11c [ 2996.747629][T31657] ? show_regs_print_info+0x12/0x12 [ 2996.752830][T31657] should_fail+0x6fb/0x860 [ 2996.757255][T31657] ? setup_fault_attr+0x3d0/0x3d0 [ 2996.762287][T31657] ? __d_alloc+0xbf/0x6b0 [ 2996.766614][T31657] should_failslab+0x5/0x20 [ 2996.771091][T31657] __kmalloc+0x5f/0x2d0 [ 2996.775245][T31657] ? kmem_cache_alloc+0x1d5/0x260 [ 2996.780250][T31657] __d_alloc+0xbf/0x6b0 [ 2996.784392][T31657] d_alloc_parallel+0xf3/0x1440 [ 2996.789220][T31657] ? lockref_get_not_dead+0x1d6/0x340 [ 2996.794589][T31657] ? __rcu_read_lock+0x50/0x50 [ 2996.799325][T31657] ? __d_lookup_rcu+0x609/0x650 [ 2996.804165][T31657] ? __legitimize_mnt+0x77/0x1d0 [ 2996.809095][T31657] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2996.814182][T31657] ? unlazy_walk+0x385/0x610 [ 2996.818742][T31657] ? lookup_fast+0x52f/0xfd0 [ 2996.823303][T31657] __lookup_slow+0x169/0x490 [ 2996.827870][T31657] ? lookup_one_len2+0x2d0/0x2d0 [ 2996.832827][T31657] walk_component+0x3ee/0x970 [ 2996.837504][T31657] ? follow_managed+0x950/0x950 [ 2996.842358][T31657] ? security_inode_permission+0xda/0x110 [ 2996.848067][T31657] link_path_walk+0x72b/0x1500 [ 2996.852840][T31657] ? path_init+0x4f3/0x1220 [ 2996.857344][T31657] ? path_init+0x1220/0x1220 [ 2996.861923][T31657] ? path_init+0xab7/0x1220 [ 2996.866437][T31657] path_lookupat+0xd2/0xa60 [ 2996.870934][T31657] ? kmem_cache_alloc+0x1d5/0x260 [ 2996.875952][T31657] ? getname_flags+0xb8/0x610 [ 2996.880621][T31657] ? user_path_at_empty+0x28/0x50 [ 2996.885639][T31657] ? kernel_quotactl+0x1ec/0x6400 [ 2996.890653][T31657] ? __x64_sys_quotactl+0x97/0xb0 [ 2996.895669][T31657] ? do_syscall_64+0xcb/0x150 [ 2996.900341][T31657] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2996.906397][T31657] ? filename_lookup+0x6e0/0x6e0 [ 2996.911324][T31657] filename_lookup+0x254/0x6e0 [ 2996.916193][T31657] ? hashlen_string+0x120/0x120 [ 2996.921060][T31657] ? getname_flags+0x20d/0x610 [ 2996.925820][T31657] kernel_quotactl+0x1ec/0x6400 [ 2996.930658][T31657] ? unwind_next_frame+0x1c90/0x2330 [ 2996.935924][T31657] ? qtype_enforce_flag+0x70/0x70 [ 2996.940933][T31657] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2996.947011][T31657] ? __rcu_read_lock+0x50/0x50 [ 2996.951755][T31657] ? unwind_get_return_address_ptr+0x130/0x130 [ 2996.957909][T31657] ? is_bpf_text_address+0x290/0x2b0 [ 2996.963198][T31657] ? stack_trace_save+0x1f0/0x1f0 [ 2996.968205][T31657] ? __kernel_text_address+0x93/0x110 [ 2996.973593][T31657] ? unwind_get_return_address+0x48/0x90 [ 2996.979213][T31657] ? arch_stack_walk+0xd8/0x120 [ 2996.984054][T31657] ? stack_trace_save+0x123/0x1f0 [ 2996.989060][T31657] ? stack_trace_snprint+0x150/0x150 [ 2996.994323][T31657] ? stack_trace_save+0x123/0x1f0 [ 2996.999329][T31657] ? __rcu_read_lock+0x50/0x50 [ 2997.004073][T31657] ? stack_trace_snprint+0x150/0x150 [ 2997.009342][T31657] ? avc_has_perm_noaudit+0x37d/0x400 [ 2997.014697][T31657] ? avc_has_perm_noaudit+0x30c/0x400 [ 2997.020049][T31657] ? avc_denied+0x1c0/0x1c0 [ 2997.024538][T31657] ? proc_pident_instantiate+0x71/0x2f0 [ 2997.030069][T31657] ? avc_has_perm+0xd5/0x280 [ 2997.034640][T31657] ? avc_has_perm+0x176/0x280 [ 2997.039314][T31657] ? avc_has_perm_noaudit+0x400/0x400 [ 2997.044665][T31657] ? memset+0x1f/0x40 [ 2997.048628][T31657] ? unwind_next_frame+0x1c90/0x2330 [ 2997.054249][T31657] ? arch_stack_walk+0xb8/0x120 [ 2997.059099][T31657] ? unwind_get_return_address_ptr+0x130/0x130 [ 2997.065246][T31657] ? memset+0x1f/0x40 [ 2997.069203][T31657] ? unwind_next_frame+0x1c90/0x2330 [ 2997.074487][T31657] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2997.080550][T31657] ? __rcu_read_lock+0x50/0x50 [ 2997.085314][T31657] ? unwind_get_return_address_ptr+0x130/0x130 [ 2997.091567][T31657] ? is_bpf_text_address+0x290/0x2b0 [ 2997.096837][T31657] ? stack_trace_save+0x1f0/0x1f0 [ 2997.101844][T31657] ? __kernel_text_address+0x93/0x110 [ 2997.107194][T31657] ? unwind_get_return_address+0x48/0x90 [ 2997.112807][T31657] ? arch_stack_walk+0xd8/0x120 [ 2997.117667][T31657] ? _kstrtoull+0x38d/0x490 [ 2997.122157][T31657] ? kstrtouint_from_user+0x22d/0x2b0 [ 2997.127511][T31657] ? kstrtol_from_user+0x320/0x320 [ 2997.132625][T31657] ? __kasan_slab_free+0x1f2/0x230 [ 2997.137723][T31657] ? __rcu_read_lock+0x50/0x50 [ 2997.142469][T31657] ? trace_event_raw_event_ext4_mballoc_alloc+0x28a/0xaa0 [ 2997.149559][T31657] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2997.155628][T31657] ? get_pid_task+0x86/0x90 [ 2997.160133][T31657] ? proc_fail_nth_write+0x18f/0x250 [ 2997.165400][T31657] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2997.170577][T31657] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2997.175769][T31657] ? memset+0x1f/0x40 [ 2997.179735][T31657] ? fsnotify+0x13a0/0x1460 [ 2997.184235][T31657] ? __kernel_write+0x340/0x340 [ 2997.189066][T31657] ? __fsnotify_parent+0x310/0x310 [ 2997.194159][T31657] ? security_file_permission+0x128/0x300 [ 2997.199873][T31657] ? __sb_end_write+0xa4/0xf0 [ 2997.204534][T31657] ? vfs_write+0x427/0x4f0 [ 2997.208931][T31657] ? fput_many+0x42/0x1a0 [ 2997.213240][T31657] ? ksys_write+0x25d/0x2c0 [ 2997.217724][T31657] ? __ia32_sys_read+0x80/0x80 [ 2997.222473][T31657] __x64_sys_quotactl+0x97/0xb0 [ 2997.227323][T31657] do_syscall_64+0xcb/0x150 [ 2997.231812][T31657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2997.237690][T31657] RIP: 0033:0x45ce69 [ 2997.241567][T31657] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2997.261160][T31657] RSP: 002b:00007fd00700ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 2997.269547][T31657] RAX: ffffffffffffffda RBX: 0000000000025180 RCX: 000000000045ce69 [ 2997.277510][T31657] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000002080000201 [ 2997.285472][T31657] RBP: 00007fd00700aca0 R08: 0000000000000000 R09: 0000000000000000 [ 2997.293419][T31657] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000002 17:50:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:50:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x203, 0x1, [{}]}) 17:50:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[@timestamp], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000100)=0x1) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, r4, 0x0) keyctl$read(0xb, r4, &(0x7f0000000240)=""/187, 0xbb) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x400}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000300)=0x1) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x20000641}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x0, 0x0) getrandom(&(0x7f0000000680)=""/4096, 0x1000, 0x1) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e21, 0xd8, @mcast1, 0x7}, {0xa, 0x4e22, 0x68869de0, @remote, 0x8a7}, 0x3, [0x200, 0x1, 0x2, 0x4, 0x80, 0x1, 0x6, 0xdbb]}, 0x5c) 17:50:40 executing program 1 (fault-call:4 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 2997.301366][T31657] R13: 00007fff19be879f R14: 00007fd00700b9c0 R15: 000000000118bf2c 17:50:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000c00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 2997.388219][T31683] FAULT_INJECTION: forcing a failure. [ 2997.388219][T31683] name failslab, interval 1, probability 0, space 0, times 0 [ 2997.402192][T31683] CPU: 1 PID: 31683 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2997.412339][T31683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2997.422383][T31683] Call Trace: [ 2997.425686][T31683] dump_stack+0x14a/0x1ce [ 2997.430018][T31683] ? devkmsg_release+0x11c/0x11c [ 2997.434986][T31683] ? show_regs_print_info+0x12/0x12 [ 2997.440180][T31683] ? filename_lookup+0x509/0x6e0 [ 2997.445115][T31683] should_fail+0x6fb/0x860 [ 2997.449528][T31683] ? setup_fault_attr+0x3d0/0x3d0 [ 2997.454553][T31683] ? getname_flags+0xb8/0x610 [ 2997.459222][T31683] should_failslab+0x5/0x20 [ 2997.463720][T31683] kmem_cache_alloc+0x36/0x260 [ 2997.468483][T31683] getname_flags+0xb8/0x610 [ 2997.472986][T31683] kernel_quotactl+0x295/0x6400 [ 2997.477838][T31683] ? unwind_next_frame+0x1c90/0x2330 [ 2997.483174][T31683] ? qtype_enforce_flag+0x70/0x70 [ 2997.488231][T31683] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2997.494296][T31683] ? __rcu_read_lock+0x50/0x50 [ 2997.499086][T31683] ? unwind_get_return_address_ptr+0x130/0x130 [ 2997.505242][T31683] ? is_bpf_text_address+0x290/0x2b0 [ 2997.510527][T31683] ? stack_trace_save+0x1f0/0x1f0 [ 2997.515548][T31683] ? __kernel_text_address+0x93/0x110 [ 2997.520952][T31683] ? unwind_get_return_address+0x48/0x90 [ 2997.526577][T31683] ? arch_stack_walk+0xd8/0x120 [ 2997.531404][T31683] ? stack_trace_save+0x123/0x1f0 [ 2997.536462][T31683] ? stack_trace_snprint+0x150/0x150 [ 2997.541756][T31683] ? stack_trace_save+0x123/0x1f0 [ 2997.546773][T31683] ? __rcu_read_lock+0x50/0x50 [ 2997.551631][T31683] ? stack_trace_snprint+0x150/0x150 [ 2997.556894][T31683] ? avc_has_perm_noaudit+0x37d/0x400 [ 2997.562244][T31683] ? avc_has_perm_noaudit+0x30c/0x400 [ 2997.567589][T31683] ? avc_denied+0x1c0/0x1c0 [ 2997.572066][T31683] ? proc_pident_instantiate+0x71/0x2f0 [ 2997.577586][T31683] ? avc_has_perm+0xd5/0x280 [ 2997.582147][T31683] ? avc_has_perm+0x176/0x280 [ 2997.586803][T31683] ? avc_has_perm_noaudit+0x400/0x400 [ 2997.592159][T31683] ? memset+0x1f/0x40 [ 2997.596124][T31683] ? unwind_next_frame+0x1c90/0x2330 [ 2997.601381][T31683] ? arch_stack_walk+0xb8/0x120 [ 2997.606205][T31683] ? unwind_get_return_address_ptr+0x130/0x130 [ 2997.612347][T31683] ? memset+0x1f/0x40 [ 2997.616302][T31683] ? unwind_next_frame+0x1c90/0x2330 [ 2997.621571][T31683] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2997.627643][T31683] ? __rcu_read_lock+0x50/0x50 [ 2997.632381][T31683] ? unwind_get_return_address_ptr+0x130/0x130 [ 2997.638521][T31683] ? is_bpf_text_address+0x290/0x2b0 [ 2997.643865][T31683] ? stack_trace_save+0x1f0/0x1f0 [ 2997.648864][T31683] ? __kernel_text_address+0x93/0x110 [ 2997.654216][T31683] ? unwind_get_return_address+0x48/0x90 [ 2997.659827][T31683] ? arch_stack_walk+0xd8/0x120 [ 2997.664652][T31683] ? _kstrtoull+0x38d/0x490 [ 2997.669129][T31683] ? kstrtouint_from_user+0x22d/0x2b0 [ 2997.674476][T31683] ? kstrtol_from_user+0x320/0x320 [ 2997.679573][T31683] ? __kasan_slab_free+0x1f2/0x230 [ 2997.684676][T31683] ? __rcu_read_lock+0x50/0x50 [ 2997.689414][T31683] ? trace_event_raw_event_ext4_mballoc_alloc+0x28a/0xaa0 [ 2997.696588][T31683] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2997.702629][T31683] ? get_pid_task+0x86/0x90 [ 2997.707169][T31683] ? proc_fail_nth_write+0x18f/0x250 [ 2997.712430][T31683] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2997.717619][T31683] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2997.722815][T31683] ? memset+0x1f/0x40 [ 2997.726795][T31683] ? fsnotify+0x13a0/0x1460 [ 2997.731271][T31683] ? __kernel_write+0x340/0x340 [ 2997.736105][T31683] ? __fsnotify_parent+0x310/0x310 [ 2997.741193][T31683] ? security_file_permission+0x128/0x300 [ 2997.746885][T31683] ? __sb_end_write+0xa4/0xf0 [ 2997.751534][T31683] ? vfs_write+0x427/0x4f0 [ 2997.755921][T31683] ? fput_many+0x42/0x1a0 [ 2997.760261][T31683] ? ksys_write+0x25d/0x2c0 [ 2997.764735][T31683] ? __ia32_sys_read+0x80/0x80 [ 2997.769484][T31683] __x64_sys_quotactl+0x97/0xb0 [ 2997.774309][T31683] do_syscall_64+0xcb/0x150 [ 2997.778795][T31683] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2997.784655][T31683] RIP: 0033:0x45ce69 [ 2997.788533][T31683] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2997.808121][T31683] RSP: 002b:00007fd00700ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 2997.816500][T31683] RAX: ffffffffffffffda RBX: 0000000000025180 RCX: 000000000045ce69 [ 2997.824458][T31683] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000002080000201 [ 2997.832399][T31683] RBP: 00007fd00700aca0 R08: 0000000000000000 R09: 0000000000000000 17:50:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x300, 0x1, [{}]}) 17:50:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400101202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)='S', 0x1}, {&(0x7f0000000080)="aa8df2", 0x3}], 0x2, 0x20000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)={0x0, 0x2, [@dev={[], 0x2f}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000040)) 17:50:41 executing program 1 (fault-call:4 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 2997.840343][T31683] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000003 [ 2997.848285][T31683] R13: 00007fff19be879f R14: 00007fd00700b9c0 R15: 000000000118bf2c [ 2997.890695][T31736] FAULT_INJECTION: forcing a failure. [ 2997.890695][T31736] name failslab, interval 1, probability 0, space 0, times 0 [ 2997.924688][T31736] CPU: 1 PID: 31736 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2997.934862][T31736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2997.944914][T31736] Call Trace: [ 2997.948211][T31736] dump_stack+0x14a/0x1ce [ 2997.952537][T31736] ? devkmsg_release+0x11c/0x11c [ 2997.957461][T31736] ? show_regs_print_info+0x12/0x12 [ 2997.962657][T31736] should_fail+0x6fb/0x860 [ 2997.967048][T31736] ? setup_fault_attr+0x3d0/0x3d0 [ 2997.972050][T31736] ? getname_kernel+0x55/0x2f0 [ 2997.976784][T31736] should_failslab+0x5/0x20 [ 2997.981263][T31736] kmem_cache_alloc+0x36/0x260 [ 2997.986020][T31736] getname_kernel+0x55/0x2f0 [ 2997.990603][T31736] kern_path+0x19/0x40 [ 2997.994647][T31736] lookup_bdev+0xb5/0x220 [ 2997.998951][T31736] ? blkdev_get_by_path+0x2e0/0x2e0 [ 2998.004144][T31736] kernel_quotactl+0x303/0x6400 [ 2998.009072][T31736] ? unwind_next_frame+0x1c90/0x2330 [ 2998.014365][T31736] ? qtype_enforce_flag+0x70/0x70 [ 2998.019367][T31736] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.025416][T31736] ? __rcu_read_lock+0x50/0x50 [ 2998.030179][T31736] ? unwind_get_return_address_ptr+0x130/0x130 [ 2998.036342][T31736] ? is_bpf_text_address+0x290/0x2b0 [ 2998.041606][T31736] ? stack_trace_save+0x1f0/0x1f0 [ 2998.046616][T31736] ? __kernel_text_address+0x93/0x110 [ 2998.052009][T31736] ? unwind_get_return_address+0x48/0x90 [ 2998.057628][T31736] ? arch_stack_walk+0xd8/0x120 [ 2998.062459][T31736] ? stack_trace_save+0x123/0x1f0 [ 2998.067457][T31736] ? stack_trace_snprint+0x150/0x150 [ 2998.072713][T31736] ? stack_trace_save+0x123/0x1f0 [ 2998.077709][T31736] ? __rcu_read_lock+0x50/0x50 [ 2998.082445][T31736] ? stack_trace_snprint+0x150/0x150 [ 2998.087705][T31736] ? avc_has_perm_noaudit+0x37d/0x400 [ 2998.093058][T31736] ? avc_has_perm_noaudit+0x30c/0x400 [ 2998.098422][T31736] ? avc_denied+0x1c0/0x1c0 [ 2998.102917][T31736] ? proc_pident_instantiate+0x71/0x2f0 [ 2998.108451][T31736] ? avc_has_perm+0xd5/0x280 [ 2998.113012][T31736] ? avc_has_perm+0x176/0x280 [ 2998.117670][T31736] ? avc_has_perm_noaudit+0x400/0x400 [ 2998.123019][T31736] ? memset+0x1f/0x40 [ 2998.126981][T31736] ? unwind_next_frame+0x1c90/0x2330 [ 2998.132252][T31736] ? arch_stack_walk+0xb8/0x120 [ 2998.137132][T31736] ? unwind_get_return_address_ptr+0x130/0x130 [ 2998.143267][T31736] ? memset+0x1f/0x40 [ 2998.147249][T31736] ? unwind_next_frame+0x1c90/0x2330 [ 2998.152513][T31736] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.158571][T31736] ? __rcu_read_lock+0x50/0x50 [ 2998.163311][T31736] ? unwind_get_return_address_ptr+0x130/0x130 [ 2998.169453][T31736] ? is_bpf_text_address+0x290/0x2b0 [ 2998.174713][T31736] ? stack_trace_save+0x1f0/0x1f0 [ 2998.179732][T31736] ? __kernel_text_address+0x93/0x110 [ 2998.185102][T31736] ? unwind_get_return_address+0x48/0x90 [ 2998.190720][T31736] ? arch_stack_walk+0xd8/0x120 [ 2998.195543][T31736] ? _kstrtoull+0x38d/0x490 [ 2998.200018][T31736] ? kstrtouint_from_user+0x22d/0x2b0 [ 2998.205362][T31736] ? kstrtol_from_user+0x320/0x320 [ 2998.210472][T31736] ? __kasan_slab_free+0x1f2/0x230 [ 2998.215564][T31736] ? __rcu_read_lock+0x50/0x50 [ 2998.220308][T31736] ? trace_event_raw_event_ext4_mballoc_alloc+0x28a/0xaa0 [ 2998.227389][T31736] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.233431][T31736] ? get_pid_task+0x86/0x90 [ 2998.237917][T31736] ? proc_fail_nth_write+0x18f/0x250 [ 2998.243197][T31736] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2998.248383][T31736] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2998.253551][T31736] ? memset+0x1f/0x40 [ 2998.257537][T31736] ? fsnotify+0x13a0/0x1460 [ 2998.262013][T31736] ? __kernel_write+0x340/0x340 [ 2998.266835][T31736] ? __fsnotify_parent+0x310/0x310 [ 2998.271919][T31736] ? security_file_permission+0x128/0x300 [ 2998.277625][T31736] ? __sb_end_write+0xa4/0xf0 [ 2998.282271][T31736] ? vfs_write+0x427/0x4f0 [ 2998.286656][T31736] ? fput_many+0x42/0x1a0 [ 2998.290973][T31736] ? ksys_write+0x25d/0x2c0 [ 2998.295450][T31736] ? __ia32_sys_read+0x80/0x80 [ 2998.300186][T31736] __x64_sys_quotactl+0x97/0xb0 [ 2998.305016][T31736] do_syscall_64+0xcb/0x150 [ 2998.309493][T31736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.315374][T31736] RIP: 0033:0x45ce69 [ 2998.319257][T31736] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:50:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x300) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x302, 0x1, [{}]}) 17:50:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000d00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 2998.338835][T31736] RSP: 002b:00007fd00700ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 2998.347215][T31736] RAX: ffffffffffffffda RBX: 0000000000025180 RCX: 000000000045ce69 [ 2998.355160][T31736] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000002080000201 [ 2998.363157][T31736] RBP: 00007fd00700aca0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.371124][T31736] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000004 [ 2998.379068][T31736] R13: 00007fff19be879f R14: 00007fd00700b9c0 R15: 000000000118bf2c 17:50:41 executing program 1 (fault-call:4 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 2998.442435][T31757] FAULT_INJECTION: forcing a failure. [ 2998.442435][T31757] name failslab, interval 1, probability 0, space 0, times 0 [ 2998.455296][T31757] CPU: 1 PID: 31757 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2998.465447][T31757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2998.475495][T31757] Call Trace: [ 2998.478791][T31757] dump_stack+0x14a/0x1ce [ 2998.483119][T31757] ? devkmsg_release+0x11c/0x11c [ 2998.488328][T31757] ? show_regs_print_info+0x12/0x12 [ 2998.493530][T31757] should_fail+0x6fb/0x860 [ 2998.497953][T31757] ? setup_fault_attr+0x3d0/0x3d0 [ 2998.502974][T31757] ? arch_stack_walk+0xb8/0x120 [ 2998.507827][T31757] ? __d_alloc+0x2a/0x6b0 [ 2998.512150][T31757] should_failslab+0x5/0x20 [ 2998.516654][T31757] kmem_cache_alloc+0x36/0x260 [ 2998.521483][T31757] __d_alloc+0x2a/0x6b0 [ 2998.525667][T31757] ? __rcu_read_lock+0x50/0x50 [ 2998.530428][T31757] ? unwind_next_frame+0x1c90/0x2330 [ 2998.535716][T31757] d_alloc_parallel+0xf3/0x1440 [ 2998.540571][T31757] ? lockref_get_not_dead+0x1d6/0x340 [ 2998.545946][T31757] ? __rcu_read_lock+0x50/0x50 [ 2998.550698][T31757] ? __d_lookup_rcu+0x609/0x650 [ 2998.555527][T31757] ? __legitimize_mnt+0x77/0x1d0 [ 2998.560500][T31757] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2998.565682][T31757] ? unlazy_walk+0x385/0x610 [ 2998.570443][T31757] ? lookup_fast+0x52f/0xfd0 [ 2998.575020][T31757] __lookup_slow+0x169/0x490 [ 2998.579586][T31757] ? lookup_one_len2+0x2d0/0x2d0 [ 2998.584498][T31757] walk_component+0x3ee/0x970 [ 2998.589159][T31757] ? follow_managed+0x950/0x950 [ 2998.593991][T31757] ? path_init+0x1220/0x1220 [ 2998.598817][T31757] ? path_init+0xab7/0x1220 [ 2998.603298][T31757] path_lookupat+0x211/0xa60 [ 2998.607927][T31757] ? getname_kernel+0x55/0x2f0 [ 2998.612692][T31757] ? kern_path+0x19/0x40 [ 2998.616931][T31757] ? lookup_bdev+0xb5/0x220 [ 2998.621414][T31757] ? kernel_quotactl+0x303/0x6400 [ 2998.626413][T31757] ? filename_lookup+0x6e0/0x6e0 [ 2998.631335][T31757] filename_lookup+0x254/0x6e0 [ 2998.636109][T31757] ? hashlen_string+0x120/0x120 [ 2998.640960][T31757] ? getname_kernel+0x159/0x2f0 [ 2998.645809][T31757] ? memcpy+0x38/0x50 [ 2998.649770][T31757] ? getname_kernel+0x210/0x2f0 [ 2998.654594][T31757] lookup_bdev+0xb5/0x220 [ 2998.658913][T31757] ? blkdev_get_by_path+0x2e0/0x2e0 [ 2998.664105][T31757] kernel_quotactl+0x303/0x6400 [ 2998.668933][T31757] ? unwind_next_frame+0x1c90/0x2330 [ 2998.674196][T31757] ? qtype_enforce_flag+0x70/0x70 [ 2998.679216][T31757] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.685273][T31757] ? __rcu_read_lock+0x50/0x50 [ 2998.690011][T31757] ? unwind_get_return_address_ptr+0x130/0x130 [ 2998.696137][T31757] ? is_bpf_text_address+0x290/0x2b0 [ 2998.701422][T31757] ? stack_trace_save+0x1f0/0x1f0 [ 2998.706429][T31757] ? __kernel_text_address+0x93/0x110 [ 2998.711789][T31757] ? unwind_get_return_address+0x48/0x90 [ 2998.717410][T31757] ? arch_stack_walk+0xd8/0x120 [ 2998.722237][T31757] ? stack_trace_save+0x123/0x1f0 [ 2998.727251][T31757] ? stack_trace_snprint+0x150/0x150 [ 2998.732524][T31757] ? stack_trace_save+0x123/0x1f0 [ 2998.737540][T31757] ? __rcu_read_lock+0x50/0x50 [ 2998.742292][T31757] ? stack_trace_snprint+0x150/0x150 [ 2998.747571][T31757] ? avc_has_perm_noaudit+0x37d/0x400 [ 2998.752933][T31757] ? avc_has_perm_noaudit+0x30c/0x400 [ 2998.758305][T31757] ? avc_denied+0x1c0/0x1c0 [ 2998.763005][T31757] ? proc_pident_instantiate+0x71/0x2f0 [ 2998.768538][T31757] ? avc_has_perm+0xd5/0x280 [ 2998.773117][T31757] ? avc_has_perm+0x176/0x280 [ 2998.777778][T31757] ? avc_has_perm_noaudit+0x400/0x400 [ 2998.783150][T31757] ? memset+0x1f/0x40 [ 2998.787146][T31757] ? unwind_next_frame+0x1c90/0x2330 [ 2998.792406][T31757] ? arch_stack_walk+0xb8/0x120 [ 2998.797227][T31757] ? unwind_get_return_address_ptr+0x130/0x130 [ 2998.803349][T31757] ? memset+0x1f/0x40 [ 2998.807303][T31757] ? unwind_next_frame+0x1c90/0x2330 [ 2998.812562][T31757] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.818598][T31757] ? __rcu_read_lock+0x50/0x50 [ 2998.823347][T31757] ? unwind_get_return_address_ptr+0x130/0x130 [ 2998.829482][T31757] ? is_bpf_text_address+0x290/0x2b0 [ 2998.834739][T31757] ? stack_trace_save+0x1f0/0x1f0 [ 2998.839742][T31757] ? __kernel_text_address+0x93/0x110 [ 2998.845096][T31757] ? unwind_get_return_address+0x48/0x90 [ 2998.850717][T31757] ? arch_stack_walk+0xd8/0x120 [ 2998.855555][T31757] ? _kstrtoull+0x38d/0x490 [ 2998.860032][T31757] ? kstrtouint_from_user+0x22d/0x2b0 [ 2998.865393][T31757] ? kstrtol_from_user+0x320/0x320 [ 2998.873426][T31757] ? __kasan_slab_free+0x1f2/0x230 [ 2998.878512][T31757] ? __rcu_read_lock+0x50/0x50 [ 2998.883247][T31757] ? trace_event_raw_event_ext4_mballoc_alloc+0x28a/0xaa0 [ 2998.890374][T31757] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.896410][T31757] ? get_pid_task+0x86/0x90 [ 2998.900907][T31757] ? proc_fail_nth_write+0x18f/0x250 [ 2998.906172][T31757] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2998.911340][T31757] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2998.916508][T31757] ? memset+0x1f/0x40 [ 2998.920461][T31757] ? fsnotify+0x13a0/0x1460 [ 2998.924941][T31757] ? __kernel_write+0x340/0x340 [ 2998.929767][T31757] ? __fsnotify_parent+0x310/0x310 [ 2998.934932][T31757] ? security_file_permission+0x128/0x300 [ 2998.940637][T31757] ? __sb_end_write+0xa4/0xf0 [ 2998.945287][T31757] ? vfs_write+0x427/0x4f0 [ 2998.949681][T31757] ? fput_many+0x42/0x1a0 [ 2998.953991][T31757] ? ksys_write+0x25d/0x2c0 [ 2998.958502][T31757] ? __ia32_sys_read+0x80/0x80 [ 2998.963270][T31757] __x64_sys_quotactl+0x97/0xb0 [ 2998.968110][T31757] do_syscall_64+0xcb/0x150 [ 2998.972587][T31757] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.978450][T31757] RIP: 0033:0x45ce69 [ 2998.982318][T31757] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2999.001903][T31757] RSP: 002b:00007fd00700ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 2999.010289][T31757] RAX: ffffffffffffffda RBX: 0000000000025180 RCX: 000000000045ce69 [ 2999.018284][T31757] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000002080000201 [ 2999.026238][T31757] RBP: 00007fd00700aca0 R08: 0000000000000000 R09: 0000000000000000 [ 2999.034240][T31757] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000005 17:50:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x320, 0x1, [{}]}) 17:50:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 17:50:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r5 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100a3d1413421f50020feb10b29a471e59c1b60fd2ae23ac55187"], 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$EVIOCGLED(r9, 0x80404519, &(0x7f0000000880)=""/186) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf0edd6f3999a35e9}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xd2}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r10 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x8000000000410200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 2999.042225][T31757] R13: 00007fff19be879f R14: 00007fd00700b9c0 R15: 000000000118bf2c 17:50:42 executing program 1 (fault-call:4 fault-nth:6): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 2999.118126][T31810] FAULT_INJECTION: forcing a failure. [ 2999.118126][T31810] name failslab, interval 1, probability 0, space 0, times 0 [ 2999.131318][T31810] CPU: 0 PID: 31810 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 2999.141458][T31810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2999.151489][T31810] Call Trace: [ 2999.154770][T31810] dump_stack+0x14a/0x1ce [ 2999.159083][T31810] ? devkmsg_release+0x11c/0x11c [ 2999.163998][T31810] ? show_regs_print_info+0x12/0x12 [ 2999.169174][T31810] should_fail+0x6fb/0x860 [ 2999.173567][T31810] ? setup_fault_attr+0x3d0/0x3d0 [ 2999.178596][T31810] ? arch_stack_walk+0xb8/0x120 [ 2999.183469][T31810] ? __d_alloc+0x2a/0x6b0 [ 2999.187793][T31810] should_failslab+0x5/0x20 [ 2999.192314][T31810] kmem_cache_alloc+0x36/0x260 [ 2999.197055][T31810] __d_alloc+0x2a/0x6b0 [ 2999.201194][T31810] ? __rcu_read_lock+0x50/0x50 [ 2999.205969][T31810] ? unwind_next_frame+0x1c90/0x2330 [ 2999.211261][T31810] d_alloc_parallel+0xf3/0x1440 [ 2999.216098][T31810] ? lockref_get_not_dead+0x1d6/0x340 [ 2999.221458][T31810] ? __rcu_read_lock+0x50/0x50 [ 2999.226221][T31810] ? __d_lookup_rcu+0x609/0x650 [ 2999.231071][T31810] ? __legitimize_mnt+0x77/0x1d0 [ 2999.236010][T31810] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2999.241096][T31810] ? unlazy_walk+0x385/0x610 [ 2999.245661][T31810] ? lookup_fast+0x52f/0xfd0 [ 2999.250237][T31810] __lookup_slow+0x169/0x490 [ 2999.254822][T31810] ? lookup_one_len2+0x2d0/0x2d0 [ 2999.259745][T31810] walk_component+0x3ee/0x970 [ 2999.264419][T31810] ? follow_managed+0x950/0x950 [ 2999.269241][T31810] ? path_init+0x1220/0x1220 [ 2999.273811][T31810] ? path_init+0xab7/0x1220 [ 2999.278298][T31810] path_lookupat+0x211/0xa60 [ 2999.282889][T31810] ? getname_kernel+0x55/0x2f0 [ 2999.287650][T31810] ? kern_path+0x19/0x40 [ 2999.291885][T31810] ? lookup_bdev+0xb5/0x220 [ 2999.296364][T31810] ? kernel_quotactl+0x303/0x6400 [ 2999.301362][T31810] ? filename_lookup+0x6e0/0x6e0 [ 2999.306277][T31810] filename_lookup+0x254/0x6e0 [ 2999.311034][T31810] ? hashlen_string+0x120/0x120 [ 2999.315861][T31810] ? getname_kernel+0x159/0x2f0 [ 2999.320689][T31810] ? memcpy+0x38/0x50 [ 2999.324654][T31810] ? getname_kernel+0x210/0x2f0 [ 2999.329498][T31810] lookup_bdev+0xb5/0x220 [ 2999.333809][T31810] ? blkdev_get_by_path+0x2e0/0x2e0 [ 2999.338992][T31810] kernel_quotactl+0x303/0x6400 [ 2999.343858][T31810] ? unwind_next_frame+0x1c90/0x2330 [ 2999.349140][T31810] ? qtype_enforce_flag+0x70/0x70 [ 2999.354143][T31810] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2999.360188][T31810] ? __rcu_read_lock+0x50/0x50 [ 2999.364989][T31810] ? unwind_get_return_address_ptr+0x130/0x130 [ 2999.371124][T31810] ? is_bpf_text_address+0x290/0x2b0 [ 2999.376484][T31810] ? stack_trace_save+0x1f0/0x1f0 [ 2999.381526][T31810] ? __kernel_text_address+0x93/0x110 [ 2999.386905][T31810] ? unwind_get_return_address+0x48/0x90 [ 2999.392530][T31810] ? arch_stack_walk+0xd8/0x120 [ 2999.397389][T31810] ? stack_trace_save+0x123/0x1f0 [ 2999.402425][T31810] ? stack_trace_snprint+0x150/0x150 [ 2999.407702][T31810] ? stack_trace_save+0x123/0x1f0 [ 2999.412718][T31810] ? __rcu_read_lock+0x50/0x50 [ 2999.417471][T31810] ? stack_trace_snprint+0x150/0x150 [ 2999.422761][T31810] ? avc_has_perm_noaudit+0x37d/0x400 [ 2999.428128][T31810] ? avc_has_perm_noaudit+0x30c/0x400 [ 2999.433493][T31810] ? avc_denied+0x1c0/0x1c0 [ 2999.437981][T31810] ? proc_pident_instantiate+0x71/0x2f0 [ 2999.443537][T31810] ? avc_has_perm+0xd5/0x280 [ 2999.448098][T31810] ? avc_has_perm+0x176/0x280 [ 2999.452762][T31810] ? avc_has_perm_noaudit+0x400/0x400 [ 2999.458121][T31810] ? memset+0x1f/0x40 [ 2999.462076][T31810] ? unwind_next_frame+0x1c90/0x2330 [ 2999.467332][T31810] ? arch_stack_walk+0xb8/0x120 [ 2999.472155][T31810] ? unwind_get_return_address_ptr+0x130/0x130 [ 2999.478279][T31810] ? memset+0x1f/0x40 [ 2999.482242][T31810] ? unwind_next_frame+0x1c90/0x2330 [ 2999.487667][T31810] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2999.494060][T31810] ? __rcu_read_lock+0x50/0x50 [ 2999.498802][T31810] ? unwind_get_return_address_ptr+0x130/0x130 [ 2999.504926][T31810] ? is_bpf_text_address+0x290/0x2b0 [ 2999.510208][T31810] ? stack_trace_save+0x1f0/0x1f0 [ 2999.515211][T31810] ? __kernel_text_address+0x93/0x110 [ 2999.520555][T31810] ? unwind_get_return_address+0x48/0x90 [ 2999.526164][T31810] ? arch_stack_walk+0xd8/0x120 [ 2999.530991][T31810] ? _kstrtoull+0x38d/0x490 [ 2999.535978][T31810] ? kstrtouint_from_user+0x22d/0x2b0 [ 2999.541379][T31810] ? kstrtol_from_user+0x320/0x320 [ 2999.546470][T31810] ? __kasan_slab_free+0x1f2/0x230 [ 2999.551567][T31810] ? __rcu_read_lock+0x50/0x50 [ 2999.556330][T31810] ? trace_event_raw_event_ext4_mballoc_alloc+0x28a/0xaa0 [ 2999.563441][T31810] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2999.569517][T31810] ? get_pid_task+0x86/0x90 [ 2999.573998][T31810] ? proc_fail_nth_write+0x18f/0x250 [ 2999.579273][T31810] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2999.584471][T31810] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2999.589645][T31810] ? memset+0x1f/0x40 [ 2999.593609][T31810] ? fsnotify+0x13a0/0x1460 [ 2999.598102][T31810] ? __kernel_write+0x340/0x340 [ 2999.602949][T31810] ? __fsnotify_parent+0x310/0x310 [ 2999.608046][T31810] ? security_file_permission+0x128/0x300 [ 2999.613745][T31810] ? __sb_end_write+0xa4/0xf0 [ 2999.618404][T31810] ? vfs_write+0x427/0x4f0 [ 2999.622793][T31810] ? fput_many+0x42/0x1a0 [ 2999.627119][T31810] ? ksys_write+0x25d/0x2c0 [ 2999.631610][T31810] ? __ia32_sys_read+0x80/0x80 [ 2999.636392][T31810] __x64_sys_quotactl+0x97/0xb0 [ 2999.641245][T31810] do_syscall_64+0xcb/0x150 [ 2999.645731][T31810] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2999.651605][T31810] RIP: 0033:0x45ce69 [ 2999.655538][T31810] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2999.675164][T31810] RSP: 002b:00007fd00700ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 2999.683552][T31810] RAX: ffffffffffffffda RBX: 0000000000025180 RCX: 000000000045ce69 [ 2999.691497][T31810] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000002080000201 [ 2999.699449][T31810] RBP: 00007fd00700aca0 R08: 0000000000000000 R09: 0000000000000000 [ 2999.707405][T31810] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000006 17:50:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000e00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:43 executing program 1 (fault-call:4 fault-nth:7): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 2999.715359][T31810] R13: 00007fff19be879f R14: 00007fd00700b9c0 R15: 000000000118bf2c 17:50:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x320, 0x1, [{}]}) 17:50:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x323, 0x1, [{}]}) 17:50:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000202, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x153) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x7fff, 0x7}) inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x8) 17:50:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 17:50:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/igmp\x00') fchdir(r3) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:43 executing program 4: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000340)={0x0, 0x0, 0xfffffffffffffe7e}, &(0x7f0000000780)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x40000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000001000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000080)={0x5, 0x6, 0x6, 0xf5, 0x3f, 0x7a95}) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="cc9975d25dfdfb305dc02ab676311ad5b896aa3194e42c074bc02719291a0000001d5fa92996daa9caaaad000000") ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)) 17:50:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x500, 0x1, [{}]}) 17:50:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x88900, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000109a2ab1f35b5e1875978b9"]) 17:50:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)="c4322f41bd1f439444a403cb2ed6f37947075802b8a5d55efe5801dec29f54750dc8f80e5cd80ea10d5c91e4d9108214b2854f30c9afe5e9ce1d704c3da7f546dc7de7c46131b50d94") 17:50:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000040)={0x2, 0x57, "743d1366eb83ba5e969e08013f70e9358e98d0d1aefb0f9d2036119d34c80e6ed114cba90f927113c410943996e0d4a2d4a56e9a9c38076649ee56a79705de232e69a45f5cdcaeeba88746a1803908fc2109468eb52fd2"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000001) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2) 17:50:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x900, 0x1, [{}]}) 17:50:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x18}}, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r6, 0x109}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x14, r6, 0x8, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x4000061) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc0100001e0000042cbd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="cc3499188d963334f22b0ad5e39761b2be51f9247ccac2ea328ebc29fd876273bfebd0eae7"], 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17:50:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={&(0x7f00000000c0)="f043859b83ca63a904f0b6cf38aef3aa82614535b56cff30a34bf7458fa70f08547eca23cf762f0693142864d318d71d3ba3c3f8b4bb7462a4be0c35a06913e9495501e1dec91ab32de990bb2933", &(0x7f00000002c0)="cee5ece65b247185b2c488ac35f5a809105e207fd0c9a9861fe0acd4abe8ba4c6fcc397b086cb88131cb6d64ae1553115ffd228364a4ceedbc88bafa1941d69878b07b146a9849d3a7d0b9952c30a65ee4133cd863ab835ddc7fe06fae444b8cc4579fa7f7"}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, r1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000380)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0xe) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000080)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)=0x6e) ptrace$cont(0x20, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x4f47, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000100)=ANY=[]) 17:50:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000001100010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000001) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r5 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x4000}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x78, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7f, 0x2}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="9244112933b8"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1b}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fchdir(r1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x311000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000000c0)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0xa, 0xa, 0xf3511485971f09cf, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40fb09f97942057e}, 0x8804) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB="e7ab00000f00000081816b8f02830f898e8a050f8c868d"]) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x81) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xb00, 0x1, [{}]}) 17:50:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000001) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/174, 0xae}], 0x1, 0x0, 0x80000000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3) 17:50:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x74, 0x529901) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fsmount(r2, 0x0, 0xd) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000106010100000000000000000c000005050001000700000005000100070000000500010007000000050001cf49501b8d"], 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x13, r2, 0x0) setresgid(0x0, 0x0, 0x0) r8 = getuid() setresuid(0xee01, r8, 0x0) mount$fuseblk(&(0x7f0000000200)='/dev/loop0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x40002, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643da4a511fe261f2b20cff6be0750f835e7902ac7ce7df74d3367fb32f2343788dd5f1e2866a816c8c300"/96, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001000,allow_other,max_read=0x0000000000000008,allow_other,allow_other,default_permissions,default_permissions,rootcontext=root,seclabel,appraise_type=imasig,pcr=00000000000000000032,uid<', @ANYRESDEC=r8, @ANYBLOB="2c001a39697719910c416e360f4ad14d0dc89f8997733a0f6de2b2c009e21bfd19fba99d1d5f8f05f3cb9a4290045cdab2d602821405217dc247f81584e909cf69dc55b1af86509027e1d7a0a7a6a4d014476069782b1b15f686f18c0aad399eb2c6a02fffc738b100166aecd8a1a449e69e2422d6ee381b80e65dfe6085b4f75e2b9f354a83b39846aafdafba956b9140d8bffd38923d187e3f6688"]) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="0000db74d44c00000100000000"]) 17:50:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xb933) fchdir(r1) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) dup2(r4, r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xc20, 0x1, [{}]}) 17:50:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fchdir(r1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x311000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000000c0)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000001200010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000a46cefa19d"]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getpeername$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 17:50:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xf00, 0x1, [{}]}) 17:50:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000002bb2e81124653589eb00"]) 17:50:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fchdir(r1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x311000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000000c0)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) sync_file_range(r3, 0x1000000, 0xffffffffffff8000, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000040)={0x7, 0x1}) 17:50:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x2001, 0x1, [{}]}) 17:50:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4) 17:50:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000040)) fstatfs(r1, &(0x7f0000000080)=""/137) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:50:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fchdir(r1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x311000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000000c0)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x2003, 0x1, [{}]}) 17:50:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000002500010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:45 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="00edfff6", @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf25080000000800020007000000140005000000000000000000000000000000000008000800ffffffff14000600fe880000000000000000000000000001080007007f0000010800020000000000"], 0x5c}, 0x1, 0x0, 0x0, 0xd85f45a08a1b2e4c}, 0x48040) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000428bd7000ffdbdf2506000000080004000200000008000c0000000000080008000000000008000400ffffffff080004000300000006000b00d570000000000000295e293a2f2325242a00000007000100285d00001400050000000000000000000000ffffe0000002f8dec9ad2b6151c4d9ce687f5214646b6b4e217bf800e072538005048a4dd619ee9bed972b558bf4a19f717265cfe236de30507bff20ad7b8b643467b47657a82c417903860ce39d1956d082810d2a8c01"], 0x70}, 0x1, 0x0, 0x0, 0x2400c808}, 0x20000014) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)=""/184, 0xb8}], 0x1, 0x0, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r6) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="250002000000000001000000000003000000000000000000128a06add4165282ba9b35888ff6c263943ada667145f6a9661ac335cbbe96a4f38046f917ac2f5d8eba897cafc17b0fab7ebe4e4a1801f0af530690689cb84fb89cdd14e5bef3a1d2682c28e018242ee72c96024a94c9f53ed18f8fbacd901feeac94241ae0b32a1e7307ffbf822919fd50c6b77debbd354bbc4995a028fcadc5d27dba45e8392f10d40a7c12f68b9e4eac20c9f4fd1de023e4647abcd098ea8c3855f28a3dd618aa558c8b6e53bdd44a9300fbbffb596af6fd222dfa07", @ANYRES32, @ANYBLOB='\a\x00.]#-,\\\\'], 0x25) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x4010, r2, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000010000009c"]) 17:50:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') pipe2(&(0x7f0000000080), 0x800) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fchdir(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x311000, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYRES16=r1]) 17:50:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x200c, 0x1, [{}]}) 17:50:46 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/dev_mcast\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/75) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) fchdir(r2) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x5) 17:50:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x449fea0969ea4286, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9f0}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048000}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="950ce00400000000000000259d89c365e9b1cd3f552f1335b39b38a58641187830000000000000000000"]) 17:50:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x2301, 0x1, [{}]}) 17:50:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip_mr_vif\x00') fchdir(r2) r3 = getuid() setresuid(0xee01, r3, 0x0) r4 = signalfd(r0, &(0x7f0000000080)={[0x66]}, 0x8) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000100)) r5 = getuid() r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000380)={'bridge_slave_1\x00', {0x2, 0x4e21, @broadcast}}) setresuid(0xee01, r5, 0x0) quotactl(0x1f, &(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000180)="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") 17:50:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000002800010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fremovexattr(r2, &(0x7f0000000000)=@known='user.syz\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x1, 0x400}, 0x8, 0x6}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c105) 17:50:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:46 executing program 2: 17:50:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x68, 0xc, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x40480f5) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r2) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:46 executing program 2: 17:50:47 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x7) 17:50:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x2303, 0x1, [{}]}) 17:50:47 executing program 2: 17:50:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:47 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='maps\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)="f517bc9d4653f664fcb605d875e03e73c47069ed9ed05d6f7f2ddab516aa85") 17:50:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000002d00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:47 executing program 2: 17:50:47 executing program 2: 17:50:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:47 executing program 2: 17:50:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8) 17:50:48 executing program 2: 17:50:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="fdffffff0000000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e22ac1414aa00"/272], 0x110) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x4000, 0x1, [{}]}) 17:50:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000005f00010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:48 executing program 2: 17:50:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/171, 0xab}, {&(0x7f0000000240)=""/161, 0xa1}], 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:48 executing program 2: 17:50:48 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/l2cap\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r3) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:48 executing program 2: 17:50:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000), 0x0, 0xe266, 0x3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00') fchdir(r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xd) 17:50:49 executing program 2: 17:50:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xa100, 0x1, [{}]}) 17:50:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000540)='trusted.overlay.upper\x00', &(0x7f0000000580)={0x0, 0xfb, 0xd0, 0x0, 0x40, "d880472702f34c471f0991ae6ec110a3", "483c61efadeccfc5e2cb5bf87b84594312b7820044aa7983632846d7b9bd6269f433b565cf82fbc7ab77010886fc3ea094fa83fe33acc14c0133b03af2cd13245df9c3ab29d43c5ff24d519b53ec7b22c407c8ea4f0d6c8b94b9845392bb1166709a0dbe17860bc2d9b3188f2352eb3dde66faf2e6d2e3106156644caac7c5265a8498c1259ea4b135dd9a47141e3bdd0c68b37f97fd7264a3149def40af1000b113861f838c536815ec254db6d480fc76429a849d9daf89d28ecf"}, 0xd0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fstat(r2, &(0x7f0000000480)) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0xf0, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "bc5c7128ab1f3d97b2e9fc33022ac0291a7ee098b4e4fd"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf8000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) fchdir(r2) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) 17:50:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000003010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:49 executing program 2: 17:50:49 executing program 2: 17:50:49 executing program 1: sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06030000000000000000000c00000406000b0000000000e9000100070000001ebd94428a191b6201d6640a30ee891622d7f0aabbdc20aaf0bb6bce1f89"], 0x24}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = getuid() setresuid(0xee01, r2, 0x0) r3 = getuid() quotactl(0x0, &(0x7f0000000080)='./file1\x00', r3, &(0x7f0000000380)="5bfab05072e29aa1f4638ef26bddcfa781638303000000000000007038f12dca726d59dd2bfd867fc8499fec1eb662ebd2ab13cef6c891fbc7e5fc498ceb2eba3b8394c858ab04aa48fa21747d358d4a72d6d7caab4c3638ecbee4dce8bd4ccc1cd7363a122b76370cdac25083c94a17469c9abe2fcd5cc12184c65e7e0b3989dcbaf1eae2b7365eb424125de6e96c6eb97aa99165166845e76d5977a6ed7377755d03b09b1d1512fec4") 17:50:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_virt_wifi\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="18"]}) 17:50:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000080)=""/10) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0)) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x82, 0x14}) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fchdir(r2) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 3006.322721][ T22] audit: type=1400 audit(1597254649.643:1331): avc: denied { create } for pid=32464 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:systemd_notify_exec_t:s0 tclass=netlink_xfrm_socket permissive=1 17:50:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() prlimit64(r2, 0x0, 0x0, 0x0) 17:50:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xf000, 0x1, [{}]}) 17:50:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) fchdir(r1) fcntl$setsig(r1, 0xa, 0x8) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:50 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf) 17:50:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000005010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000080)=""/90, 0x5a}], 0x4, 0x7, 0xddf) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}]}}, &(0x7f0000000100)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 17:50:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="e7f7ec180b21ab8a", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x28) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) poll(0x0, 0x0, 0x0) 17:50:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x100000, 0x1, [{}]}) 17:50:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x80ffff, 0x1, [{}]}) 17:50:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x82ffff, 0x1, [{}]}) 17:50:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:51 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x60) 17:50:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xa0ffff, 0x1, [{}]}) 17:50:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000006010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:51 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:53 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000fffffffffffffffffff7ffff86dd60"], 0x52) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x18100, 0x0) 17:50:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xa3ffff, 0x1, [{}]}) 17:50:53 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000007010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x1, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) tkill(r2, 0x3c) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) clone3(&(0x7f0000001380)={0x8fb02000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x7}, &(0x7f0000000380)=""/4096, 0x1000, &(0x7f0000000200), &(0x7f0000000240)=[r2], 0x1, {r0}}, 0x58) ptrace$setregs(0xd, r4, 0x100000000000, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$cont(0x18, r3, 0x3, 0xfffffffffffffffe) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) tkill(r2, 0x17) 17:50:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe0) 17:50:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x2, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000380)=""/4096) 17:50:53 executing program 1: readlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=""/122, 0x7a) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat(r3, &(0x7f0000000400)='./file1\x00', 0x8001, 0x4) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) write$binfmt_elf32(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10a) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x60, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, 'fd\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x60}}, 0x4015) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @dev, @dev}, &(0x7f0000000480)=0xc) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:53 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xf00000, 0x1, [{}]}) 17:50:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:53 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) llistxattr(0x0, 0x0, 0x0) 17:50:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x1000000, 0x1, [{}]}) 17:50:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') fchdir(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fspick(r3, &(0x7f0000000080)='./file1\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r10, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r4, r5, r6, r7, r8, r9, r10]}, 0x8) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000380)="4882b34bd0753dac440130acedc0a68c43c602a94f1110d640e3f45b2a815bbf452120962d") 17:50:54 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000009010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:54 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x300) 17:50:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 17:50:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) 17:50:54 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f00000000c0)=ANY=[@ANYRES32=r0]}) 17:50:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x1020000, 0x1, [{}]}) 17:50:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ustat(0x9, &(0x7f0000000300)) 17:50:54 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x4, [@const, @datasec={0x0, 0x5, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}], 'u'}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x74}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:50:54 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x1200000, 0x1, [{}]}) 17:50:54 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000a010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x500) 17:50:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x1230000, 0x1, [{}]}) 17:50:55 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000b010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x2000000, 0x1, [{}]}) 17:50:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:50:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x3000000, 0x1, [{}]}) 17:50:57 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000c010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:50:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r6 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0xa4, 0x3f, 0x5, 0x1a, @dev={0xfe, 0x80, [], 0x38}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x71d0, 0xfffffffe, 0x800}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x844}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4048050) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x2) syz_open_pts(r7, 0x2000) r8 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RSTAT(r8, &(0x7f0000000080)={0x4a, 0x7d, 0x2, {0x0, 0x43, 0x1, 0x0, {0x20, 0x0, 0x4}, 0x80010000, 0x2, 0x6, 0x0, 0x5, 'maps\x00', 0x5, 'maps\x00', 0x3, 'fd\x00', 0x3, 'fd\x00'}}, 0x4a) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:57 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x543) 17:50:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) inotify_init() 17:50:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x3020000, 0x1, [{}]}) 17:50:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:50:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x3200000, 0x1, [{}]}) 17:51:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000280)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='net/anycast6\x00') r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6bba45825a570e80e9649fced16db574dd5a49d3145698a6e6995b025f1e868d253f24", @ANYRES16=r2, @ANYRES64=r3], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYRES16, @ANYRESDEC, @ANYBLOB="c917972ca94e50eb0ace440c4617a2572f356edaee455c92a34086e8cb4504eec2344d6e8bb417be0f26056306bcc6cdd56fef7fc489359f764916b2979463f0e7f86ced49d5aa0cef9cab970a8905531be296c32a180e64876f6f7922d985286a", @ANYBLOB="23ba704f4c235816472cca350cfbfde39c4d58da8687a9d680e5ae7c049f26af16dcd6ed5b78ec7c0272537522af3122d59fef2f47bde045aa492db2f8dcccb9b7f85b6f7e6ddd641cd1e0245f17f32dc1a5af73412da7ece97c7704b173edf44812207a1a2c2804b55898e8fb8ffea5a4a3c9f68c967f421eb1f379dd0109ab224f2a6759ea6e6061d5e590c4e8f44878d743c9e7dbbe222e5da1c9aad7c01947b026cc7f5ea460a31d50cee318f95f5864ce9fd345cc19"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x90) preadv(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r4) r5 = getuid() setresuid(0xee01, r5, 0x0) r6 = getuid() setresuid(0xee01, r6, 0x0) quotactl(0x80000001, &(0x7f0000000080)='./file1\x00', r5, &(0x7f0000000000)="f85cd93354e47cca04af75377509ef703348001883240ff2ac9bd9c60f694a000200008000000049000820000000000024") 17:51:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x3230000, 0x1, [{}]}) 17:51:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000d010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:00 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x608) 17:51:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x5000000, 0x1, [{}]}) 17:51:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x8}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r3}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3, 0x900000, 0x8}, 0xc) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x6, 0x7f, 0xc0, 0xb8, 0x0, 0x1, 0xa030, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x6}, 0x14020, 0x2, 0xa338, 0x1, 0xfffffffffffff801, 0x66, 0x6}, r2, 0x3, 0xffffffffffffffff, 0x1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x680ffff, 0x1, [{}]}) 17:51:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x6a0ffff, 0x1, [{}]}) 17:51:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@multicast2, @empty, 0x0}, &(0x7f0000000180)=0xc) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000380)={'gretap0\x00', r6, 0x7, 0x700, 0x9, 0x3, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x64, 0x0, 0x1, 0x4, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x14, 0x57, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}}) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r9], 0x18}}, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r11], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xbc, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5e36}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1b76}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4dc437ba774bd196}, 0x4001) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x880ffff, 0x1, [{}]}) 17:51:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000e010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:03 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x689) 17:51:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x9000000, 0x1, [{}]}) 17:51:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xa80ffff, 0x1, [{}]}) 17:51:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000014c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x20, 0x7800, 0x9, 0x3, {{0xc, 0x4, 0x2, 0x1f, 0x30, 0x65, 0x0, 0x3e, 0x4, 0x0, @multicast2, @multicast1, {[@noop, @noop, @ssrr={0x89, 0x7, 0xad, [@remote]}, @ssrr={0x89, 0xf, 0xf, [@private=0xa010102, @private=0xa010100, @broadcast]}, @noop]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7c5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8000001) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4040044) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000001480)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000004900)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000004bc0)=[@rthdr={{0x18, 0x29, 0x34}}], 0x18}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0xa4, 0x3f, 0x5, 0x1a, @dev={0xfe, 0x80, [], 0x38}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x71d0, 0xfffffffe, 0x800}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x844}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x8014) r5 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fchdir(r6) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="0000810000008100cfec790f808367a46703fd7524982436ac9aede8ccc6ec843e6a2864a33d0000449f8a92f5df7cb09b8fec420e169fe6b8f0e30ebc5b3964cfe07372455a734ff607a30874bae73ec880"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x40, 0x22, 0x91, {0x91, 0x23, "399d1f660155174340f254545730c3bf9ffaf4accfa85eb9adda7a095b236a6015ee5e2b6432e85f16accbe7068aea7df018ab5c8bec670ce225bc7e9ba018489d711db021cb83215f2822546806bf95cb7c10a6226cf4cdfc0644c07fbc11681a2b7e1490a58afc11335197cc0981bb0091ce286d474dd0f47e0ee6b05d239e625eb4bfe4cff289634666fe0a4b18"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="400b293ac2ee775181c6bb898a098f0c7461a2a26d7ffaa9253c9bccf7d04a33"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x80}}) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r3 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0xdc5, 0x280) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000480)={0x4, 0x200, 0x8}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x4800, 0x7fffffff, 0xc2, 0xffff, 0x1, 0x1f}) 17:51:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xb000000, 0x1, [{}]}) 17:51:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xc200000, 0x1, [{}]}) 17:51:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000011010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 3020.783504][T26726] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 3021.023610][T26726] usb 2-1: Using ep0 maxpacket: 16 17:51:04 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x700) [ 3021.143785][T26726] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 3021.152210][T26726] usb 2-1: config 0 has no interface number 0 [ 3021.159117][T26726] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 3021.169374][T26726] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 3021.179099][T26726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3021.190101][T26726] usb 2-1: config 0 descriptor?? [ 3021.454502][T26726] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input210 17:51:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xda3ffff, 0x1, [{}]}) 17:51:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000012010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:06 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x806) 17:51:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xf000000, 0x1, [{}]}) 17:51:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) fcntl$getflags(r2, 0x40a) 17:51:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x40000000, 0x1, [{}]}) 17:51:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f0000000080)=""/86, 0x56}, {&(0x7f0000000240)=""/93, 0x5d}], 0x3, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) getpgid(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)) 17:51:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000001f010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 3023.513718][T32524] usb 2-1: USB disconnect, device number 55 [ 3023.565379][T32524] gtco 2-1:0.219: gtco driver disconnected 17:51:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xa1000000, 0x1, [{}]}) 17:51:09 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r2, 0x20, 0x70bd2c, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x1]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3aff43b5, 0x9]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x20004050) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0xfa7, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/4080, 0xff0}, {&(0x7f0000001240)=""/148, 0x94}], 0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r5, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r6) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000025010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xd00) 17:51:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, r1, 0x0) keyctl$setperm(0x5, r1, 0x10080000) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000080)=""/51}, {&(0x7f0000000280)=""/162}, {&(0x7f00000000c0)}, {&(0x7f0000000380)=""/137}, {&(0x7f0000000440)=""/9}], 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x20) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xffff8000, 0x1, [{}]}) 17:51:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0x1000}, 0x1c) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="fe3e429b04e3976dc4a62e399fa3fc9f", 0x10) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xffff8006, 0x1, [{}]}) 17:51:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) fchdir(r1) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = dup2(r2, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, r6, 0x5, 0x0, 0x0, {{}, {}, {0xc, 0x18, {0x0, @bearer=@l2={'eth'}}}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}}, 0x8004) getxattr(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000240)=@known='user.syz\x00', &(0x7f0000000380)=""/4096, 0x1000) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xffff8008, 0x1, [{}]}) 17:51:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000028010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe80) 17:51:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xffff800a, 0x1, [{}]}) 17:51:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x8}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r2}, 0xc) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2, 0x9, 0x20}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r4) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x100039) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/ip_mr_cache\x00') fchdir(r3) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x77c}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xffff8200, 0x1, [{}]}) 17:51:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000002d010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xef9) 17:51:15 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000000080)={0x14, 0x7, 0x1f}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r3) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fchdir(r2) quotactl(0x100000000, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)="0a0a98910595ede34c262a16bd78a79f5bc4ebbf7dc2157799876a341b4ed2a0c22e721421adf40081a57753073a3babc9baad48ec0700324e11abbc19c4e909d7ba9fff75c6f5c032e96f1a88bbf96fae6b856ad50516f1f27e2c25ad78f5ce766ab7fa48274c") keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 17:51:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xffffa000, 0x1, [{}]}) 17:51:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') fchdir(r4) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000080)={{0x5, 0x0, @identifier="a4abce3444071b73de649e6032e85151"}}) 17:51:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)={0x228, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38ba1296}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbb4a4cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1527f8e9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13b53299}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29aa3cbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10d12566}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19f4bec0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11568773}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43bede71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26a0aed9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25eb821d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d7ed22c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bd42456}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26f234ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bc69f87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16d6221a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbcb8862}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b83645a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42d2c7fd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4587dfe7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25cb06ee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b8f28a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2526181}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fd0de85}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14a0e3ff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c6088eb}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x80}, 0x40048d4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r6) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xffffa006, 0x1, [{}]}) 17:51:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000040010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:18 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf00) 17:51:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000180)="84710d9fc937adc68024dd314c50da1855dc9affc291659440a9fccec4cf04359eb2c4278d76d554d7cfef4508b33305674d4a0a2d54b6dfaaa10af8d8bd3480e612d4e03de07ea4449a10"}) r4 = getuid() setresuid(0xee01, r4, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000080)="c59b8d70") 17:51:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xffffa300, 0x1, [{}]}) 17:51:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_WIE_ON(r3, 0x700f) 17:51:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0xffffa30d, 0x1, [{}]}) 17:51:18 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000200)="c1c72c4b8adefebc5a33b7597402db4ef772ec4f585950f201d58f2e2e3faa8ffb85fe92c66eb184f1d69ca83bb6c6ff8b784725859a64302504cd010000000000000075b18927e1b1655cae98953a3a42c3e98e68dc14555abec2be51eb067bd35440aa048c41b55044a6140349a0dc") ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x9, 0x0, 0xa, 0x20000000000) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) wait4(0x0, &(0x7f00000000c0), 0x8, &(0x7f0000000140)) write$selinux_attr(0xffffffffffffffff, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r3) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:21 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fadvise64(r0, 0x7ff, 0x100, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="5106fa46aa00bbe7754a159386a708dfe39ca6706d052bde6e219e6af6dd9e3a9e2a3246132084f4d619aab4824771f6cf5ac9f75124d3a4a6a0272bd8dfb9d16f1498a84553c8c511de04b7eaf7257a398f414eded10a3c25898e1cd8966feec119d9b5a59c2fb68471ddaf38ed1e0522eef1efae0c84233b9947c49c2320578e7e1eae8a972cf602e77b95b8bfa5567befe759146f618732d44f7fca21f9b73ac18f43e3da593761ba0a26a3ff9f63413506fc15554d91305a6b4ae77591f8f5c79f83cd394aa8a4581cf8cb1aab03af000b5a", 0xd4}, {&(0x7f0000000080)="1e35df4916c5c100a92d54611690aec0a9b1478005dd10ce2f256ca287b14d9d75f77017016f2e09bbf794a639de028288ffc49760ac8d112674b724c2532a25012eae243c2430", 0x47}, {&(0x7f0000000380)="8496a54131cc4678c55d4943596eb6f9e59506b4a4df7c92d0bab282fa1d75517906efb73be4d54d936db8bd77e779a3118a97839c998c412e41d93b0deaf0f1d49e0d00b6b3f56229bb8c394b15b3448d3f162582409e2a93ae99", 0x5b}], 0x3, 0x2) fchdir(r2) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x8, [{}]}) 17:51:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000005f010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfea) 17:51:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000080)=""/64, &(0x7f00000000c0)=0x40) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000380)="323f7513076e549e5c93db5b4c2d7c63440bed57e1913fc07e4452291a371c91cc493480663dd3f9d8869b233fb4901340ac7493b4be1241d290aa76fe7142edc5a4175209c8016118e89be80981129379515985376b05a985da43f3accafd092da663ae67a98888971228ae806fd95f27770b9e3232779193a12a895b3135e300"/138) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'rm\x00'}, 0x9) 17:51:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x9edefd2158464b84}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x3c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x80) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000001380)=""/172, 0xac}, {&(0x7f0000001440)=""/218, 0xda}, {&(0x7f0000001540)=""/252, 0xfc}, {&(0x7f0000001640)=""/117, 0x75}, {&(0x7f00000016c0)=""/181, 0xb5}], 0x8, 0x5e0, 0x2) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x300, [{}]}) 17:51:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000080)=0x4) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x13, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r4 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000f3ff0040"], 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020029bd7000fedbdf250b00000008000a0005ba9796174d8f1130f618005080040005000800030005ac0f000800070000000000110007007a5b480a98d4e390a8ed4b937cbf0bff4c0300000010006e8004000100040002000400010008006e804e1be51938059c7f04"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r6 = getuid() setresuid(0xee01, r6, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, r6) fchdir(r5) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, 0x0, 0x0, &(0x7f00000002c0)) 17:51:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0xe0100000, [{}]}) 17:51:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000000416004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfee) 17:51:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0xc) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0xc) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f00000000c0)) 17:51:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, 0x0, 0x0, &(0x7f00000002c0)) 17:51:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:51:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000001016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/173, 0xad}], 0x1, 0x0, 0xffffffe0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)=0x1f) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)="4648b2f54fa98b6216eab7a21d01918ebacec8c9ef8c9898e116f2cc02c1c578908cff2da426e166bc7326075b266e19802af0aa6005de62e3c7fcfe530a66b92ff10488cc0418aaba8d9a21f24e99464000844df9fc7cf5fd8f4bd6675e1f4ce14ece6b3f085fc0e580a51b66ecd7054b9fc3fd5a6160cedc26fa98a7c97e3e5b84a5400d73c59e1776db33e37ac49e4d0700"/164) 17:51:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, 0x0, 0x0, &(0x7f00000002c0)) 17:51:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0x2}]}) 17:51:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000002000016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:24 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3580) 17:51:24 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/udp\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x0, 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$cont(0x9, r3, 0x0, 0xbed) fchdir(r2) quotactl(0x3, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="97ee39b8b5cef22064fc11cf45717881d1e783f236f191cbc8b4996346f4f16166", 0x21}, {&(0x7f0000000180)="a06f01616c7fe8625dcfd25c01044e56a3490494209fd8093ab970b0a4e993c97565fd0e1c14881c2e4aebe5c73b51a3fbf387982c470db5cc258a2198d601a1653a4b3f4cf17e547d35b7520e665d158db68620f7452f14e810fe9aa269e2cd60fd6e22556dd6fa00bf5373938ecf15901e51b9cc9dc575920b2ce7ea4bef0d00a0be7278ee0d5e63e558d789c8d9bcdc02e3dd92eee67e9607b5dd158275", 0x9f}, {&(0x7f0000000240)="b3fc410d2960f260f6833b753d1e52172e8967cbb3e8584c5c1949b00baca93a55d4c9d66dfab0509d22c5f6280c95b21ee62636a65d2b8a99bbec41fad54a4744830f1de12f9d40160a88562fc32c94bf9d260a4808c18c9da3c8662248401827ee750067696a672b459d241d34e5330c37df588c7aa27113446a8bdcaa1761ce69c1e038544525b4fb2fa50874267321bb8a795ddb5a621067a04d1fda065e8f21ee59c753fd7e1adacb2438178c1ddc", 0xb1}, {&(0x7f0000000300)="80382346fea7df783561d13545a1df4b59daad80f2148d6f6ca493d88dfb228212fddb677c443b8f8d2220f7d780abd0259279abb6e774846de15c99e6c89efd3c065ae0db5566d59f411afb4fc42b60592687f5c89a5dbb9edbda15b7ff9b050a84c2532fd3aa350de4e8d156890d0d0cc05c1dea748f25e3ef276ed9a3dc7510b27f5bb0a20027d9bcaf8e62eb5a97fcd3e58a450ee1f49c204463c86f30e2722cce8d65261d07dbd754b6d5e132eba6fefb6d29e6e00f0eeb325c061186c937053f759f94ee0afced7745ffe25a8691ee769219ef0330de62762759e4", 0xde}], 0x4, 0x9) 17:51:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000080)=""/5, 0x5}], 0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r3) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r4 = openat(r2, &(0x7f0000000000)='./file1\x00', 0x464003, 0x10) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000180)={0x69, 0x42, 0x6, 0x9, 0x80000001, 0xd1b, 0x80}) 17:51:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 17:51:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0x3}]}) 17:51:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = getuid() r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={r0, 0x4, 0x50, 0x80}) setresuid(0xee01, r2, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x6, 0x20}, {0xd4fd, 0x2}], r2}, 0x18, 0x6) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 17:51:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/4093, 0xffd}, {&(0x7f0000002540)=""/255, 0xff}, {&(0x7f0000001400)=""/162, 0xa2}, {&(0x7f00000014c0)=""/4080, 0xff0}], 0x5, 0xfffffffb, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000180)="c6acfdf6a8302a5646e4207090ff97fe5c4c3fc66410efe40a6fc46fdd71a324adb1b6942931c05d7e70ab527516ce18fe9b98b58725b14337828407d7a32952b38b1c5475f8cddb5097e1c5d5829b2a1ee9e0c4319c588ed2e86c4ac952c072a665cb592b188f5302e401a9d0c1314ba071dd454c3c2e40eacece074a62ea65f6af61aa7ba1", 0x86) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0x5}]}) 17:51:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 17:51:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000004000016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4000) 17:51:27 executing program 1: prctl$PR_GET_SECCOMP(0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000202, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000080)) 17:51:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000200, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000080)) 17:51:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0x9}]}) 17:51:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) 17:51:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0xb}]}) 17:51:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000010000016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:30 executing program 4: syz_io_uring_setup(0x6b53, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000c5a000/0x3000)=nil, &(0x7f0000000180), 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x10000000) 17:51:30 executing program 1: rename(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001400)='./file1\x00') syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/237, 0xed}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/147, 0x93}], 0x3, 0x0, 0xfffffffc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000180)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = clone3(&(0x7f0000001600)={0x20040000, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0), {0xa}, &(0x7f0000001500)=""/113, 0x71, &(0x7f0000001580)=""/35, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, r2], 0x6, {r4}}, 0x58) syz_open_procfs$namespace(r5, &(0x7f0000001680)='ns/mnt\x00') fchdir(r1) quotactl(0x2090000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000000c0)="a246ec139e2a98a2e9a47516c5800e8b0cbbddf143bedaf7f882cb66340af1dbf05a9457c2") 17:51:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4305) 17:51:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0xa5, 0x4) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r2) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readlinkat(r4, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)=""/138, 0x8a) 17:51:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0x302, {0x2, 0x2, 0x1c40, 0x4, 0x3f, 0xffffffff}}) 17:51:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0xc]}]}, 0x40}}, 0x0) 17:51:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x4000, 0x0) preadv(r2, &(0x7f0000003480)=[{&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x5, 0x800, 0x80000001) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffffffffb) 17:51:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{0xf}]}) 17:51:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 3047.591426][ T1469] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:51:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000002010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 17:51:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0x5, 0x1}, 0x4, 0x0, &(0x7f0000000140), 0x0, 0x33a8, 0x9, 0x0, 0x80000001, 0xfffffffa, &(0x7f00000001c0)="fe22e04680014aa09d55d2310b5eb79e7f7dd5bf75fc7cebe6be0833c6af96849860b3d0d3580c27799dae2c496e6b2327e15a3a35d6540c7029ecaa9cf58b7ba594992ceae6378893001980185b"}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x20000400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:51:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f00000000c0), 0x0, 0xfffffffc, 0x0) prctl$PR_GET_DUMPABLE(0x3) r1 = getuid() setresuid(0xee01, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x0) r2 = getuid() setresuid(0xee01, r2, 0x0) r3 = getuid() setresuid(0xee01, r3, 0x0) setresgid(0x0, 0x0, 0x0) r4 = getuid() setresuid(0xee01, r4, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000000c0)='./file1\x00', 0x1, 0x1, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0x1000, 0x401}], 0x10, &(0x7f0000000280)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x70, 0x67]}}, {@gid={'gid'}}, {@size={'size', 0x3d, [0x25, 0x37]}}, {@huge_always={'huge=always', 0x3d, '[&&'}}, {@huge_always={'huge=always', 0x3d, 'uid>'}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_type={'subj_type', 0x3d, 'dont_measure'}}, {@fowner_lt={'fowner<', r4}}]}) r5 = getuid() setresuid(0xee01, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000200)='./file1\x00', 0x7, 0x0, 0x0, 0x214000, &(0x7f0000000580)={[{@shortname_mixed='shortname=mixed'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', r1}}, {@context={'context', 0x3d, 'root'}}, {@euid_lt={'euid<', r2}}, {@dont_measure='dont_measure'}, {@euid_lt={'euid<', 0xee01}}, {@euid_lt={'euid<', r3}}, {@dont_hash='dont_hash'}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r6) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4788) 17:51:33 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="f48fdb3cf88270b12162bd3a4339227fd7d601d9e2c5d6ce54408cf05092eb5292db97838d6cea9602372f46d7dc8ec12f59ed35b6ea73d84024"]) 17:51:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/177, 0xb1}], 0x1, 0x4, 0xc709) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800ca55f30000000000000000000000000000730143000000000095000000560194302e5fa9d94462674d505d"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r2, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x5, &(0x7f0000000000)='maps\x00', r3}, 0x30) syz_open_procfs(r1, &(0x7f0000000280)='stack\x00') quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:33 executing program 4: eventfd2(0x0, 0x0) socket(0x10, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000000e6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r1, 0x0, 0x0) 17:51:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x4, @local, 0x4e21, 0x2, 'sh\x00', 0x8, 0x5, 0x43}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r1, r5, r6, r0, r7, r8], 0x6) 17:51:34 executing program 5: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RVERSION(r2, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x7fffffff, 0x6, '9P2000'}, 0x13) r3 = dup2(r0, r0) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r3, r0, 0x80000) ioctl$USBDEVFS_FREE_STREAMS(r4, 0xc0185500, &(0x7f0000000000)) 17:51:34 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000180)={0x1, 0x7, [@broadcast, @link_local, @broadcast, @empty, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty]}) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00fb4c0605dabbc84c482895dbf6009ccee097778dd9d25c1dd57d1bae9fba2527748f340f01fd05e9c91e1bf79429ae4e1bdec8315f236bdbf2ae97ea86c897992070143ebd9c3aa8b7d3ee"], 0x4c, 0x0) fchdir(r3) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/169, 0x2c}], 0x1, 0x9512, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) readahead(r0, 0x0, 0x10000) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_type(r4, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 17:51:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x3, [@struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x4}, {}]}, @restrict, @datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "f6"}]}, {0x0, [0x0]}}, 0x0, 0x10f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000003010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4888) 17:51:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/172, 0xac}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)={0x2e, 0x6, 0x0, {0x1, 0x0, 0x5, 0x0, 'maps\x00'}}, 0x2e) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = socket$inet6(0xa, 0x800, 0xffffff1a) r4 = dup2(r1, r3) prctl$PR_GET_CHILD_SUBREAPER(0x25) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x286000, 0x0) write$FUSE_BMAP(r6, &(0x7f0000000140)={0x18, 0x0, 0x6, {0x7fffffff}}, 0x18) readahead(r6, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = dup2(r1, 0xffffffffffffffff) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) write$selinux_attr(r8, &(0x7f00000000c0)='system_u:object_r:audisp_exec_t:s0\x00', 0x23) 17:51:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x12) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000140)={0x1, 0x0, 0xc0, &(0x7f0000000080)="86ab2cb721fa47c496376f213c3b993ad48898ce5735bef57f24f199b4b83ebaa4f15deb613b95d98b040bb1239b97504a7247833eb0fcdb54483d409a4e9f29f27588bd2f40363a7b7c9a14f36e7af1441f599deba900cbc7a14fc79c7faf169da05bcd71a59889a30f644301371ff7aaa9d81f8ffa2668137ecca6de018deaecca5fc81b1c69e07c55d02cd1b1ee8ff2dc0cad992721c1425bd9b2f2720f176f1ffb1d372679d828c9ba85c61836b020de9934145ac46b2c3a460cf0c9deaa"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 17:51:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x7f, 0x20000) r2 = dup2(r0, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 3053.661257][ T22] audit: type=1400 audit(1597254696.963:1332): avc: denied { create } for pid=1609 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:audisp_exec_t:s0 tclass=tcp_socket permissive=1 17:51:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000040)=0x6) readahead(0xffffffffffffffff, 0xfff, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="edffffff0004000400"]) 17:51:39 executing program 4: mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 17:51:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="003ed33e72054c38ca713e5cb12062d8bbb130a3f4307ce97d403cf22de819e653f4f34ad5e2f2cf168b489801c9acd0549c73047ba137671ae24d1100"/71]) 17:51:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000004010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="742be4536ead963bb6e0661c81ed227184430f58df3bffe327b5dd44b8f7ffc9db8f72dbed5a51a971f0abc91707649c044f7fae44fc5a79e50cdfc87a2aeb54773ed4f4267fda5b96d1db43ee582aea4d225e6c19d18ecdd0551658b5bcfec8334224ff7b0ef944eb1e78df7fdee8459b4e8170fd4fb70bd3e7ee11f8714a6004ba0ace9785bb1a217a52f07f81affb1a19107b7cc0ab478a78efc20faef31e30184431415d82a32f44e5dd28d58a9de07f3bbd2feddd8cdab0ced44685767ca40f23a6cbf811267c8b4b4f14aa8e000000", @ANYRES32=r2], 0x18}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x18}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000000600)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}}, 0x42) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRESDEC], 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5cf2e6e774f2189eea0afd6711d62c35edc4c893b9c2246a16c93d05f47a91e88c57d363cce7e681afbba621d371dcd90356088f9d1628d97c50188f13cd9068689aea3e95c52fbaede862ff26733899fc9178f365d5f47f73c782f2cedbb6e2a2ac3ec03e8e6141bed5818a81ae97d595fd36c908ec89acef09c9c8ac8fb8f116f63fd35c7ce5e6e12a1deafd6f460c5de610916b1820bead891486aae79caca0887db359b731bb01f197064ca5e9f7473d6e070000000000000038ca13e48fbc842b81c03b8eee1da6e41b2c0ee800fa5e6b8e0a06982bf12d3c57e109", @ANYRES32=r9], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x10) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x5865) 17:51:39 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) prctl$PR_SVE_GET_VL(0x33, 0x32bd) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r3) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:39 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x10004, 0x0) 17:51:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) syz_usb_disconnect(0xffffffffffffffff) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000100000000f532d6a2e80feebe8b3b823ff69729486928483f20312cd30578cff380726b6aedfed1aa"]) 17:51:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x100000001, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x18, 0x4, 0x1, 0x8, 0x200, 0xffffffffffffffff, 0x4, [], 0x0, r1, 0x0, 0x2, 0x2}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socket$packet(0x11, 0x2, 0x300) fchdir(r3) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000005010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000006010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6000) 17:51:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x108840, 0x4) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:51:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/57) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6dc) fsetxattr$security_ima(r4, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=@v2={0x5, 0x3, 0x7, 0x34b, 0x81, "eecb282a9feb26580ce9422f1c544b021fa62936b3ad60517342c560080b3cf9bd8b034cc46e9834dead671e24df3eb6d71a426c5472551ccca8d3c04907ae8b8b5d17e5b349677f5edf85d90145f7f4584475b43f10ce11f10b3a6e03355d900bc3d4324a14921c566251aef56c3efbd7272c53d3a5e75529285b1a117344ec31"}, 0x8a, 0x1) r5 = dup2(r3, r3) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000080)='system_u:object_r:modules_conf_t:s0\x00', 0x24) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="1f022000f600000000"]) 17:51:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000007010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, r2, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) keyctl$get_keyring_id(0x0, r2, 0x9) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="060128bd7000fbdbdf250000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000100", @ANYRES32=r6, @ANYBLOB="67a1aa58b1bdb942d1e3d8fee3c1f31c31a950ec26db3c78864fc5ed"], 0x40}, 0x1, 0x0, 0x0, 0x4044800}, 0x20040000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x9c, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x9c}, 0x1, 0x0, 0x0, 0x804}, 0x80) 17:51:42 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000080)=ANY=[], 0x0) 17:51:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:51:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000008010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='fd\x00') fchdir(r2) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fchdir(r3) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6488) 17:51:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:43 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x5a, 0x4, 0x3, "e04761575fc9276333ad0efc350a5cb7", "3b0ce462f48eee2bdbffcd812d964a0b6a162b0cadc0655f458b76f991afc918a4fd84c4ab02d7c870ec48319424dcf0c6d7131e3e12616158119c2671f24141c128ee86ae"}, 0x5a, 0x1) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r5, 0xdc7bc000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x101002, 0x0) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f0000000380)) ioctl$sock_netdev_private(r4, 0x89f3, &(0x7f0000000180)="1ef80df18e209cbcc8abebaa333f9d28741e242855e7f1eb6fa599190d5cf354ba7f0e389ec8852e5ca865275f3aca50f46ac9ec7bd9ab94e83fbc6c") dup2(r2, r2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x39}, 0x391, 0x1, 0x0, 0x1, 0x6}, &(0x7f00000000c0)=0x20) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x80800) 17:51:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 17:51:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 17:51:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, &(0x7f0000000340)="207efe70edb091ee06000000000000102e10907aabd918e075c44285d2f4c8e3aebfffe065903fc3326f21e542d7af37abf8dc6a11cb7a6ae79a06bf78871090181869022b739661caee4534aafb4089aacc800400ed39d15b00dcc80bb2411964e58b6102ebfdd7149c5a93d17fb20bdf53e9fd47cf706c9152cd6ab564005180ccee2731e800d86e49d812ecba7f0300000000000000d4f574bf9108d1c7f00e505f797462fa0684065379421ea251ef544c46b647f441a69624f9f34eaf600ff12b75c42696da9d"}, 0x40) pipe(0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 17:51:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 17:51:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x3, 0x41) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = dup2(r1, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', r7, 0x10, 0x80, 0xe4c, 0x5, {{0xa, 0x4, 0x3, 0x24, 0x28, 0x67, 0x0, 0x79, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x8, [{@multicast2, 0x5}, {@rand_addr=0x64010101, 0x2}]}]}}}}}) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000140)={0x3, 0x0, [{}]}) 17:51:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000009010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)="44745fdc9820faf4f952393efd54d45d0fe07d6d6925b21849b79e0b41c5375b02abf3254c7baf3d4e103d59cfa64f926e7fa24f70c80b0c8e755aa6a99a04b9db953b81da2da0e82e845b30524680e534c481be26") 17:51:43 executing program 4: socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x165, 0x0, &(0x7f0000000140)="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"}, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 17:51:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x841) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:51:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0xa4, 0x6, 0x8, 0xd5, 0x80000000, 0x2, 0x6, 0x7, 0x3e6, 0x40, 0x374, 0x7a1f, 0x0, 0x38, 0x2, 0x4, 0x800, 0x20}, [{0x6474e551, 0x4, 0x8, 0x3f, 0x800, 0x10000, 0x7, 0x8}, {0x4, 0x2c, 0x8000, 0x9, 0x9, 0x400, 0x7, 0x100000001}], "0175e06f8492aa580b31342d97620bdae4c219b7974c9acd83e95a95030b0f93b2f65c56974a97cab4f82f411e5c2a7b053374d61d3fd5d5aaaf666ebe60c02ee933f3499efb5260e63c6901c345df9d90650e3589fb09165af790a26f8168bc5323c7d92e8d82e47c08d1130fc39717746508d7d37d8ec3caa128116562db7a50b9e11a76f321d440cfe7fceb98300a66fa1455fdf535fbdf583cee6cb4049e85a9d0f625abb4e8592e88380db40aebecf92931a1def9743b2e7b1de4c5296ed9c66b13bfc4e03fcbcd27bcfd8a643a2b3cf2e0e451a91ae89a10303145cd47ddbe3b6c5121d3f48ba6", [[], [], [], [], []]}, 0x69a) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000180)={{0x1, 0x0, @reserved="85b7c81616b398adac06758259d8aabac3d221b0ec2ea3642c962fdcc72d2c09"}}) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6558) 17:51:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000a010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, &(0x7f0000000340)="207efe70edb091ee06000000000000102e10907aabd918e075c44285d2f4c8e3aebfffe065903fc3326f21e542d7af37abf8dc6a11cb7a6ae79a06bf78871090181869022b739661caee4534aafb4089aacc800400ed39d15b00dcc80bb2411964e58b6102ebfdd7149c5a93d17fb20bdf53e9fd47cf706c9152cd6ab564005180ccee2731e800d86e49d812ecba7f0300000000000000d4f574bf9108d1c7f00e505f797462fa0684065379421ea251ef544c46b647f441a69624f9f34eaf600ff12b75c42696da9dfc5b66c4a47b44f589a594a162798ac28558f60c1300b2b6f62028bb4ffa820c9b"}, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 17:51:43 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) quotactl(0x5, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)) 17:51:43 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x2000, 0x1, [{}]}) 17:51:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x3f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) quotactl(0x1f, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000380)="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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$TIOCNXCL(r1, 0x540d) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/98, 0x62}], 0x1, 0x0, 0x0) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000080)) 17:51:43 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800e) 17:51:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000080)) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:51:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 17:51:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x74, 0x42) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x600200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000001000000ffffffff627e30e65badb52adc92fb2a03efd5394321273e87cb17e023ee81365241acb91342c26bc153fa81ee89466b670dd24a92082aee5f21ed20129e9d3326702d5ac1cbbc04457705753ab4c5a9235db5a7fce4a9599a660277c09a86b472"]) 17:51:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000b010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:44 executing program 1: 17:51:44 executing program 1: 17:51:44 executing program 5: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000040)={0x80, 0x1, "6f6feb5e704d80c30fc574995f2acc622671dccb75e7bb6222568b3b8410a4003a6d5e8b0032e323d846743aa1a65a3561e929e32c38a130566ce0df0720149e72f94a0627b1558b095c4342534c988d7d8aec4a480cf2965efb64d343aca0202cc411e393dfef2a39b36cee165bff632eab6f8bcc1ec72ba9d0d73533845b089416c736ebb272101f6e555eeea67fb192835144fa03ca62485c9e7649f5e32d6489e70263b097a0258d1b58ee5abc3409eac42f263127645e07e58fcb20af36c715838599bef440c353c7b2c1a3bf4288eff4f24af5ec784f799f2cc265e6a02b9293966da77961efc0ffa132d353241c4842653e08ee20f74636c54af91b68"}) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="00ff00000000000000"]) 17:51:44 executing program 1: 17:51:44 executing program 1: 17:51:44 executing program 1: 17:51:46 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:46 executing program 4: 17:51:46 executing program 1: 17:51:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="e2fbffff0000000000dc80d99558d4d06ed6683aea53d1b146f06b352fad3c3988bad69403306d8f16911adc577afa968e8564b08f58104b1d592b97c93cf21bb8ce62c82aad565b88971922fd8d621ba359e6af88ae592de6ba4ba097183501eb08a44b107318c590fb364e9de56974"]) 17:51:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000c010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8035) 17:51:47 executing program 1: 17:51:47 executing program 1: 17:51:47 executing program 1: 17:51:47 executing program 4: 17:51:47 executing program 1: 17:51:47 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:47 executing program 1: 17:51:47 executing program 5: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r5 = dup2(r4, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000040)=0x4) readahead(0xffffffffffffffff, 0xfdf, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0185500, &(0x7f0000000200)=ANY=[@ANYBLOB="00005c05254251cfde18630f2c7a950bfb94b4a13d61289b42b591fbce000000000000000000000000001f185418813559817b5b8e1ee0c2996852ca5d112b2d157bce9d05c3372339238269e2fd4888e345a133a3a18942678d1af5a45211bd2b3ac6ca96f10d319801cbae32af9fca839c57cf3e9759eb4165d87de9987fbc631f0d9900"/145]) renameat2(r3, &(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x3) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f0000000100)) 17:51:47 executing program 1: 17:51:47 executing program 4: 17:51:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000d010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:47 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8100) 17:51:47 executing program 1: 17:51:47 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000200)={0x1, 0x100, 0x46, 0x2, 0xfff, 0xff1}) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000040)=""/136, &(0x7f0000000100)=0x88) r6 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$inet(r8, &(0x7f0000000140)="09247510fc27a9d0e3", 0x9, 0x20000000, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="53db9a3aeb033bb700"]) 17:51:47 executing program 4: 17:51:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000e010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:47 executing program 1: 17:51:47 executing program 1: 17:51:47 executing program 1: 17:51:47 executing program 1: 17:51:47 executing program 1: 17:51:47 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8847) 17:51:48 executing program 4: 17:51:48 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)={0xcf78}) 17:51:48 executing program 1: 17:51:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000010010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:48 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:48 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x27000}], 0x1, 0x400000, 0x1c000000) 17:51:48 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:48 executing program 5: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) readahead(0xffffffffffffffff, 0x6c0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x9) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB]) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) 17:51:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8848) 17:51:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) fsync(r2) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:51:49 executing program 4: exit(0x0) setfsgid(0xee01) sync() openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:51:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000011010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x40, 0x92]) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:51:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:51 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:51 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:51 executing program 5: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) readahead(0xffffffffffffffff, 0xfff, 0x1) io_setup(0x7, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c, 0x800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00') r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2b) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6bba45825a570e80e9649fced16db574dd5a49d3145698a6e6995b025f1e868d251f24", @ANYRES16=r2, @ANYRES64=r3], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000440)={0x8, &(0x7f00000003c0)=[{0x4, 0x4, 0x40, 0x1}, {0x4, 0x0, 0x1f, 0x607}, {0x1000, 0x9, 0x96, 0x8001}, {0x4, 0x7, 0xff, 0x5}, {0x3, 0x0, 0x0, 0xfffffe01}, {0x7, 0x4, 0xe4, 0x9}, {0x5, 0x2, 0x7, 0x80000000}, {0x1000, 0x4, 0x7f, 0xffffffe0}]}) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffdd2, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x20000040) r5 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0185500, &(0x7f0000000000)) 17:51:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000012010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:51 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8864) 17:51:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x800c, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="03070006000800fdff001900000004000180"], 0x18}}, 0x0) 17:51:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:51 executing program 1: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:51 executing program 1: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:51 executing program 1: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:51 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:51 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:54 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00'}}) 17:51:54 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="040000000000000000"]) 17:51:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000025010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:54 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8906) 17:51:54 executing program 1: socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:54 executing program 1: socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:54 executing program 1: socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:51:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200074, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000040)={0x2, 0x100, 0x4, 0x9, 0x1, 0x9}) 17:51:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 17:51:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18220000000000080000da00850000000080000095000000005d000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 17:51:57 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:51:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 17:51:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:51:57 executing program 4: sync() rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='./file0\x00') 17:51:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000028010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:51:57 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe000) 17:51:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 17:51:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 17:51:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x20074, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:51:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 17:51:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 17:51:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x2001, 0x2}) 17:52:00 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:52:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1d65, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r6 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r5, 0x1, 0x0, 0x0, {0xa, 0x0, 0x4000}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:00 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x9) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000300)='/', 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) 17:52:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000002d010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:00 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xea0f) 17:52:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:52:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:52:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r2 = signalfd4(r1, &(0x7f0000000040)={[0x3]}, 0x8, 0x80000) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) readahead(0xffffffffffffffff, 0xfff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_io_uring_setup(0x673f, &(0x7f00000000c0)={0x0, 0x29d6, 0x10, 0x2, 0x113, 0x0, r6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200)) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x0, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:00 executing program 4: r0 = eventfd(0xfbfffff8) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 17:52:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x0, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) readahead(r1, 0x1, 0xffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40001, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x100, 0x6, 0x4, 0xc, "fa36702c9dcbde4a056e9e48d5c7b086ca7d9aeaf19268c921f938a8d4d284b4ff5f1f28770550cae6849d600409b7e24f1740e43a39524a418c1aa21dd73021", "660b06269e1b927953f770007b45c7147e675906c2463d3991fb8bc84dd8e424", [0xfffe0, 0x4]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f00000001c0), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)={'veth1_to_team', 0x32, 0x36}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000200)=ANY=[@ANYBLOB="0000004001000000001d286fff233b3e472c68983eea3c685086e77a4efc59cfdb3ba6450ddb1f089a825317893ef52f5c6d9fb47831240a8a793d7ea024635795e54ac08fbe5327d5f943c5c71c1b5bbf0226ae90abe13d4ce24e2e275288f9c372f2f15c0bb753c2c8658a6de8fc78c0321f85a6f49bd7c24e1f2f688437afbbf784bc1334dac8b4c735dfd275fc5f3fb7c3db64aeb319ca8a17fe46cc4600"/170]) 17:52:03 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:03 executing program 4: sync() lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) 17:52:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x0, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000005f010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:03 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xee0f) 17:52:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x3}, 0x18}}, 0x0) 17:52:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$KDSETLED(r2, 0x4b32, 0x6) 17:52:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x3}, 0x18}}, 0x0) 17:52:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x3}, 0x18}}, 0x0) 17:52:03 executing program 1: sync() mkdir(&(0x7f00000043c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000080)='./file0/file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000) 17:52:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) syncfs(r1) close(r1) fcntl$dupfd(r0, 0x0, r0) 17:52:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4b) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:06 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:06 executing program 1: 17:52:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa533eb2f11e931e7d62ead037cd2157df6b2a1b459120000000000000fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x28) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 17:52:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ptrace$cont(0x20, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000003280)='./file0\x00', &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lstat(&(0x7f0000003380)='./file0\x00', &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003440)='/dev/rtc0\x00', 0x400301, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc, &(0x7f0000003240)=[{&(0x7f00000001c0)={0x154, 0x3a, 0x400, 0x70bd27, 0x25dfdbff, "", [@typed={0x19, 0x1a, 0x0, 0x0, @str='/dev/bus/usb/00#/00#\x00'}, @typed={0x5, 0x48, 0x0, 0x0, @str='\x00'}, @nested={0x11f, 0x39, 0x0, 0x1, [@generic="670df576462978250734e5dab420489e8d9a72d30cd40514ed78342fa5a4e0531df425d2e4cf601e0800c8572e66de542e2eb6cbfae194ca8e586ed9e877e3594e43e990e40ad7b093fc6f507de2e88dd3debd6cff365ade27baf7436c98a586881548d97e780bb876e9176dba8cddd716662bb920216eb886a285aa9d8ed14a3317252d8b9f6ae940b3c85d98f6d50e1cf9977d3c255a8c2acd939805591c248f4d6a78e7767525025b34582ca6ff1d1d3947bd957b4ece25de56fe0a", @generic="3714d62e7ae14ff097d0ae7e4feef4585efee16d2b974261e2e1af485d723b516257f00efd85e7bb51d802b7b3bb7943039e19d0f5343175f4a7e48515d3f8b7e4b85ad9670b9817421a316400a1d6f60bfdfbec52c33d6b0f7d87629833"]}]}, 0x154}, {&(0x7f0000000340)={0x588, 0x1d, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@typed={0xc, 0x83, 0x0, 0x0, @u64=0x6}, @nested={0x2a1, 0x7f, 0x0, 0x1, [@generic="fa87b55d9f8692afcf3a4bf9e1a906b7be5fec3f6b93e3ab465f752e665a49a32dbe3d545709ee771a996752945648d79f6fe6f27e419a9a8d110c245ed40fcd9039825ea70f9d89594beec834f53dcded1a29a7cc2afd4a5516dd169bb62c97fcf4de075c9945e8bf968fe1ce0c", @generic="570155dd335dbad72a78ccd12c9ad8157f5094f08c2d9ffa107c65e279", @generic="15286571f5fd7f606f5a41016b", @typed={0x8, 0x34, 0x0, 0x0, @fd}, @generic="23fbf03280e85264147bb6c12e8f8909d83dbb26376e9e2707f8bb8c36a45e94569f457a65fcd02a2810a8356fbf0043041783f03da93a639610ecc360cc1a80f6c9d89327953af5298d82b331a46f0a901fa3fcd867124c3be0b91a502427b3b30881", @generic="4350f351e42ce1a28fd6d8deb87651bf684b7d0b10253687ac3a398292c7e5ba87951fb9f51bbc03d7024cfecdb6b468a332dfd91b3f909d", @generic="685bc3e1e7ab290168e3e7d8916014f0a817d7fdb57d568225726487f1f42b4dfefda09fb759e9bef3927783a915bcda7e18322878007d023b41fa5531152d7022eb9f155df31b4bf927a1bd2c95a05183055673ed618baa62d2959e72deb773d53334199a952dc7e97eec4a920504eb5c4e58612f3d1a4c06e78642fbf172f93c1ad3c5472868a9c9cd1307033b38363eeffa55eaef36735805119ac31f3041a4219e508930a2a0e8b0a43a8a872f0206a308bed5cf989e30bc603299650aa282f4", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x98, 0x54, 0x0, 0x0, @binary="712135342325d2df3f447681e8bb44ab914d45cf5db6294815ce1eeecea1b77d871c7ecdba8ceafb11e2ec164a2a96ada9a3740e5298d551e0a9e13e355eafebebe8195b93bdc87dc828d91041576a5612962f473cb4b5994d3cf45576f5d7868eb6a796eeb0938f7e2cf88ce5dd3c834c3bd648fe400a9e1d89aff3a9d53dd2844e82f1c8d46c3f4e9589658c59aff397177129"}]}, @generic="f559a3ff480cd383c4378faee02395a07b5dd534cbd6d4527265e1eb423b6f58685dfa66ada8fe3ddc866dc87aa172649e02e644ccf88f59f7b0a20b65a15405ee5d8d820cd3edab2af23823f0103ae31454", @generic="bba23e485ea92bebb2a51a05f4e8f6f9104960d42ddffb59f408c333f82f04302179383aa9c31ce97fd918f9a7070b5d67c6c5268ebc6faa0814175b246bae2c8c885ed930e6d479f438522be3b0fdceca27c25b1adf3018ec32328643dccd8d78f03472753fcf8791258e4d678f8c9a426980be477d7f08c4897530eaf242918da9e3ec7e4a43e7d02b6cbff97b14e96d5a0b679bcd800435d9f511b824aa15af96e270ec443d0413dfe7b1cb147a880c9d779cd3e6a4aefc27954687d126a85ec9ad01dd6ab826e1a197dcbc572a65e10445745e05f6493656ba528fffb793434850c1e2dce1b6db2c1dc7719884b6", @nested={0x184, 0x25, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd}, @typed={0x8, 0x64, 0x0, 0x0, @fd}, @typed={0x69, 0x53, 0x0, 0x0, @binary="51f37c98cf18ec150d9389dcbfd407d2edb58ec0b7809f8baad4e9fffc02b5f8935768ca79491bd9cf63f85055474c5fd3ca7b0bfdf3535b741c4cc2427b66272f84805170e861aef459961bdf3bd3fe3d084e9073ac2b855fd395896ddc23e4d10290d274"}, @generic="572f37d6e39695eb909234945b68b093b80d5456eecf31653761535006b91799e92a159eae8cea510043554e734a3b0cd6282b209149be2da34f1ca661c4338874bfb2b0061a0c67d2a6b06a1ad90f42864a4d1fbb10b24fa83a8d608470aeeb0269976fa8f35402ecb217613235fe42365494c34dab746fc722daa81d6e72719dfdb88031c8dc74d980a0f91146e1a459799a4408bfad99d4bfcf6e5fe9f717b4dbd6d1fceac5018e5123c5f363eead73c93d45166f3c6e8ce0bc0099a7e2f8583498e7f3e9bfc61d27b03943d9f135fb10bda78140d1e20ced07d523918a769bb8c868cf09dbf5eda9ceb0ed82f8b0cb90fe2f5f79cdc77636d1b1", @typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x588}, {&(0x7f0000000940)=ANY=[@ANYBLOB="002900002500000429bd7000fcdbdf2508007c00", @ANYRES32=0x0, @ANYBLOB='\b\x00`\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="adb23eed92403657d0707c143d643d48f8b039f698621149d9e38a9d78913ac86666c24ad709000045e1e5185d9861048aa9e0a415d89022a43aefdc526ac3ae38fc2ea96b39dc379ad7540ded762c8c16705a996b32db8d3df4deca54225baf61ce17ac8cdf04622fee1674030a2f08005200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x2900}], 0x3, &(0x7f0000003480)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r3, r4, r5, r6, r7, 0xffffffffffffffff, r8]}}], 0xb0, 0x4850}, 0x840) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000080010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:06 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf90e) 17:52:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@func_proto, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x54}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setrlimit(0x8, &(0x7f0000000140)={0xffff, 0x3}) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0xda8, 0x0, 0x2}, 0xc) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="000000004f55785350a6a753a877ea47054e089d555f0ea10004d51429cf0599dd3bb3ded5c4015d8028a91fc5880dd412d6f352bdc2ae9cbc95f2110613358388f652022134d906000000000000"]) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000100)=0x40) 17:52:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x0, 0x70bd29, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000c1}, 0x200000a0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r6 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r5, 0x1, 0x0, 0x0, {0xa, 0x0, 0x4000}}, 0x14}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000012c0)={'batadv_slave_0\x00', r8}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000001380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc0, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000060}, 0xc000) r10 = dup2(r3, r3) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x28c, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x4, 0x379281) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="b20932b2d809e05f00"]) 17:52:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000004fff00"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_usb_connect$cdc_ncm(0x2, 0x90, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x3, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'M'}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0xb9fc, 0x80, 0x800, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x12}, [@country_functional={0xe, 0x24, 0x7, 0x3f, 0x0, [0x8, 0x6d2, 0x2, 0x3]}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x6, 0x1, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xff}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x35, 0x3f, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0xff, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf9, 0x7f, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x7f, 0x2}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x5, 0x2, 0x4, 0x10, 0x7}, 0x28, &(0x7f00000002c0)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x800, 0xf, 0x3, [0xc03f, 0xffc0a0, 0xc0ff]}, @wireless={0xb, 0x10, 0x1, 0xa, 0xac, 0x1, 0x4, 0x2, 0xfb}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x455}}, {0x5, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x80a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xdca5}}, {0xe0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"]}, {0x29, &(0x7f00000004c0)=@lang_id={0x0, 0x3, 0x380b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="040100ff2d3e71b4b0a5979464c9bb565d8230c9eca861a97025e7416ecd152e568120dd8d64bf89fcd3426aba3a8b8cee63fe22cd7fcbdeed79fe592845101056315df64475d7e50b963d875e69cf263dd5a0ff1ee62c86b238b0d58e5cfd622328ed5967078a2f594fe833fc8b96fdf98b575eddfbd864e792cb9e13db1e3b121066457671fa469b92ce465219da04ebb516f6217aed788ec42b5e22"]}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$BLKFRASET(r6, 0x1264, &(0x7f0000000400)=0x6) syz_usb_ep_read(r5, 0x2, 0x4d, &(0x7f0000000600)=""/77) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000000)={{{0xd, 0x1}}, 0xee, 0x9, &(0x7f0000000080)="3d81d17976b243307e94240f1c10fa3c9977e15f38da929988a28f9c3dd02a2294cb5aa99e5f9fc1553e5c22a84c54c37e679b7012615f021a0584c1e4dbe1636314284641b887ef22931e69b58a541abd35839b3199a8a579ff1246293b98f93d441dc7cc3e426528fba6fdfab8bb41d9aa13bdf8b3b2d055500b85ea60a86c05ce552f10bde5fc9f092a05e9f110d055750ed8eb31e4e20c28200f7546221e3b2d0d98587ca7841430a67ef6377acc4a2d53c005f6c823be16db8b502951a77e71705869c3111b2537c0ff4a716cf2a0c8a0bf2de5de196dcc3587ebaf63b00e9d99b173e166e408f7205f9478"}) 17:52:09 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000030016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14e, 0x14e, 0x3, [@struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x3}, {0xd, 0x3}]}, @restrict, @datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], '\x00'}, @datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "f6"}]}, {0x0, [0x0]}}, 0x0, 0x16b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1000000) 17:52:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffe68, 0x24000000, 0x0, 0x0) shutdown(r0, 0x1) 17:52:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa533eb2f11e931e7d62ead037cd2157df6b2a1b459120000000000000fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050fea", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x28) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 17:52:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000090016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000040)=""/88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x4}}, 0x10) r4 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:10 executing program 5: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:10 executing program 5: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd7000000000001b0016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:12 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) tee(r2, r3, 0x9, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x400000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)) 17:52:12 executing program 4: 17:52:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000400016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x10000e0) 17:52:13 executing program 1: 17:52:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) 17:52:13 executing program 4: 17:52:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000020016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:13 executing program 1: 17:52:13 executing program 4: 17:52:13 executing program 1: 17:52:15 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000000)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000100)=ANY=[@ANYBLOB="dd78000000"]) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 17:52:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r2) rt_tgsigqueueinfo(r2, r2, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffc58b}) ptrace(0x4208, r2) 17:52:15 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002a00fb4bddec681cd47b12c737a2ae50", @ANYRES32=r5], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) r6 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x84ffde, 0x0) 17:52:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000030016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2000000) 17:52:15 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000a000100636f64656c0000002400020008000200000000000800050000f5ffff070004"], 0x54}}, 0x0) 17:52:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd0, 0xd0, 0xd0, 0x0, 0x0, 0x188, 0x168, 0x168, 0x188, 0x168, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0xffffffff, 'bridge_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x101, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 17:52:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x803, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000) ioctl$RTC_WIE_OFF(r5, 0x7010) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', r6, 0x8000, 0x8000, 0x3, 0x9, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast1, @local}}}}) r7 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB]) 17:52:15 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:52:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, &(0x7f00000001c0)={0x8001, "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"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0x0, 0x1, 0x0, 0x3}, 'syz1\x00', 0x2e}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xb6, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(r1, r0) [ 3092.656845][ T3183] x_tables: duplicate underflow at hook 3 [ 3092.663537][ T3194] x_tables: duplicate underflow at hook 3 [ 3092.668413][ T3192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3192 comm=syz-executor.4 17:52:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="9bbb88184db0afdf4a922cda0d14cddcdfae937eb7bdd248657fac5fcfbd21fe5c7a5eed9f0369eafb0040ba65b32e166e585bf1dc3f18c7b0591b5043e633a875aac0723871d27811de0480a62b733ec6e139cdc6ebb547813805efa463aff91fdce473d4107f"]) [ 3092.720590][ T3208] input: syz1 as /devices/virtual/input/input211 17:52:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x541) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 3092.841837][ T3237] input: syz1 as /devices/virtual/input/input212 17:52:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xd051, 0x0, 0x0, 0x800e00550) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/9, 0x9}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) recvfrom$inet(r2, 0x0, 0xbfa8, 0x0, 0x0, 0x800e0054d) shutdown(r2, 0x0) 17:52:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="000700ea0ced0000d3"]) 17:52:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x20000e0) 17:52:18 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000080016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/21, 0x15}, {0x0}, {0x0}], 0x3}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x2ec, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="d3d6c6c36adf0d6d9668249119cec0350061d505b3a06ef89d4fdb090000000000000012b23a0000b214a813cec36e6b012f8c6562eef5bc8b84a2cd7b4eb4e92b3c51b068d5e5c47c76bc639973a227fa55be7874b4007c453666574af4c958236eea0000000000000000b5c3d40ca9decd099c946b333e168979b7102950148e6e71fe6a30796c96b93c45bd226f84e496c3469be04f4b93c619f7029a6104a0f414a4a691d71c9d6955da192d9fa04e00"/209, 0xd1}, {&(0x7f00000001c0)="f6b4d69cf3c9c1d889904fd6e290f90c889ffc32474d4811144c90c24846934999644804a19260702907e229120c1f7c5d3bd21511486fc7caed049b9eab907d7443b7c23cdb854bed9af17da88b7965573f506529bf9bce17c9fcab4cb699e6e7fde5fd060356fadef29c68b2df0b56f5f90449811583ce462f36b7488b0875a9c9ef7477cee7f6b0f3a67e329d631a224f10e70d8d758c5cb5160f18f28ce0a62a47ae5d8a9af06b4beb435ca3f1dc92cc5223cb5cb1302aaea43e82d086dbd104acf4563387c18cb04a848b3147cb049e948d", 0xd4}, {&(0x7f0000000480)="83af2abe9b83858383d4677ad2ba174ba3df8f5d730510391536be133c5a9456a39ba2b45df98ed71f8c370bff314611424bf93c27fc79be5f5307bd17c393fe87930276", 0x44}, {&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000000e00)="1b090000010000000006ccf6e00300f59ee77f497a5d4de9e060cd8b68cd7cd30d3d8ff7671f1da5d48a92c0e9846217947c2ef308885daea0f093851d1d7fffdf944657c71970d1fb559b6bb0a9076bc46988453e3f23461bd43869430000000000264e35a4818cf43abe1578e4178ad20c916335c3cd15cea66ce188dd9dd0d2d3578d221de4be23ef566fb65805c5ff00a99bb06b3da8aee25077e974182e534c86ac2a1c4f68f6d72896da658d260b1c7f412c5e6abc96bef91055565f1799c05a00f2f4162078f81d0aa100ed5b15a69778204ab8a2ba077f0b3e4ecbc8fd0bc2b75d00851a167b26c23f3af872b5a28c51ef75a3be8a67a72122849a5333127223b6540a507b077d728fca46f256e02d34dc0fdaf7f1e0657d26503166ab2c3b69de8459b073922e90d87acd3ab6b1adf71633203000ec16bde26b213723077f80feed3ccea3f26cbc1f9806f5a2f0676c4d815eda469afd728f70513ad794a356f20e23df42835a922b5fa160ebeba4f52db9dcd771f2326f7b3eeec3bf47c0670ca80522cbcf9a35a72fb72c9a63a2cf6d06000000000000003ee56d773106aed2e06b13f84081b3bf2171e1a9814651150368cc6d16726689ebdbdee565a46dfd5b879c18f7ff65f73809340502212b674af63fc1d20cc0c7400ec2e328a3828f41f320eb5109bb34e7f93c0f4e70945930cd39ead4c0027902889caba23490d2d2e8599360feb5ce719654b1e8bb9c068c928a48648e31de1d7db1374b936746399a237e251e1b86fb9c30d5687a9d1ff66a2201842fe3bd673403239f6cb2c2ea4bd2b6a919f85fe71999a5376b4c2bace2dcada39f8f85657dddd905754b2b319163215abea92e3efc0f3b0000000000000000000000000000ceaac811c8901ffa1b5837c3cba3db7aee0ac29698358b4a4cb8492548", 0x29c}, {&(0x7f0000001380)="295b63087aef99e4b734e91e4150b22f63e754f4ad961c82903a14a7e8e1028e78b3346ce2e00a304540bd3af2d028b04df323108e11f72929889466f634b85666b239e843a1617d9b1e51d675011cd0582df506f0460c91f8d96937f584f2637bb0c48499d3460ff53027cbd7acaa2fb04861b71a7b65366ba32defd780d02413a49c95f1ad259b8d918c70ad8ac35b028728e194e47c9956595ffcce6ca81a00"/175, 0xaf}, {&(0x7f0000002340)="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", 0x105}, {&(0x7f0000001440)="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", 0x9c8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x0) shutdown(r4, 0x0) 17:52:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="00009d68b44faba4bf"]) 17:52:18 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3000000) 17:52:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r0, 0x1) 17:52:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000200)={@void, @val, @ipv6=@tipc_packet={0x0, 0x6, "5de138", 0x20, 0x6, 0x0, @remote, @private0, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0x52) 17:52:18 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0xa0041) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) 17:52:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000080)={{0x1, 0x0, @identifier="facb9337e56070594c7870b40a208d82"}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x4) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000010000000052a2843ce53e3ae835d46a5db456428c20ac"]) 17:52:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000090016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x1, {{0xa, 0x4e23, 0x439a, @loopback, 0x9}}}, 0x88) r2 = dup2(r1, r1) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) readahead(r3, 0xfff, 0xfffffffffffeffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffff00000000cb6212001f4d3edcaabc9ba46d146c92a50dfb6aabe072cd2e73d0e2c76c2d21a01ee04279175ed7a4696a463b9bf31020fa4c8de8026211c5711a59876e635234c22c92fbbc335e4bb336c3ba467f14888798ccca7c5efb5c4d6b1411f3009a4aa552edeb65bb7e8b01a9aab03639b81998484127291522fc8052250ba3ead5a21bb995c69949eeff3be6b7e30413d4975889ad74000000000000"]) 17:52:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x7993, 0x0, [{}]}) 17:52:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) 17:52:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f00000002c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 17:52:19 executing program 5: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0185500, &(0x7f0000000040)={0x3e0b, 0xfffffffffffffead, [{0xa}, {0xe, 0x1}, {0xf}, {0x5}, {0x2, 0x1}, {0xd, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x8}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0xc, 0x1}, {0x4, 0x1}]}) 17:52:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd7000000000001b0016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:19 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4000000) 17:52:21 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:21 executing program 1: 17:52:21 executing program 5: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0185500, &(0x7f0000000000)={0x447d}) 17:52:21 executing program 4: 17:52:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010005004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x5000000) 17:52:21 executing program 1: 17:52:21 executing program 4: 17:52:21 executing program 1: 17:52:22 executing program 1: 17:52:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x400000020000074, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:22 executing program 1: 17:52:24 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:24 executing program 1: 17:52:24 executing program 4: 17:52:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x180000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='((\x00', 0x0, r0) r4 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f00000001c0)=""/4096) r5 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) r8 = dup(r6) write$char_raw(r8, &(0x7f0000001400)=ANY=[@ANYBLOB="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"/1536], 0x600) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$selinux_attr(0xffffffffffffffff, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0185500, &(0x7f00000011c0)=ANY=[@ANYBLOB="0000010000000000c9d2594b0e3b449aa1052d3cd686a3d24897d4bda4baeec08e12ddd8c6949858343af9f58979122e05fedf1e47593cb86368f53f3b8981ddf8bacf3eacefafd215fb5908bf17d67c9730b43ab654eca7b14a84820be02ddf2b13b0bae87eb48c1e8637f4700d4aee358d779f1b1c891d0ed4d459635534b6e87b68"]) 17:52:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010006004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:24 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x7000000) 17:52:24 executing program 1: 17:52:25 executing program 1: 17:52:25 executing program 1: 17:52:25 executing program 1: 17:52:25 executing program 4: io_setup(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 17:52:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, r8, 0x5, 0x0, 0x0, {{}, {}, {0xc, 0x18, {0x0, @bearer=@l2={'eth'}}}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5bdf6be8c279c096}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r8, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'vxcan1\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008088}, 0x440000b4) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:27 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:27 executing program 1: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:52:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x228, 0x228, 0xf0, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x81}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0xe201d11c486163d8, 0x0, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x4}}}, {{@ip={@rand_addr=0x64010100, @empty, 0xff, 0xff, 'virt_wifi0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x1d, 0x3, 0x43}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00', 0x0, 0x4, 0x2, 0x1}}, @common=@set={{0x40, 'set\x00'}, {{0x0, [0xa, 0x7, 0x2, 0x2, 0x4, 0x3], 0x5}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x3}, {0xffffffffffffffff, 0x1, 0x4}, {0x2, 0x4, 0x5}, 0x1, 0x6}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 'team0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x19, 0x1, 0x5e}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x3e0, 0x2], 0x1}}, @common=@ah={{0x30, 'ah\x00'}, {[0x9, 0x4000000]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x5, [0x3a, 0x1, 0x3c, 0x13, 0xa, 0x11, 0x27, 0xd, 0x27, 0x34, 0x3a, 0x22, 0x34, 0x9, 0xfff, 0x3e], 0x2, 0x9c, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010007004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:52:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8000000) 17:52:28 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:28 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:28 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:28 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff106, 0x54040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000040)=""/70) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="0067355e341f30578a"]) 17:52:28 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 3104.735665][ T3398] x_tables: duplicate underflow at hook 2 17:52:28 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010009004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000010000000078b00eb82356e98bebb2bcf78b49a6f37c10d8fb6d6646089f63f314c7ddff896bdc26b61e86b661a38f3aa312af2249a653fcf9f0fd7870f83ac59b"]) 17:52:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8060000) 17:52:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$nbd(r4, &(0x7f0000000040)={0x67446698, 0x0, 0x3, 0x1, 0x1, "8a55cace16a9afc1ce0269ce1518db083216525ca6f6dd2cac0d49dad9f27a8e2da163ba10509870bd925072a5ca4dd3a24e96f646488ad92fae600f849a026bcd5368adcb17e6edc416b5d0bfaacfc5930ae4d99586f6ec43d80ef68fe2fcb26d2582d10577936fe6a84a66e59d29d5"}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@mcast2, @mcast1, @mcast1, 0x3ff, 0x800, 0x200, 0x400, 0x20, 0x800000, r7}) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x7, &(0x7f00000002c0)={0x2, 0xe8d}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="851ba8846aa4384e00"]) 17:52:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010216004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x9) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) fstat(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r6) setresgid(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r8, 0x0) setresgid(r4, r6, r8) 17:52:31 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:31 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x3, 0xf, 0x400, 0x3, 0x4a, 0x7, &(0x7f00000001c0)="9408d62852595617b8c0cf5c905c950b34613b232e29491599aae195e0d188b8c925828e80018d35d981c3b6e5dcbc13db26561ca07de2bfb730d70e66e56bdb3d3270c20ab2ffa4a703"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) fcntl$setstatus(r0, 0x4, 0x2c00) r5 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x8000) r6 = dup(0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000240)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) ioctl$TUNSETOWNER(r6, 0x400454cc, r8) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0185500, &(0x7f0000000140)=ANY=[@ANYBLOB="4eb4000008ac000000"]) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000480)={0x60, 0x3, 0x40, 0x7, 0xe9, 0x80000001, &(0x7f0000000380)="0d9bc1d6599902bd0e7ec569dcddb1ad751cf24840dd127d7661e13379ae4ee7a3c504ed34f782dcab25e9901d7e0edcf062aef92db4b08335fbf680e19be3bfb2f5a333b6a15269ac0f40c36959961af9843fb1c703dab0972b96df251e16ab95f483e92d816e67f9ca28ba7293ebe9d62d2a81a2ca9d8250f8d239ddbca3484f0c857775a80f3eb8d9a3c8da023878a4183046d81e10c503db4e651779e88aa01c3e40859357087d5c2d89b15973f56037b8f3d9a5489dbd6e4ffc2eec9074b5a851c7c6ce4327259e5b6e1068fb76fd7be15d39020efab7ab2abf1cf8e92a3a84004f3d35f0e66a"}) 17:52:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010316004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xd000000) 17:52:31 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:31 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:31 executing program 1: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:31 executing program 1: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000240)=0x3) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x8c, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf1d6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x91e}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x800) 17:52:31 executing program 1: r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:34 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:34 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010416004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:34 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x9, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/net/tun\x00', 0x182, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) r7 = getuid() setresuid(0xee01, r7, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000000)="f032866f8c5ce8ee0fe51a4e995b17dd101e000000218da180c3b4e7f6b1fd0dbb13f904a6cf1fbeb8db30708a45a152fa41daba77c1450867", 0x39}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000180000000000af91f92e000001030000", @ANYRES32, @ANYRES64, @ANYBLOB="1c000000000000000100000002000000", @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000140000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000e2da7070b3d20337cf4fc7a7b37d7b8536b32d4b380ccf9f89fe10b2f63d9fe7caa5fd1272a21abfa28ca7e099b585e54d869ce08fdc5b87209671ede2e240fec155ef35b91e5eba51ce227341e1ffd518262014e6fc4ebb00ff653d8e62b89bb708e191549f55fa0c85d120280cc41f293117cfdd095741b6422391688586c821fbb83ac2c4868fc7bbb0150ce32999b068cf2a6da24cd5784b064855c634d622b95097dc641d492ac73104c16541202d3bce18099c66ecb22e174bf83b915b5dbc19c6d3b9a53cae9f1d5b40122888ea50a0437392de0ecc8fe9083493", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x44080}, {&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000480)="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", 0xfa}, {&(0x7f0000000580)="eba1d82f5185808e6b4473ebb99d694037b52710b9d4a0541a82d2d25f161d1056428cedfa976562abc0864a42f3121671ee41dbd806da2c6a8d5890816ef48a2cd00c94cfe92da8cd56b64f3887a3310cfc4cdca8b6b361a4463ff51ee8bb030b57abd4ac921c6c620a94cd52", 0x6d}, {&(0x7f0000000600)="3c63ca6e300db07f403dd4720aff8e4629677b63f17d6cbf74f9e9d8e76888a4bd1727498f1374ee9abfa303b501e9559e6325399c7e0e51607d79ed1bc1e2a4aa92218c311d2588a5aa720970fcd5a3070196ab2b0cf79fc2d493f24929c4d7a93255a8257bed7c9905fe6c1ba41802619d59a89654edf355f94ce44f02f1113bdaccaacddd4e4e607b4774dde952b968d236d960ebf19e88e5070fdd2c9e44", 0xa0}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="2c000000000400000100000001000000", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x40000}], 0x2, 0x20000000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000200)=ANY=[@ANYBLOB="20105df63800000000a579e82227e2aca39e5e78f31ad304d3542cda140a5dcee928dec73788928d9cbc425ba578146a44603de447b7e7a7003ddded49b77b658b62c6ac9aeaff4b2238afa3e2a26c5055cfb1899794de12848f35e6faee9238cdde6bc7e305094b6165c0d8589e80f3c8f32e9c3581014c56570783262e4d0b"]) 17:52:34 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf000000) 17:52:34 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:34 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:34 executing program 1: socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fcntl$dupfd(r2, 0x406, r3) r4 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="00130000ffffffffef"]) 17:52:34 executing program 1: socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:34 executing program 1: socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:37 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 17:52:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x240, r5, 0x215, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x29, 0x3, "b7e0ac94eaf66a96f57432030c9e3faaa89890ff486e354833c64da50ac5c6c7a90a91b771"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "f09a54836e2abed2e2c2ba6bfeb295ba1e31ada487b05350f4918537c2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xca}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "2cab42785ba4749115748a350581d96f7d4a6a0b05"}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74da0da7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20001080}, 0x40080) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000001000000082dbfa4e22417ba3f9735f70611944878bae584e4630c18430500000037703c20b300b62da0dd5cc6af73449f93fd7b0970fc2e13829f03161509cc02ebe895364073a8dbcc10"]) 17:52:37 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010516004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:37 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x40000000) 17:52:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 17:52:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r1, &(0x7f0000000040)="067911cd3ce1ad85", 0x8, 0x4084, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @mcast1, 0x400}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:37 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 17:52:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 17:52:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 17:52:37 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 17:52:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5dc, r5, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x928}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2396}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x78, 0x4, "09f93cf91225f8929f4ba6aec1796a10077b822355b7bb2f80dd11f26fe654b9784a6aefe28baba198dd61ed81c260d1e3af93821825e7e1e44444fe98ce09c6421c03cc83ff82599e71ef98df80a2f0a1ba6d7391643762d6078c72592163020c0fd7aacb84b68a1913abe917e0e80665c8ce75"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a44}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_MASK={0x6b, 0x5, "920ae8e712536b496169b570c3d3bda54bfe7bc5b9bab263ff4f77b52ae81c1129cae587c2bfa83fcdaa1350110d410fc6f0f5f4829347662a138b45c8e08b2f284070b14ef648a89dffeba08dda8ecb4b07cc7e73d99b9f9d8d95e7035a17304cff55df1fe7db"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3f8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd, 0x5, "258e6ea7d47db7c292"}, @ETHTOOL_A_BITSET_BITS={0x184, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\a6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '][\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x795}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9e, 0x4, "9d2d20187d0653b05c7c36a7d68ba505f555cebe8df36ed0ff78a64d795f7ac7f33c40466573178df963dab9399cdac985cb794d27bdce6c36fcfa163c639a1f3306348c042a52b587b656c8d3412c6faa4dd5bb9c9ae2887a12165270f15a642a55530d29179662b0d5aae6f8dfb59a5d8a0f9899ade40070bc33d30a420753b1bebd2d823dac376e13e3c3717ae82b932202aca111cc3ef36f"}, @ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^+\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba3b}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '^)\'\'-}T+%\xd8^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f14}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6295}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff6fd7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x6e, 0x5, "4e5315c9ddac3e6f2c6fe245c6d696fce4ee0bbda6b478a09a8b34ddee3f795c87666666f9418b28f2dfef78115d23682cf0214fe54484c9100b4894f8ec29ae2b209317c42c9f5d915a3afd166316c822530acea1ee95f78c85761bded0244270dfa2fe4073667ac354"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, '5'}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)={0xfffffffd, 0xb, [{0xb}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x9, 0x1}, {0x0, 0x1}, {0xe, 0x1}, {0xb, 0x1}, {0x9}, {0x8}]}) 17:52:37 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010616004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:38 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x43050000) 17:52:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:52:38 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:40 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/155, 0x9b, 0x0, 0x28}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/76, 0x4c, 0x1, 0x17}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x3, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/153, 0x99, 0x1, 0x3c}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x1000}], 0xfc, 0x0, &(0x7f0000000500)="34f9e99a6fb3d4e13b09def7056904f5eab06f949c4e22b018dde38b41f974446a72f6b989c567d71777abb7c7d42006b1bec3431184db67807502cc04a27b5f8053f9a64ef34d9c410d171388545157a7d64b7913ecf54c7a57773dd6062d58dc7c44856bb9495e546b5ff38c6e96a22ce1011623a4dd04da7c4456569d9c781d02b5c6d30f862fa072cc83c3fb5c8dbacb0214c594a50baecb81c4aaa100b9a41bf7263ba709ee345a65d3f9d1bca3eee2ee9c58b9f8ec80376860884ca55615afc8415c6163d98195d6d823bd873c771800a8b19ffbc128185ea2588e58e656e342dde57b7a826e14ee12111262252c4239238773993280c28e7a"}) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010716004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:52:40 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x60000000) 17:52:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:52:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x0, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="004480000000000000"]) 17:52:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x0, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x0, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:52:40 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:43 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x3}, 0x18}}, 0x0) 17:52:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x7, 0xb4eb, 0xffffffff80000001}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0xfffffffffffffffd) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x3, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r5 = syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/pid\x00') readahead(r5, 0xfff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000010000001e"]) 17:52:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010816004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 17:52:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x65580000) 17:52:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x3}, 0x18}}, 0x0) 17:52:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x10001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x3}, 0x18}}, 0x0) 17:52:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/155, 0x9b, 0x0, 0x28}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/76, 0x4c, 0x1, 0x17}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x3, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/153, 0x99, 0x1, 0x3c}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x1000}], 0xfc, 0x0, &(0x7f0000000500)="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"}) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x408200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000080)={{0x1, 0x0, @descriptor="1e808ac0ec8cecff"}}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80000) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f00000000c0)=0x40, 0x4) 17:52:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x9) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) fstat(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r6) setresgid(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r8, 0x0) setresgid(r4, r6, r8) 17:52:46 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:46 executing program 5: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000040)=0x100, 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) prctl$PR_SVE_GET_VL(0x33, 0x32bd) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r3) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 17:52:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010916004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800e0000) 17:52:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_DISCARD(r2, 0x1277, &(0x7f0000000040)=0x80000001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 17:52:46 executing program 5: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x66e80, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x100000000041042, 0x0) pwritev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, 0x53dd, 0x0) dup3(r9, r8, 0x0) io_setup(0x40000000008, &(0x7f0000000240)) 17:52:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010a16004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) 17:52:46 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe80) 17:52:49 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010b16004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) 17:52:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000100000000634415923a7549b643b5c1bf0a6396f3fe24c8c863b2318fcbfae531e136dd37e1caa7a34723fbe95d334623eca47f092676c5abf422fca76013cad3594ea04b12424093cf1ed5f6a53d25301e6d4cdc1b19d04739aa4d6d54fa6efff826b66b129127bc05570ae1fe3ae211a2193a99"]) 17:52:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x80350000) 17:52:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xd00) 17:52:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) 17:52:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000040)={0xa63c, 0x1, [{0x7}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010c16004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="00753dbef83883ed9e5e55ed4cd30000000100000000"]) accept4(r1, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000000)=0x80, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r4) setresgid(r4, 0x0, 0x0) setgid(r4) 17:52:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:52:52 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const, @func_proto]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fcntl$setstatus(r0, 0x4, 0x40000) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000001100000009daf4f3c6ef0ae604f95477f9d3606a41e9805a3ebd88b360dc5d17eebd83a53a288e7b028ae09a144215cba84362ddc37a69ce01c6f507c78e753b4425db949bc69de4a6549d71969"]) 17:52:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:52:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010d16004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x81000000) 17:52:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x2, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000380)=""/4096) 17:52:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x2, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000380)=""/4096) 17:52:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}}}) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r5 = signalfd4(r4, &(0x7f00000008c0)={[0x7fff]}, 0x8, 0x80800) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040005}, 0x40010) 17:52:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x2, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000380)=""/4096) 17:52:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x2, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x2, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:55 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const, @func_proto]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:52:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x2, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010e16004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) readahead(0xffffffffffffffff, 0xfff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x40001) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="e50f00040100000000"]) 17:52:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x86ddffff) 17:52:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x2, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:55 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const, @func_proto]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r4 = dup3(r0, r3, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="03000700", @ANYRES16=r6, @ANYBLOB="0901000000000000000010000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000004040)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004000)={&(0x7f0000000540)=ANY=[@ANYBLOB="54cdd857966df6197add17662d0bf000"/25, @ANYRES16=r6, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x8884}, 0x1) dup2(r2, r2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) r9 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000240)=ANY=[@ANYBLOB="00bebb2f9dde86d1fa417c4f729f451f83ae3596384358d9ce1c882fba79d5dcd8defe1e7bc7664f94cf7f7abdcf9b456d3a45bfd4721f51cdaa7d7f9c2ac61239e2dade665576ed087253aa6f90bfe6a50f554ee0c680980ddbde8dbfb210c50e49aad9e20600ff9a8c57ef9686722f8a8d6692f9f39588578998cc3ba0ebdcbb6596080b6168e1413c3fa1862365331f009d6712db7b2749b81b08bfe78dc6bb300fa1e79f2cfc0750c534eceae215d65b4ee82f0afaf4e74615e569b35e33cf94a60300000071d7151d11d4e90800fb0ba8f83f209c89bacaab413013b79d6458b8f897defe1580756ccc50edfb93865faca4b109a576cee590dd72b3be4fee2bf433a0d8fdd87f6916a1ba36b80c7fac815acedab40b23fa"]) 17:52:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000011016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000200)) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) sync_file_range(r5, 0x7, 0xffff, 0x4) write$selinux_attr(r4, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) readahead(r4, 0x3f, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = fsmount(r7, 0x1, 0x8f) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r9, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'bond0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x6, 'gre0\x00', {0xffffffff}, 0xaf2}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0185500, &(0x7f0000000000)=ANY=[]) 17:52:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:56 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88470000) 17:52:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:58 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x30}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:52:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x1000, @local, 0x7}, 0x1c) readahead(0xffffffffffffffff, 0xfff, 0x1) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:52:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000011116004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:52:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:52:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88480000) 17:52:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x264482, 0x182) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = dup2(r1, r1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x882, 0x0) dup2(r4, r3) readahead(0xffffffffffffffff, 0x7, 0x7ff) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x7fffffff}, 0x16, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f00000001c0)=ANY=[@ANYBLOB="000008000100000044892d9247f9be677c36a910a5c32b13adde9eefea733f24bebe57eb96c0ee47ee9ac89fc5e1696100a3e57a6d652d5b7a65fde23d219792e0702f335574e6ab0f4d08c11a2a9506f72998b797bf61ed285047768ef4f86307ff"]) 17:52:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:52:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:53:01 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x30}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDDISABIO(r1, 0x4b37) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) readahead(0xffffffffffffffff, 0xfff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x3, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x7c) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0185500, &(0x7f0000000100)=ANY=[@ANYBLOB="ba1c00adc3fe59f787f885"]) 17:53:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000011216004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}]}, 0x48}}, 0x0) 17:53:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88640000) 17:53:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:01 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}]}, 0x48}}, 0x0) 17:53:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000012516004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:01 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:04 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x30}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:04 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000012816004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r5, 0x0, 0x0, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20044) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000100000000"]) 17:53:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}]}, 0x48}}, 0x0) 17:53:04 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88a8ffff) 17:53:04 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:04 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:04 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:53:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000012d16004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:04 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:07 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x3b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:07 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:53:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000015f16004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x45) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:53:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88caffff) 17:53:07 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:07 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) readahead(0xffffffffffffffff, 0xfff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x82ffff, 0x1, [{}]}) 17:53:07 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:07 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:07 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3) 17:53:10 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x3b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:10 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:53:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010017004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:10 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x89060000) 17:53:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000040)={0x2, 0x57, "743d1366eb83ba5e969e08013f70e9358e98d0d1aefb0f9d2036119d34c80e6ed114cba90f927113c410943996e0d4a2d4a56e9a9c38076649ee56a79705de232e69a45f5cdcaeeba88746a1803908fc2109468eb52fd2"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, [{}]}) 17:53:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:10 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x3b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:10 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x3b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:10 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) 17:53:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010018004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:11 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xc3ffffff) 17:53:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) 17:53:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:13 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x3b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:13 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x3b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd70000000000001001b004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) 17:53:13 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe0000000) 17:53:13 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x3b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:13 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x3b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:53:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:16 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x3b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:53:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010005004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe0000001) 17:53:16 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010006004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) 17:53:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010007004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:19 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:19 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe0000002) 17:53:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:19 executing program 5 (fault-call:1 fault-nth:0): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:53:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 3156.365686][ T4228] FAULT_INJECTION: forcing a failure. [ 3156.365686][ T4228] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.378448][ T4228] CPU: 0 PID: 4228 Comm: syz-executor.5 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 3156.388506][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3156.398551][ T4228] Call Trace: [ 3156.401821][ T4228] dump_stack+0x14a/0x1ce [ 3156.406156][ T4228] ? devkmsg_release+0x11c/0x11c [ 3156.411094][ T4228] ? show_regs_print_info+0x12/0x12 [ 3156.416291][ T4228] ? netlink_insert+0xb8f/0x1090 [ 3156.421209][ T4228] ? __rcu_read_lock+0x50/0x50 [ 3156.425951][ T4228] should_fail+0x6fb/0x860 [ 3156.430457][ T4228] ? setup_fault_attr+0x3d0/0x3d0 [ 3156.435468][ T4228] ? netlink_data_ready+0x10/0x10 [ 3156.440491][ T4228] ? jhash+0x740/0x740 [ 3156.444548][ T4228] ? netlink_hash+0xd0/0xd0 [ 3156.449024][ T4228] ? __alloc_skb+0x88/0x4d0 [ 3156.453502][ T4228] should_failslab+0x5/0x20 [ 3156.457984][ T4228] kmem_cache_alloc+0x36/0x260 [ 3156.462741][ T4228] __alloc_skb+0x88/0x4d0 [ 3156.467058][ T4228] ? netlink_autobind+0x163/0x190 [ 3156.472083][ T4228] netlink_sendmsg+0x77b/0xd80 [ 3156.476837][ T4228] ? netlink_getsockopt+0x8e0/0x8e0 [ 3156.482019][ T4228] ? import_iovec+0x1c2/0x380 [ 3156.486677][ T4228] ? security_socket_sendmsg+0xad/0xc0 [ 3156.492115][ T4228] ? netlink_getsockopt+0x8e0/0x8e0 [ 3156.497299][ T4228] ____sys_sendmsg+0x58a/0x8d0 [ 3156.502204][ T4228] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 3156.507409][ T4228] ? proc_fail_nth_read+0x1d0/0x1d0 [ 3156.512675][ T4228] __sys_sendmsg+0x2d5/0x3c0 [ 3156.517241][ T4228] ? ____sys_sendmsg+0x8d0/0x8d0 [ 3156.522161][ T4228] ? fput_many+0x42/0x1a0 [ 3156.526470][ T4228] ? ksys_write+0x25d/0x2c0 [ 3156.530951][ T4228] do_syscall_64+0xcb/0x150 [ 3156.535437][ T4228] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3156.541324][ T4228] RIP: 0033:0x45ce69 [ 3156.545196][ T4228] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:53:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x48}}, 0x0) 17:53:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 3156.564814][ T4228] RSP: 002b:00007fc9cb956c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3156.573229][ T4228] RAX: ffffffffffffffda RBX: 000000000002c0c0 RCX: 000000000045ce69 [ 3156.581189][ T4228] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3156.589157][ T4228] RBP: 00007fc9cb956ca0 R08: 0000000000000000 R09: 0000000000000000 [ 3156.597112][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3156.605093][ T4228] R13: 00007ffec001348f R14: 00007fc9cb9579c0 R15: 000000000118bf2c 17:53:20 executing program 5 (fault-call:1 fault-nth:1): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) [ 3157.131372][ T4236] FAULT_INJECTION: forcing a failure. [ 3157.131372][ T4236] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.144007][ T4236] CPU: 0 PID: 4236 Comm: syz-executor.5 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 3157.154068][ T4236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3157.164096][ T4236] Call Trace: [ 3157.167378][ T4236] dump_stack+0x14a/0x1ce [ 3157.171697][ T4236] ? devkmsg_release+0x11c/0x11c [ 3157.176645][ T4236] ? show_regs_print_info+0x12/0x12 [ 3157.181849][ T4236] should_fail+0x6fb/0x860 [ 3157.186241][ T4236] ? setup_fault_attr+0x3d0/0x3d0 [ 3157.191258][ T4236] ? netlink_sendmsg+0x77b/0xd80 [ 3157.196167][ T4236] should_failslab+0x5/0x20 [ 3157.200641][ T4236] __kmalloc_track_caller+0x5d/0x2c0 [ 3157.205907][ T4236] ? kmem_cache_alloc+0x1d5/0x260 [ 3157.210902][ T4236] ? netlink_sendmsg+0x77b/0xd80 [ 3157.215810][ T4236] __alloc_skb+0xd1/0x4d0 [ 3157.220120][ T4236] ? netlink_autobind+0x163/0x190 [ 3157.225116][ T4236] netlink_sendmsg+0x77b/0xd80 [ 3157.229851][ T4236] ? netlink_getsockopt+0x8e0/0x8e0 [ 3157.235025][ T4236] ? import_iovec+0x1c2/0x380 [ 3157.239684][ T4236] ? security_socket_sendmsg+0xad/0xc0 [ 3157.245126][ T4236] ? netlink_getsockopt+0x8e0/0x8e0 [ 3157.250399][ T4236] ____sys_sendmsg+0x58a/0x8d0 [ 3157.255150][ T4236] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 3157.260324][ T4236] ? proc_fail_nth_read+0x1d0/0x1d0 [ 3157.265501][ T4236] __sys_sendmsg+0x2d5/0x3c0 [ 3157.270072][ T4236] ? ____sys_sendmsg+0x8d0/0x8d0 [ 3157.274989][ T4236] ? fput_many+0x42/0x1a0 [ 3157.279291][ T4236] ? ksys_write+0x25d/0x2c0 [ 3157.283767][ T4236] do_syscall_64+0xcb/0x150 [ 3157.288245][ T4236] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3157.294107][ T4236] RIP: 0033:0x45ce69 [ 3157.297981][ T4236] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3157.317567][ T4236] RSP: 002b:00007fc9cb956c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3157.325963][ T4236] RAX: ffffffffffffffda RBX: 000000000002c0c0 RCX: 000000000045ce69 [ 3157.333920][ T4236] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3157.341873][ T4236] RBP: 00007fc9cb956ca0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.349832][ T4236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3157.357792][ T4236] R13: 00007ffec001348f R14: 00007fc9cb9579c0 R15: 000000000118bf2c 17:53:22 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010008004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x48}}, 0x0) 17:53:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xea0f0000) 17:53:22 executing program 5 (fault-call:1 fault-nth:2): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:53:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 3159.290712][ T4252] FAULT_INJECTION: forcing a failure. [ 3159.290712][ T4252] name failslab, interval 1, probability 0, space 0, times 0 [ 3159.303654][ T4252] CPU: 1 PID: 4252 Comm: syz-executor.5 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 3159.313706][ T4252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3159.323749][ T4252] Call Trace: [ 3159.327048][ T4252] dump_stack+0x14a/0x1ce [ 3159.331354][ T4252] ? devkmsg_release+0x11c/0x11c [ 3159.336282][ T4252] ? __nla_validate_parse+0x1a6a/0x21e0 [ 3159.341803][ T4252] ? show_regs_print_info+0x12/0x12 [ 3159.347420][ T4252] should_fail+0x6fb/0x860 [ 3159.351827][ T4252] ? setup_fault_attr+0x3d0/0x3d0 [ 3159.356836][ T4252] ? __perf_event_task_sched_out+0xfe4/0x1110 [ 3159.362878][ T4252] ? __perf_event_task_sched_in+0x4f7/0x560 [ 3159.368754][ T4252] ? rtm_new_nexthop+0x1d44/0x6ba0 [ 3159.373836][ T4252] should_failslab+0x5/0x20 [ 3159.378314][ T4252] kmem_cache_alloc_trace+0x39/0x280 [ 3159.383590][ T4252] rtm_new_nexthop+0x1d44/0x6ba0 [ 3159.388509][ T4252] ? __schedule+0x920/0xef0 [ 3159.393004][ T4252] ? local_bh_enable+0x20/0x20 [ 3159.397744][ T4252] ? _raw_spin_lock+0xa1/0x170 [ 3159.402486][ T4252] ? _raw_spin_trylock_bh+0x190/0x190 [ 3159.407838][ T4252] ? schedule+0x13b/0x1d0 [ 3159.412141][ T4252] ? _raw_spin_unlock+0x5/0x20 [ 3159.416880][ T4252] ? __mutex_lock+0xb03/0xc90 [ 3159.421538][ T4252] ? __ww_mutex_lock_interruptible_slowpath+0x10/0x10 [ 3159.428271][ T4252] ? memset+0x1f/0x40 [ 3159.432229][ T4252] ? unwind_next_frame+0x1c90/0x2330 [ 3159.437486][ T4252] ? cap_capable+0x23f/0x280 [ 3159.442050][ T4252] ? security_capable+0xb1/0xd0 [ 3159.446873][ T4252] ? local_bh_enable+0x20/0x20 [ 3159.451628][ T4252] rtnetlink_rcv_msg+0x96e/0xc60 [ 3159.456549][ T4252] ? is_bpf_text_address+0x290/0x2b0 [ 3159.461819][ T4252] ? rtnetlink_bind+0x80/0x80 [ 3159.466480][ T4252] ? unwind_get_return_address+0x48/0x90 [ 3159.472101][ T4252] ? arch_stack_walk+0xd8/0x120 [ 3159.476941][ T4252] ? stack_trace_save+0x123/0x1f0 [ 3159.481947][ T4252] ? avc_has_perm_noaudit+0x400/0x400 [ 3159.487318][ T4252] ? stack_trace_snprint+0x150/0x150 [ 3159.492608][ T4252] ? _raw_spin_lock_bh+0xa4/0x180 [ 3159.497617][ T4252] ? rhashtable_jhash2+0x1cf/0x2f0 [ 3159.502704][ T4252] ? jhash+0x740/0x740 [ 3159.506751][ T4252] ? rht_key_hashfn+0x157/0x240 [ 3159.511574][ T4252] ? deferred_put_nlk_sk+0x210/0x210 [ 3159.516998][ T4252] ? netlink_sendmsg+0x77b/0xd80 [ 3159.521941][ T4252] ? jhash+0x740/0x740 [ 3159.525994][ T4252] ? netlink_hash+0xd0/0xd0 [ 3159.530484][ T4252] ? __rcu_read_lock+0x50/0x50 [ 3159.535233][ T4252] netlink_rcv_skb+0x200/0x480 [ 3159.540035][ T4252] ? rtnetlink_bind+0x80/0x80 [ 3159.544689][ T4252] ? netlink_ack+0xa90/0xa90 [ 3159.549262][ T4252] ? __rcu_read_lock+0x50/0x50 [ 3159.554078][ T4252] ? selinux_vm_enough_memory+0x170/0x170 [ 3159.559770][ T4252] ? netlink_trim+0x10a/0x230 [ 3159.564421][ T4252] netlink_unicast+0x8ad/0xa50 [ 3159.569165][ T4252] ? netlink_detachskb+0x60/0x60 [ 3159.574096][ T4252] ? __virt_addr_valid+0x1fd/0x290 [ 3159.579197][ T4252] netlink_sendmsg+0x9de/0xd80 [ 3159.583959][ T4252] ? netlink_getsockopt+0x8e0/0x8e0 [ 3159.589143][ T4252] ? import_iovec+0x1c2/0x380 [ 3159.593795][ T4252] ? security_socket_sendmsg+0xad/0xc0 [ 3159.599228][ T4252] ? netlink_getsockopt+0x8e0/0x8e0 [ 3159.604402][ T4252] ____sys_sendmsg+0x58a/0x8d0 [ 3159.609139][ T4252] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 3159.614329][ T4252] ? proc_fail_nth_read+0x1d0/0x1d0 [ 3159.619497][ T4252] __sys_sendmsg+0x2d5/0x3c0 [ 3159.624058][ T4252] ? ____sys_sendmsg+0x8d0/0x8d0 [ 3159.628996][ T4252] ? fput_many+0x42/0x1a0 [ 3159.633323][ T4252] ? ksys_write+0x25d/0x2c0 [ 3159.637918][ T4252] do_syscall_64+0xcb/0x150 [ 3159.642396][ T4252] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3159.648280][ T4252] RIP: 0033:0x45ce69 [ 3159.652145][ T4252] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3159.671720][ T4252] RSP: 002b:00007fc9cb956c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3159.680125][ T4252] RAX: ffffffffffffffda RBX: 000000000002c0c0 RCX: 000000000045ce69 17:53:23 executing program 5 (fault-call:1 fault-nth:3): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:53:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 17:53:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, 0x0, 0x0, &(0x7f00000002c0)) 17:53:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, 0x0, 0x0, &(0x7f00000002c0)) [ 3159.688127][ T4252] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3159.696104][ T4252] RBP: 00007fc9cb956ca0 R08: 0000000000000000 R09: 0000000000000000 [ 3159.704047][ T4252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3159.711995][ T4252] R13: 00007ffec001348f R14: 00007fc9cb9579c0 R15: 000000000118bf2c [ 3159.779015][ T4271] FAULT_INJECTION: forcing a failure. [ 3159.779015][ T4271] name failslab, interval 1, probability 0, space 0, times 0 [ 3159.792415][ T4271] CPU: 0 PID: 4271 Comm: syz-executor.5 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 3159.802462][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3159.812512][ T4271] Call Trace: [ 3159.815784][ T4271] dump_stack+0x14a/0x1ce [ 3159.820091][ T4271] ? devkmsg_release+0x11c/0x11c [ 3159.825004][ T4271] ? show_regs_print_info+0x12/0x12 [ 3159.830174][ T4271] should_fail+0x6fb/0x860 [ 3159.834564][ T4271] ? setup_fault_attr+0x3d0/0x3d0 [ 3159.839596][ T4271] ? kzalloc+0x1b/0x30 [ 3159.843668][ T4271] should_failslab+0x5/0x20 [ 3159.848161][ T4271] __kmalloc+0x5f/0x2d0 [ 3159.852293][ T4271] ? kmem_cache_alloc_trace+0xc3/0x280 [ 3159.857735][ T4271] kzalloc+0x1b/0x30 [ 3159.861604][ T4271] rtm_new_nexthop+0x1ee6/0x6ba0 [ 3159.866614][ T4271] ? arch_stack_walk+0xb8/0x120 [ 3159.871444][ T4271] ? __rcu_read_lock+0x50/0x50 [ 3159.876182][ T4271] ? unwind_next_frame+0x1c90/0x2330 [ 3159.881528][ T4271] ? local_bh_enable+0x20/0x20 [ 3159.886288][ T4271] ? avc_has_perm_noaudit+0x37d/0x400 [ 3159.891636][ T4271] ? avc_denied+0x1c0/0x1c0 [ 3159.896135][ T4271] ? unwind_next_frame+0x1c90/0x2330 [ 3159.901395][ T4271] ? cred_has_capability+0x1c2/0x410 [ 3159.906650][ T4271] ? cred_has_capability+0x2cc/0x410 [ 3159.911908][ T4271] ? selinux_perf_event_write+0x100/0x100 [ 3159.917607][ T4271] ? memset+0x1f/0x40 [ 3159.921563][ T4271] ? unwind_next_frame+0x1c90/0x2330 [ 3159.926850][ T4271] ? cap_capable+0x23f/0x280 [ 3159.931685][ T4271] ? security_capable+0xb1/0xd0 [ 3159.936529][ T4271] ? local_bh_enable+0x20/0x20 [ 3159.941277][ T4271] rtnetlink_rcv_msg+0x96e/0xc60 [ 3159.946228][ T4271] ? is_bpf_text_address+0x290/0x2b0 [ 3159.951508][ T4271] ? rtnetlink_bind+0x80/0x80 [ 3159.956245][ T4271] ? unwind_get_return_address+0x48/0x90 [ 3159.961866][ T4271] ? arch_stack_walk+0xd8/0x120 [ 3159.966771][ T4271] ? stack_trace_save+0x123/0x1f0 [ 3159.971787][ T4271] ? avc_has_perm_noaudit+0x400/0x400 [ 3159.977134][ T4271] ? stack_trace_snprint+0x150/0x150 [ 3159.982400][ T4271] ? _raw_spin_lock_bh+0xa4/0x180 [ 3159.987399][ T4271] ? rhashtable_jhash2+0x1cf/0x2f0 [ 3159.992543][ T4271] ? jhash+0x740/0x740 [ 3159.996590][ T4271] ? rht_key_hashfn+0x157/0x240 [ 3160.001419][ T4271] ? deferred_put_nlk_sk+0x210/0x210 [ 3160.006702][ T4271] ? netlink_sendmsg+0x77b/0xd80 [ 3160.011615][ T4271] ? jhash+0x740/0x740 [ 3160.015657][ T4271] ? netlink_hash+0xd0/0xd0 [ 3160.020166][ T4271] ? __rcu_read_lock+0x50/0x50 [ 3160.024918][ T4271] netlink_rcv_skb+0x200/0x480 [ 3160.029675][ T4271] ? rtnetlink_bind+0x80/0x80 [ 3160.034338][ T4271] ? netlink_ack+0xa90/0xa90 [ 3160.038904][ T4271] ? __rcu_read_lock+0x50/0x50 [ 3160.043662][ T4271] ? selinux_vm_enough_memory+0x170/0x170 [ 3160.049354][ T4271] ? netlink_trim+0x10a/0x230 [ 3160.054002][ T4271] netlink_unicast+0x8ad/0xa50 [ 3160.058756][ T4271] ? netlink_detachskb+0x60/0x60 [ 3160.064113][ T4271] ? __virt_addr_valid+0x1fd/0x290 [ 3160.069236][ T4271] netlink_sendmsg+0x9de/0xd80 [ 3160.073985][ T4271] ? netlink_getsockopt+0x8e0/0x8e0 [ 3160.079181][ T4271] ? import_iovec+0x1c2/0x380 [ 3160.083845][ T4271] ? security_socket_sendmsg+0xad/0xc0 [ 3160.089277][ T4271] ? netlink_getsockopt+0x8e0/0x8e0 [ 3160.094457][ T4271] ____sys_sendmsg+0x58a/0x8d0 [ 3160.099195][ T4271] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 3160.104367][ T4271] ? proc_fail_nth_read+0x1d0/0x1d0 [ 3160.109543][ T4271] __sys_sendmsg+0x2d5/0x3c0 [ 3160.115242][ T4271] ? ____sys_sendmsg+0x8d0/0x8d0 [ 3160.120151][ T4271] ? fput_many+0x42/0x1a0 [ 3160.124456][ T4271] ? ksys_write+0x25d/0x2c0 [ 3160.128982][ T4271] do_syscall_64+0xcb/0x150 [ 3160.133502][ T4271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3160.139366][ T4271] RIP: 0033:0x45ce69 [ 3160.143233][ T4271] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3160.162810][ T4271] RSP: 002b:00007fc9cb956c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3160.171192][ T4271] RAX: ffffffffffffffda RBX: 000000000002c0c0 RCX: 000000000045ce69 [ 3160.179133][ T4271] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3160.187092][ T4271] RBP: 00007fc9cb956ca0 R08: 0000000000000000 R09: 0000000000000000 [ 3160.195035][ T4271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3160.203000][ T4271] R13: 00007ffec001348f R14: 00007fc9cb9579c0 R15: 000000000118bf2c 17:53:25 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:53:25 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x48}}, 0x0) 17:53:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, 0x0, 0x0, &(0x7f00000002c0)) 17:53:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010009004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:53:25 executing program 5 (fault-call:1 fault-nth:4): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 17:53:25 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xeaffffff) 17:53:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 17:53:25 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 3162.309487][ T4286] FAULT_INJECTION: forcing a failure. [ 3162.309487][ T4286] name failslab, interval 1, probability 0, space 0, times 0 [ 3162.322597][ T4286] CPU: 0 PID: 4286 Comm: syz-executor.5 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 3162.332669][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3162.342808][ T4286] Call Trace: [ 3162.346104][ T4286] dump_stack+0x14a/0x1ce [ 3162.350415][ T4286] ? devkmsg_release+0x11c/0x11c [ 3162.355353][ T4286] ? show_regs_print_info+0x12/0x12 [ 3162.360538][ T4286] should_fail+0x6fb/0x860 [ 3162.364951][ T4286] ? setup_fault_attr+0x3d0/0x3d0 [ 3162.369957][ T4286] ? kzalloc+0x1b/0x30 [ 3162.374017][ T4286] should_failslab+0x5/0x20 [ 3162.378502][ T4286] __kmalloc+0x5f/0x2d0 [ 3162.382635][ T4286] ? kzalloc+0x1b/0x30 [ 3162.386687][ T4286] ? kmem_cache_alloc_trace+0xc3/0x280 [ 3162.392136][ T4286] kzalloc+0x1b/0x30 [ 3162.396007][ T4286] rtm_new_nexthop+0x1f37/0x6ba0 [ 3162.400924][ T4286] ? __schedule+0x920/0xef0 [ 3162.405415][ T4286] ? local_bh_enable+0x20/0x20 [ 3162.410174][ T4286] ? _raw_spin_lock+0xa1/0x170 [ 3162.414933][ T4286] ? _raw_spin_trylock_bh+0x190/0x190 [ 3162.420302][ T4286] ? schedule+0x13b/0x1d0 [ 3162.424612][ T4286] ? _raw_spin_unlock+0x5/0x20 [ 3162.429348][ T4286] ? __mutex_lock+0xb03/0xc90 [ 3162.434012][ T4286] ? __ww_mutex_lock_interruptible_slowpath+0x10/0x10 [ 3162.440744][ T4286] ? memset+0x1f/0x40 [ 3162.444718][ T4286] ? unwind_next_frame+0x1c90/0x2330 [ 3162.449984][ T4286] ? cap_capable+0x23f/0x280 [ 3162.454576][ T4286] ? security_capable+0xb1/0xd0 [ 3162.459518][ T4286] ? local_bh_enable+0x20/0x20 [ 3162.464374][ T4286] rtnetlink_rcv_msg+0x96e/0xc60 [ 3162.469312][ T4286] ? is_bpf_text_address+0x290/0x2b0 [ 3162.474597][ T4286] ? rtnetlink_bind+0x80/0x80 [ 3162.479257][ T4286] ? unwind_get_return_address+0x48/0x90 [ 3162.484916][ T4286] ? arch_stack_walk+0xd8/0x120 [ 3162.489764][ T4286] ? stack_trace_save+0x123/0x1f0 [ 3162.494779][ T4286] ? avc_has_perm_noaudit+0x400/0x400 [ 3162.500132][ T4286] ? stack_trace_snprint+0x150/0x150 [ 3162.505407][ T4286] ? _raw_spin_lock_bh+0xa4/0x180 [ 3162.510421][ T4286] ? rhashtable_jhash2+0x1cf/0x2f0 [ 3162.515520][ T4286] ? jhash+0x740/0x740 [ 3162.519577][ T4286] ? rht_key_hashfn+0x157/0x240 [ 3162.524410][ T4286] ? deferred_put_nlk_sk+0x210/0x210 [ 3162.529677][ T4286] ? netlink_sendmsg+0x77b/0xd80 [ 3162.534585][ T4286] ? jhash+0x740/0x740 [ 3162.538626][ T4286] ? netlink_hash+0xd0/0xd0 [ 3162.543119][ T4286] ? __rcu_read_lock+0x50/0x50 [ 3162.547857][ T4286] netlink_rcv_skb+0x200/0x480 [ 3162.552601][ T4286] ? rtnetlink_bind+0x80/0x80 [ 3162.557257][ T4286] ? netlink_ack+0xa90/0xa90 [ 3162.561946][ T4286] ? __rcu_read_lock+0x50/0x50 [ 3162.566777][ T4286] ? selinux_vm_enough_memory+0x170/0x170 [ 3162.572478][ T4286] ? netlink_trim+0x10a/0x230 [ 3162.577173][ T4286] netlink_unicast+0x8ad/0xa50 [ 3162.581940][ T4286] ? netlink_detachskb+0x60/0x60 [ 3162.589126][ T4286] ? __virt_addr_valid+0x1fd/0x290 [ 3162.594223][ T4286] netlink_sendmsg+0x9de/0xd80 [ 3162.598978][ T4286] ? netlink_getsockopt+0x8e0/0x8e0 [ 3162.604147][ T4286] ? import_iovec+0x1c2/0x380 [ 3162.608796][ T4286] ? security_socket_sendmsg+0xad/0xc0 [ 3162.614240][ T4286] ? netlink_getsockopt+0x8e0/0x8e0 [ 3162.619419][ T4286] ____sys_sendmsg+0x58a/0x8d0 [ 3162.624157][ T4286] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 3162.629331][ T4286] ? proc_fail_nth_read+0x1d0/0x1d0 [ 3162.634518][ T4286] __sys_sendmsg+0x2d5/0x3c0 [ 3162.639104][ T4286] ? ____sys_sendmsg+0x8d0/0x8d0 [ 3162.644038][ T4286] ? fput_many+0x42/0x1a0 [ 3162.648360][ T4286] ? ksys_write+0x25d/0x2c0 [ 3162.652846][ T4286] do_syscall_64+0xcb/0x150 [ 3162.657331][ T4286] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3162.663231][ T4286] RIP: 0033:0x45ce69 [ 3162.667097][ T4286] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3162.686693][ T4286] RSP: 002b:00007fc9cb956c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3162.695080][ T4286] RAX: ffffffffffffffda RBX: 000000000002c0c0 RCX: 000000000045ce69 [ 3162.703027][ T4286] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 17:53:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) [ 3162.711410][ T4286] RBP: 00007fc9cb956ca0 R08: 0000000000000000 R09: 0000000000000000 [ 3162.719363][ T4286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3162.727315][ T4286] R13: 00007ffec001348f R14: 00007fc9cb9579c0 R15: 000000000118bf2c [ 3162.736579][ T4286] kasan: CONFIG_KASAN_INLINE enabled [ 3162.742267][ T4286] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 3162.750767][ T4286] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 3162.757701][ T4286] CPU: 1 PID: 4286 Comm: syz-executor.5 Not tainted 5.4.58-syzkaller-00203-g46090d578669 #0 [ 3162.767760][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3162.777816][ T4286] RIP: 0010:rtm_new_nexthop+0x265e/0x6ba0 [ 3162.783520][ T4286] Code: 00 80 3c 01 00 74 0a 48 8b 7c 24 18 e8 5b 03 04 fe 48 8b 44 24 18 48 89 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 34 03 04 fe 48 8b 44 24 18 48 89 03 [ 3162.803188][ T4286] RSP: 0018:ffff88818bd5f0e0 EFLAGS: 00010246 [ 3162.809254][ T4286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 3162.817200][ T4286] RDX: ffffc900012ca000 RSI: 000000000003ffff RDI: 0000000000040000 [ 3162.825247][ T4286] RBP: ffff88818bd5f4d0 R08: ffffffff836c959a R09: fffffbfff098c3da [ 3162.833198][ T4286] R10: fffffbfff098c3da R11: 0000000000000000 R12: 0000000000000003 [ 3162.841148][ T4286] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000010000 [ 3162.849110][ T4286] FS: 00007fc9cb957700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 3162.858014][ T4286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3162.864584][ T4286] CR2: 000000000118c000 CR3: 0000000139124001 CR4: 00000000001606e0 [ 3162.872535][ T4286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3162.880488][ T4286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3162.888458][ T4286] Call Trace: [ 3162.891741][ T4286] ? __schedule+0x920/0xef0 [ 3162.896233][ T4286] ? local_bh_enable+0x20/0x20 [ 3162.900979][ T4286] ? _raw_spin_lock+0xa1/0x170 [ 3162.905724][ T4286] ? _raw_spin_trylock_bh+0x190/0x190 [ 3162.911067][ T4286] ? schedule+0x13b/0x1d0 [ 3162.915409][ T4286] ? _raw_spin_unlock+0x5/0x20 [ 3162.920156][ T4286] ? __mutex_lock+0xb03/0xc90 [ 3162.924810][ T4286] ? __ww_mutex_lock_interruptible_slowpath+0x10/0x10 [ 3162.931561][ T4286] ? memset+0x1f/0x40 [ 3162.935521][ T4286] ? unwind_next_frame+0x1c90/0x2330 [ 3162.940801][ T4286] ? cap_capable+0x23f/0x280 [ 3162.945405][ T4286] ? security_capable+0xb1/0xd0 [ 3162.950245][ T4286] ? local_bh_enable+0x20/0x20 [ 3162.954986][ T4286] rtnetlink_rcv_msg+0x96e/0xc60 [ 3162.959913][ T4286] ? is_bpf_text_address+0x290/0x2b0 [ 3162.965185][ T4286] ? rtnetlink_bind+0x80/0x80 [ 3162.969856][ T4286] ? unwind_get_return_address+0x48/0x90 [ 3162.975466][ T4286] ? arch_stack_walk+0xd8/0x120 [ 3162.980313][ T4286] ? stack_trace_save+0x123/0x1f0 [ 3162.985327][ T4286] ? avc_has_perm_noaudit+0x400/0x400 [ 3162.990676][ T4286] ? stack_trace_snprint+0x150/0x150 [ 3162.995937][ T4286] ? _raw_spin_lock_bh+0xa4/0x180 [ 3163.000937][ T4286] ? rhashtable_jhash2+0x1cf/0x2f0 [ 3163.006035][ T4286] ? jhash+0x740/0x740 [ 3163.010081][ T4286] ? rht_key_hashfn+0x157/0x240 [ 3163.014920][ T4286] ? deferred_put_nlk_sk+0x210/0x210 [ 3163.020201][ T4286] ? netlink_sendmsg+0x77b/0xd80 [ 3163.025125][ T4286] ? jhash+0x740/0x740 [ 3163.029172][ T4286] ? netlink_hash+0xd0/0xd0 [ 3163.033649][ T4286] ? __rcu_read_lock+0x50/0x50 [ 3163.038517][ T4286] netlink_rcv_skb+0x200/0x480 [ 3163.043278][ T4286] ? rtnetlink_bind+0x80/0x80 [ 3163.047964][ T4286] ? netlink_ack+0xa90/0xa90 [ 3163.052537][ T4286] ? __rcu_read_lock+0x50/0x50 [ 3163.057320][ T4286] ? selinux_vm_enough_memory+0x170/0x170 [ 3163.063124][ T4286] ? netlink_trim+0x10a/0x230 [ 3163.067808][ T4286] netlink_unicast+0x8ad/0xa50 [ 3163.072563][ T4286] ? netlink_detachskb+0x60/0x60 [ 3163.077508][ T4286] ? __virt_addr_valid+0x1fd/0x290 [ 3163.082616][ T4286] netlink_sendmsg+0x9de/0xd80 [ 3163.087359][ T4286] ? netlink_getsockopt+0x8e0/0x8e0 [ 3163.092557][ T4286] ? import_iovec+0x1c2/0x380 [ 3163.097213][ T4286] ? security_socket_sendmsg+0xad/0xc0 [ 3163.102651][ T4286] ? netlink_getsockopt+0x8e0/0x8e0 [ 3163.107830][ T4286] ____sys_sendmsg+0x58a/0x8d0 [ 3163.112575][ T4286] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 3163.117759][ T4286] ? proc_fail_nth_read+0x1d0/0x1d0 [ 3163.122955][ T4286] __sys_sendmsg+0x2d5/0x3c0 [ 3163.127521][ T4286] ? ____sys_sendmsg+0x8d0/0x8d0 [ 3163.132550][ T4286] ? fput_many+0x42/0x1a0 [ 3163.136861][ T4286] ? ksys_write+0x25d/0x2c0 [ 3163.141349][ T4286] do_syscall_64+0xcb/0x150 [ 3163.145860][ T4286] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3163.151741][ T4286] RIP: 0033:0x45ce69 [ 3163.155618][ T4286] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3163.175242][ T4286] RSP: 002b:00007fc9cb956c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3163.183629][ T4286] RAX: ffffffffffffffda RBX: 000000000002c0c0 RCX: 000000000045ce69 [ 3163.191583][ T4286] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3163.199529][ T4286] RBP: 00007fc9cb956ca0 R08: 0000000000000000 R09: 0000000000000000 17:53:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010017004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 3163.207480][ T4286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3163.215435][ T4286] R13: 00007ffec001348f R14: 00007fc9cb9579c0 R15: 000000000118bf2c [ 3163.223382][ T4286] Modules linked in: [ 3163.230785][ T4286] ---[ end trace 44145e654b83c389 ]--- [ 3163.249712][ T4286] RIP: 0010:rtm_new_nexthop+0x265e/0x6ba0 17:53:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) [ 3163.256276][ T4286] Code: 00 80 3c 01 00 74 0a 48 8b 7c 24 18 e8 5b 03 04 fe 48 8b 44 24 18 48 89 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 34 03 04 fe 48 8b 44 24 18 48 89 03 [ 3163.276874][ T4286] RSP: 0018:ffff88818bd5f0e0 EFLAGS: 00010246 [ 3163.283356][ T4286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 3163.291779][ T4286] RDX: ffffc900012ca000 RSI: 000000000003ffff RDI: 0000000000040000 [ 3163.299844][ T4286] RBP: ffff88818bd5f4d0 R08: ffffffff836c959a R09: fffffbfff098c3da 17:53:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x60}}, 0x0) [ 3163.308549][ T4286] R10: fffffbfff098c3da R11: 0000000000000000 R12: 0000000000000003 [ 3163.316932][ T4286] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000010000 [ 3163.325233][ T4286] FS: 00007fc9cb957700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 3163.334525][ T4286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3163.341713][ T4286] CR2: 0000000001590004 CR3: 0000000139124003 CR4: 00000000001606f0 [ 3163.349682][ T4286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3163.358290][ T4286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 3163.366718][ T4286] Kernel panic - not syncing: Fatal exception [ 3163.373326][ T4286] Kernel Offset: disabled [ 3163.377765][ T4286] Rebooting in 86400 seconds..