0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:05 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:06 executing program 1: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:06 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000000c0)={0x8, 0x0, [{0x40000000, 0x101, 0x170e2008, 0xff, 0xff}, {0x1, 0xbdb, 0x1f, 0x8, 0x8}, {0x80000001, 0x1000, 0x1ff, 0x3f}, {0x1, 0xe46e, 0xc9, 0x7000000, 0x8}, {0x6, 0xb5d, 0xfffffffa, 0x4, 0x3}, {0xd, 0x200, 0x9, 0x3b6, 0x6}, {0xc0000001, 0xffffffff, 0x40, 0x6, 0x4}, {0x40000001, 0x1, 0x2, 0x10000}]}) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:12:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:06 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:06 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x850, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000016c0)={0x0, 0x0}) perf_event_open(&(0x7f0000001640)={0x0, 0x70, 0x5, 0x1, 0x1f, 0x7f, 0x0, 0xfffffffffffffffc, 0x4a00, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000001600)}, 0x12, 0xe304, 0x7ff, 0x2, 0x3, 0x1b46, 0x4}, r3, 0x8, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/150, 0x96}], 0x5}, 0x40003122) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x4e22, 0x0, @mcast2, 0x3}}, 0x0, 0x0, 0x17, 0x0, "c5e6024e5c4f614dff743a1516a61fed3ae63ed5d8ce02004790b5a8840adb8c0f51a1bbf75328bd77d1ced2c29d2814d7dcb32fc018853eb2f2622226225ed4db92a426bb4002c0faf4fb88fd1560e3"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000001700)={0x1, 0x4, 0xfffffffffffffffc, 0x7, r6}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:06 executing program 1: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:06 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:06 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={0xffffffffffffffff, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:06 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:07 executing program 1: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:07 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={0xffffffffffffffff, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:07 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x9c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7064}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfe}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfff}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r5 = accept(0xffffffffffffffff, &(0x7f0000005f00)=@xdp, &(0x7f0000005f80)=0x80) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000005fc0)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000300)={0x200, 0x104a, 0x0, 'queue0\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r6, 0x80045500, &(0x7f00000002c0)) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f00000003c0)={0x3, "fe9411dc6a1697b39cdacc7d954ed751b69c91e3546e912f10048d39d1fda121", 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000280)=0x10000, 0x8) r9 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:07 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:07 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:07 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={0xffffffffffffffff, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:07 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:07 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:07 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:07 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:08 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x195502, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000000c0)) 12:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:08 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:08 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:08 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:08 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:08 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') syz_init_net_socket$x25(0x9, 0x5, 0x0) 12:12:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:08 executing program 1: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x7f, 0x4040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x3, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:09 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:09 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x401, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x12040, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x5, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000080)={0x5, 0x0, 0x80000000, 0x93c, 0x6}) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:10 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 1: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:11 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:11 executing program 1: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:11 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000400)={0x9, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x10000, 0x1000}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000500)={0x40024100, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x14}, &(0x7f0000000200)=""/148, 0x94, &(0x7f00000002c0)=""/248, &(0x7f00000004c0)=[r1, r5, r7, r8, 0xffffffffffffffff, r9, r10], 0x7}, 0x50) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r11 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:11 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 784.589458][T25557] IPVS: ftp: loaded support on port[0] = 21 12:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:11 executing program 1: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 784.964895][ T8164] tipc: TX() has been purged, node left! 12:12:11 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:12 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0xa7}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, r1, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:12 executing program 1: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:12 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:12 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x2022}, 0x0, 0xb, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 12:12:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000300)=0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 12:12:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:12 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000300)=0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 12:12:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:13 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000300)=0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 12:12:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:13 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:13 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 12:12:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 12:12:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:14 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002900)=@newlink={0x4c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x4c}}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 12:12:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 12:12:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 12:12:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:14 executing program 1: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r2, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:15 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:15 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x20002, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r6, r7, 0x0, 0x102000003) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000280)={0x60000000}) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000200)=0x7) openat$cgroup_ro(r3, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) r9 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r9, 0x0, 0x80000001, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000080)) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r4) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r10, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4) r11 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r12, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) 12:12:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 12:12:15 executing program 5 (fault-call:4 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:15 executing program 1 (fault-call:11 fault-nth:0): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 788.371882][T25726] FAULT_INJECTION: forcing a failure. [ 788.371882][T25726] name failslab, interval 1, probability 0, space 0, times 0 [ 788.384682][T25726] CPU: 1 PID: 25726 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 788.393359][T25726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.403430][T25726] Call Trace: [ 788.406733][T25726] dump_stack+0x11d/0x181 [ 788.411085][T25726] should_fail.cold+0xa/0x1a [ 788.415705][T25726] __should_failslab+0xee/0x130 [ 788.420688][T25726] should_failslab+0x9/0x14 [ 788.425212][T25726] kmem_cache_alloc_node_trace+0x3b/0x670 [ 788.431047][T25726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 788.437395][T25726] __kmalloc_node+0x38/0x50 [ 788.442045][T25726] kvmalloc_node+0x71/0x100 [ 788.446568][T25726] iov_iter_get_pages_alloc+0x476/0xb10 [ 788.452140][T25726] ? iov_iter_pipe+0xfa/0x120 [ 788.457048][T25726] default_file_splice_read+0xd5/0x590 [ 788.462600][T25726] ? fsnotify+0x6a9/0x7d0 [ 788.466942][T25726] ? security_file_permission+0x88/0x280 [ 788.472592][T25726] ? rw_verify_area+0xee/0x250 [ 788.477415][T25726] do_splice_to+0xf2/0x130 [ 788.481913][T25726] ? iter_file_splice_write+0x840/0x840 [ 788.487473][T25726] ? iter_file_splice_write+0x840/0x840 [ 788.493046][T25726] do_splice+0xbbb/0xc40 [ 788.497309][T25726] __x64_sys_splice+0x20a/0x220 [ 788.502177][T25726] do_syscall_64+0xcc/0x3a0 [ 788.506775][T25726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 788.512671][T25726] RIP: 0033:0x45b399 [ 788.516703][T25726] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 788.537439][T25726] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 788.545855][T25726] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 788.553855][T25726] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 788.561832][T25726] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 788.569820][T25726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 788.577878][T25726] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000000 12:12:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:15 executing program 2 (fault-call:4 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:15 executing program 5 (fault-call:4 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 788.895065][T25741] FAULT_INJECTION: forcing a failure. [ 788.895065][T25741] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 788.908419][T25741] CPU: 1 PID: 25741 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 788.917152][T25741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.918543][T25742] FAULT_INJECTION: forcing a failure. [ 788.918543][T25742] name failslab, interval 1, probability 0, space 0, times 0 [ 788.927468][T25741] Call Trace: [ 788.927495][T25741] dump_stack+0x11d/0x181 [ 788.927522][T25741] should_fail.cold+0xa/0x1a [ 788.927547][T25741] should_fail_alloc_page+0x50/0x60 [ 788.927614][T25741] __alloc_pages_nodemask+0xd2/0x310 [ 788.962938][T25741] alloc_pages_current+0xd1/0x170 [ 788.968008][T25741] push_pipe+0x170/0x320 [ 788.972438][T25741] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 788.978042][T25741] ? iov_iter_pipe+0xfa/0x120 [ 788.982733][T25741] default_file_splice_read+0xd5/0x590 [ 788.988316][T25741] ? fsnotify+0x6a9/0x7d0 [ 788.992723][T25741] ? security_file_permission+0x88/0x280 [ 788.998486][T25741] ? rw_verify_area+0xee/0x250 [ 789.003313][T25741] do_splice_to+0xf2/0x130 [ 789.007740][T25741] ? iter_file_splice_write+0x840/0x840 [ 789.013301][T25741] ? iter_file_splice_write+0x840/0x840 [ 789.018876][T25741] do_splice+0xbbb/0xc40 [ 789.023332][T25741] __x64_sys_splice+0x20a/0x220 [ 789.028203][T25741] do_syscall_64+0xcc/0x3a0 [ 789.032878][T25741] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 789.039198][T25741] RIP: 0033:0x45b399 [ 789.043129][T25741] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 789.062854][T25741] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 789.071292][T25741] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 789.079284][T25741] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 789.087375][T25741] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 12:12:16 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 789.095644][T25741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 789.103618][T25741] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000001 [ 789.111666][T25742] CPU: 0 PID: 25742 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 789.120390][T25742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.130446][T25742] Call Trace: [ 789.133752][T25742] dump_stack+0x11d/0x181 [ 789.138121][T25742] should_fail.cold+0xa/0x1a 12:12:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 789.142812][T25742] __should_failslab+0xee/0x130 [ 789.147679][T25742] should_failslab+0x9/0x14 [ 789.152208][T25742] kmem_cache_alloc_node_trace+0x3b/0x670 [ 789.157952][T25742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 789.164384][T25742] __kmalloc_node+0x38/0x50 [ 789.168917][T25742] kvmalloc_node+0x71/0x100 [ 789.173540][T25742] iov_iter_get_pages_alloc+0x476/0xb10 [ 789.179298][T25742] ? iov_iter_pipe+0xfa/0x120 [ 789.184035][T25742] default_file_splice_read+0xd5/0x590 [ 789.189677][T25742] ? fsnotify+0x6a9/0x7d0 [ 789.194038][T25742] ? security_file_permission+0x88/0x280 [ 789.199864][T25742] ? rw_verify_area+0xee/0x250 [ 789.204650][T25742] do_splice_to+0xf2/0x130 [ 789.209402][T25742] ? iter_file_splice_write+0x840/0x840 [ 789.215035][T25742] ? iter_file_splice_write+0x840/0x840 [ 789.220706][T25742] do_splice+0xbbb/0xc40 [ 789.225028][T25742] __x64_sys_splice+0x20a/0x220 [ 789.229986][T25742] do_syscall_64+0xcc/0x3a0 [ 789.234533][T25742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 789.240433][T25742] RIP: 0033:0x45b399 12:12:16 executing program 5 (fault-call:4 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 789.244416][T25742] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 789.264377][T25742] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 789.272837][T25742] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 789.280821][T25742] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 789.288929][T25742] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 789.296911][T25742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 789.304892][T25742] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000000 [ 789.341178][T25749] FAULT_INJECTION: forcing a failure. [ 789.341178][T25749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 789.354523][T25749] CPU: 0 PID: 25749 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 789.363201][T25749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.373400][T25749] Call Trace: [ 789.376885][T25749] dump_stack+0x11d/0x181 [ 789.381263][T25749] should_fail.cold+0xa/0x1a [ 789.385886][T25749] should_fail_alloc_page+0x50/0x60 [ 789.391114][T25749] __alloc_pages_nodemask+0xd2/0x310 [ 789.396542][T25749] alloc_pages_current+0xd1/0x170 [ 789.401592][T25749] push_pipe+0x170/0x320 [ 789.405924][T25749] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 789.411540][T25749] ? iov_iter_pipe+0xfa/0x120 [ 789.416239][T25749] default_file_splice_read+0xd5/0x590 [ 789.421776][T25749] ? fsnotify+0x6a9/0x7d0 [ 789.426137][T25749] ? security_file_permission+0x88/0x280 [ 789.431806][T25749] ? rw_verify_area+0xee/0x250 [ 789.436614][T25749] do_splice_to+0xf2/0x130 [ 789.441176][T25749] ? iter_file_splice_write+0x840/0x840 [ 789.447024][T25749] ? iter_file_splice_write+0x840/0x840 [ 789.452597][T25749] do_splice+0xbbb/0xc40 [ 789.457040][T25749] __x64_sys_splice+0x20a/0x220 [ 789.461918][T25749] do_syscall_64+0xcc/0x3a0 [ 789.466519][T25749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 789.472542][T25749] RIP: 0033:0x45b399 [ 789.476463][T25749] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 789.496362][T25749] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 789.504910][T25749] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 789.512900][T25749] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 789.520885][T25749] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 789.529090][T25749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 789.537073][T25749] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000002 12:12:16 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:17 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x285180, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000000c0)={0x0, 0x1, 0x18, 0x0, 0x95, &(0x7f0000000200)="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"}) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:17 executing program 5 (fault-call:4 fault-nth:3): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:17 executing program 2 (fault-call:4 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:17 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000280)={r7, 0x4}, &(0x7f00000002c0)=0x8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 790.241804][T25766] FAULT_INJECTION: forcing a failure. [ 790.241804][T25766] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 790.255142][T25766] CPU: 0 PID: 25766 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 790.263821][T25766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.273958][T25766] Call Trace: [ 790.282596][T25766] dump_stack+0x11d/0x181 [ 790.287072][T25766] should_fail.cold+0xa/0x1a [ 790.291825][T25766] should_fail_alloc_page+0x50/0x60 [ 790.297128][T25766] __alloc_pages_nodemask+0xd2/0x310 [ 790.302450][T25766] alloc_pages_current+0xd1/0x170 [ 790.307605][T25766] push_pipe+0x170/0x320 [ 790.311894][T25766] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 790.317464][T25766] ? iov_iter_pipe+0xfa/0x120 [ 790.320409][T25768] FAULT_INJECTION: forcing a failure. [ 790.320409][T25768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 790.322267][T25766] default_file_splice_read+0xd5/0x590 [ 790.341211][T25766] ? fsnotify+0x6a9/0x7d0 [ 790.345581][T25766] ? security_file_permission+0x88/0x280 [ 790.351326][T25766] ? rw_verify_area+0xee/0x250 [ 790.356165][T25766] do_splice_to+0xf2/0x130 [ 790.360621][T25766] ? iter_file_splice_write+0x840/0x840 [ 790.366256][T25766] ? iter_file_splice_write+0x840/0x840 [ 790.372003][T25766] do_splice+0xbbb/0xc40 [ 790.376269][T25766] __x64_sys_splice+0x20a/0x220 [ 790.381150][T25766] do_syscall_64+0xcc/0x3a0 [ 790.385671][T25766] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 790.391801][T25766] RIP: 0033:0x45b399 [ 790.395854][T25766] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 790.415469][T25766] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 790.423938][T25766] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 790.432053][T25766] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 790.440035][T25766] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 790.448092][T25766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 790.456070][T25766] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000003 [ 790.465069][T25768] CPU: 1 PID: 25768 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 790.473759][T25768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.483937][T25768] Call Trace: [ 790.487244][T25768] dump_stack+0x11d/0x181 [ 790.491642][T25768] should_fail.cold+0xa/0x1a [ 790.496251][T25768] should_fail_alloc_page+0x50/0x60 [ 790.501536][T25768] __alloc_pages_nodemask+0xd2/0x310 [ 790.508139][T25768] alloc_pages_current+0xd1/0x170 [ 790.513174][T25768] push_pipe+0x170/0x320 [ 790.517460][T25768] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 790.523184][T25768] ? iov_iter_pipe+0xfa/0x120 [ 790.527871][T25768] default_file_splice_read+0xd5/0x590 [ 790.533347][T25768] ? fsnotify+0x6a9/0x7d0 [ 790.537783][T25768] ? security_file_permission+0x88/0x280 [ 790.543476][T25768] ? rw_verify_area+0xee/0x250 [ 790.548424][T25768] do_splice_to+0xf2/0x130 [ 790.552953][T25768] ? iter_file_splice_write+0x840/0x840 [ 790.558519][T25768] ? iter_file_splice_write+0x840/0x840 [ 790.565379][T25768] do_splice+0xbbb/0xc40 [ 790.569664][T25768] __x64_sys_splice+0x20a/0x220 [ 790.574519][T25768] do_syscall_64+0xcc/0x3a0 [ 790.579053][T25768] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 790.585090][T25768] RIP: 0033:0x45b399 [ 790.589037][T25768] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 790.608643][T25768] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 790.617263][T25768] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 790.625238][T25768] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 790.633344][T25768] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 790.641317][T25768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 790.649306][T25768] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000001 12:12:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:17 executing program 2 (fault-call:4 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:17 executing program 5 (fault-call:4 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 790.956656][T25781] FAULT_INJECTION: forcing a failure. [ 790.956656][T25781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 790.970009][T25781] CPU: 0 PID: 25781 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 790.978778][T25781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.988846][T25781] Call Trace: [ 790.992156][T25781] dump_stack+0x11d/0x181 [ 790.996559][T25781] should_fail.cold+0xa/0x1a [ 791.001507][T25781] should_fail_alloc_page+0x50/0x60 [ 791.006815][T25781] __alloc_pages_nodemask+0xd2/0x310 [ 791.012153][T25781] alloc_pages_current+0xd1/0x170 [ 791.017197][T25781] push_pipe+0x170/0x320 [ 791.021460][T25781] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 791.027102][T25781] ? iov_iter_pipe+0xfa/0x120 [ 791.031840][T25781] default_file_splice_read+0xd5/0x590 [ 791.037394][T25781] ? fsnotify+0x6a9/0x7d0 [ 791.041820][T25781] ? security_file_permission+0x88/0x280 [ 791.047596][T25781] ? rw_verify_area+0xee/0x250 [ 791.052391][T25781] do_splice_to+0xf2/0x130 [ 791.056825][T25781] ? iter_file_splice_write+0x840/0x840 [ 791.062520][T25781] ? iter_file_splice_write+0x840/0x840 [ 791.068101][T25781] do_splice+0xbbb/0xc40 [ 791.072395][T25781] __x64_sys_splice+0x20a/0x220 [ 791.077276][T25781] do_syscall_64+0xcc/0x3a0 [ 791.082047][T25781] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 791.088059][T25781] RIP: 0033:0x45b399 [ 791.091980][T25781] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 791.112077][T25781] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 791.120630][T25781] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 791.125026][T25788] FAULT_INJECTION: forcing a failure. [ 791.125026][T25788] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 791.128621][T25781] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 12:12:17 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}]}, 0x50}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 791.149998][T25781] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 791.157980][T25781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 791.165960][T25781] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000002 [ 791.174035][T25788] CPU: 1 PID: 25788 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 791.182762][T25788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.192828][T25788] Call Trace: [ 791.196129][T25788] dump_stack+0x11d/0x181 [ 791.200551][T25788] should_fail.cold+0xa/0x1a [ 791.205156][T25788] should_fail_alloc_page+0x50/0x60 [ 791.210464][T25788] __alloc_pages_nodemask+0xd2/0x310 [ 791.215784][T25788] alloc_pages_current+0xd1/0x170 [ 791.220832][T25788] push_pipe+0x170/0x320 [ 791.225252][T25788] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 791.230864][T25788] ? iov_iter_pipe+0xfa/0x120 [ 791.235638][T25788] default_file_splice_read+0xd5/0x590 [ 791.241269][T25788] ? fsnotify+0x6a9/0x7d0 [ 791.245630][T25788] ? security_file_permission+0x88/0x280 [ 791.251289][T25788] ? rw_verify_area+0xee/0x250 [ 791.256095][T25788] do_splice_to+0xf2/0x130 [ 791.260533][T25788] ? iter_file_splice_write+0x840/0x840 [ 791.266560][T25788] ? iter_file_splice_write+0x840/0x840 [ 791.272263][T25788] do_splice+0xbbb/0xc40 [ 791.276568][T25788] __x64_sys_splice+0x20a/0x220 [ 791.281582][T25788] do_syscall_64+0xcc/0x3a0 [ 791.286195][T25788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 791.292212][T25788] RIP: 0033:0x45b399 [ 791.296347][T25788] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 791.315991][T25788] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 791.324418][T25788] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 791.332406][T25788] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 791.340406][T25788] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 791.348559][T25788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:18 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 791.356552][T25788] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000004 12:12:18 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:18 executing program 2 (fault-call:4 fault-nth:3): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:18 executing program 5 (fault-call:4 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:18 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 791.743189][T25814] FAULT_INJECTION: forcing a failure. [ 791.743189][T25814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 791.756592][T25814] CPU: 1 PID: 25814 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 791.765265][T25814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.775550][T25814] Call Trace: [ 791.778853][T25814] dump_stack+0x11d/0x181 [ 791.783232][T25814] should_fail.cold+0xa/0x1a [ 791.788029][T25814] should_fail_alloc_page+0x50/0x60 [ 791.793691][T25814] __alloc_pages_nodemask+0xd2/0x310 [ 791.799007][T25814] alloc_pages_current+0xd1/0x170 [ 791.804145][T25814] push_pipe+0x170/0x320 [ 791.808422][T25814] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 791.813982][T25814] ? iov_iter_pipe+0xfa/0x120 [ 791.818735][T25814] default_file_splice_read+0xd5/0x590 [ 791.824350][T25814] ? fsnotify+0x6a9/0x7d0 [ 791.828732][T25814] ? security_file_permission+0x88/0x280 [ 791.834392][T25814] ? rw_verify_area+0xee/0x250 [ 791.839212][T25814] do_splice_to+0xf2/0x130 [ 791.843671][T25814] ? iter_file_splice_write+0x840/0x840 [ 791.849258][T25814] ? iter_file_splice_write+0x840/0x840 [ 791.854819][T25814] do_splice+0xbbb/0xc40 [ 791.859375][T25814] __x64_sys_splice+0x20a/0x220 [ 791.864272][T25814] do_syscall_64+0xcc/0x3a0 [ 791.868980][T25814] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 791.874879][T25814] RIP: 0033:0x45b399 [ 791.878789][T25814] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 791.898405][T25814] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 791.906950][T25814] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 791.914936][T25814] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 791.922921][T25814] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 791.930908][T25814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 791.938891][T25814] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000003 [ 791.974763][T25815] FAULT_INJECTION: forcing a failure. [ 791.974763][T25815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 791.988273][T25815] CPU: 0 PID: 25815 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 791.996954][T25815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.007756][T25815] Call Trace: [ 792.011080][T25815] dump_stack+0x11d/0x181 [ 792.015441][T25815] should_fail.cold+0xa/0x1a [ 792.020110][T25815] should_fail_alloc_page+0x50/0x60 [ 792.025382][T25815] __alloc_pages_nodemask+0xd2/0x310 [ 792.030716][T25815] alloc_pages_current+0xd1/0x170 [ 792.035772][T25815] push_pipe+0x170/0x320 [ 792.040145][T25815] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 792.045718][T25815] ? iov_iter_pipe+0xfa/0x120 [ 792.050449][T25815] default_file_splice_read+0xd5/0x590 [ 792.055933][T25815] ? fsnotify+0x6a9/0x7d0 [ 792.060290][T25815] ? security_file_permission+0x88/0x280 [ 792.066029][T25815] ? rw_verify_area+0xee/0x250 [ 792.073698][T25815] do_splice_to+0xf2/0x130 [ 792.078326][T25815] ? iter_file_splice_write+0x840/0x840 [ 792.083958][T25815] ? iter_file_splice_write+0x840/0x840 [ 792.089522][T25815] do_splice+0xbbb/0xc40 [ 792.093797][T25815] __x64_sys_splice+0x20a/0x220 [ 792.098757][T25815] do_syscall_64+0xcc/0x3a0 [ 792.103472][T25815] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 792.109826][T25815] RIP: 0033:0x45b399 [ 792.113981][T25815] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 792.133744][T25815] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 792.142270][T25815] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 792.150395][T25815] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 792.158382][T25815] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 792.166439][T25815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:19 executing program 5 (fault-call:4 fault-nth:6): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 792.174454][T25815] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000005 12:12:19 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) sysfs$3(0x3) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r6, r7, 0x0, 0x102000003) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000100), 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r10 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) sendfile(r2, r9, 0x0, 0x102000003) connect$caif(r9, &(0x7f0000000040)=@dgm={0x25, 0x8000, 0x8}, 0x18) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:19 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r3 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000003) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000100), 0x4) fcntl$setstatus(r0, 0x4, 0xc5400) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:19 executing program 2 (fault-call:4 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 792.385354][T25828] FAULT_INJECTION: forcing a failure. [ 792.385354][T25828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 792.398681][T25828] CPU: 1 PID: 25828 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 792.407422][T25828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.417616][T25828] Call Trace: [ 792.420963][T25828] dump_stack+0x11d/0x181 [ 792.425315][T25828] should_fail.cold+0xa/0x1a [ 792.430055][T25828] should_fail_alloc_page+0x50/0x60 [ 792.435272][T25828] __alloc_pages_nodemask+0xd2/0x310 [ 792.440579][T25828] alloc_pages_current+0xd1/0x170 [ 792.445646][T25828] push_pipe+0x170/0x320 [ 792.449902][T25828] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 792.455489][T25828] ? iov_iter_pipe+0xfa/0x120 [ 792.460261][T25828] default_file_splice_read+0xd5/0x590 [ 792.465737][T25828] ? fsnotify+0x6a9/0x7d0 [ 792.470153][T25828] ? security_file_permission+0x88/0x280 [ 792.475807][T25828] ? rw_verify_area+0xee/0x250 [ 792.480666][T25828] do_splice_to+0xf2/0x130 [ 792.485096][T25828] ? iter_file_splice_write+0x840/0x840 [ 792.490648][T25828] ? iter_file_splice_write+0x840/0x840 [ 792.496268][T25828] do_splice+0xbbb/0xc40 [ 792.500611][T25828] __x64_sys_splice+0x20a/0x220 [ 792.505516][T25828] do_syscall_64+0xcc/0x3a0 [ 792.510045][T25828] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 792.515952][T25828] RIP: 0033:0x45b399 [ 792.519985][T25828] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 792.539634][T25828] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 792.548067][T25828] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 792.556058][T25828] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 792.564127][T25828] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 792.572127][T25828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 792.580224][T25828] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000006 12:12:19 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 792.611769][T25833] FAULT_INJECTION: forcing a failure. [ 792.611769][T25833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 792.625343][T25833] CPU: 1 PID: 25833 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 792.634037][T25833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.644171][T25833] Call Trace: [ 792.647488][T25833] dump_stack+0x11d/0x181 [ 792.651842][T25833] should_fail.cold+0xa/0x1a [ 792.656460][T25833] should_fail_alloc_page+0x50/0x60 [ 792.661769][T25833] __alloc_pages_nodemask+0xd2/0x310 [ 792.667084][T25833] alloc_pages_current+0xd1/0x170 [ 792.672137][T25833] push_pipe+0x170/0x320 [ 792.676423][T25833] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 792.682171][T25833] ? iov_iter_pipe+0xfa/0x120 [ 792.686865][T25833] default_file_splice_read+0xd5/0x590 [ 792.692632][T25833] ? fsnotify+0x6a9/0x7d0 [ 792.697086][T25833] ? security_file_permission+0x88/0x280 [ 792.702886][T25833] ? rw_verify_area+0xee/0x250 [ 792.707666][T25833] do_splice_to+0xf2/0x130 [ 792.712095][T25833] ? iter_file_splice_write+0x840/0x840 [ 792.717675][T25833] ? iter_file_splice_write+0x840/0x840 [ 792.723250][T25833] do_splice+0xbbb/0xc40 [ 792.727527][T25833] __x64_sys_splice+0x20a/0x220 [ 792.732414][T25833] do_syscall_64+0xcc/0x3a0 [ 792.736949][T25833] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 792.742951][T25833] RIP: 0033:0x45b399 [ 792.746926][T25833] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 792.766583][T25833] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 792.775058][T25833] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 792.783071][T25833] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 792.791109][T25833] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 792.799093][T25833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 792.807078][T25833] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000004 12:12:19 executing program 5 (fault-call:4 fault-nth:7): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:19 executing program 2 (fault-call:4 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) [ 792.971770][T25846] FAULT_INJECTION: forcing a failure. [ 792.971770][T25846] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 792.985388][T25846] CPU: 0 PID: 25846 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 792.994062][T25846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.004137][T25846] Call Trace: [ 793.007438][T25846] dump_stack+0x11d/0x181 [ 793.011793][T25846] should_fail.cold+0xa/0x1a [ 793.016486][T25846] should_fail_alloc_page+0x50/0x60 [ 793.021754][T25846] __alloc_pages_nodemask+0xd2/0x310 [ 793.027124][T25846] alloc_pages_current+0xd1/0x170 [ 793.032166][T25846] push_pipe+0x170/0x320 [ 793.036426][T25846] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 793.042026][T25846] ? iov_iter_pipe+0xfa/0x120 [ 793.046728][T25846] default_file_splice_read+0xd5/0x590 [ 793.052343][T25846] ? fsnotify+0x6a9/0x7d0 [ 793.056866][T25846] ? security_file_permission+0x88/0x280 [ 793.063046][T25846] ? rw_verify_area+0xee/0x250 [ 793.067824][T25846] do_splice_to+0xf2/0x130 [ 793.072245][T25846] ? iter_file_splice_write+0x840/0x840 [ 793.077813][T25846] ? iter_file_splice_write+0x840/0x840 [ 793.083433][T25846] do_splice+0xbbb/0xc40 [ 793.087797][T25846] __x64_sys_splice+0x20a/0x220 [ 793.092747][T25846] do_syscall_64+0xcc/0x3a0 [ 793.097369][T25846] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 793.103261][T25846] RIP: 0033:0x45b399 [ 793.107296][T25846] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.127203][T25846] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 793.135712][T25846] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 793.143708][T25846] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 793.151686][T25846] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 793.160115][T25846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 793.168083][T25846] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000007 12:12:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) 12:12:20 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 793.303966][T25856] FAULT_INJECTION: forcing a failure. [ 793.303966][T25856] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 793.317506][T25856] CPU: 1 PID: 25856 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 793.327147][T25856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.337202][T25856] Call Trace: [ 793.340585][T25856] dump_stack+0x11d/0x181 [ 793.344940][T25856] should_fail.cold+0xa/0x1a [ 793.349561][T25856] should_fail_alloc_page+0x50/0x60 [ 793.354899][T25856] __alloc_pages_nodemask+0xd2/0x310 [ 793.360204][T25856] alloc_pages_current+0xd1/0x170 [ 793.365328][T25856] push_pipe+0x170/0x320 [ 793.369683][T25856] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 793.375306][T25856] ? iov_iter_pipe+0xfa/0x120 [ 793.380111][T25856] default_file_splice_read+0xd5/0x590 [ 793.385591][T25856] ? fsnotify+0x6a9/0x7d0 [ 793.390052][T25856] ? security_file_permission+0x88/0x280 [ 793.395703][T25856] ? rw_verify_area+0xee/0x250 [ 793.400482][T25856] do_splice_to+0xf2/0x130 [ 793.405196][T25856] ? iter_file_splice_write+0x840/0x840 [ 793.410863][T25856] ? iter_file_splice_write+0x840/0x840 [ 793.416458][T25856] do_splice+0xbbb/0xc40 [ 793.420915][T25856] __x64_sys_splice+0x20a/0x220 [ 793.425788][T25856] do_syscall_64+0xcc/0x3a0 [ 793.430456][T25856] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 793.436350][T25856] RIP: 0033:0x45b399 12:12:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x0) [ 793.440268][T25856] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.460084][T25856] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 793.468500][T25856] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 793.476490][T25856] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 793.484483][T25856] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 793.492487][T25856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:20 executing program 5 (fault-call:4 fault-nth:8): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 793.500519][T25856] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000005 12:12:20 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000440)={0x1f, @fixed={[], 0x11}}, 0xa) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='team_slave_0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = syz_open_dev$media(&(0x7f00000003c0)='/dev/media#\x00', 0x4, 0x612001) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000400)={0x18, 0x1, 0x0, {0x4}}, 0x18) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x109900, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r8) sendfile(r2, r6, 0x0, 0x102000003) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/167, 0xa7, 0x10322, &(0x7f0000000340)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 793.650526][T25871] FAULT_INJECTION: forcing a failure. [ 793.650526][T25871] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 793.663882][T25871] CPU: 1 PID: 25871 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 793.672706][T25871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.683020][T25871] Call Trace: [ 793.686316][T25871] dump_stack+0x11d/0x181 [ 793.690708][T25871] should_fail.cold+0xa/0x1a [ 793.695379][T25871] should_fail_alloc_page+0x50/0x60 [ 793.700589][T25871] __alloc_pages_nodemask+0xd2/0x310 [ 793.705891][T25871] alloc_pages_current+0xd1/0x170 [ 793.711003][T25871] push_pipe+0x170/0x320 [ 793.715384][T25871] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 793.720962][T25871] ? iov_iter_pipe+0xfa/0x120 [ 793.725778][T25871] default_file_splice_read+0xd5/0x590 [ 793.731346][T25871] ? fsnotify+0x6a9/0x7d0 [ 793.735776][T25871] ? security_file_permission+0x88/0x280 [ 793.741491][T25871] ? rw_verify_area+0xee/0x250 [ 793.746280][T25871] do_splice_to+0xf2/0x130 [ 793.750702][T25871] ? iter_file_splice_write+0x840/0x840 [ 793.756379][T25871] ? iter_file_splice_write+0x840/0x840 [ 793.762637][T25871] do_splice+0xbbb/0xc40 [ 793.766971][T25871] __x64_sys_splice+0x20a/0x220 [ 793.771850][T25871] do_syscall_64+0xcc/0x3a0 [ 793.776396][T25871] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 793.782297][T25871] RIP: 0033:0x45b399 [ 793.786215][T25871] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.805840][T25871] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 793.814280][T25871] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 793.822255][T25871] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 793.830253][T25871] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 793.838228][T25871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 793.846309][T25871] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000008 12:12:20 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:20 executing program 2 (fault-call:4 fault-nth:6): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 12:12:20 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:20 executing program 5 (fault-call:4 fault-nth:9): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 794.074717][T25883] FAULT_INJECTION: forcing a failure. [ 794.074717][T25883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.088133][T25883] CPU: 0 PID: 25883 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 794.096865][T25883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.107026][T25883] Call Trace: [ 794.110327][T25883] dump_stack+0x11d/0x181 [ 794.114746][T25883] should_fail.cold+0xa/0x1a [ 794.119368][T25883] should_fail_alloc_page+0x50/0x60 [ 794.124695][T25883] __alloc_pages_nodemask+0xd2/0x310 [ 794.129006][T25885] FAULT_INJECTION: forcing a failure. [ 794.129006][T25885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.130004][T25883] alloc_pages_current+0xd1/0x170 [ 794.148323][T25883] push_pipe+0x170/0x320 [ 794.152601][T25883] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 794.158305][T25883] ? iov_iter_pipe+0xfa/0x120 [ 794.163102][T25883] default_file_splice_read+0xd5/0x590 [ 794.168682][T25883] ? fsnotify+0x6a9/0x7d0 [ 794.173176][T25883] ? security_file_permission+0x88/0x280 [ 794.178810][T25883] ? rw_verify_area+0xee/0x250 [ 794.183583][T25883] do_splice_to+0xf2/0x130 [ 794.188146][T25883] ? iter_file_splice_write+0x840/0x840 [ 794.193690][T25883] ? iter_file_splice_write+0x840/0x840 [ 794.199230][T25883] do_splice+0xbbb/0xc40 [ 794.203497][T25883] __x64_sys_splice+0x20a/0x220 [ 794.208357][T25883] do_syscall_64+0xcc/0x3a0 [ 794.213487][T25883] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 794.219532][T25883] RIP: 0033:0x45b399 [ 794.223504][T25883] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 794.243117][T25883] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 794.251531][T25883] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 794.259497][T25883] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 794.267924][T25883] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 794.277722][T25883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 794.285721][T25883] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000006 [ 794.293836][T25885] CPU: 1 PID: 25885 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 794.302616][T25885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.312713][T25885] Call Trace: [ 794.316066][T25885] dump_stack+0x11d/0x181 [ 794.320403][T25885] should_fail.cold+0xa/0x1a [ 794.325063][T25885] should_fail_alloc_page+0x50/0x60 [ 794.330336][T25885] __alloc_pages_nodemask+0xd2/0x310 [ 794.335642][T25885] alloc_pages_current+0xd1/0x170 [ 794.340709][T25885] push_pipe+0x170/0x320 [ 794.344970][T25885] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 794.350537][T25885] ? iov_iter_pipe+0xfa/0x120 [ 794.355344][T25885] default_file_splice_read+0xd5/0x590 [ 794.360822][T25885] ? fsnotify+0x6a9/0x7d0 [ 794.365171][T25885] ? security_file_permission+0x88/0x280 [ 794.371093][T25885] ? rw_verify_area+0xee/0x250 [ 794.375891][T25885] do_splice_to+0xf2/0x130 [ 794.380383][T25885] ? iter_file_splice_write+0x840/0x840 [ 794.385918][T25885] ? iter_file_splice_write+0x840/0x840 [ 794.391544][T25885] do_splice+0xbbb/0xc40 [ 794.395914][T25885] __x64_sys_splice+0x20a/0x220 [ 794.401113][T25885] do_syscall_64+0xcc/0x3a0 [ 794.405606][T25885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 794.411667][T25885] RIP: 0033:0x45b399 [ 794.415559][T25885] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 794.435325][T25885] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 794.443830][T25885] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 794.451848][T25885] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 794.459953][T25885] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 794.468199][T25885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 794.476262][T25885] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000009 12:12:21 executing program 2 (fault-call:4 fault-nth:7): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 12:12:21 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 794.665729][T25901] FAULT_INJECTION: forcing a failure. [ 794.665729][T25901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.679039][T25901] CPU: 1 PID: 25901 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 794.687727][T25901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.697799][T25901] Call Trace: [ 794.701097][T25901] dump_stack+0x11d/0x181 [ 794.705656][T25901] should_fail.cold+0xa/0x1a [ 794.710371][T25901] should_fail_alloc_page+0x50/0x60 12:12:21 executing program 5 (fault-call:4 fault-nth:10): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 794.715592][T25901] __alloc_pages_nodemask+0xd2/0x310 [ 794.720899][T25901] alloc_pages_current+0xd1/0x170 [ 794.726031][T25901] push_pipe+0x170/0x320 [ 794.730290][T25901] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 794.735850][T25901] ? iov_iter_pipe+0xfa/0x120 [ 794.740532][T25901] default_file_splice_read+0xd5/0x590 [ 794.746087][T25901] ? fsnotify+0x6a9/0x7d0 [ 794.750465][T25901] ? security_file_permission+0x88/0x280 [ 794.756422][T25901] ? rw_verify_area+0xee/0x250 [ 794.761215][T25901] do_splice_to+0xf2/0x130 [ 794.765755][T25901] ? iter_file_splice_write+0x840/0x840 [ 794.771332][T25901] ? iter_file_splice_write+0x840/0x840 [ 794.776966][T25901] do_splice+0xbbb/0xc40 [ 794.781308][T25901] __x64_sys_splice+0x20a/0x220 [ 794.786174][T25901] do_syscall_64+0xcc/0x3a0 [ 794.790791][T25901] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 794.796702][T25901] RIP: 0033:0x45b399 12:12:21 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r9, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r7, r8, 0x0, 0x102000003) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000100), 0x4) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000001ac0)={@multicast1, @loopback, 0x0}, &(0x7f0000001b00)=0xc) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x44, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') [ 794.800616][T25901] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 794.820224][T25901] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 794.828641][T25901] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 794.836614][T25901] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 794.844590][T25901] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 794.852613][T25901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 794.860766][T25901] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000007 12:12:21 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0xeb, [], 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000280)=""/235}, &(0x7f0000000400)=0x78) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x140, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0xfffffffffffeffff) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pipe(&(0x7f0000000440)) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 794.968498][T25911] FAULT_INJECTION: forcing a failure. [ 794.968498][T25911] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.982086][T25911] CPU: 0 PID: 25911 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 794.990763][T25911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.000820][T25911] Call Trace: [ 795.004185][T25911] dump_stack+0x11d/0x181 [ 795.008562][T25911] should_fail.cold+0xa/0x1a [ 795.013532][T25911] should_fail_alloc_page+0x50/0x60 [ 795.018787][T25911] __alloc_pages_nodemask+0xd2/0x310 [ 795.024123][T25911] alloc_pages_current+0xd1/0x170 [ 795.029259][T25911] push_pipe+0x170/0x320 [ 795.033536][T25911] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 795.039094][T25911] ? iov_iter_pipe+0xfa/0x120 [ 795.043788][T25911] default_file_splice_read+0xd5/0x590 [ 795.049524][T25911] ? fsnotify+0x6a9/0x7d0 [ 795.053890][T25911] ? security_file_permission+0x88/0x280 [ 795.059582][T25911] ? rw_verify_area+0xee/0x250 [ 795.064372][T25911] do_splice_to+0xf2/0x130 [ 795.068900][T25911] ? iter_file_splice_write+0x840/0x840 [ 795.074481][T25911] ? iter_file_splice_write+0x840/0x840 [ 795.080177][T25911] do_splice+0xbbb/0xc40 [ 795.084471][T25911] __x64_sys_splice+0x20a/0x220 [ 795.089512][T25911] do_syscall_64+0xcc/0x3a0 [ 795.094094][T25911] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.100951][T25911] RIP: 0033:0x45b399 [ 795.104947][T25911] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.124631][T25911] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 795.133040][T25911] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 795.141043][T25911] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 795.149068][T25911] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 795.157044][T25911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:22 executing program 2 (fault-call:4 fault-nth:8): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 795.165072][T25911] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000a 12:12:22 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:22 executing program 5 (fault-call:4 fault-nth:11): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 795.309013][T25922] FAULT_INJECTION: forcing a failure. [ 795.309013][T25922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 795.384999][T25922] CPU: 0 PID: 25922 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 795.393743][T25922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.403978][T25922] Call Trace: [ 795.407302][T25922] dump_stack+0x11d/0x181 [ 795.411637][T25922] should_fail.cold+0xa/0x1a [ 795.416455][T25922] should_fail_alloc_page+0x50/0x60 [ 795.421774][T25922] __alloc_pages_nodemask+0xd2/0x310 [ 795.427075][T25922] alloc_pages_current+0xd1/0x170 [ 795.432121][T25922] push_pipe+0x170/0x320 [ 795.436434][T25922] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 795.442024][T25922] ? iov_iter_pipe+0xfa/0x120 [ 795.446743][T25922] default_file_splice_read+0xd5/0x590 [ 795.453194][T25922] ? fsnotify+0x6a9/0x7d0 [ 795.457604][T25922] ? security_file_permission+0x88/0x280 [ 795.463265][T25922] ? rw_verify_area+0xee/0x250 [ 795.468117][T25922] do_splice_to+0xf2/0x130 [ 795.472552][T25922] ? iter_file_splice_write+0x840/0x840 [ 795.478362][T25922] ? iter_file_splice_write+0x840/0x840 [ 795.483927][T25922] do_splice+0xbbb/0xc40 [ 795.488188][T25922] __x64_sys_splice+0x20a/0x220 [ 795.493057][T25922] do_syscall_64+0xcc/0x3a0 [ 795.498333][T25922] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.504229][T25922] RIP: 0033:0x45b399 [ 795.508154][T25922] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:12:22 executing program 0 (fault-call:5 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 795.527824][T25922] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 795.536253][T25922] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 795.544223][T25922] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 795.552191][T25922] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 795.560167][T25922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 795.568155][T25922] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000008 [ 795.627313][T25935] FAULT_INJECTION: forcing a failure. [ 795.627313][T25935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 795.640611][T25935] CPU: 0 PID: 25935 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 795.649283][T25935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.659340][T25935] Call Trace: [ 795.662698][T25935] dump_stack+0x11d/0x181 [ 795.667108][T25935] should_fail.cold+0xa/0x1a [ 795.671717][T25935] should_fail_alloc_page+0x50/0x60 [ 795.676943][T25935] __alloc_pages_nodemask+0xd2/0x310 [ 795.682243][T25935] alloc_pages_current+0xd1/0x170 [ 795.687289][T25935] push_pipe+0x170/0x320 [ 795.691615][T25935] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 795.697178][T25935] ? iov_iter_pipe+0xfa/0x120 [ 795.701873][T25935] default_file_splice_read+0xd5/0x590 [ 795.703276][T25937] FAULT_INJECTION: forcing a failure. [ 795.703276][T25937] name failslab, interval 1, probability 0, space 0, times 0 [ 795.707419][T25935] ? fsnotify+0x6a9/0x7d0 [ 795.707491][T25935] ? security_file_permission+0x88/0x280 [ 795.730225][T25935] ? rw_verify_area+0xee/0x250 [ 795.735138][T25935] do_splice_to+0xf2/0x130 [ 795.739581][T25935] ? iter_file_splice_write+0x840/0x840 [ 795.745200][T25935] ? iter_file_splice_write+0x840/0x840 [ 795.750855][T25935] do_splice+0xbbb/0xc40 [ 795.755135][T25935] __x64_sys_splice+0x20a/0x220 [ 795.760002][T25935] do_syscall_64+0xcc/0x3a0 [ 795.764556][T25935] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.770574][T25935] RIP: 0033:0x45b399 [ 795.774592][T25935] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.794736][T25935] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 795.803184][T25935] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 795.811174][T25935] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 795.819597][T25935] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 12:12:22 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:22 executing program 2 (fault-call:4 fault-nth:9): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 795.827600][T25935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 795.835578][T25935] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000b [ 795.843668][T25937] CPU: 1 PID: 25937 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 795.852752][T25937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.862926][T25937] Call Trace: [ 795.866228][T25937] dump_stack+0x11d/0x181 [ 795.870603][T25937] should_fail.cold+0xa/0x1a 12:12:22 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 795.875262][T25937] __should_failslab+0xee/0x130 [ 795.880145][T25937] should_failslab+0x9/0x14 [ 795.884754][T25937] kmem_cache_alloc_node_trace+0x3b/0x670 [ 795.890501][T25937] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 795.896801][T25937] __kmalloc_node+0x38/0x50 [ 795.901330][T25937] kvmalloc_node+0x71/0x100 [ 795.905887][T25937] iov_iter_get_pages_alloc+0x476/0xb10 [ 795.911905][T25937] ? iov_iter_pipe+0xfa/0x120 [ 795.916612][T25937] default_file_splice_read+0xd5/0x590 [ 795.922278][T25937] ? fsnotify+0x6a9/0x7d0 [ 795.926691][T25937] ? security_file_permission+0x88/0x280 [ 795.932437][T25937] ? rw_verify_area+0xee/0x250 [ 795.937227][T25937] do_splice_to+0xf2/0x130 [ 795.941801][T25937] ? iter_file_splice_write+0x840/0x840 [ 795.947410][T25937] ? iter_file_splice_write+0x840/0x840 [ 795.952962][T25937] do_splice+0xbbb/0xc40 [ 795.957322][T25937] __x64_sys_splice+0x20a/0x220 [ 795.962323][T25937] do_syscall_64+0xcc/0x3a0 [ 795.966903][T25937] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.972891][T25937] RIP: 0033:0x45b399 [ 795.976845][T25937] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.996532][T25937] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 796.005035][T25937] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 796.013009][T25937] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 796.021154][T25937] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 796.029119][T25937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 796.037226][T25937] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000000 12:12:23 executing program 0 (fault-call:5 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 796.189690][T25949] FAULT_INJECTION: forcing a failure. [ 796.189690][T25949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 796.203091][T25949] CPU: 1 PID: 25949 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 796.211770][T25949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.221826][T25949] Call Trace: [ 796.225132][T25949] dump_stack+0x11d/0x181 [ 796.229480][T25949] should_fail.cold+0xa/0x1a [ 796.234201][T25949] should_fail_alloc_page+0x50/0x60 12:12:23 executing program 5 (fault-call:4 fault-nth:12): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 796.239412][T25949] __alloc_pages_nodemask+0xd2/0x310 [ 796.244733][T25949] alloc_pages_current+0xd1/0x170 [ 796.249836][T25949] push_pipe+0x170/0x320 [ 796.254091][T25949] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 796.259661][T25949] ? iov_iter_pipe+0xfa/0x120 [ 796.264367][T25949] default_file_splice_read+0xd5/0x590 [ 796.269841][T25949] ? fsnotify+0x6a9/0x7d0 [ 796.274185][T25949] ? security_file_permission+0x88/0x280 [ 796.279902][T25949] ? rw_verify_area+0xee/0x250 [ 796.284685][T25949] do_splice_to+0xf2/0x130 [ 796.289152][T25949] ? iter_file_splice_write+0x840/0x840 [ 796.291588][T25950] FAULT_INJECTION: forcing a failure. [ 796.291588][T25950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 796.294786][T25949] ? iter_file_splice_write+0x840/0x840 [ 796.294925][T25949] do_splice+0xbbb/0xc40 [ 796.294957][T25949] __x64_sys_splice+0x20a/0x220 [ 796.323053][T25949] do_syscall_64+0xcc/0x3a0 [ 796.327622][T25949] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 796.333505][T25949] RIP: 0033:0x45b399 [ 796.337403][T25949] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 796.357004][T25949] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 796.365959][T25949] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 796.373943][T25949] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 796.381921][T25949] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 796.389951][T25949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 796.397951][T25949] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000009 [ 796.406183][T25950] CPU: 0 PID: 25950 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 796.415054][T25950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.425247][T25950] Call Trace: [ 796.428557][T25950] dump_stack+0x11d/0x181 [ 796.432976][T25950] should_fail.cold+0xa/0x1a [ 796.437591][T25950] should_fail_alloc_page+0x50/0x60 [ 796.442937][T25950] __alloc_pages_nodemask+0xd2/0x310 [ 796.448248][T25950] alloc_pages_current+0xd1/0x170 [ 796.453347][T25950] push_pipe+0x170/0x320 [ 796.457685][T25950] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 796.463253][T25950] ? iov_iter_pipe+0xfa/0x120 [ 796.464743][T25953] FAULT_INJECTION: forcing a failure. [ 796.464743][T25953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 796.468070][T25950] default_file_splice_read+0xd5/0x590 [ 796.468126][T25950] ? fsnotify+0x6a9/0x7d0 [ 796.491227][T25950] ? security_file_permission+0x88/0x280 [ 796.496872][T25950] ? rw_verify_area+0xee/0x250 [ 796.501675][T25950] do_splice_to+0xf2/0x130 [ 796.506099][T25950] ? iter_file_splice_write+0x840/0x840 [ 796.511665][T25950] ? iter_file_splice_write+0x840/0x840 [ 796.517238][T25950] do_splice+0xbbb/0xc40 [ 796.521747][T25950] __x64_sys_splice+0x20a/0x220 [ 796.526627][T25950] do_syscall_64+0xcc/0x3a0 [ 796.531204][T25950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 796.537107][T25950] RIP: 0033:0x45b399 [ 796.541113][T25950] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 796.560723][T25950] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 796.569230][T25950] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 796.578612][T25950] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 796.586678][T25950] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 796.594660][T25950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 796.602744][T25950] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000001 [ 796.610802][T25953] CPU: 1 PID: 25953 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 796.619495][T25953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.629679][T25953] Call Trace: [ 796.633019][T25953] dump_stack+0x11d/0x181 [ 796.637371][T25953] should_fail.cold+0xa/0x1a [ 796.642104][T25953] should_fail_alloc_page+0x50/0x60 [ 796.647366][T25953] __alloc_pages_nodemask+0xd2/0x310 [ 796.652761][T25953] alloc_pages_current+0xd1/0x170 [ 796.657812][T25953] push_pipe+0x170/0x320 [ 796.662060][T25953] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 796.667631][T25953] ? iov_iter_pipe+0xfa/0x120 [ 796.672323][T25953] default_file_splice_read+0xd5/0x590 [ 796.677904][T25953] ? fsnotify+0x6a9/0x7d0 [ 796.682273][T25953] ? security_file_permission+0x88/0x280 [ 796.687969][T25953] ? rw_verify_area+0xee/0x250 [ 796.692755][T25953] do_splice_to+0xf2/0x130 [ 796.697263][T25953] ? iter_file_splice_write+0x840/0x840 [ 796.702869][T25953] ? iter_file_splice_write+0x840/0x840 [ 796.708437][T25953] do_splice+0xbbb/0xc40 [ 796.712751][T25953] __x64_sys_splice+0x20a/0x220 [ 796.717624][T25953] do_syscall_64+0xcc/0x3a0 [ 796.722247][T25953] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 796.728260][T25953] RIP: 0033:0x45b399 [ 796.732192][T25953] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 796.751797][T25953] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 796.760340][T25953] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 796.768325][T25953] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 796.776517][T25953] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 796.784598][T25953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 796.792617][T25953] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000c 12:12:23 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:23 executing program 0 (fault-call:5 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:23 executing program 5 (fault-call:4 fault-nth:13): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:23 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:23 executing program 2 (fault-call:4 fault-nth:10): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:23 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000200)={{0xe9f10f36486dece0, 0x0, 0x80, {0x6000, 0xd000, 0x1}}, "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", "96a099d9ddd515a155a3da5308c89ae76c4d71cb9d078cc1cc2517c4c30d187afd288ce4d5ae46c1441a68fa27f607f0b61416de5efeb69f2f375ab25d999b883374b3e34bd9db1c00b525434bc81f5d12a9215b1e56d88dcdd2a732c73aa3c7d2aeade1df8247387512f02533a65ebe8a864ecf491fade352a699007d7de4baa9d4f98080af5b25bf39794c65f5149a1b1f124496f02078f213cdcc567476b8e5adbdb8d1f3df13f3f9df9f3c66f506956563e7f6037bd833129d4ac01fae4e98d9d69344b23b57d17e0f7f058c7b8eb1c26553bd3022bfe9466787cb3223da8fd0d6bf5aaa06d3ea46a77bbea3d2b686818c78247d5a74240737d00e1707b6739e4a90cf52d586add48a230f9867139dec77188017e3b87c12ccd4b4618459b754369b7c5e3d62a48017dd7a3e2789e420356c90782fff133b4ed823c506a1c9d16d1aa8ecacd41fcaedeae2a5fb91c22ac02f45d01dc7392933256725c7a469390a02821d4d18834f6298b5084cefb5d17156bad12c17c88e5154019e757dbcf2809a6315646e308a710f92f0da7911a1b5718d866c036ce3a5cadf18068bbdf7123a9e367a1fed1946ba5110e447fe068b7a08774589cd0cd406b264eb85f811cf59258e7ed4e0f664f443f70f35e6624b6b9bbdb90a24948c96b7c2f89dd6f75f89fc18e8fe79a8ffe491ec44457852ec02bb346aa271fe6adbd93f34bea00931ed497e5f7f003ad88e0f51cf0cbcb815416acd735db71b42ae265bdd44c0edd9af171f618854b54b895063436cf7f5f65b07c121af72007ea0e19d090bff3b2d4e40467ec57c79d76671ca0f244f8a6d4c365e82ee374695bae9073491315c039d045b71726b147d3ced020c33f2da04a8090fde193e9a1425a5ce83491742b64704019371313188794b088f2c92d3d0de9919b494a58b3ccfa82d780eeec484014a69a26db89227f193ff751835de52309177c448f2944c0df5f5d7b6f6ace76afd4fb0ba9bbd3108ac1122760c47e11978d371d17b79f7e17128b1b809dfe2cc1bf6e378439ee1f18ccc5c13bce83cf67a1c91da124675555808a429f2360bbef69b485d9b509ea641ce46c92303f028f1c55692929d8499adbda068e5934c5af3a62545dbc69b473aa1ea8f07254096df3ade4bcfbb3d16bb733ed23ccdb450060d950bf51a7c3c44b453908d8bb352cc9bbaa2cdb44ae67d798083c3991b3c9f0be430c2c269a452511bd27ea87484b5e813ed8537e8319d715cc488287581074771839a55778f64cd58676a4cae47bf3301a6ac7f09ac3e51a958feffed79ca46edd45e93751f75a3be3a38aef3cad16830dc96ecb78f175aa4de513fe1d54dde904797542c011641e58c886702a23c2a667949ec1232a6228fde698ce2442edd42a15bed8889d24ca1c25abf50705288fa505ce968c00992571a0acf23db2cf43b7ef45801c7663d50a32f7db113363b24156a7057510a2d543fdbf35d16b66f9a3689f692c890bcf386ca31ffe818adb149d9685d5209323fc08767af3caec73857f4cea0ce03ffb9b62529d0708570af060a5ff5557c7872f499be79fdd02b1bbadda6425a384d853d3cd9db860a12699c4b057090003095dbbf57588ba3167068a3d1c03895e0de53ba7e837c4329f6e38418f6582c6dd857a3979bef8d3df97d2084e57a774e75f9e36b4b24d74d34251af44d5f26a935f0973c4cf82542db9bf01328a591238e96b956e8ebe42cf8cfe1ac79d1cf9a8bfccf3fae07a4d09b97aad2655d3b354e21b13a6b7b5ee371e72c98bc30b74a5a8f86dfc09bdaf5f5b3e283dafbc07fab8cf95dffb453f13c2d124066f7bd3ef4464f17e8ae62e6f6c0d29b7803622ca36086bd0cd6e9274115b080d803f04175fc66adfd1adefb26f4e7bb59e91e6645fba9c45d29593fa24a9e6924f8d7a728aced30e8c60bcdce4b57a9063723c24196f88ae66ac227bead58623fef17d8b66bd18934cf2c2f584563e64caa31eabf9d0100ed37c582614024e0e77cacd3b31a216ecf898ad834ecfd00543a0d80fe65e256e9678a47e0c7316b6a63f4f8d23993fea7eb30bc7ef7e88498a0b0417bb4990bc002e0393061d3d845c517ede816be2fd8ef3255af9225593bdd9e2801f5497d866e3ba5764717b37ea4aee58e4c209fb336c24cb7d07aa2b731d47685933e7aa991030ad28c9f9a12f156645efdccda324d93e439d4823e427d38a2cb7cad51ba25d9c95f40ade5ce1f26f20b0ced69013ab32cc99c03380aaa4f9204cfbcb71e50a2d94c82dd507c637c768050cbcc9f8a1d94bd97a3a0308a36274b582a9e441e0230e238bbaefb116478021c8956a19cda5c5d47a4ea2bcfac0a5f819dd0714c7cdd7932adc03956dc71ab4704b03c9cfefeda550ec4afeb7b668ad844f2df54fa39df3f4bf356d1b27f7498245c53ba93a502be6d74c5a2b17a350e126f84b1fd9958c9fc581499d0451d3b0bf197641851a2d3329411daa6f541a29442ac1c18283934aa1bb2684b777fa48ce46d14ab342397ccfd2ef5f224de71b86cc38a84f772d2c4c801dddb0a661cd08b73cfd4dfa6c2a0c740a315e4fb1754b5c5177a8bb31a80fb101217c39e9abc5c585ff674610912124209557513bd4659e4601d2513f534bf69c1f5aa228aae7c52f846988c2f06b84c3ce2280379adcb80f37b5ac2d0d80a97eec92a6d9a70134da705f9f0b5d434b25e3d08d988d9962c8bc41b720dc87cee1c112107c52f9aea5048a2d260ed07aa58bc226c550b61d996dca14878bf33bd8693a41277092cb9ea22c98537e9522a7a94f3166d220bc616e152535b20ad64dd7b67e60698463eb1e156dfbcb04903468490e21e3bf9285ce67a91c6b41a10bead590f631164cc36f54d153734ff55bfe849dd62fb764cf75b8cfc5502366023edc45d726f5f57f34602ee5a575d68b11e56beff28918d54090440799be58d5790fdfbba472da4f86d2a1dd974bcd8af3a19b8e81742ca93056cbc79bd91b7f1eee3c1335cfa90a6acd5f58e98ebf13e387b3e6005580e560318242bca18a9a2a14025d054e01814d7b42e440f1a87d09094a61bec2b38267064399d9aa253d9504915c6f1dbd1e0b78db87546d2263eae15f1c37c4deb8d299425b0b1696b27ce3d733721abebf72b9938ec19f0bef3aedefd3c154d4abc1b040141e6e4638ff29610a0c3c4a8a0723f9af7454c7c10e8dae883d60993ba8f5a888d7cea9fe0b72fd7e7cf7895275ac0d0a08b63058c2437315355f0b8c670d58d612a8ad0073f5de201be4f31e09d5e4a6ac9c8d9129d23d370e1f411558d9fccebb26cf639f73b92caf1bff5a5a5abd8720eadbf334cd2a090fcf449bd21a65ec8f426242427b9be45cc845676c828048876eb87aa15cd54799f2084149e1ea8ba579ac9cc489e980eeb7827e235aadac5f30abcbf879d587a851af7939f8acfaf401f2d9f932f2e6377458a2f9ad26e4cb0ddaca94e63065c20d63cef05ca83ec34b0941ce8d1a09f40ce463126b5c32b68fda64d4fd1b62103a29e6652ed6a10f7b0de871d1b786e5063f44fb60bbad6759942a198cb1fea36ef4f6cbce44d627333688e32f0a0181dc159dc5d62ba759427425c032485e348a80e71c8a3398fd448ea983137ae3a7f0fdbda8ff60c76b3550464fb55ca050c84651232f0b96b172ea55579832a6bb71fa5f2ab6d5b7c34b6b27ac9da5acdc3191cdc2037718d8c1e6b6c8c5c35b2f4c92b3e0a36dd93c74ae50d6d041cb9bc197cb202c57e07bfd70f756e7340c4d9f614cb168c79ff17bf4ce823079ec09f79cd31e7762476aa80614dbd8257a0a7291264bdbd64436b19cf67b84c1746a542d88f9b574b2cdd67ce9b8c0f966356b07de8c5fb591bd825eecc972632a5f74e254a494be18e4412a0488e75a10a011bb6751b8132792b7f816e1bc4376499898965b4efa95479c97292eaad9210c607d006f9745a94359a7217a323b31c65084f837183126cdf004e1099765ca68e33a0390b0090537f923c98762f74c488cacbf6df9137f25a16e5f7fa0cf58ec9b425d852cce7ffb7943e8d30620601754bda354c33fad866d3966aaaa1c129455940779df0d8fdf192ab8fa4beaf8aa2ad8f9c139797081d9751246a5006da09edf91a114d2f48cf99e9ac9842e422b9eb4ba26ae2782b6b0df84424b5d28f80941f72dcc0e832236ab3ae1f5d125494f0e6340b1c85586a8f3df6217692e4cbfcb8a1b8a0e0c2186411e469e1893683dbc41b076db5b0b6a2f2376b2f341e1e1f315af42310d49801d228e5e7ef2624f9af5600eb307399581e149d4927aea924b82437233c59312572c0f6f10ab2e702f7d5d17c608e44c9b65ae844c2f3ebac3a753934af7b6a854d9ee24f985f492c9af327751187045d1959b4ee9dc4277c1a81029968ac8b9db87dc219f72c7d1821e1bd9f2e5b332022717dd07a24c3ce27389707a98fffa82f998f2f850ad253cb091bd77fac45db2adcc652f82f997e881f92200e4b5e22fc4d7a3555135f6e002b0acbb8477674ee632fc3ae9b415fddf70fc65face21e88c21e7e8296a99c713faa4e4d75518ed73f0a540f071dbf2ff16ae8af4ca24f9cabfa3e304efe47afbb6637a79f9a27d98057a9a6632c98a6dba8806ccc70028a153f09f0d497eb5019d01899bb54fa4f8faa3c879650375d6d13642e9c8c68c0d761b590cdf182b3547b834f19c100c1ffd08c55606365ebbcd02a9839b433964e811aeaba4210f683c01ac2f48e0acedc13835a9a7b00a2b57459ef3c0785cc341eeb53374db0e1ce71abeee176fe2fa32b542abe344d1e1a55173464f5a537c69431ece02d125198bba974898f4eb9c910ecd6133d738cd70aab2aff3f8174a00b3b1680fa657468b1c91368624319f75a70c31ec8854753f8f2ca70dbb5021ec636c524e61c942a2a0a9ec68078893263e0a7c8efe9130f2f834b3e07fc1e7bfdbadfb2b4ad5b438902f1cde4f47407fb0018393cf761c109967f763984d372c33bcb5f4e783a11be20acd8da6946aeca11997169b65e2dd9b94bbd2508a86eecbd901c87376b698999bd992bc95fe24df39a5bcaa9246cf45b45677ed3e42ae05ac3d83c2880f32985db4fdba66a017eb63908da746aeba7d0ef5bf56032b3c402aa7f932b56a2a1a5cc889525996a7e469afd5b05d519f1ad052007e9be2694350712c02b23f097b6a6782eac00200a5725d78d67888acd6a25de0eddec9b19a84b1f40d866b34c1b332e5c59db288fa8ff3efd14e6770119769f061ac1dc11519c4136e96604f2274dfd90fe2680ee415b88f20e542b32d49a9d6fb0121861e9ea791bbbf22fe6af30901a32d9e5cdf6e979303ccdee64974d4fefe142ee3c501478a83d236c8cc1ddf6eb27e7033672d70dbe2c6f4ad71ecd8ef7622b652c4ca7420ddaf5097b272f9c4bfc48b2c3fcc4addbb628d65138e65fe8c8745a207e4298a27a658ba39cfbe08e58543cd386bdf071e204297396524c5266bca90b6e8ad0f42b8d3b03408c435545efddef4c98fab7f1986a07cf4159f156fcfb1f0e138b7f0f59519c40c7c620c8e88eb2e9966b77ace7f41a30f05babc4fa813bf41268e784eb48a5905fb3e9ddba001f7342c71fe38edb0d3b583ab3298df914e2df4cefdfe25722f0fbec9d36bded313c0fd18f5504bc1b268b43a2c8c4bbb1db22899b44a610d5a65d2aec2979220438fc28eca892fcda10ae6f128ed2e420e477e4dea5a47eb77700af9209d89c5e006fdc"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x3800) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x4, 0x20, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xdd, 0x87f}, 0x800, 0x3, 0x0, 0x0, 0x0, 0x1b, 0x3}, 0x0, 0x0, r2, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x200000, 0x0) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) write$P9_RFSYNC(r4, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') [ 797.118583][T25970] FAULT_INJECTION: forcing a failure. [ 797.118583][T25970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.131929][T25970] CPU: 0 PID: 25970 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 797.140612][T25970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.151219][T25970] Call Trace: [ 797.154619][T25970] dump_stack+0x11d/0x181 [ 797.158969][T25970] should_fail.cold+0xa/0x1a [ 797.163577][T25970] should_fail_alloc_page+0x50/0x60 [ 797.168793][T25970] __alloc_pages_nodemask+0xd2/0x310 [ 797.174086][T25970] alloc_pages_current+0xd1/0x170 [ 797.179168][T25970] push_pipe+0x170/0x320 [ 797.183427][T25970] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 797.188995][T25970] ? iov_iter_pipe+0xfa/0x120 [ 797.193685][T25970] default_file_splice_read+0xd5/0x590 [ 797.199249][T25970] ? fsnotify+0x6a9/0x7d0 [ 797.203600][T25970] ? security_file_permission+0x88/0x280 [ 797.209251][T25970] ? rw_verify_area+0xee/0x250 [ 797.214038][T25970] do_splice_to+0xf2/0x130 [ 797.218491][T25970] ? iter_file_splice_write+0x840/0x840 [ 797.224162][T25970] ? iter_file_splice_write+0x840/0x840 [ 797.229732][T25970] do_splice+0xbbb/0xc40 [ 797.233999][T25970] __x64_sys_splice+0x20a/0x220 [ 797.238860][T25970] do_syscall_64+0xcc/0x3a0 [ 797.243530][T25970] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 797.249566][T25970] RIP: 0033:0x45b399 [ 797.253526][T25970] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.273186][T25970] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 797.281719][T25970] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 797.289836][T25970] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 797.297810][T25970] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 797.305869][T25970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 797.313850][T25970] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000d [ 797.327065][T25968] FAULT_INJECTION: forcing a failure. [ 797.327065][T25968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.340383][T25968] CPU: 0 PID: 25968 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 797.348179][T25973] FAULT_INJECTION: forcing a failure. [ 797.348179][T25973] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.349102][T25968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.372597][T25968] Call Trace: [ 797.375907][T25968] dump_stack+0x11d/0x181 [ 797.380301][T25968] should_fail.cold+0xa/0x1a [ 797.385004][T25968] should_fail_alloc_page+0x50/0x60 [ 797.390310][T25968] __alloc_pages_nodemask+0xd2/0x310 [ 797.395619][T25968] alloc_pages_current+0xd1/0x170 [ 797.400738][T25968] push_pipe+0x170/0x320 [ 797.405040][T25968] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 797.410738][T25968] ? iov_iter_pipe+0xfa/0x120 [ 797.415450][T25968] default_file_splice_read+0xd5/0x590 [ 797.420945][T25968] ? fsnotify+0x6a9/0x7d0 [ 797.425283][T25968] ? security_file_permission+0x88/0x280 [ 797.430977][T25968] ? rw_verify_area+0xee/0x250 [ 797.435746][T25968] do_splice_to+0xf2/0x130 [ 797.440225][T25968] ? iter_file_splice_write+0x840/0x840 [ 797.445778][T25968] ? iter_file_splice_write+0x840/0x840 [ 797.451428][T25968] do_splice+0xbbb/0xc40 [ 797.455707][T25968] __x64_sys_splice+0x20a/0x220 [ 797.460636][T25968] do_syscall_64+0xcc/0x3a0 [ 797.465304][T25968] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 797.471303][T25968] RIP: 0033:0x45b399 [ 797.475265][T25968] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.494876][T25968] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 797.503362][T25968] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 797.511527][T25968] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 797.519665][T25968] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 797.527633][T25968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 797.535720][T25968] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000002 [ 797.543720][T25973] CPU: 1 PID: 25973 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 797.552464][T25973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.562561][T25973] Call Trace: [ 797.565873][T25973] dump_stack+0x11d/0x181 [ 797.570224][T25973] should_fail.cold+0xa/0x1a [ 797.574843][T25973] should_fail_alloc_page+0x50/0x60 [ 797.580071][T25973] __alloc_pages_nodemask+0xd2/0x310 [ 797.585440][T25973] alloc_pages_current+0xd1/0x170 [ 797.590533][T25973] push_pipe+0x170/0x320 [ 797.594889][T25973] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 797.600631][T25973] ? iov_iter_pipe+0xfa/0x120 [ 797.605329][T25973] default_file_splice_read+0xd5/0x590 [ 797.610809][T25973] ? fsnotify+0x6a9/0x7d0 [ 797.615228][T25973] ? security_file_permission+0x88/0x280 [ 797.620989][T25973] ? rw_verify_area+0xee/0x250 [ 797.625771][T25973] do_splice_to+0xf2/0x130 [ 797.630479][T25973] ? iter_file_splice_write+0x840/0x840 [ 797.636244][T25973] ? iter_file_splice_write+0x840/0x840 [ 797.641846][T25973] do_splice+0xbbb/0xc40 [ 797.646119][T25973] __x64_sys_splice+0x20a/0x220 [ 797.651012][T25973] do_syscall_64+0xcc/0x3a0 [ 797.655565][T25973] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 797.661455][T25973] RIP: 0033:0x45b399 [ 797.665516][T25973] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.685129][T25973] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 797.693639][T25973] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 797.701630][T25973] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 797.709609][T25973] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 797.717607][T25973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 797.725758][T25973] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000a 12:12:24 executing program 2 (fault-call:4 fault-nth:11): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:24 executing program 5 (fault-call:4 fault-nth:14): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:24 executing program 0 (fault-call:5 fault-nth:3): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 797.923269][T25985] FAULT_INJECTION: forcing a failure. [ 797.923269][T25985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.935737][T25986] FAULT_INJECTION: forcing a failure. [ 797.935737][T25986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.936569][T25985] CPU: 1 PID: 25985 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 797.958365][T25985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.968436][T25985] Call Trace: [ 797.971739][T25985] dump_stack+0x11d/0x181 [ 797.976086][T25985] should_fail.cold+0xa/0x1a [ 797.980888][T25985] should_fail_alloc_page+0x50/0x60 [ 797.986125][T25985] __alloc_pages_nodemask+0xd2/0x310 [ 797.991486][T25985] alloc_pages_current+0xd1/0x170 [ 797.996635][T25985] push_pipe+0x170/0x320 [ 798.000899][T25985] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 798.006550][T25985] ? iov_iter_pipe+0xfa/0x120 [ 798.011246][T25985] default_file_splice_read+0xd5/0x590 [ 798.016726][T25985] ? fsnotify+0x6a9/0x7d0 [ 798.021098][T25985] ? security_file_permission+0x88/0x280 [ 798.026766][T25985] ? rw_verify_area+0xee/0x250 [ 798.031533][T25985] do_splice_to+0xf2/0x130 [ 798.035963][T25985] ? iter_file_splice_write+0x840/0x840 [ 798.041571][T25985] ? iter_file_splice_write+0x840/0x840 [ 798.047177][T25985] do_splice+0xbbb/0xc40 [ 798.051432][T25985] __x64_sys_splice+0x20a/0x220 [ 798.056501][T25985] do_syscall_64+0xcc/0x3a0 [ 798.061020][T25985] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 798.066908][T25985] RIP: 0033:0x45b399 [ 798.071086][T25985] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 798.090799][T25985] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 798.099240][T25985] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 798.107227][T25985] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 798.115202][T25985] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 798.123196][T25985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 798.131379][T25985] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000b [ 798.139782][T25986] CPU: 0 PID: 25986 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 798.148481][T25986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.159036][T25986] Call Trace: [ 798.162455][T25986] dump_stack+0x11d/0x181 [ 798.166850][T25986] should_fail.cold+0xa/0x1a [ 798.171463][T25986] should_fail_alloc_page+0x50/0x60 [ 798.176732][T25986] __alloc_pages_nodemask+0xd2/0x310 [ 798.182056][T25986] alloc_pages_current+0xd1/0x170 [ 798.187300][T25986] push_pipe+0x170/0x320 [ 798.191610][T25986] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 798.197296][T25986] ? iov_iter_pipe+0xfa/0x120 [ 798.201996][T25986] default_file_splice_read+0xd5/0x590 [ 798.207542][T25986] ? fsnotify+0x6a9/0x7d0 [ 798.211926][T25986] ? security_file_permission+0x88/0x280 [ 798.217586][T25986] ? rw_verify_area+0xee/0x250 [ 798.222451][T25986] do_splice_to+0xf2/0x130 [ 798.226940][T25986] ? iter_file_splice_write+0x840/0x840 [ 798.232633][T25986] ? iter_file_splice_write+0x840/0x840 [ 798.238208][T25986] do_splice+0xbbb/0xc40 [ 798.240358][T25988] FAULT_INJECTION: forcing a failure. [ 798.240358][T25988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 798.242510][T25986] __x64_sys_splice+0x20a/0x220 [ 798.260617][T25986] do_syscall_64+0xcc/0x3a0 [ 798.265164][T25986] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 798.271065][T25986] RIP: 0033:0x45b399 [ 798.275036][T25986] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 798.294869][T25986] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 798.303371][T25986] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 798.311467][T25986] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 12:12:25 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 798.319666][T25986] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 798.327645][T25986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 798.335797][T25986] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000003 [ 798.343818][T25988] CPU: 1 PID: 25988 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 798.352598][T25988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.362913][T25988] Call Trace: [ 798.366327][T25988] dump_stack+0x11d/0x181 [ 798.370687][T25988] should_fail.cold+0xa/0x1a 12:12:25 executing program 0 (fault-call:5 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 798.375330][T25988] should_fail_alloc_page+0x50/0x60 [ 798.380679][T25988] __alloc_pages_nodemask+0xd2/0x310 [ 798.386059][T25988] alloc_pages_current+0xd1/0x170 [ 798.391173][T25988] push_pipe+0x170/0x320 [ 798.395438][T25988] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 798.401073][T25988] ? iov_iter_pipe+0xfa/0x120 [ 798.405778][T25988] default_file_splice_read+0xd5/0x590 [ 798.411269][T25988] ? fsnotify+0x6a9/0x7d0 [ 798.415722][T25988] ? security_file_permission+0x88/0x280 12:12:25 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') [ 798.421441][T25988] ? rw_verify_area+0xee/0x250 [ 798.426235][T25988] do_splice_to+0xf2/0x130 [ 798.430675][T25988] ? iter_file_splice_write+0x840/0x840 [ 798.436324][T25988] ? iter_file_splice_write+0x840/0x840 [ 798.442084][T25988] do_splice+0xbbb/0xc40 [ 798.446546][T25988] __x64_sys_splice+0x20a/0x220 [ 798.451506][T25988] do_syscall_64+0xcc/0x3a0 [ 798.456035][T25988] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 798.461960][T25988] RIP: 0033:0x45b399 [ 798.466064][T25988] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 798.485865][T25988] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 798.494562][T25988] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 798.502608][T25988] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 798.510593][T25988] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 798.518590][T25988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 798.526581][T25988] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000e [ 798.587646][T25997] FAULT_INJECTION: forcing a failure. [ 798.587646][T25997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 798.601296][T25997] CPU: 1 PID: 25997 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 798.610172][T25997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.620237][T25997] Call Trace: [ 798.624188][T25997] dump_stack+0x11d/0x181 [ 798.628550][T25997] should_fail.cold+0xa/0x1a [ 798.633170][T25997] should_fail_alloc_page+0x50/0x60 [ 798.638393][T25997] __alloc_pages_nodemask+0xd2/0x310 [ 798.644139][T25997] alloc_pages_current+0xd1/0x170 [ 798.649184][T25997] push_pipe+0x170/0x320 [ 798.653461][T25997] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 798.659141][T25997] ? iov_iter_pipe+0xfa/0x120 [ 798.664456][T25997] default_file_splice_read+0xd5/0x590 [ 798.670050][T25997] ? fsnotify+0x6a9/0x7d0 [ 798.674421][T25997] ? security_file_permission+0x88/0x280 [ 798.680186][T25997] ? rw_verify_area+0xee/0x250 [ 798.685197][T25997] do_splice_to+0xf2/0x130 [ 798.689865][T25997] ? iter_file_splice_write+0x840/0x840 [ 798.695549][T25997] ? iter_file_splice_write+0x840/0x840 [ 798.701142][T25997] do_splice+0xbbb/0xc40 [ 798.705418][T25997] __x64_sys_splice+0x20a/0x220 [ 798.710334][T25997] do_syscall_64+0xcc/0x3a0 [ 798.714859][T25997] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 798.720757][T25997] RIP: 0033:0x45b399 [ 798.724954][T25997] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 798.744885][T25997] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 798.753384][T25997] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 798.761362][T25997] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 798.769519][T25997] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 798.777583][T25997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 798.785692][T25997] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000004 12:12:25 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000003) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000280)={0x9, "84e962bb27123c6d999275a429a5a379e2453e5aaec06645e8827079e1b2c212", 0x2, 0x1ff, 0x5, 0xffffff, 0x1020c1e, 0x2}) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:25 executing program 2 (fault-call:4 fault-nth:12): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:25 executing program 5 (fault-call:4 fault-nth:15): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 798.964957][T26008] FAULT_INJECTION: forcing a failure. [ 798.964957][T26008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 798.979216][T26008] CPU: 0 PID: 26008 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 798.981208][T26010] FAULT_INJECTION: forcing a failure. [ 798.981208][T26010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 798.987939][T26008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.987957][T26008] Call Trace: [ 799.014628][T26008] dump_stack+0x11d/0x181 [ 799.018974][T26008] should_fail.cold+0xa/0x1a [ 799.023707][T26008] should_fail_alloc_page+0x50/0x60 [ 799.028926][T26008] __alloc_pages_nodemask+0xd2/0x310 [ 799.034383][T26008] alloc_pages_current+0xd1/0x170 [ 799.039413][T26008] push_pipe+0x170/0x320 [ 799.043816][T26008] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 799.049367][T26008] ? iov_iter_pipe+0xfa/0x120 [ 799.054087][T26008] default_file_splice_read+0xd5/0x590 [ 799.059613][T26008] ? fsnotify+0x6a9/0x7d0 [ 799.064138][T26008] ? security_file_permission+0x88/0x280 [ 799.069828][T26008] ? rw_verify_area+0xee/0x250 [ 799.074608][T26008] do_splice_to+0xf2/0x130 [ 799.079139][T26008] ? iter_file_splice_write+0x840/0x840 [ 799.084772][T26008] ? iter_file_splice_write+0x840/0x840 [ 799.090334][T26008] do_splice+0xbbb/0xc40 [ 799.094609][T26008] __x64_sys_splice+0x20a/0x220 [ 799.099497][T26008] do_syscall_64+0xcc/0x3a0 [ 799.104054][T26008] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 799.110009][T26008] RIP: 0033:0x45b399 [ 799.113996][T26008] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.133848][T26008] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 799.143400][T26008] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 799.151379][T26008] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 799.159364][T26008] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 799.168541][T26008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 799.176550][T26008] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000c [ 799.184737][T26010] CPU: 1 PID: 26010 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 799.193427][T26010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.203487][T26010] Call Trace: [ 799.206787][T26010] dump_stack+0x11d/0x181 [ 799.211228][T26010] should_fail.cold+0xa/0x1a [ 799.215912][T26010] should_fail_alloc_page+0x50/0x60 [ 799.221832][T26010] __alloc_pages_nodemask+0xd2/0x310 [ 799.227184][T26010] alloc_pages_current+0xd1/0x170 [ 799.232245][T26010] push_pipe+0x170/0x320 [ 799.236515][T26010] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 799.242133][T26010] ? iov_iter_pipe+0xfa/0x120 [ 799.247014][T26010] default_file_splice_read+0xd5/0x590 [ 799.252517][T26010] ? fsnotify+0x6a9/0x7d0 [ 799.257130][T26010] ? security_file_permission+0x88/0x280 [ 799.262782][T26010] ? rw_verify_area+0xee/0x250 [ 799.267669][T26010] do_splice_to+0xf2/0x130 [ 799.272103][T26010] ? iter_file_splice_write+0x840/0x840 [ 799.277662][T26010] ? iter_file_splice_write+0x840/0x840 [ 799.283314][T26010] do_splice+0xbbb/0xc40 [ 799.287742][T26010] __x64_sys_splice+0x20a/0x220 [ 799.292724][T26010] do_syscall_64+0xcc/0x3a0 [ 799.297246][T26010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 799.303176][T26010] RIP: 0033:0x45b399 [ 799.307077][T26010] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.326766][T26010] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 799.335182][T26010] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 799.343179][T26010] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 799.351248][T26010] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 799.359441][T26010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:26 executing program 0 (fault-call:5 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 799.367606][T26010] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000f [ 799.409964][T26014] FAULT_INJECTION: forcing a failure. [ 799.409964][T26014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.423503][T26014] CPU: 1 PID: 26014 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 799.432183][T26014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.443299][T26014] Call Trace: [ 799.446609][T26014] dump_stack+0x11d/0x181 [ 799.450980][T26014] should_fail.cold+0xa/0x1a [ 799.455601][T26014] should_fail_alloc_page+0x50/0x60 [ 799.460836][T26014] __alloc_pages_nodemask+0xd2/0x310 [ 799.466253][T26014] alloc_pages_current+0xd1/0x170 [ 799.471303][T26014] push_pipe+0x170/0x320 [ 799.475586][T26014] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 799.481452][T26014] ? iov_iter_pipe+0xfa/0x120 [ 799.486183][T26014] default_file_splice_read+0xd5/0x590 [ 799.491786][T26014] ? fsnotify+0x6a9/0x7d0 [ 799.496186][T26014] ? security_file_permission+0x88/0x280 [ 799.501937][T26014] ? rw_verify_area+0xee/0x250 12:12:26 executing program 5 (fault-call:4 fault-nth:16): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 799.506828][T26014] do_splice_to+0xf2/0x130 [ 799.511348][T26014] ? iter_file_splice_write+0x840/0x840 [ 799.516915][T26014] ? iter_file_splice_write+0x840/0x840 [ 799.522660][T26014] do_splice+0xbbb/0xc40 [ 799.526933][T26014] __x64_sys_splice+0x20a/0x220 [ 799.531827][T26014] do_syscall_64+0xcc/0x3a0 [ 799.536467][T26014] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 799.542462][T26014] RIP: 0033:0x45b399 12:12:26 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 799.546387][T26014] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.566856][T26014] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 799.575480][T26014] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 799.585915][T26014] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 799.593977][T26014] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 799.602097][T26014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 799.610080][T26014] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000005 [ 799.667946][T26022] FAULT_INJECTION: forcing a failure. [ 799.667946][T26022] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.681384][T26022] CPU: 1 PID: 26022 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 799.690300][T26022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.700491][T26022] Call Trace: [ 799.703835][T26022] dump_stack+0x11d/0x181 [ 799.708358][T26022] should_fail.cold+0xa/0x1a 12:12:26 executing program 2 (fault-call:4 fault-nth:13): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 799.712962][T26022] should_fail_alloc_page+0x50/0x60 [ 799.722976][T26022] __alloc_pages_nodemask+0xd2/0x310 [ 799.728297][T26022] alloc_pages_current+0xd1/0x170 [ 799.733472][T26022] push_pipe+0x170/0x320 [ 799.737927][T26022] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 799.743624][T26022] ? iov_iter_pipe+0xfa/0x120 [ 799.748421][T26022] default_file_splice_read+0xd5/0x590 [ 799.754027][T26022] ? fsnotify+0x6a9/0x7d0 [ 799.758382][T26022] ? security_file_permission+0x88/0x280 [ 799.764034][T26022] ? rw_verify_area+0xee/0x250 [ 799.768811][T26022] do_splice_to+0xf2/0x130 [ 799.773362][T26022] ? iter_file_splice_write+0x840/0x840 [ 799.779003][T26022] ? iter_file_splice_write+0x840/0x840 [ 799.784562][T26022] do_splice+0xbbb/0xc40 [ 799.788859][T26022] __x64_sys_splice+0x20a/0x220 [ 799.793725][T26022] do_syscall_64+0xcc/0x3a0 [ 799.798373][T26022] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 799.804435][T26022] RIP: 0033:0x45b399 [ 799.808513][T26022] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.828372][T26022] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 799.836812][T26022] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 799.845031][T26022] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 799.846937][T26028] FAULT_INJECTION: forcing a failure. [ 799.846937][T26028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.853148][T26022] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 799.853171][T26022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 799.882458][T26022] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000010 [ 799.890542][T26028] CPU: 0 PID: 26028 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 799.899315][T26028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.909399][T26028] Call Trace: [ 799.912697][T26028] dump_stack+0x11d/0x181 [ 799.917038][T26028] should_fail.cold+0xa/0x1a [ 799.921643][T26028] should_fail_alloc_page+0x50/0x60 [ 799.926967][T26028] __alloc_pages_nodemask+0xd2/0x310 [ 799.932388][T26028] alloc_pages_current+0xd1/0x170 [ 799.937520][T26028] push_pipe+0x170/0x320 [ 799.941794][T26028] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 799.947368][T26028] ? iov_iter_pipe+0xfa/0x120 [ 799.952269][T26028] default_file_splice_read+0xd5/0x590 [ 799.957843][T26028] ? fsnotify+0x6a9/0x7d0 [ 799.962338][T26028] ? security_file_permission+0x88/0x280 [ 799.967991][T26028] ? rw_verify_area+0xee/0x250 [ 799.972806][T26028] do_splice_to+0xf2/0x130 [ 799.977485][T26028] ? iter_file_splice_write+0x840/0x840 [ 799.983069][T26028] ? iter_file_splice_write+0x840/0x840 [ 799.988642][T26028] do_splice+0xbbb/0xc40 [ 799.992948][T26028] __x64_sys_splice+0x20a/0x220 [ 799.997937][T26028] do_syscall_64+0xcc/0x3a0 [ 800.002493][T26028] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 800.008403][T26028] RIP: 0033:0x45b399 [ 800.012325][T26028] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.032165][T26028] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 800.040592][T26028] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 800.048573][T26028] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 800.056316][T26033] FAULT_INJECTION: forcing a failure. [ 800.056316][T26033] name failslab, interval 1, probability 0, space 0, times 0 12:12:26 executing program 0 (fault-call:5 fault-nth:6): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:26 executing program 5 (fault-call:4 fault-nth:17): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 800.057299][T26028] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 800.057323][T26028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 800.086206][T26028] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000d [ 800.094227][T26033] CPU: 1 PID: 26033 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 800.102912][T26033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.112970][T26033] Call Trace: [ 800.116283][T26033] dump_stack+0x11d/0x181 [ 800.120714][T26033] should_fail.cold+0xa/0x1a [ 800.125353][T26033] __should_failslab+0xee/0x130 [ 800.130215][T26033] should_failslab+0x9/0x14 [ 800.134828][T26033] __kmalloc+0x53/0x690 [ 800.139008][T26033] ? __udelay+0x10/0x20 [ 800.143212][T26033] ? rw_copy_check_uvector+0x241/0x270 [ 800.148696][T26033] rw_copy_check_uvector+0x241/0x270 [ 800.154237][T26033] import_iovec+0x67/0x220 [ 800.158739][T26033] vfs_readv+0x72/0xf0 [ 800.163001][T26033] ? push_pipe+0x237/0x320 [ 800.167435][T26033] ? __read_once_size.constprop.0+0x12/0x20 [ 800.173421][T26033] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 800.179695][T26033] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 800.185429][T26033] default_file_splice_read+0x358/0x590 [ 800.191092][T26033] ? rw_verify_area+0xee/0x250 [ 800.195875][T26033] do_splice_to+0xf2/0x130 [ 800.200307][T26033] ? iter_file_splice_write+0x840/0x840 [ 800.206040][T26033] ? iter_file_splice_write+0x840/0x840 [ 800.211605][T26033] do_splice+0xbbb/0xc40 [ 800.215871][T26033] __x64_sys_splice+0x20a/0x220 [ 800.220744][T26033] do_syscall_64+0xcc/0x3a0 [ 800.225396][T26033] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 800.231408][T26033] RIP: 0033:0x45b399 [ 800.235353][T26033] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.255108][T26033] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 800.263531][T26033] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 800.271513][T26033] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 800.279668][T26033] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 800.287666][T26033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 800.295766][T26033] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000011 [ 800.347701][T26036] FAULT_INJECTION: forcing a failure. [ 800.347701][T26036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 800.361160][T26036] CPU: 0 PID: 26036 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 800.369921][T26036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.380039][T26036] Call Trace: [ 800.383359][T26036] dump_stack+0x11d/0x181 [ 800.387751][T26036] should_fail.cold+0xa/0x1a [ 800.392791][T26036] should_fail_alloc_page+0x50/0x60 [ 800.398038][T26036] __alloc_pages_nodemask+0xd2/0x310 [ 800.403399][T26036] alloc_pages_current+0xd1/0x170 [ 800.408533][T26036] push_pipe+0x170/0x320 [ 800.412901][T26036] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 800.418512][T26036] ? iov_iter_pipe+0xfa/0x120 [ 800.423332][T26036] default_file_splice_read+0xd5/0x590 [ 800.428832][T26036] ? fsnotify+0x6a9/0x7d0 [ 800.433318][T26036] ? security_file_permission+0x88/0x280 [ 800.439087][T26036] ? rw_verify_area+0xee/0x250 [ 800.443866][T26036] do_splice_to+0xf2/0x130 [ 800.448396][T26036] ? iter_file_splice_write+0x840/0x840 [ 800.454006][T26036] ? iter_file_splice_write+0x840/0x840 [ 800.459737][T26036] do_splice+0xbbb/0xc40 [ 800.464154][T26036] __x64_sys_splice+0x20a/0x220 [ 800.469027][T26036] do_syscall_64+0xcc/0x3a0 [ 800.473593][T26036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 800.474602][T26039] FAULT_INJECTION: forcing a failure. [ 800.474602][T26039] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 800.479577][T26036] RIP: 0033:0x45b399 [ 800.479600][T26036] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.479609][T26036] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 800.479627][T26036] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 800.479712][T26036] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 12:12:27 executing program 2 (fault-call:4 fault-nth:14): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 800.543112][T26036] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 800.551085][T26036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 800.559134][T26036] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000006 [ 800.567253][T26039] CPU: 1 PID: 26039 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 800.576009][T26039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.586072][T26039] Call Trace: [ 800.589376][T26039] dump_stack+0x11d/0x181 [ 800.593734][T26039] should_fail.cold+0xa/0x1a [ 800.598527][T26039] should_fail_alloc_page+0x50/0x60 [ 800.603741][T26039] __alloc_pages_nodemask+0xd2/0x310 [ 800.609049][T26039] alloc_pages_current+0xd1/0x170 [ 800.614123][T26039] push_pipe+0x170/0x320 [ 800.618389][T26039] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 800.624221][T26039] ? iov_iter_pipe+0xfa/0x120 [ 800.629108][T26039] default_file_splice_read+0xd5/0x590 [ 800.634680][T26039] ? fsnotify+0x6a9/0x7d0 [ 800.639046][T26039] ? security_file_permission+0x88/0x280 [ 800.644702][T26039] ? rw_verify_area+0xee/0x250 [ 800.649483][T26039] do_splice_to+0xf2/0x130 [ 800.653942][T26039] ? iter_file_splice_write+0x840/0x840 [ 800.659677][T26039] ? iter_file_splice_write+0x840/0x840 [ 800.665241][T26039] do_splice+0xbbb/0xc40 [ 800.669569][T26039] __x64_sys_splice+0x20a/0x220 [ 800.674450][T26039] do_syscall_64+0xcc/0x3a0 [ 800.678988][T26039] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 800.684878][T26039] RIP: 0033:0x45b399 [ 800.688782][T26039] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.708677][T26039] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 800.717207][T26039] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 800.725374][T26039] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 800.733362][T26039] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 800.741361][T26039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:27 executing program 5 (fault-call:4 fault-nth:18): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:27 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16f8, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') [ 800.749484][T26039] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000e [ 800.886897][T26043] FAULT_INJECTION: forcing a failure. [ 800.886897][T26043] name failslab, interval 1, probability 0, space 0, times 0 [ 800.899768][T26043] CPU: 0 PID: 26043 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 800.908514][T26043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.918609][T26043] Call Trace: [ 800.921911][T26043] dump_stack+0x11d/0x181 [ 800.926333][T26043] should_fail.cold+0xa/0x1a [ 800.930958][T26043] __should_failslab+0xee/0x130 [ 800.935854][T26043] should_failslab+0x9/0x14 [ 800.940387][T26043] kmem_cache_alloc_trace+0x2a/0x5d0 [ 800.945939][T26043] ? __rcu_read_unlock+0x66/0x3d0 [ 800.951036][T26043] __vb2_init_fileio+0x148/0x630 [ 800.955999][T26043] ? debug_smp_processor_id+0x43/0x137 [ 800.961494][T26043] __vb2_perform_fileio+0x917/0xb00 [ 800.966718][T26043] ? __udelay+0x10/0x20 [ 800.970904][T26043] vb2_read+0x44/0x60 [ 800.974973][T26043] vb2_fop_read+0x175/0x250 [ 800.979778][T26043] v4l2_read+0x13a/0x150 [ 800.984049][T26043] do_iter_read+0x357/0x3d0 [ 800.988681][T26043] vfs_readv+0x9c/0xf0 [ 800.992856][T26043] ? __read_once_size.constprop.0+0x12/0x20 [ 800.998930][T26043] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 801.005484][T26043] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 801.011423][T26043] default_file_splice_read+0x358/0x590 [ 801.017047][T26043] ? rw_verify_area+0xee/0x250 [ 801.021838][T26043] do_splice_to+0xf2/0x130 [ 801.026281][T26043] ? iter_file_splice_write+0x840/0x840 [ 801.031919][T26043] ? iter_file_splice_write+0x840/0x840 [ 801.037484][T26043] do_splice+0xbbb/0xc40 [ 801.041803][T26043] __x64_sys_splice+0x20a/0x220 [ 801.046681][T26043] do_syscall_64+0xcc/0x3a0 [ 801.051269][T26043] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 801.057294][T26043] RIP: 0033:0x45b399 [ 801.061273][T26043] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:12:27 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={r2}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000016c0)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000040)='sit0\x00', r2}, 0x30) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x2, 0x80000000000, 0x0, 0x0, 0x1ff, 0x4}, r3, 0xffffffffffffffff, r0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @mcast2, 0x7}, 0x1c) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:27 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:27 executing program 0 (fault-call:5 fault-nth:7): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:27 executing program 2 (fault-call:4 fault-nth:15): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 801.080949][T26043] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 801.089787][T26043] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 801.097771][T26043] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 801.105753][T26043] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 801.113809][T26043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 801.121785][T26043] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000012 [ 801.166313][T26054] FAULT_INJECTION: forcing a failure. [ 801.166313][T26054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 801.179815][T26054] CPU: 1 PID: 26054 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 801.188496][T26054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.198564][T26054] Call Trace: [ 801.202003][T26054] dump_stack+0x11d/0x181 [ 801.206354][T26054] should_fail.cold+0xa/0x1a [ 801.210968][T26054] should_fail_alloc_page+0x50/0x60 [ 801.216232][T26054] __alloc_pages_nodemask+0xd2/0x310 [ 801.221562][T26054] alloc_pages_current+0xd1/0x170 [ 801.226772][T26054] push_pipe+0x170/0x320 [ 801.231022][T26054] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 801.236728][T26054] ? iov_iter_pipe+0xfa/0x120 [ 801.241511][T26054] default_file_splice_read+0xd5/0x590 [ 801.247011][T26054] ? fsnotify+0x6a9/0x7d0 [ 801.251407][T26054] ? security_file_permission+0x88/0x280 [ 801.257064][T26054] ? rw_verify_area+0xee/0x250 [ 801.261854][T26054] do_splice_to+0xf2/0x130 [ 801.266306][T26054] ? iter_file_splice_write+0x840/0x840 [ 801.271869][T26054] ? iter_file_splice_write+0x840/0x840 [ 801.277597][T26054] do_splice+0xbbb/0xc40 [ 801.281873][T26054] __x64_sys_splice+0x20a/0x220 [ 801.288464][T26054] do_syscall_64+0xcc/0x3a0 [ 801.294711][T26054] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 801.300721][T26054] RIP: 0033:0x45b399 [ 801.304785][T26054] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.324745][T26054] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 801.333325][T26054] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 801.341324][T26054] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 801.349602][T26054] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 801.357634][T26054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 801.365627][T26054] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000f [ 801.385588][T26057] FAULT_INJECTION: forcing a failure. [ 801.385588][T26057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 801.399418][T26057] CPU: 0 PID: 26057 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 801.408185][T26057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.418248][T26057] Call Trace: [ 801.421787][T26057] dump_stack+0x11d/0x181 [ 801.426202][T26057] should_fail.cold+0xa/0x1a [ 801.430842][T26057] should_fail_alloc_page+0x50/0x60 [ 801.436246][T26057] __alloc_pages_nodemask+0xd2/0x310 [ 801.441961][T26057] alloc_pages_current+0xd1/0x170 [ 801.447003][T26057] push_pipe+0x170/0x320 [ 801.451266][T26057] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 801.456892][T26057] ? iov_iter_pipe+0xfa/0x120 [ 801.461622][T26057] default_file_splice_read+0xd5/0x590 [ 801.467339][T26057] ? fsnotify+0x6a9/0x7d0 [ 801.471707][T26057] ? security_file_permission+0x88/0x280 [ 801.477355][T26057] ? rw_verify_area+0xee/0x250 [ 801.482135][T26057] do_splice_to+0xf2/0x130 [ 801.486558][T26057] ? iter_file_splice_write+0x840/0x840 [ 801.492106][T26057] ? iter_file_splice_write+0x840/0x840 [ 801.497750][T26057] do_splice+0xbbb/0xc40 [ 801.502088][T26057] __x64_sys_splice+0x20a/0x220 [ 801.507052][T26057] do_syscall_64+0xcc/0x3a0 [ 801.511581][T26057] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 801.517483][T26057] RIP: 0033:0x45b399 [ 801.521634][T26057] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.541497][T26057] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 801.550031][T26057] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 801.558013][T26057] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 801.566176][T26057] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 801.574262][T26057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 801.582252][T26057] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000007 12:12:28 executing program 0 (fault-call:5 fault-nth:8): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:28 executing program 5 (fault-call:4 fault-nth:19): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 801.751069][T26068] FAULT_INJECTION: forcing a failure. [ 801.751069][T26068] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 801.764799][T26068] CPU: 0 PID: 26068 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 801.771190][T26069] FAULT_INJECTION: forcing a failure. [ 801.771190][T26069] name failslab, interval 1, probability 0, space 0, times 0 [ 801.773490][T26068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.796163][T26068] Call Trace: [ 801.799462][T26068] dump_stack+0x11d/0x181 [ 801.803827][T26068] should_fail.cold+0xa/0x1a [ 801.808433][T26068] should_fail_alloc_page+0x50/0x60 [ 801.813841][T26068] __alloc_pages_nodemask+0xd2/0x310 [ 801.819183][T26068] alloc_pages_current+0xd1/0x170 [ 801.824298][T26068] push_pipe+0x170/0x320 [ 801.828641][T26068] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 801.834218][T26068] ? iov_iter_pipe+0xfa/0x120 [ 801.838958][T26068] default_file_splice_read+0xd5/0x590 [ 801.845294][T26068] ? fsnotify+0x6a9/0x7d0 [ 801.849774][T26068] ? security_file_permission+0x88/0x280 [ 801.855445][T26068] ? rw_verify_area+0xee/0x250 [ 801.860224][T26068] do_splice_to+0xf2/0x130 [ 801.864757][T26068] ? iter_file_splice_write+0x840/0x840 [ 801.870325][T26068] ? iter_file_splice_write+0x840/0x840 [ 801.875917][T26068] do_splice+0xbbb/0xc40 [ 801.880244][T26068] __x64_sys_splice+0x20a/0x220 [ 801.885160][T26068] do_syscall_64+0xcc/0x3a0 [ 801.889759][T26068] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 801.895656][T26068] RIP: 0033:0x45b399 [ 801.899556][T26068] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.919274][T26068] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 801.927873][T26068] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 801.935881][T26068] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 801.943860][T26068] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 801.951917][T26068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 801.959995][T26068] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000008 [ 801.968007][T26069] CPU: 1 PID: 26069 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 801.976770][T26069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.986971][T26069] Call Trace: [ 801.990376][T26069] dump_stack+0x11d/0x181 [ 801.994732][T26069] should_fail.cold+0xa/0x1a [ 801.999395][T26069] __should_failslab+0xee/0x130 [ 802.004259][T26069] should_failslab+0x9/0x14 [ 802.008776][T26069] __kmalloc+0x53/0x690 [ 802.012974][T26069] ? __const_udelay+0x36/0x40 [ 802.017655][T26069] ? __udelay+0x10/0x20 [ 802.021980][T26069] ? __vb2_queue_alloc+0xa9/0x850 [ 802.027012][T26069] __vb2_queue_alloc+0xa9/0x850 [ 802.031922][T26069] vb2_core_reqbufs+0x561/0x860 [ 802.036835][T26069] __vb2_init_fileio+0x23d/0x630 [ 802.041782][T26069] __vb2_perform_fileio+0x917/0xb00 [ 802.047019][T26069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 802.053278][T26069] ? should_fail+0xd4/0x45d [ 802.057867][T26069] ? get_page_from_freelist+0x936/0x1650 [ 802.063589][T26069] vb2_read+0x44/0x60 [ 802.067623][T26069] vb2_fop_read+0x175/0x250 [ 802.072153][T26069] v4l2_read+0x13a/0x150 [ 802.076405][T26069] do_iter_read+0x357/0x3d0 [ 802.080940][T26069] vfs_readv+0x9c/0xf0 [ 802.085133][T26069] ? __read_once_size.constprop.0+0x12/0x20 [ 802.091108][T26069] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 802.097393][T26069] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 802.103163][T26069] default_file_splice_read+0x358/0x590 [ 802.109077][T26069] ? rw_verify_area+0xee/0x250 [ 802.113879][T26069] do_splice_to+0xf2/0x130 [ 802.118309][T26069] ? iter_file_splice_write+0x840/0x840 [ 802.123919][T26069] ? iter_file_splice_write+0x840/0x840 [ 802.129479][T26069] do_splice+0xbbb/0xc40 [ 802.133737][T26069] __x64_sys_splice+0x20a/0x220 [ 802.138684][T26069] do_syscall_64+0xcc/0x3a0 [ 802.143197][T26069] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.149100][T26069] RIP: 0033:0x45b399 [ 802.153011][T26069] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.172622][T26069] RSP: 002b:00007f30faa90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 802.181060][T26069] RAX: ffffffffffffffda RBX: 00007f30faa916d4 RCX: 000000000045b399 [ 802.189041][T26069] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 12:12:29 executing program 2 (fault-call:4 fault-nth:16): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 802.197179][T26069] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 802.205215][T26069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 802.213211][T26069] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000013 12:12:29 executing program 5 (fault-call:4 fault-nth:20): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 802.275091][ T8163] device 0 left promiscuous mode 12:12:29 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 802.337256][ T8163] device 1 left promiscuous mode [ 802.372618][T26075] FAULT_INJECTION: forcing a failure. [ 802.372618][T26075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 802.386074][T26075] CPU: 0 PID: 26075 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 802.394760][T26075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.404919][T26075] Call Trace: [ 802.408233][T26075] dump_stack+0x11d/0x181 [ 802.412591][T26075] should_fail.cold+0xa/0x1a [ 802.417243][T26075] should_fail_alloc_page+0x50/0x60 [ 802.422484][T26075] __alloc_pages_nodemask+0xd2/0x310 [ 802.427924][T26075] alloc_pages_current+0xd1/0x170 [ 802.433044][T26075] push_pipe+0x170/0x320 [ 802.437369][T26075] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 802.442930][T26075] ? iov_iter_pipe+0xfa/0x120 [ 802.447770][T26075] default_file_splice_read+0xd5/0x590 [ 802.453255][T26075] ? fsnotify+0x6a9/0x7d0 [ 802.457760][T26075] ? security_file_permission+0x88/0x280 [ 802.463503][T26075] ? rw_verify_area+0xee/0x250 [ 802.468330][T26075] do_splice_to+0xf2/0x130 [ 802.472903][T26075] ? iter_file_splice_write+0x840/0x840 [ 802.478478][T26075] ? iter_file_splice_write+0x840/0x840 [ 802.484045][T26075] do_splice+0xbbb/0xc40 [ 802.488499][T26075] __x64_sys_splice+0x20a/0x220 [ 802.493375][T26075] do_syscall_64+0xcc/0x3a0 [ 802.498105][T26075] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.504014][T26075] RIP: 0033:0x45b399 12:12:29 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 802.507926][T26075] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.527546][T26075] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 802.535998][T26075] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 802.544088][T26075] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 802.552251][T26075] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 802.560312][T26075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:29 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) listen(0xffffffffffffffff, 0x401) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000300)={0x0, @ctrl}) sendfile(r2, r3, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) r5 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x80) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x3, @local, 'tunl0\x00'}}) [ 802.568295][T26075] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000010 12:12:29 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x28, @time={0x2, 0x8}, 0x86, {0x1f, 0x28}, 0xaa, 0x1, 0xf8}) fcntl$setstatus(r0, 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = mq_open(&(0x7f00000000c0)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c', 0x2, 0x5, &(0x7f0000000140)={0x787e442c, 0x1f, 0xea8b, 0x1}) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x6f4b40, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x204) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:29 executing program 0 (fault-call:5 fault-nth:9): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 802.766232][ T8163] tipc: TX() has been purged, node left! [ 802.806815][T26090] FAULT_INJECTION: forcing a failure. [ 802.806815][T26090] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 802.820912][T26090] CPU: 0 PID: 26090 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 802.829638][T26090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.839812][T26090] Call Trace: [ 802.843154][T26090] dump_stack+0x11d/0x181 [ 802.847518][T26090] should_fail.cold+0xa/0x1a [ 802.852121][T26090] should_fail_alloc_page+0x50/0x60 [ 802.857422][T26090] __alloc_pages_nodemask+0xd2/0x310 [ 802.862732][T26090] alloc_pages_current+0xd1/0x170 [ 802.867849][T26090] push_pipe+0x170/0x320 [ 802.872472][T26090] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 802.878047][T26090] ? iov_iter_pipe+0xfa/0x120 [ 802.882821][T26090] default_file_splice_read+0xd5/0x590 [ 802.888304][T26090] ? fsnotify+0x6a9/0x7d0 [ 802.892683][T26090] ? security_file_permission+0x88/0x280 [ 802.898341][T26090] ? rw_verify_area+0xee/0x250 [ 802.903143][T26090] do_splice_to+0xf2/0x130 12:12:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:29 executing program 2 (fault-call:4 fault-nth:17): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 802.907571][T26090] ? iter_file_splice_write+0x840/0x840 [ 802.913177][T26090] ? iter_file_splice_write+0x840/0x840 [ 802.918864][T26090] do_splice+0xbbb/0xc40 [ 802.923220][T26090] __x64_sys_splice+0x20a/0x220 [ 802.928110][T26090] do_syscall_64+0xcc/0x3a0 [ 802.932641][T26090] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.938546][T26090] RIP: 0033:0x45b399 [ 802.942537][T26090] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.962289][T26090] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 802.970861][T26090] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 802.978859][T26090] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 802.986983][T26090] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 802.995113][T26090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 803.003141][T26090] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000009 [ 803.065203][T26099] FAULT_INJECTION: forcing a failure. [ 803.065203][T26099] name failslab, interval 1, probability 0, space 0, times 0 [ 803.078086][T26099] CPU: 0 PID: 26099 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 803.086775][T26099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.096843][T26099] Call Trace: [ 803.100147][T26099] dump_stack+0x11d/0x181 [ 803.104511][T26099] should_fail.cold+0xa/0x1a [ 803.109121][T26099] __should_failslab+0xee/0x130 [ 803.114014][T26099] should_failslab+0x9/0x14 [ 803.118691][T26099] __kmalloc+0x53/0x690 [ 803.122855][T26099] ? rw_copy_check_uvector+0x241/0x270 [ 803.128453][T26099] rw_copy_check_uvector+0x241/0x270 [ 803.133762][T26099] import_iovec+0x67/0x220 [ 803.138244][T26099] vfs_readv+0x72/0xf0 [ 803.142313][T26099] ? push_pipe+0x237/0x320 [ 803.146725][T26099] ? __read_once_size.constprop.0+0x12/0x20 [ 803.154298][T26099] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 803.160633][T26099] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 803.166407][T26099] default_file_splice_read+0x358/0x590 [ 803.172013][T26099] ? rw_verify_area+0xee/0x250 [ 803.176791][T26099] do_splice_to+0xf2/0x130 [ 803.181219][T26099] ? iter_file_splice_write+0x840/0x840 [ 803.186789][T26099] ? iter_file_splice_write+0x840/0x840 [ 803.192486][T26099] do_splice+0xbbb/0xc40 [ 803.196742][T26099] __x64_sys_splice+0x20a/0x220 [ 803.201727][T26099] do_syscall_64+0xcc/0x3a0 [ 803.206229][T26099] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 803.212118][T26099] RIP: 0033:0x45b399 [ 803.216117][T26099] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.235945][T26099] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 803.244359][T26099] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 803.252442][T26099] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 803.260425][T26099] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 803.268402][T26099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 803.278594][T26099] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000011 12:12:30 executing program 0 (fault-call:5 fault-nth:10): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:30 executing program 2 (fault-call:4 fault-nth:18): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 803.380004][T26105] FAULT_INJECTION: forcing a failure. [ 803.380004][T26105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 803.394348][T26105] CPU: 0 PID: 26105 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 803.403033][T26105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.413317][T26105] Call Trace: [ 803.416627][T26105] dump_stack+0x11d/0x181 [ 803.420980][T26105] should_fail.cold+0xa/0x1a [ 803.425609][T26105] should_fail_alloc_page+0x50/0x60 [ 803.430838][T26105] __alloc_pages_nodemask+0xd2/0x310 [ 803.436148][T26105] alloc_pages_current+0xd1/0x170 [ 803.441202][T26105] push_pipe+0x170/0x320 [ 803.445457][T26105] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 803.451069][T26105] ? iov_iter_pipe+0xfa/0x120 [ 803.455771][T26105] default_file_splice_read+0xd5/0x590 [ 803.461288][T26105] ? fsnotify+0x6a9/0x7d0 [ 803.465713][T26105] ? security_file_permission+0x88/0x280 [ 803.471356][T26105] ? rw_verify_area+0xee/0x250 [ 803.476157][T26105] do_splice_to+0xf2/0x130 12:12:30 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:30 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xa0000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00042bbd7000fedbdf2516000000480004801c0007800800040062301c3d080002003f00000008000200050000001c00078008000200000000000800020001000080080003006ed000000c000780080001000c000000"], 0x5c}}, 0x24008084) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00'}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) sendfile(r1, 0xffffffffffffffff, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 803.480654][T26105] ? iter_file_splice_write+0x840/0x840 [ 803.486221][T26105] ? iter_file_splice_write+0x840/0x840 [ 803.491837][T26105] do_splice+0xbbb/0xc40 [ 803.496167][T26105] __x64_sys_splice+0x20a/0x220 [ 803.501071][T26105] do_syscall_64+0xcc/0x3a0 [ 803.505669][T26105] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 803.511572][T26105] RIP: 0033:0x45b399 12:12:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000004, 0x0) [ 803.515491][T26105] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.535152][T26105] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 803.543778][T26105] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 803.551769][T26105] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 803.559882][T26105] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 803.567907][T26105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 803.575897][T26105] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000a 12:12:30 executing program 0 (fault-call:5 fault-nth:11): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 803.750216][T26121] FAULT_INJECTION: forcing a failure. [ 803.750216][T26121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 803.763647][T26121] CPU: 0 PID: 26121 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 803.772209][T26113] FAULT_INJECTION: forcing a failure. [ 803.772209][T26113] name failslab, interval 1, probability 0, space 0, times 0 [ 803.772352][T26121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.772357][T26121] Call Trace: [ 803.772378][T26121] dump_stack+0x11d/0x181 [ 803.772402][T26121] should_fail.cold+0xa/0x1a [ 803.772476][T26121] should_fail_alloc_page+0x50/0x60 [ 803.812543][T26121] __alloc_pages_nodemask+0xd2/0x310 [ 803.817857][T26121] alloc_pages_current+0xd1/0x170 [ 803.823051][T26121] push_pipe+0x170/0x320 [ 803.827332][T26121] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 803.832900][T26121] ? iov_iter_pipe+0xfa/0x120 [ 803.837734][T26121] default_file_splice_read+0xd5/0x590 [ 803.843314][T26121] ? fsnotify+0x6a9/0x7d0 [ 803.847717][T26121] ? security_file_permission+0x88/0x280 [ 803.853442][T26121] ? rw_verify_area+0xee/0x250 [ 803.858255][T26121] do_splice_to+0xf2/0x130 [ 803.862688][T26121] ? iter_file_splice_write+0x840/0x840 [ 803.868266][T26121] ? iter_file_splice_write+0x840/0x840 [ 803.873957][T26121] do_splice+0xbbb/0xc40 [ 803.878224][T26121] __x64_sys_splice+0x20a/0x220 [ 803.883147][T26121] do_syscall_64+0xcc/0x3a0 [ 803.887659][T26121] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 803.893576][T26121] RIP: 0033:0x45b399 [ 803.897475][T26121] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.917198][T26121] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 803.925617][T26121] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 803.933596][T26121] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 803.941657][T26121] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 803.949620][T26121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 803.957590][T26121] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000b [ 803.965667][T26113] CPU: 1 PID: 26113 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 803.974400][T26113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.984465][T26113] Call Trace: [ 803.987757][T26113] dump_stack+0x11d/0x181 [ 803.992170][T26113] should_fail.cold+0xa/0x1a [ 803.996799][T26113] __should_failslab+0xee/0x130 [ 804.001663][T26113] should_failslab+0x9/0x14 [ 804.006199][T26113] kmem_cache_alloc_trace+0x2a/0x5d0 [ 804.011503][T26113] ? __rcu_read_unlock+0x66/0x3d0 [ 804.016536][T26113] __vb2_init_fileio+0x148/0x630 [ 804.021493][T26113] ? aa_file_perm+0x3a1/0xc20 [ 804.026242][T26113] __vb2_perform_fileio+0x917/0xb00 [ 804.031660][T26113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 804.037918][T26113] ? should_fail+0xd4/0x45d [ 804.042443][T26113] ? get_page_from_freelist+0x936/0x1650 [ 804.048159][T26113] vb2_read+0x44/0x60 [ 804.052229][T26113] vb2_fop_read+0x175/0x250 [ 804.056821][T26113] v4l2_read+0x13a/0x150 [ 804.061147][T26113] do_iter_read+0x357/0x3d0 [ 804.065741][T26113] vfs_readv+0x9c/0xf0 [ 804.069837][T26113] ? __read_once_size.constprop.0+0x12/0x20 [ 804.075856][T26113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 804.082134][T26113] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 804.087880][T26113] default_file_splice_read+0x358/0x590 [ 804.094580][T26113] ? rw_verify_area+0xee/0x250 [ 804.099555][T26113] do_splice_to+0xf2/0x130 [ 804.104031][T26113] ? iter_file_splice_write+0x840/0x840 [ 804.109585][T26113] ? iter_file_splice_write+0x840/0x840 [ 804.115271][T26113] do_splice+0xbbb/0xc40 [ 804.119528][T26113] __x64_sys_splice+0x20a/0x220 [ 804.124473][T26113] do_syscall_64+0xcc/0x3a0 [ 804.129029][T26113] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 804.134915][T26113] RIP: 0033:0x45b399 [ 804.138848][T26113] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.158604][T26113] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 804.167101][T26113] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 804.175204][T26113] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 804.183179][T26113] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 804.191216][T26113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 804.199209][T26113] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000012 12:12:31 executing program 2 (fault-call:4 fault-nth:19): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:31 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0xac140, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0x80000001, 0x4) prctl$PR_SET_TSC(0x1a, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r1, 0x100) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f00000000c0)) bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0) r8 = socket(0x10, 0x2, 0x0) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x80002, 0x0) ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, &(0x7f0000000240)) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee00, r10, 0x0) ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r10}) 12:12:31 executing program 0 (fault-call:5 fault-nth:12): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:31 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(0x0, 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 804.455281][T26129] FAULT_INJECTION: forcing a failure. [ 804.455281][T26129] name failslab, interval 1, probability 0, space 0, times 0 [ 804.468031][T26129] CPU: 0 PID: 26129 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 804.476708][T26129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.486785][T26129] Call Trace: [ 804.490181][T26129] dump_stack+0x11d/0x181 [ 804.494563][T26129] should_fail.cold+0xa/0x1a [ 804.499182][T26129] __should_failslab+0xee/0x130 [ 804.504150][T26129] should_failslab+0x9/0x14 [ 804.508730][T26129] __kmalloc+0x53/0x690 [ 804.512922][T26129] ? __vb2_queue_alloc+0xa9/0x850 [ 804.517977][T26129] __vb2_queue_alloc+0xa9/0x850 [ 804.522858][T26129] vb2_core_reqbufs+0x561/0x860 [ 804.527824][T26129] __vb2_init_fileio+0x23d/0x630 [ 804.533500][T26129] __vb2_perform_fileio+0x917/0xb00 [ 804.538717][T26129] vb2_read+0x44/0x60 [ 804.542717][T26129] vb2_fop_read+0x175/0x250 [ 804.547230][T26129] v4l2_read+0x13a/0x150 [ 804.551539][T26129] do_iter_read+0x357/0x3d0 [ 804.556056][T26129] vfs_readv+0x9c/0xf0 [ 804.560137][T26129] ? __read_once_size.constprop.0+0x12/0x20 [ 804.566079][T26129] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 804.572317][T26129] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 804.578129][T26129] default_file_splice_read+0x358/0x590 [ 804.583758][T26129] ? rw_verify_area+0xee/0x250 [ 804.588540][T26129] do_splice_to+0xf2/0x130 [ 804.592963][T26129] ? iter_file_splice_write+0x840/0x840 [ 804.598528][T26129] ? iter_file_splice_write+0x840/0x840 [ 804.604125][T26129] do_splice+0xbbb/0xc40 [ 804.608383][T26129] __x64_sys_splice+0x20a/0x220 [ 804.613347][T26129] do_syscall_64+0xcc/0x3a0 [ 804.617943][T26129] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 804.623895][T26129] RIP: 0033:0x45b399 [ 804.627826][T26129] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.647435][T26129] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 12:12:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000007, 0x0) 12:12:31 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x21040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xd1e5, 0x2}, 0x2}, 0x0, 0x7, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 804.655904][T26129] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 804.663896][T26129] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 804.671963][T26129] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 804.679949][T26129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 804.687936][T26129] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000013 [ 804.767306][T26139] FAULT_INJECTION: forcing a failure. [ 804.767306][T26139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 804.781248][T26139] CPU: 1 PID: 26139 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 804.789951][T26139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.800326][T26139] Call Trace: [ 804.803681][T26139] dump_stack+0x11d/0x181 [ 804.808048][T26139] should_fail.cold+0xa/0x1a [ 804.812674][T26139] should_fail_alloc_page+0x50/0x60 [ 804.817948][T26139] __alloc_pages_nodemask+0xd2/0x310 [ 804.823370][T26139] alloc_pages_current+0xd1/0x170 [ 804.828443][T26139] push_pipe+0x170/0x320 [ 804.832705][T26139] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 804.838379][T26139] ? iov_iter_pipe+0xfa/0x120 [ 804.843087][T26139] default_file_splice_read+0xd5/0x590 [ 804.848593][T26139] ? fsnotify+0x6a9/0x7d0 [ 804.852986][T26139] ? security_file_permission+0x88/0x280 [ 804.858646][T26139] ? rw_verify_area+0xee/0x250 [ 804.863437][T26139] do_splice_to+0xf2/0x130 [ 804.867866][T26139] ? iter_file_splice_write+0x840/0x840 [ 804.873433][T26139] ? iter_file_splice_write+0x840/0x840 [ 804.879050][T26139] do_splice+0xbbb/0xc40 [ 804.883314][T26139] __x64_sys_splice+0x20a/0x220 [ 804.888338][T26139] do_syscall_64+0xcc/0x3a0 [ 804.892865][T26139] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 804.898773][T26139] RIP: 0033:0x45b399 [ 804.902715][T26139] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.922428][T26139] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 804.930957][T26139] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 804.939031][T26139] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 804.947021][T26139] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 804.955009][T26139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000010, 0x0) [ 804.963191][T26139] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000c 12:12:32 executing program 2 (fault-call:4 fault-nth:20): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:32 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(0x0, 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:32 executing program 0 (fault-call:5 fault-nth:13): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 805.358133][T26163] FAULT_INJECTION: forcing a failure. [ 805.358133][T26163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 805.371669][T26163] CPU: 0 PID: 26163 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 805.380360][T26163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.390551][T26163] Call Trace: [ 805.393872][T26163] dump_stack+0x11d/0x181 [ 805.398229][T26163] should_fail.cold+0xa/0x1a [ 805.402891][T26163] should_fail_alloc_page+0x50/0x60 [ 805.408116][T26163] __alloc_pages_nodemask+0xd2/0x310 [ 805.413500][T26163] alloc_pages_current+0xd1/0x170 [ 805.418549][T26163] push_pipe+0x170/0x320 [ 805.422834][T26163] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 805.428491][T26163] ? iov_iter_pipe+0xfa/0x120 [ 805.433540][T26163] default_file_splice_read+0xd5/0x590 [ 805.439158][T26163] ? fsnotify+0x6a9/0x7d0 [ 805.443610][T26163] ? security_file_permission+0x88/0x280 [ 805.449269][T26163] ? rw_verify_area+0xee/0x250 [ 805.454086][T26163] do_splice_to+0xf2/0x130 [ 805.458523][T26163] ? iter_file_splice_write+0x840/0x840 [ 805.464096][T26163] ? iter_file_splice_write+0x840/0x840 [ 805.469706][T26163] do_splice+0xbbb/0xc40 [ 805.473975][T26163] __x64_sys_splice+0x20a/0x220 [ 805.478847][T26163] do_syscall_64+0xcc/0x3a0 [ 805.483373][T26163] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 805.489294][T26163] RIP: 0033:0x45b399 [ 805.493426][T26163] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.513170][T26163] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 805.521741][T26163] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 805.529853][T26163] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 805.537966][T26163] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 805.545950][T26163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 805.556544][T26163] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000d [ 805.583620][T26159] FAULT_INJECTION: forcing a failure. [ 805.583620][T26159] name failslab, interval 1, probability 0, space 0, times 0 [ 805.596546][T26159] CPU: 1 PID: 26159 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 805.605225][T26159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.615401][T26159] Call Trace: [ 805.618710][T26159] dump_stack+0x11d/0x181 [ 805.623062][T26159] should_fail.cold+0xa/0x1a [ 805.627682][T26159] __should_failslab+0xee/0x130 [ 805.632646][T26159] should_failslab+0x9/0x14 [ 805.637305][T26159] kmem_cache_alloc_trace+0x2a/0x5d0 [ 805.642612][T26159] ? memcg_kmem_put_cache+0x7c/0xc0 [ 805.647824][T26159] ? debug_smp_processor_id+0x43/0x137 [ 805.653303][T26159] vb2_vmalloc_alloc+0x89/0x1a0 [ 805.658181][T26159] __vb2_queue_alloc+0x36b/0x850 [ 805.663188][T26159] ? vb2_vmalloc_attach_dmabuf+0xd0/0xd0 [ 805.668952][T26159] vb2_core_reqbufs+0x561/0x860 [ 805.674025][T26159] __vb2_init_fileio+0x23d/0x630 [ 805.679107][T26159] __vb2_perform_fileio+0x917/0xb00 [ 805.684335][T26159] vb2_read+0x44/0x60 [ 805.688388][T26159] vb2_fop_read+0x175/0x250 [ 805.692969][T26159] v4l2_read+0x13a/0x150 [ 805.697242][T26159] do_iter_read+0x357/0x3d0 [ 805.701757][T26159] vfs_readv+0x9c/0xf0 [ 805.705957][T26159] ? __read_once_size.constprop.0+0x12/0x20 [ 805.711930][T26159] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 805.718197][T26159] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 805.724137][T26159] default_file_splice_read+0x358/0x590 [ 805.729755][T26159] ? rw_verify_area+0xee/0x250 [ 805.734521][T26159] do_splice_to+0xf2/0x130 [ 805.739003][T26159] ? iter_file_splice_write+0x840/0x840 [ 805.744633][T26159] ? iter_file_splice_write+0x840/0x840 [ 805.750243][T26159] do_splice+0xbbb/0xc40 [ 805.754606][T26159] __x64_sys_splice+0x20a/0x220 12:12:32 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(0x0, 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 805.759477][T26159] do_syscall_64+0xcc/0x3a0 [ 805.764059][T26159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 805.769964][T26159] RIP: 0033:0x45b399 [ 805.774064][T26159] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.793808][T26159] RSP: 002b:00007f4c274e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 805.802759][T26159] RAX: ffffffffffffffda RBX: 00007f4c274e66d4 RCX: 000000000045b399 [ 805.810806][T26159] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 805.818809][T26159] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 805.826992][T26159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 805.834980][T26159] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000014 12:12:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000071, 0x0) 12:12:32 executing program 0 (fault-call:5 fault-nth:14): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 806.072597][ T8163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.107182][ T8163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.138781][T26181] FAULT_INJECTION: forcing a failure. [ 806.138781][T26181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 806.152084][T26181] CPU: 1 PID: 26181 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 806.160872][T26181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.170946][T26181] Call Trace: [ 806.174263][T26181] dump_stack+0x11d/0x181 [ 806.178625][T26181] should_fail.cold+0xa/0x1a [ 806.183247][T26181] should_fail_alloc_page+0x50/0x60 [ 806.188492][T26181] __alloc_pages_nodemask+0xd2/0x310 [ 806.193801][T26181] alloc_pages_current+0xd1/0x170 [ 806.198847][T26181] push_pipe+0x170/0x320 [ 806.203119][T26181] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 806.208858][T26181] ? iov_iter_pipe+0xfa/0x120 [ 806.213804][T26181] default_file_splice_read+0xd5/0x590 [ 806.219284][T26181] ? fsnotify+0x6a9/0x7d0 [ 806.223779][T26181] ? security_file_permission+0x88/0x280 [ 806.229534][T26181] ? rw_verify_area+0xee/0x250 [ 806.234317][T26181] do_splice_to+0xf2/0x130 [ 806.238778][T26181] ? iter_file_splice_write+0x840/0x840 [ 806.244386][T26181] ? iter_file_splice_write+0x840/0x840 [ 806.250043][T26181] do_splice+0xbbb/0xc40 [ 806.254388][T26181] __x64_sys_splice+0x20a/0x220 [ 806.259262][T26181] do_syscall_64+0xcc/0x3a0 [ 806.263871][T26181] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 806.269774][T26181] RIP: 0033:0x45b399 [ 806.273800][T26181] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 806.293414][T26181] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 806.299933][T26164] QAT: Invalid ioctl [ 806.301844][T26181] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 806.301906][T26181] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 806.301976][T26181] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 806.330050][T26181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 806.338209][T26181] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000e [ 806.351267][ T8163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.361573][ T8163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.384280][ T8163] device bridge_slave_1 left promiscuous mode [ 806.418842][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state 12:12:33 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:33 executing program 2 (fault-call:4 fault-nth:21): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:33 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xe, r0, 0x2) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000003) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000100), 0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r10 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r10, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) sendfile(r8, r9, 0x0, 0x102000003) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000100), 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="835636478710382788a66efceff6ef5d8a5a0bb4bac2ea7d0ea84e5657050e05f289e10ec0bb24a5db523f6ae9d22d85b1669f9d0b8d0c57f706ddcd1045a2bc57613da585411b8264ea296a0977061160e511fba06edfaf1cfcb60c69e1d69395865f5cc7a4ff25b4ea4b14e963d728890ac8aa8b44016bead7e60a12176f066e9c57496929a982dfa89697bf607b5102ad74afe09f7212114bd98d87b87e84598b9cb4670daabbf1576d3c6304d0be001ad4b5167f540cd52d62c170aceb2064d0804271f2bb3919e7bea5513a1e737e8bf578930e", @ANYRES16=r2], 0xd8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000040)=0xae14, 0x4) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x30001, 0x0) r12 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa6c1c0, 0x0) r13 = socket$inet6(0xa, 0x1, 0x8010000000000084) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000068}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r14, 0x400, 0x70bd27, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x8, 0xb, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004861}, 0x8000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) sendmsg$NLBL_MGMT_C_PROTOCOLS(r13, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22150240}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r14, @ANYRES32=r15], 0x3}, 0x1, 0x0, 0x0, 0x5c010}, 0x40000a4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r12, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r14, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40401e5) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r14, 0x100, 0x70bd29, 0x5, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/loop#\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x1) r16 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r16, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r16, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r16, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r17 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r18 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r17, 0x4c00, r18) sendfile(r16, r17, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:33 executing program 0 (fault-call:5 fault-nth:15): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x2) [ 806.486869][ T8163] device bridge_slave_0 left promiscuous mode [ 806.493122][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state 12:12:33 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000004c0)={0xffffffffffffffff, 0x303d9ef3}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x54f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x10000, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket(0x10, 0x2, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0xfffffffffffffffa, 0x100) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000540)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee00, r7, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/vmallocinfo\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) setresuid(0xee01, r4, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x80, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r2, &(0x7f0000000300)={0x90, 0x0, 0x2, {0x3, 0x1, 0x3, 0x40, 0x10001, 0x401, {0x1, 0x3, 0x9, 0x80000001, 0x0, 0x42f, 0x20, 0x0, 0x6, 0x6, 0x5da, r4, r9, 0x80000001, 0x6}}}, 0x90) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x4) r10 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x6, 0x2400c1) ioctl$LOOP_CLR_FD(r10, 0x4c01) r11 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') [ 806.551090][ T8163] device veth1_macvtap left promiscuous mode [ 806.604900][ T8163] device veth0_macvtap left promiscuous mode [ 806.608558][T26193] FAULT_INJECTION: forcing a failure. [ 806.608558][T26193] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 806.620043][ T8163] device veth1_vlan left promiscuous mode [ 806.624646][T26193] CPU: 0 PID: 26193 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 806.638781][T26193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.649197][T26193] Call Trace: [ 806.652506][T26193] dump_stack+0x11d/0x181 [ 806.656965][T26193] should_fail.cold+0xa/0x1a [ 806.661682][T26193] should_fail_alloc_page+0x50/0x60 [ 806.666997][T26193] __alloc_pages_nodemask+0xd2/0x310 [ 806.672312][T26193] alloc_pages_current+0xd1/0x170 [ 806.677381][T26193] push_pipe+0x170/0x320 [ 806.681684][T26193] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 806.687263][T26193] ? iov_iter_pipe+0xfa/0x120 [ 806.692196][T26193] default_file_splice_read+0xd5/0x590 [ 806.697696][T26193] ? fsnotify+0x6a9/0x7d0 [ 806.702158][T26193] ? security_file_permission+0x88/0x280 [ 806.707942][T26193] ? rw_verify_area+0xee/0x250 [ 806.712742][T26193] do_splice_to+0xf2/0x130 [ 806.717176][T26193] ? iter_file_splice_write+0x840/0x840 [ 806.722825][T26193] ? iter_file_splice_write+0x840/0x840 [ 806.728420][T26193] do_splice+0xbbb/0xc40 [ 806.732776][T26193] __x64_sys_splice+0x20a/0x220 [ 806.737687][T26193] do_syscall_64+0xcc/0x3a0 [ 806.742287][T26193] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 806.748188][T26193] RIP: 0033:0x45b399 [ 806.752171][T26193] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 806.771804][T26193] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 806.781201][T26193] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 806.789641][T26193] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 806.797797][T26193] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 806.805791][T26193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 806.813919][T26193] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000f [ 806.831712][ T8163] device veth0_vlan left promiscuous mode 12:12:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:33 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) fsync(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000"]) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:33 executing program 0 (fault-call:5 fault-nth:16): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:34 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 807.121301][T26215] FAULT_INJECTION: forcing a failure. [ 807.121301][T26215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 807.134723][T26215] CPU: 0 PID: 26215 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 807.143556][T26215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.153836][T26215] Call Trace: [ 807.157294][T26215] dump_stack+0x11d/0x181 [ 807.161658][T26215] should_fail.cold+0xa/0x1a [ 807.166316][T26215] should_fail_alloc_page+0x50/0x60 [ 807.171847][T26215] __alloc_pages_nodemask+0xd2/0x310 [ 807.177158][T26215] alloc_pages_current+0xd1/0x170 [ 807.182226][T26215] push_pipe+0x170/0x320 [ 807.186501][T26215] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 807.192160][T26215] ? iov_iter_pipe+0xfa/0x120 [ 807.196919][T26215] default_file_splice_read+0xd5/0x590 [ 807.202433][T26215] ? fsnotify+0x6a9/0x7d0 [ 807.206835][T26215] ? security_file_permission+0x88/0x280 [ 807.212570][T26215] ? rw_verify_area+0xee/0x250 [ 807.218911][T26215] do_splice_to+0xf2/0x130 [ 807.223490][T26215] ? iter_file_splice_write+0x840/0x840 [ 807.229274][T26215] ? iter_file_splice_write+0x840/0x840 [ 807.234861][T26215] do_splice+0xbbb/0xc40 [ 807.239131][T26215] __x64_sys_splice+0x20a/0x220 [ 807.244010][T26215] do_syscall_64+0xcc/0x3a0 [ 807.248560][T26215] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 807.254476][T26215] RIP: 0033:0x45b399 [ 807.258391][T26215] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 807.278269][T26215] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 807.286707][T26215] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 807.294684][T26215] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 807.302672][T26215] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 807.310840][T26215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3) [ 807.318828][T26215] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000010 12:12:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000004, 0x0) 12:12:34 executing program 0 (fault-call:5 fault-nth:17): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4) 12:12:34 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x11801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:34 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 807.575080][T26235] FAULT_INJECTION: forcing a failure. [ 807.575080][T26235] name failslab, interval 1, probability 0, space 0, times 0 [ 807.587883][T26235] CPU: 1 PID: 26235 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 807.596560][T26235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.606726][T26235] Call Trace: [ 807.610033][T26235] dump_stack+0x11d/0x181 [ 807.614376][T26235] should_fail.cold+0xa/0x1a [ 807.618987][T26235] __should_failslab+0xee/0x130 [ 807.623873][T26235] should_failslab+0x9/0x14 [ 807.632587][T26235] __kmalloc+0x53/0x690 [ 807.636858][T26235] ? rw_copy_check_uvector+0x241/0x270 [ 807.642339][T26235] rw_copy_check_uvector+0x241/0x270 [ 807.647675][T26235] import_iovec+0x67/0x220 [ 807.652134][T26235] vfs_readv+0x72/0xf0 [ 807.656226][T26235] ? push_pipe+0x237/0x320 [ 807.660798][T26235] ? __read_once_size.constprop.0+0x12/0x20 [ 807.666799][T26235] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 807.673054][T26235] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 807.678797][T26235] default_file_splice_read+0x358/0x590 [ 807.684480][T26235] ? rw_verify_area+0xee/0x250 [ 807.689267][T26235] do_splice_to+0xf2/0x130 [ 807.693724][T26235] ? iter_file_splice_write+0x840/0x840 [ 807.699293][T26235] ? iter_file_splice_write+0x840/0x840 [ 807.704855][T26235] do_splice+0xbbb/0xc40 [ 807.709144][T26235] __x64_sys_splice+0x20a/0x220 [ 807.714045][T26235] do_syscall_64+0xcc/0x3a0 [ 807.718627][T26235] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 807.724557][T26235] RIP: 0033:0x45b399 [ 807.728468][T26235] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 807.748160][T26235] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 807.756582][T26235] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 807.764562][T26235] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 807.772551][T26235] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 807.780628][T26235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 807.788868][T26235] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000011 12:12:34 executing program 0 (fault-call:5 fault-nth:18): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000007, 0x0) 12:12:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x5) [ 808.021337][T26250] FAULT_INJECTION: forcing a failure. [ 808.021337][T26250] name failslab, interval 1, probability 0, space 0, times 0 [ 808.034161][T26250] CPU: 1 PID: 26250 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 808.043263][T26250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.053327][T26250] Call Trace: [ 808.056634][T26250] dump_stack+0x11d/0x181 [ 808.061007][T26250] should_fail.cold+0xa/0x1a [ 808.065628][T26250] __should_failslab+0xee/0x130 [ 808.070566][T26250] should_failslab+0x9/0x14 [ 808.075231][T26250] kmem_cache_alloc_trace+0x2a/0x5d0 [ 808.080548][T26250] ? __rcu_read_unlock+0x66/0x3d0 [ 808.085595][T26250] __vb2_init_fileio+0x148/0x630 [ 808.090549][T26250] ? aa_file_perm+0x3a1/0xc20 [ 808.095357][T26250] __vb2_perform_fileio+0x917/0xb00 [ 808.100577][T26250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 808.106886][T26250] ? should_fail+0xd4/0x45d [ 808.111545][T26250] ? get_page_from_freelist+0x936/0x1650 [ 808.117305][T26250] vb2_read+0x44/0x60 [ 808.121433][T26250] vb2_fop_read+0x175/0x250 [ 808.125955][T26250] v4l2_read+0x13a/0x150 [ 808.130225][T26250] do_iter_read+0x357/0x3d0 [ 808.134767][T26250] vfs_readv+0x9c/0xf0 [ 808.138873][T26250] ? __read_once_size.constprop.0+0x12/0x20 [ 808.144798][T26250] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 808.151097][T26250] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 808.156940][T26250] default_file_splice_read+0x358/0x590 [ 808.162602][T26250] ? rw_verify_area+0xee/0x250 [ 808.167401][T26250] do_splice_to+0xf2/0x130 [ 808.171842][T26250] ? iter_file_splice_write+0x840/0x840 [ 808.177502][T26250] ? iter_file_splice_write+0x840/0x840 [ 808.183081][T26250] do_splice+0xbbb/0xc40 [ 808.187379][T26250] __x64_sys_splice+0x20a/0x220 [ 808.192376][T26250] do_syscall_64+0xcc/0x3a0 [ 808.196943][T26250] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 808.202866][T26250] RIP: 0033:0x45b399 [ 808.206770][T26250] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 808.226528][T26250] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 808.234964][T26250] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 808.242957][T26250] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 808.250934][T26250] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 808.258913][T26250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 808.266886][T26250] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000012 12:12:35 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20, 0x0, 0xa4b0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:35 executing program 0 (fault-call:5 fault-nth:19): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:35 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000010, 0x0) [ 808.559880][T26268] FAULT_INJECTION: forcing a failure. [ 808.559880][T26268] name failslab, interval 1, probability 0, space 0, times 0 [ 808.572666][T26268] CPU: 0 PID: 26268 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 808.581493][T26268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.591620][T26268] Call Trace: [ 808.594992][T26268] dump_stack+0x11d/0x181 [ 808.599454][T26268] should_fail.cold+0xa/0x1a [ 808.604172][T26268] __should_failslab+0xee/0x130 [ 808.609086][T26268] should_failslab+0x9/0x14 [ 808.613617][T26268] __kmalloc+0x53/0x690 [ 808.617800][T26268] ? __vb2_queue_alloc+0xa9/0x850 [ 808.623639][T26268] __vb2_queue_alloc+0xa9/0x850 [ 808.628519][T26268] vb2_core_reqbufs+0x561/0x860 [ 808.633584][T26268] __vb2_init_fileio+0x23d/0x630 [ 808.638711][T26268] __vb2_perform_fileio+0x917/0xb00 [ 808.643930][T26268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 808.650273][T26268] ? should_fail+0xd4/0x45d [ 808.654997][T26268] ? get_page_from_freelist+0x936/0x1650 [ 808.660649][T26268] vb2_read+0x44/0x60 [ 808.664640][T26268] vb2_fop_read+0x175/0x250 [ 808.669178][T26268] v4l2_read+0x13a/0x150 [ 808.673514][T26268] do_iter_read+0x357/0x3d0 [ 808.678123][T26268] vfs_readv+0x9c/0xf0 [ 808.682220][T26268] ? __read_once_size.constprop.0+0x12/0x20 [ 808.688290][T26268] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 808.694549][T26268] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 808.700341][T26268] default_file_splice_read+0x358/0x590 [ 808.705960][T26268] ? rw_verify_area+0xee/0x250 [ 808.710733][T26268] do_splice_to+0xf2/0x130 [ 808.715188][T26268] ? iter_file_splice_write+0x840/0x840 [ 808.720829][T26268] ? iter_file_splice_write+0x840/0x840 [ 808.726388][T26268] do_splice+0xbbb/0xc40 [ 808.730655][T26268] __x64_sys_splice+0x20a/0x220 [ 808.735613][T26268] do_syscall_64+0xcc/0x3a0 [ 808.740139][T26268] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 808.746091][T26268] RIP: 0033:0x45b399 [ 808.750058][T26268] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 808.770214][T26268] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 808.778916][T26268] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 808.786900][T26268] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 808.794878][T26268] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 808.802971][T26268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x6) [ 808.811171][T26268] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000013 12:12:35 executing program 0 (fault-call:5 fault-nth:20): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:35 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) socket$pptp(0x18, 0x1, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:36 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x1, 0x1, [0x28000000, 0x401, 0xf5f, 0x101, 0x9, 0x7, 0x1125, 0x4]}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000003) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000100), 0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r10 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r10, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) sendfile(r8, r9, 0x0, 0x102000003) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000100), 0x4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fstat(r11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r13) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r15) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r16) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000003c0)=[r12, 0xffffffffffffffff, r13, r14, r15, r16, r17, r18]) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0x0]) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r20) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r21) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r23) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r24) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000003c0)=[r20, 0xffffffffffffffff, r21, r22, r23, r24, r25, r26]) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r27) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r28) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r30) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r31) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000003c0)=[r27, 0xffffffffffffffff, r28, r29, r30, r31, r32, r33]) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r34) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r35) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r37) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000003c0)=[r34, 0xffffffffffffffff, r35, r36, r37, r38, r39, r40]) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r41) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r42) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r44) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r45) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000003c0)=[r41, 0xffffffffffffffff, r42, r43, r44, r45, r46, r47]) getgroups(0xa, &(0x7f0000000280)=[r12, r19, r22, r31, r2, r40, 0xffffffffffffffff, r41, r2, r2]) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:36 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 809.140485][T26282] FAULT_INJECTION: forcing a failure. [ 809.140485][T26282] name failslab, interval 1, probability 0, space 0, times 0 [ 809.153332][T26282] CPU: 1 PID: 26282 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 809.162048][T26282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.172314][T26282] Call Trace: [ 809.175677][T26282] dump_stack+0x11d/0x181 [ 809.180044][T26282] should_fail.cold+0xa/0x1a [ 809.184802][T26282] __should_failslab+0xee/0x130 [ 809.189826][T26282] should_failslab+0x9/0x14 [ 809.194380][T26282] kmem_cache_alloc_trace+0x2a/0x5d0 [ 809.200469][T26282] ? memcg_kmem_put_cache+0x7c/0xc0 [ 809.205681][T26282] ? debug_smp_processor_id+0x43/0x137 [ 809.211161][T26282] vb2_vmalloc_alloc+0x89/0x1a0 [ 809.216028][T26282] __vb2_queue_alloc+0x36b/0x850 [ 809.220983][T26282] ? vb2_vmalloc_attach_dmabuf+0xd0/0xd0 [ 809.226631][T26282] vb2_core_reqbufs+0x561/0x860 [ 809.231524][T26282] __vb2_init_fileio+0x23d/0x630 [ 809.236478][T26282] __vb2_perform_fileio+0x917/0xb00 [ 809.241707][T26282] vb2_read+0x44/0x60 [ 809.245782][T26282] vb2_fop_read+0x175/0x250 [ 809.250318][T26282] v4l2_read+0x13a/0x150 [ 809.254577][T26282] do_iter_read+0x357/0x3d0 [ 809.259181][T26282] vfs_readv+0x9c/0xf0 [ 809.263265][T26282] ? __read_once_size.constprop.0+0x12/0x20 [ 809.269166][T26282] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 809.275428][T26282] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 809.281295][T26282] default_file_splice_read+0x358/0x590 [ 809.286885][T26282] ? rw_verify_area+0xee/0x250 [ 809.291665][T26282] do_splice_to+0xf2/0x130 [ 809.296658][T26282] ? iter_file_splice_write+0x840/0x840 [ 809.302221][T26282] ? iter_file_splice_write+0x840/0x840 [ 809.307794][T26282] do_splice+0xbbb/0xc40 [ 809.312048][T26282] __x64_sys_splice+0x20a/0x220 [ 809.316918][T26282] do_syscall_64+0xcc/0x3a0 [ 809.321637][T26282] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 809.327537][T26282] RIP: 0033:0x45b399 [ 809.331469][T26282] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.351243][T26282] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 809.359765][T26282] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 809.367861][T26282] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 809.375980][T26282] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 809.384143][T26282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 809.392121][T26282] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000014 12:12:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x7) 12:12:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000071, 0x0) 12:12:36 executing program 0 (fault-call:5 fault-nth:21): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:36 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 809.818493][T26311] FAULT_INJECTION: forcing a failure. [ 809.818493][T26311] name failslab, interval 1, probability 0, space 0, times 0 [ 809.831642][T26311] CPU: 1 PID: 26311 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 809.840363][T26311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.850433][T26311] Call Trace: [ 809.853754][T26311] dump_stack+0x11d/0x181 [ 809.858193][T26311] should_fail.cold+0xa/0x1a [ 809.862837][T26311] __should_failslab+0xee/0x130 [ 809.867726][T26311] should_failslab+0x9/0x14 [ 809.872277][T26311] kmem_cache_alloc_node_trace+0x3b/0x670 [ 809.878013][T26311] __get_vm_area_node+0x121/0x280 [ 809.883080][T26311] __vmalloc_node_range+0xe5/0x4c0 [ 809.888296][T26311] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 809.893414][T26311] ? memcg_kmem_put_cache+0x7c/0xc0 [ 809.898672][T26311] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 809.903749][T26311] vmalloc_user+0x65/0x80 [ 809.908098][T26311] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 809.913172][T26311] vb2_vmalloc_alloc+0xb1/0x1a0 [ 809.918309][T26311] __vb2_queue_alloc+0x36b/0x850 [ 809.923282][T26311] ? vb2_vmalloc_attach_dmabuf+0xd0/0xd0 [ 809.929008][T26311] vb2_core_reqbufs+0x561/0x860 [ 809.933899][T26311] __vb2_init_fileio+0x23d/0x630 [ 809.939307][T26311] __vb2_perform_fileio+0x917/0xb00 [ 809.944535][T26311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 809.950847][T26311] ? should_fail+0xd4/0x45d [ 809.955365][T26311] ? get_page_from_freelist+0x936/0x1650 [ 809.961017][T26311] vb2_read+0x44/0x60 [ 809.965029][T26311] vb2_fop_read+0x175/0x250 [ 809.969611][T26311] v4l2_read+0x13a/0x150 [ 809.973873][T26311] do_iter_read+0x357/0x3d0 [ 809.978481][T26311] vfs_readv+0x9c/0xf0 [ 809.982583][T26311] ? __read_once_size.constprop.0+0x12/0x20 [ 809.988565][T26311] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 809.994845][T26311] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 810.000592][T26311] default_file_splice_read+0x358/0x590 [ 810.006234][T26311] ? rw_verify_area+0xee/0x250 [ 810.011114][T26311] do_splice_to+0xf2/0x130 [ 810.015615][T26311] ? iter_file_splice_write+0x840/0x840 [ 810.021208][T26311] ? iter_file_splice_write+0x840/0x840 [ 810.026857][T26311] do_splice+0xbbb/0xc40 [ 810.031110][T26311] __x64_sys_splice+0x20a/0x220 [ 810.036122][T26311] do_syscall_64+0xcc/0x3a0 [ 810.040686][T26311] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 810.046580][T26311] RIP: 0033:0x45b399 [ 810.050500][T26311] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.070178][T26311] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 810.078658][T26311] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 810.086636][T26311] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 810.094629][T26311] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 810.102727][T26311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 810.110698][T26311] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000015 [ 810.119713][T26311] syz-executor.0: vmalloc: allocation failure: 462848 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 810.134201][T26311] CPU: 1 PID: 26311 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 810.142879][T26311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.152991][T26311] Call Trace: [ 810.156292][T26311] dump_stack+0x11d/0x181 [ 810.160777][T26311] warn_alloc.cold+0x72/0xcf 12:12:37 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc) fcntl$setstatus(r0, 0x4, 0x3800) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x2) 12:12:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc) [ 810.165394][T26311] __vmalloc_node_range+0x373/0x4c0 [ 810.170609][T26311] ? memcg_kmem_put_cache+0x7c/0xc0 [ 810.175833][T26311] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 810.180952][T26311] vmalloc_user+0x65/0x80 [ 810.185296][T26311] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 810.190333][T26311] vb2_vmalloc_alloc+0xb1/0x1a0 [ 810.195218][T26311] __vb2_queue_alloc+0x36b/0x850 [ 810.200178][T26311] ? vb2_vmalloc_attach_dmabuf+0xd0/0xd0 [ 810.205981][T26311] vb2_core_reqbufs+0x561/0x860 [ 810.210860][T26311] __vb2_init_fileio+0x23d/0x630 [ 810.215823][T26311] __vb2_perform_fileio+0x917/0xb00 [ 810.221034][T26311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 810.227280][T26311] ? should_fail+0xd4/0x45d [ 810.231808][T26311] ? get_page_from_freelist+0x936/0x1650 [ 810.237464][T26311] vb2_read+0x44/0x60 [ 810.241464][T26311] vb2_fop_read+0x175/0x250 [ 810.246003][T26311] v4l2_read+0x13a/0x150 [ 810.250321][T26311] do_iter_read+0x357/0x3d0 [ 810.254846][T26311] vfs_readv+0x9c/0xf0 [ 810.258937][T26311] ? __read_once_size.constprop.0+0x12/0x20 [ 810.264896][T26311] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 810.271277][T26311] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 810.277020][T26311] default_file_splice_read+0x358/0x590 [ 810.282775][T26311] ? rw_verify_area+0xee/0x250 [ 810.287582][T26311] do_splice_to+0xf2/0x130 [ 810.292016][T26311] ? iter_file_splice_write+0x840/0x840 [ 810.297738][T26311] ? iter_file_splice_write+0x840/0x840 [ 810.303307][T26311] do_splice+0xbbb/0xc40 [ 810.307611][T26311] __x64_sys_splice+0x20a/0x220 [ 810.312549][T26311] do_syscall_64+0xcc/0x3a0 [ 810.317687][T26311] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 810.323649][T26311] RIP: 0033:0x45b399 [ 810.327568][T26311] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.347524][T26311] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 810.355958][T26311] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 810.363943][T26311] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 810.371922][T26311] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 810.379964][T26311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 810.387957][T26311] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000015 [ 810.396144][T26311] Mem-Info: [ 810.399343][T26311] active_anon:267646 inactive_anon:9075 isolated_anon:0 [ 810.399343][T26311] active_file:12659 inactive_file:36700 isolated_file:0 [ 810.399343][T26311] unevictable:1024 dirty:303 writeback:0 unstable:0 [ 810.399343][T26311] slab_reclaimable:5938 slab_unreclaimable:21414 [ 810.399343][T26311] mapped:60832 shmem:4398 pagetables:2314 bounce:0 [ 810.399343][T26311] free:1402100 free_pcp:952 free_cma:0 [ 810.437937][T26311] Node 0 active_anon:1070584kB inactive_anon:36300kB active_file:50500kB inactive_file:146800kB unevictable:4096kB isolated(anon):0kB isolated(file):0kB mapped:243328kB dirty:1212kB writeback:0kB shmem:17592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 810.467730][T26311] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 810.494420][T26311] Node 0 DMA free:15908kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 810.523952][T26311] lowmem_reserve[]: 0 2908 3615 3615 [ 810.529285][T26311] Node 0 DMA32 free:1774196kB min:35360kB low:44200kB high:53040kB reserved_highatomic:0KB active_anon:578828kB inactive_anon:31092kB active_file:20472kB inactive_file:97256kB unevictable:4096kB writepending:1004kB present:3129332kB managed:2980540kB mlocked:4096kB kernel_stack:1476kB pagetables:6412kB bounce:0kB free_pcp:1356kB local_pcp:1060kB free_cma:0kB [ 810.563132][T26311] lowmem_reserve[]: 0 0 707 707 [ 810.568034][T26311] Node 0 Normal free:10740kB min:8600kB low:10748kB high:12896kB reserved_highatomic:0KB active_anon:491832kB inactive_anon:5208kB active_file:30028kB inactive_file:49544kB unevictable:0kB writepending:208kB present:786432kB managed:724520kB mlocked:0kB kernel_stack:3088kB pagetables:2844kB bounce:0kB free_pcp:2452kB local_pcp:1084kB free_cma:0kB [ 810.600669][T26311] lowmem_reserve[]: 0 0 0 0 [ 810.605214][T26311] Node 1 Normal free:3807556kB min:45956kB low:57444kB high:68932kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870256kB mlocked:0kB kernel_stack:8kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 810.635818][T26311] lowmem_reserve[]: 0 0 0 0 [ 810.640362][T26311] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 810.655192][T26311] Node 0 DMA32: 825*4kB (UME) 366*8kB (UME) 80*16kB (UM) 859*32kB (UME) 1159*64kB (UME) 110*128kB (UME) 7*256kB (M) 3*512kB (UME) 1*1024kB (M) 0*2048kB 402*4096kB (UM) = 1774196kB [ 810.673009][T26311] Node 0 Normal: 59*4kB (UME) 51*8kB (UE) 10*16kB (UE) 30*32kB (UME) 81*64kB (ME) 12*128kB (UME) 5*256kB (ME) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 10788kB [ 810.688996][T26311] Node 1 Normal: 3*4kB (UM) 3*8kB (UME) 6*16kB (UE) 2*32kB (UM) 4*64kB (UE) 3*128kB (UME) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UME) 927*4096kB (M) = 3807556kB [ 810.706202][T26311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 810.715801][T26311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 810.725117][T26311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 810.734758][T26311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 810.744075][T26311] 53747 total pagecache pages [ 810.748839][T26311] 0 pages in swap cache [ 810.753089][T26311] Swap cache stats: add 0, delete 0, find 0/0 [ 810.759229][T26311] Free swap = 0kB [ 810.763030][T26311] Total swap = 0kB [ 810.766833][T26311] 1965979 pages RAM [ 810.770636][T26311] 0 pages HighMem/MovableOnly [ 810.775325][T26311] 68173 pages reserved [ 810.779395][T26311] 0 pages cma reserved 12:12:37 executing program 0 (fault-call:5 fault-nth:22): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:37 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x10) 12:12:37 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3) [ 811.042658][T26330] FAULT_INJECTION: forcing a failure. [ 811.042658][T26330] name failslab, interval 1, probability 0, space 0, times 0 [ 811.055850][T26330] CPU: 0 PID: 26330 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 811.064645][T26330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.074792][T26330] Call Trace: [ 811.078123][T26330] dump_stack+0x11d/0x181 [ 811.082606][T26330] should_fail.cold+0xa/0x1a [ 811.087268][T26330] __should_failslab+0xee/0x130 [ 811.092143][T26330] should_failslab+0x9/0x14 [ 811.096695][T26330] kmem_cache_alloc_node+0x39/0x660 [ 811.101919][T26330] alloc_vmap_area+0x10a/0x15d0 [ 811.106795][T26330] ? debug_smp_processor_id+0x43/0x137 [ 811.112462][T26330] __get_vm_area_node+0x16f/0x280 [ 811.117605][T26330] __vmalloc_node_range+0xe5/0x4c0 [ 811.122876][T26330] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 811.128124][T26330] ? memcg_kmem_put_cache+0x7c/0xc0 [ 811.133416][T26330] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 811.138467][T26330] vmalloc_user+0x65/0x80 [ 811.142824][T26330] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 811.147878][T26330] vb2_vmalloc_alloc+0xb1/0x1a0 [ 811.153364][T26330] __vb2_queue_alloc+0x36b/0x850 [ 811.158323][T26330] ? vb2_vmalloc_attach_dmabuf+0xd0/0xd0 [ 811.164095][T26330] vb2_core_reqbufs+0x561/0x860 [ 811.168983][T26330] __vb2_init_fileio+0x23d/0x630 [ 811.173947][T26330] __vb2_perform_fileio+0x917/0xb00 [ 811.179247][T26330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 811.185557][T26330] ? should_fail+0xd4/0x45d [ 811.190131][T26330] ? get_page_from_freelist+0x936/0x1650 [ 811.195873][T26330] vb2_read+0x44/0x60 [ 811.199892][T26330] vb2_fop_read+0x175/0x250 [ 811.204494][T26330] v4l2_read+0x13a/0x150 [ 811.208762][T26330] do_iter_read+0x357/0x3d0 [ 811.213299][T26330] vfs_readv+0x9c/0xf0 [ 811.217527][T26330] ? __read_once_size.constprop.0+0x12/0x20 [ 811.223485][T26330] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 811.229740][T26330] ? iov_iter_get_pages_alloc+0x26c/0xb10 [ 811.235540][T26330] default_file_splice_read+0x358/0x590 [ 811.241298][T26330] ? rw_verify_area+0xee/0x250 [ 811.246070][T26330] do_splice_to+0xf2/0x130 [ 811.250561][T26330] ? iter_file_splice_write+0x840/0x840 [ 811.256220][T26330] ? iter_file_splice_write+0x840/0x840 [ 811.262724][T26330] do_splice+0xbbb/0xc40 [ 811.266994][T26330] __x64_sys_splice+0x20a/0x220 [ 811.272060][T26330] do_syscall_64+0xcc/0x3a0 [ 811.276698][T26330] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 811.282801][T26330] RIP: 0033:0x45b399 [ 811.286814][T26330] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.306674][T26330] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 811.315104][T26330] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 811.323161][T26330] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 811.331267][T26330] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 811.339530][T26330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 811.347737][T26330] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000016 12:12:38 executing program 0 (fault-call:5 fault-nth:23): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4) 12:12:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x300) [ 811.682132][T26349] FAULT_INJECTION: forcing a failure. [ 811.682132][T26349] name failslab, interval 1, probability 0, space 0, times 0 [ 811.694844][T26349] CPU: 1 PID: 26349 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 811.703569][T26349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.713654][T26349] Call Trace: [ 811.716994][T26349] dump_stack+0x11d/0x181 [ 811.721350][T26349] should_fail.cold+0xa/0x1a [ 811.725994][T26349] __should_failslab+0xee/0x130 [ 811.730891][T26349] should_failslab+0x9/0x14 [ 811.735425][T26349] kmem_cache_alloc_node+0x39/0x660 [ 811.740699][T26349] alloc_vmap_area+0x995/0x15d0 [ 811.745590][T26349] ? debug_smp_processor_id+0x43/0x137 [ 811.751075][T26349] __get_vm_area_node+0x16f/0x280 [ 811.756121][T26349] __vmalloc_node_range+0xe5/0x4c0 [ 811.761285][T26349] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 811.766483][T26349] ? memcg_kmem_put_cache+0x7c/0xc0 [ 811.771702][T26349] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 811.776762][T26349] vmalloc_user+0x65/0x80 [ 811.781110][T26349] ? vb2_vmalloc_alloc+0xb1/0x1a0 [ 811.786142][T26349] vb2_vmalloc_alloc+0xb1/0x1a0 [ 811.791060][T26349] __vb2_queue_alloc+0x36b/0x850 [ 811.796105][T26349] ? vb2_vmalloc_attach_dmabuf+0xd0/0xd0 [ 811.801761][T26349] vb2_core_reqbufs+0x561/0x860 [ 811.806638][T26349] __vb2_init_fileio+0x23d/0x630 [ 811.811620][T26349] __vb2_perform_fileio+0x917/0xb00 [ 811.816940][T26349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 811.823203][T26349] ? should_fail+0xd4/0x45d [ 811.827765][T26349] ? get_page_from_freelist+0x936/0x1650 [ 811.833459][T26349] vb2_read+0x44/0x60 [ 811.837465][T26349] vb2_fop_read+0x175/0x250 [ 811.841995][T26349] v4l2_read+0x13a/0x150 [ 811.846343][T26349] do_iter_read+0x357/0x3d0 [ 811.851188][T26349] vfs_readv+0x9c/0xf0 [ 811.855306][T26349] ? delay_tsc+0x8f/0xc0 [ 811.859572][T26349] ? __const_udelay+0x36/0x40 [ 811.864266][T26349] ? __udelay+0x10/0x20 [ 811.868469][T26349] default_file_splice_read+0x358/0x590 [ 811.874069][T26349] ? rw_verify_area+0xee/0x250 [ 811.878900][T26349] do_splice_to+0xf2/0x130 [ 811.883560][T26349] ? iter_file_splice_write+0x840/0x840 [ 811.889212][T26349] ? iter_file_splice_write+0x840/0x840 [ 811.894779][T26349] do_splice+0xbbb/0xc40 [ 811.899115][T26349] __x64_sys_splice+0x20a/0x220 [ 811.904134][T26349] do_syscall_64+0xcc/0x3a0 [ 811.908714][T26349] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 811.914611][T26349] RIP: 0033:0x45b399 [ 811.918543][T26349] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.938215][T26349] RSP: 002b:00007fc44a2bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 811.946638][T26349] RAX: ffffffffffffffda RBX: 00007fc44a2c06d4 RCX: 000000000045b399 [ 811.954846][T26349] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 811.962930][T26349] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0000000000000000 [ 811.971004][T26349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:12:38 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r8 = socket(0x100000000011, 0x2, 0x0) bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r7, &(0x7f0000000900)={0x2c, 0x8, r9}, 0x10) sendmsg$can_raw(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x1d, r9}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x1, 0x0, 0x0, 0x1}, 0x1, 0x905cbd1d940e991d, 0x0, 0x0, "2749a0a131ab0406"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r10 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r11 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11) sendfile(r3, r10, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 811.979004][T26349] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000017 12:12:39 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x500) 12:12:39 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='trusted\x00') 12:12:39 executing program 0 (fault-call:5 fault-nth:24): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600) 12:12:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x5) 12:12:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:39 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000004, 0x0) 12:12:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x700) 12:12:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x6) [ 813.584986][ T8163] device hsr_slave_0 left promiscuous mode [ 813.624945][ T8163] device hsr_slave_1 left promiscuous mode [ 813.688550][ T8163] team0 (unregistering): Port device team_slave_1 removed [ 813.700043][ T8163] team0 (unregistering): Port device team_slave_0 removed [ 813.710979][ T8163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.768177][ T8163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.849093][ T8163] bond0 (unregistering): Released all slaves 12:12:40 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x3}, 0xb4ebe0fe51c97a8, 0x0, 0x0, 0xf, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x1082}, 0x0, 0xb, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvram\x00', 0x2842, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000100)={0x0, 0x4, 0x5, 0xc, &(0x7f0000ffd000/0x1000)=nil, 0x2}) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x7ff, @empty, 0x7fff}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @empty}], 0x4c) sendfile(r1, r3, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:40 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000010, 0x0) 12:12:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x7) 12:12:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc00) 12:12:40 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x1c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20000, 0x0) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00', {0x3aa2, 0xff, 0x0, 0x9b}, 0x4, [0x3, 0x1ff, 0xb75, 0x7, 0x1, 0x80000001, 0xa9b, 0x7, 0xfff, 0x7f, 0x5, 0xc52, 0x6, 0x6, 0xff, 0x1, 0x7d1, 0x4, 0x7, 0xfdf, 0xfbb, 0x6377dc8b, 0x1ff, 0xffffffff, 0x80, 0x4, 0x1, 0x80000001, 0x80000001, 0x0, 0x3, 0x5, 0xf55, 0x1f, 0x200, 0x3f, 0x1f, 0x2ac, 0x8, 0x5, 0xffffff00, 0xdca6, 0x4, 0x4, 0x1e7, 0x0, 0xfffffff7, 0x4, 0x800, 0xc115, 0xb47d, 0x7fffffff, 0x5, 0x5, 0x74, 0xffff, 0xfffff801, 0x1, 0x7f, 0x7ff, 0xf4c, 0x4, 0x1, 0x5], [0x81, 0x3, 0x8, 0x7, 0x5b, 0x8, 0x4, 0x7fffffff, 0x100, 0x2, 0x81, 0x7, 0x9, 0x7, 0x7, 0x2, 0x4492, 0x3, 0x400, 0xffff, 0x6, 0x0, 0x1, 0x9, 0x2, 0x7, 0x6, 0x11, 0x6, 0x5, 0x200, 0x7, 0x6, 0x7, 0x5, 0x3, 0xfffffffb, 0x6, 0x9, 0x8, 0xff, 0x1000, 0x1, 0x3, 0x4, 0x10001, 0x2, 0x7f, 0x7fff, 0x7, 0x6, 0x9, 0x6, 0x200, 0x3f, 0xb41, 0xc0a3, 0x5, 0x8, 0x7fff, 0xffffffc0, 0xfffffffc, 0x2, 0x6], [0x5, 0x46c, 0x1, 0x3f, 0x0, 0x80000000, 0x6, 0x8001, 0x4, 0xfffffffd, 0xc62, 0x5, 0x6, 0xfff, 0x2, 0x4, 0x4, 0x5, 0x2, 0xc00000, 0x8, 0x2, 0xfffffffb, 0x1, 0xe7, 0x20, 0x81, 0xa8b, 0x1, 0xcc5, 0x7, 0x101, 0x6, 0x2fd, 0xffffffff, 0x700000, 0x1000, 0x7, 0x5c, 0x6, 0x4, 0xd48, 0x2, 0xb21d, 0x0, 0x1f, 0x8, 0xb6, 0x5, 0x2, 0x2, 0xffffffff, 0x7, 0x6, 0x8000, 0x3, 0xcb, 0x1ff, 0x2, 0x1d, 0x1, 0x0, 0xffff, 0xfffffff9], [0x0, 0x4, 0x80000001, 0x5, 0x2, 0xfffffffe, 0x5, 0x1f, 0x3, 0x8, 0xff, 0x9, 0x0, 0x8000, 0x0, 0x5, 0x1ce4, 0x401, 0x4e, 0xffffffff, 0x0, 0x8, 0x40, 0x40, 0x800, 0x40, 0x20, 0x3, 0x6, 0xfb, 0x1, 0x7fffffff, 0x1, 0x3f, 0x9, 0x3, 0xfffffbff, 0x6, 0x7fffffff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x8, 0x8, 0x8, 0x9, 0x401, 0x9, 0x0, 0x9, 0x5a, 0x12, 0x8, 0x2, 0xe, 0x800, 0x823, 0x0, 0x7fff, 0x0, 0x1000, 0x800]}, 0x45c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x3e7, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5017a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x21801, 0x2, 0x1, 0x5, 0x0, 0x4, 0xfffe}, 0x0, 0x50000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x2) 12:12:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc) 12:12:41 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3f00) 12:12:41 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:41 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x10000, 0x0) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4000) 12:12:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3) 12:12:41 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x10) 12:12:41 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000080)=0x6) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x70800) 12:12:41 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x06@\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x8a/\x86{\xe7\v\xcd\xc0\b\x9d\x19\xbf\xa8\xc0F-o>\xd5\xb2\x16[#\b\xd1\xa5J\x9fb\xf0\x0e\xa9\x98\x01O\xe9B', 0x5) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x111000) ioctl$USBDEVFS_RESET(r4, 0x5514) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:42 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(0xffffffffffffffff, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x300) 12:12:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x72fff) 12:12:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4) 12:12:42 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, r2}, 0x14) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) 12:12:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x500) 12:12:42 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000600)={0x16, 0x7a, &(0x7f0000000580)="bec8df2b34348a8374368f4d71d064fd7c5358c81bf566f17eea21f70d3a32b3e7d9fc1545ba226c0fe787da39d139a927c38da27e20ba91e6d441f4fc1fdc34416194748bef96100445541e9d098f4940851d3a2c2677ce86a5a36d315d3bdab3afb51909d5a469850b4425e63a5b6baa53dacabb2e70c75c54"}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x11d, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000280)="31896dcc0830998e450b45a514f63e8ede4b7948733b02ea25b82c6a6ccb25439e12a5e044a93eaba2deb4eb214e08f04342929d9c9ff1c29f83356b39a4cf9c55b90fb0438b9cc21ca275d2a93855555a9aae1da438b034b9ce01cdd524c00e95bc69c244bbd3421d7fb5eb4d65ed2cd88ffc69cc07a1d8f142dbdc60999f1aaed0097a79d2f2b5354d495abbd3e9a37ac7a9fb50bb11ec71636964c2d02f7259f934ecf7fc6fa03dc0c3fc953553944e9338a9c021836c51f7fc62ed75fd95e5e7163077861537bf2b", 0xca, 0x48}, {&(0x7f0000000380)="c19afcf3ee47a27aaa1eee6a31ed9cc2e6057014443bfb2c", 0x18, 0x7fff}, {&(0x7f00000003c0)="68c6c6a515a5bd38ff3d1e8acf7191e83471f21ee350c39dc3c131a1b0c21beff39f764d186b51ee043af722cb510531389fc39a6b248702c8b82336db9929d3e98029987236a7f287398e660bbce2f46a94e64a177e97967dfc5215a03e0206066efb18a446b1c9bf2a", 0x6a, 0xfffffffffffffbff}, {&(0x7f0000000440)="c93019ea7fc5c6d93707c00648608a12a215c5540e009a5698e0c4eccfa91c21436797498d000db6d257d499b5d32c981220383c9fcc495c3f26a9a63df18c0d8c5eca9b028d08d14a0df21480", 0x4d, 0x5}], 0xa, &(0x7f0000000540)='\x00\x00\x00\x00\x8c\x00') r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r1, r4, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x80700) 12:12:42 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(0xffffffffffffffff, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x1000000) 12:12:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600) 12:12:42 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000003) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000100), 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r5, &(0x7f0000000900)={0x2c, 0x8, r7}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', r7}) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x108c5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000080)=@ipx={0x4, 0x8001, 0x6, "b14c66c89cfc", 0x6}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/2) 12:12:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x5) 12:12:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x700) 12:12:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x2000000) 12:12:43 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(0xffffffffffffffff, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:43 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vga_arbiter\x00', 0x20c0c2, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000740)={@null=' \x00', 0x0, 'vlan0\x00'}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc00) 12:12:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3000000) 12:12:43 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\xdfO\x1d\"E\x02\x98Pm\x0f(\x98\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c\x00'/106) 12:12:43 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, 0xffffffffffffffff, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3f00) 12:12:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x6) 12:12:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4000000) 12:12:43 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4000) 12:12:43 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x328d, 0x4) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x5000000) 12:12:44 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x2, 0x7, 0x7, 0xff, 0x80, 0x6, 0x6}, 0xc) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x36, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x70800) 12:12:44 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, 0xffffffffffffffff, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x6000000) 12:12:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x72fff) 12:12:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x7) 12:12:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x7000000) 12:12:44 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000001340)=0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000000280)={0x1040, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, "c9031382ca9f7dc408715acb06100d95cc"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x1040}, 0x1, 0x0, 0x0, 0x44040011}, 0xc000) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001380)='/dev/snapshot\x00', 0x88001, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000013c0)={0xbf}) accept4$ax25(r6, &(0x7f0000001400)={{0x3, @default}, [@bcast, @netrom, @rose, @remote, @null, @netrom, @null, @rose]}, &(0x7f0000001480)=0x48, 0x800) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:44 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, 0xffffffffffffffff, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x8) 12:12:44 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x80700) 12:12:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc000000) 12:12:45 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x9) 12:12:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x1000000) 12:12:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x10000000) 12:12:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3f000000) 12:12:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x2000000) 12:12:45 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f0000000280)="9727260d435f99aa8d8224e1589237453f0314c1ef4f7c773523872930d2835306f77f724639ea40548cf172b3b66ae4699e9d5e090bbdc61f97603daab504a5ffa8c955b3f5", 0x46) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xa) 12:12:45 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000100)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2010, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x10000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000240)) fcntl$setstatus(r1, 0x4, 0x3800) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000080)={0x1ff, 0x6}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x3800) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r6, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r6, 0x80044326, &(0x7f00000000c0)=0x67) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:45 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x40000000) 12:12:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3000000) 12:12:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xff2f0700) 12:12:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4000000) 12:12:45 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x8070000000000) 12:12:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x5000000) 12:12:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xb) 12:12:46 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)=' \x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\xe2l', 0x3) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:46 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x6000000) 12:12:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x100000000000000) 12:12:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc) 12:12:46 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:46 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000003) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000100), 0x4) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r9, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r4, r8, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) r10 = accept4(r4, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80, 0x80000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r13 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000e9ed8c5ae85e0d46ec080000004863cee764fd20c19de1c7e93238be12e6c650ba23842dadc1c9ced6718a114ecfbf08ad9a", @ANYRES16=r12, @ANYBLOB="080028bd7000ffdbdf2511000000050030000000000008003a00a0380000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:46 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:46 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x200000000000000) 12:12:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x7000000) 12:12:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xd) 12:12:47 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x8c\x00'/15, 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:47 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x300000000000000) 12:12:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc000000) 12:12:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xe) 12:12:47 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x10000000) 12:12:47 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x2) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) pread64(r6, &(0x7f0000000100), 0x0, 0x80000001) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r9, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r7, r8, 0x0, 0x102000003) write$binfmt_elf64(r8, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0xf1, 0x20, 0x1, 0x7, 0x5, 0x2, 0x3e, 0x1, 0x30c, 0x40, 0x96, 0x3, 0x3, 0x38, 0x1, 0xfffd, 0xfffb, 0x101}, [{0x6474e551, 0x4, 0x49, 0x0, 0x1, 0x4, 0x6, 0x6}], "da0f15dfd324810f94e03ddb5323612bfece408be414309d523d841d89f15ef84e5227582f9d07ee2d0b01f107fee2417c73a7b8e9f91d9c195d7dda3660d75647ce9b67361643466272", [[], [], [], [], [], []]}, 0x6c2) 12:12:47 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:47 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000280)=""/151) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x400000000000000) 12:12:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3f000000) 12:12:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xf) 12:12:48 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:48 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff6841}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1000000000000}}, 0x0, 0x3, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, 0xfffffffffffffffe, 0x280, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000001840)=0x1000, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x504c, 0x10c00) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f0000000100)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r1, r4, 0x0, 0x102000003) r6 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) shmat(r6, &(0x7f0000ffb000/0x2000)=nil, 0x7000) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x10) 12:12:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x40000000) 12:12:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x500000000000000) 12:12:48 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:48 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x22000, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000300)={r2, 0x6, 0x41}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2080, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000200)={'veth0_to_team\x00', 0x0, 0x8000}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x300) 12:12:48 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7a, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000100)={0x3, &(0x7f0000000280)="320d80da182920ffc41eac603f32ddad9620b11de66124f6ac2f922c0e1c4ada521608ff1100e571a3ca550c5fe129890ea6dc76c8fa42e244e236629e251ae432cd60a5ad060d29d62a336f36f2049bc335d7dd181b6b20d918755fda8a5d84b45c5bdbf0023f2ed065361ea77959f9e0"}) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x100000001, 0x800) sendfile(r1, r5, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xff2f0700) 12:12:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:48 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x500) 12:12:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x8070000000000) 12:12:49 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r2, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x700000000000000) 12:12:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600) 12:12:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x100000000000000) 12:12:49 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x6b1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000300)="dc30645971960e886ecdbfefd50f2172214bcb96bf60b49007dc50fdc1c299f3b18cd3f8dbebd71026c494015b793895aa00bd253839f7cb76451281b407f8445c616d8f80dc23e8be82619a5fa4", 0x4e}], 0x1, 0x2) r7 = dup3(r6, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff0800000000000000", 0x24) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10020010}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x154, r9, 0x810, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x9c}, @TIPC_NLA_NET={0x38}, @TIPC_NLA_SOCK={0xc}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0x3c}, @TIPC_NLA_NET={0x20}]}, 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r9, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc504}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20014080}, 0x24000810) ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f0000000080)={0x7fffffff, 0x2}) 12:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc00000000000000) 12:12:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x700) 12:12:49 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r2, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x200000000000000) 12:12:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x1000000000000000) 12:12:49 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x37) sched_setscheduler(r5, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000500)={0x80002000, &(0x7f0000000100), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x9}, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/207, &(0x7f00000004c0)=[0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x0, 0x0], 0x7}, 0x50) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x16, 0x7f, 0x1f, 0x20, 0x0, 0x6, 0x501c0, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000040), 0xd}, 0x0, 0x1, 0x0, 0x8, 0x1, 0x6}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/full\x00', 0x2000, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001640)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r10, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x78, r11, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @multicast2}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x37}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x881}, 0x20008000) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7ff) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x900) 12:12:50 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r2, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x300000000000000) 12:12:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3f00000000000000) 12:12:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xa00) 12:12:50 executing program 4: r0 = socket$inet(0x2, 0x6, 0xff) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@local, @empty, @remote}, 0xc) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0xf9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x20000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:12:50 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) 12:12:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xb00) 12:12:50 executing program 4: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x400000000000000) 12:12:50 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) 12:12:51 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4000000000000000) 12:12:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc00) 12:12:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x500000000000000) 12:12:51 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) 12:12:51 executing program 4: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:51 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={0xffffffffffffffff, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xd00) 12:12:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:51 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) vmsplice(r3, &(0x7f0000001480)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="a40c5959271fffdcb9a2dc7a142eb7737b0be7d67d1da269450131a598e9477b2a343f6c8a21e6185244ebb0c81d254f70ad0a1d68c11b23f616bc13367d58884c2806df7821134cad9b14958d5f9323e9c86d7c39db00f76d1f8ccdc9f270f1fc26e6f2dce7bf69eae14c42a31c0ffd0896a68973a8835f7ca2839d70339fb2e2519c303df993ca3aa343a7f2e2f7166593f037e6e86da687502722ad3eccbe92f6824aa63184be6b99269d48da2cd545a9ae165278f9634dd5261b8218b7824c46fc4afb1d0be91657ffd51cfdbf8f", 0xd0}, {&(0x7f0000000100)="ef5c9a51dc6fd58a6161a212", 0xc}, {&(0x7f0000001380)="133a8ca103a915859d1f36830c91e53e050a667ffd9cc4a78b509a965616c82a4756ee0e17b4c3b301c153731a929d2d5574beb5ce21cc4509e6d53638b651989bb5ef9ccac892ffaaf68f73b0fdb5bfbbb614022bb45ab2d02e2830013c8bbee9b1476e26d4c96ec6b692c24becd04cbcd6e98af6ca972b60386a38432aa8da3afe7445cece39ea09471e34af842cf2a905b52b1ea184dacdef7d37431592217985b841dc88b4df13958049a37e81307f8e84145cbfe6a3fb36b10603e1d51cdb7ebafdbc2436f20c5022e43816a4c5aba2ebcfa7e8329bceb744cfec03675131", 0xe1}], 0x4, 0xe) 12:12:51 executing program 4: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000003) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000100), 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r5, &(0x7f0000000900)={0x2c, 0x8, r7}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', r7}) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x108c5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000080)=@ipx={0x4, 0x8001, 0x6, "b14c66c89cfc", 0x6}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/2) 12:12:51 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={0xffffffffffffffff, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xff2f070000000000) 12:12:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xe00) 12:12:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x700000000000000) 12:12:52 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={0xffffffffffffffff, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xffffffff00000000) 12:12:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xf00) 12:12:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:52 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc00000000000000) 12:12:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4000) 12:12:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:52 executing program 5: prlimit64(0x0, 0xc, &(0x7f0000000280)={0x100000000009, 0x100000001}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x401}, @mss={0x2, 0xffffffc0}, @timestamp, @timestamp, @mss={0x2, 0x7}], 0x5) pipe(&(0x7f00000001c0)) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100), 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) splice(r4, 0x0, r1, 0x0, 0x7f, 0xa) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getpriority(0x0, r7) 12:12:52 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x1000000000000000) 12:12:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x1000000) 12:12:53 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x2000000) 12:12:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3f00000000000000) 12:12:53 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x3000000) 12:12:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x80000000, 0x3, 0x0, 0x20, 0x0, 0x0, 0x20}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4000000000000000) 12:12:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4000000) 12:12:54 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x600000000000000) 12:12:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x5000000) 12:12:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xff2f070000000000) 12:12:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x600000000000000) 12:12:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x6000000) 12:12:54 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xffffffff00000000) 12:12:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x7000000) 12:12:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x1f, 0x1}, 0x8) 12:12:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x600000000000000) 12:12:55 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, 0x0, 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x8000000) 12:12:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x9000000) 12:12:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x2, 0x5) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000100)=""/2) 12:12:55 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, 0x0, 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xa000000) 12:12:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xb000000) 12:12:56 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, 0x0, 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc000000) 12:12:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f00000000c0)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, 0xfffffffffffffffb, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) 12:12:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:56 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:56 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xd000000) 12:12:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x101000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000240)=0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2140, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000000c0)=r1, 0x1) r4 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r6, r7, 0x0, 0x102000003) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000100), 0x4) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r10}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={r10, 0x4, 0x49f}, 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r12 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r12, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) sendfile(r5, r11, 0x0, 0x102000003) r13 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r14 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r14, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) dup2(r11, r14) splice(r4, 0x0, r2, 0x0, 0x1000000008, 0x0) 12:12:56 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80440, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="bada4299f3b434953f9fd98bb95809971d6d05eac8967da808d946d41c5bd5380f2ad36c5a45a1e6eba94703a244aa9982cde36838f08e38270eb37c0a46f562e51ad7d315d794fd343b946136a4fe1369dee3b0693bf48d8a445f76cd56f5c91a0b72f25919cd81ecf36df6fc8597d2fcd22900f93d585a07edd9066609363218d5e287b22f5db859e6415f3995f1762c888d", 0x93) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000080)={[0xfffffffffffff455, 0x5, 0x6, 0x5, 0x4, 0x7, 0x3, 0x200, 0x1eed7fad, 0x80000000, 0x81, 0x6, 0x2, 0x2, 0x5ef5, 0x5], 0x100000, 0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x1000000008, 0x0) 12:12:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/109) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x4824bae1, 0x4) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:56 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xe000000) 12:12:57 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:57 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xf000000) 12:12:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) sysfs$3(0x3) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000000)=0xe4) 12:12:57 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:57 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x10000000) 12:12:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r2) 12:12:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x200) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x8, 0x0, 0x3, 0x4000000000000000}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$TIOCSIG(r1, 0x40045436, 0x3) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r0, 0x0, 0x1000000008, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x4) 12:12:57 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x40000000) 12:12:57 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x0, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:58 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0xfe, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r6, 0x20, 0x70bd26, 0x343f, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4000) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r2, r7, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x100000000000000) 12:12:58 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:58 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x90, r4, 0x81) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:58 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x0, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x200000000000000) 12:12:58 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000000000000a004e2108838a98fe8000000000000000000000000000aa080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000060000000a004e240000003f00000000000000000000000000000000e8850100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000000fe88000000000000000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000003fe8000000000000000000000000000bbff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000070000000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000003fe8000000000000000000000000000aaffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400007fff00000000000000000000ffffac1e01010300"/912], 0x390) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 12:12:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x300000000000000) 12:12:58 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:58 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x0, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10001, 0x400000) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x8001006, 0x0, 0x2}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x101000, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x6, '\x00', 0x8}) r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000a2000000741c220fae141225dcb1a243e56bb57482620bbf528f86556f7b221445dcbb274da973c5d25989996fd9b1e8a5e9c3f8be0ada419bd23970c5f84128abab94eab2db2eee5afb8c865054eae7f0660024b898dcda0f58b3f5d18b3dfd4e082ed4064c058ab341bed5eb909ebc8ca6f95357769363c8e9889fcaba388d231c97e6123392d5f69bb17a37958e628c584800a300fddb00"/198], &(0x7f0000000180)=0xc6) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) 12:12:58 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x400000000000000) 12:12:59 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'veth1_to_team\x00', {0x7937}, 0x8}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:59 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x0, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0xfffffffc, 0x3}, 0x0) pipe(&(0x7f00000001c0)) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x89e0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r0, r4, 0x0, 0x102000003) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000100), 0x4) socket$kcm(0x29, 0x2, 0x0) 12:12:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 12:12:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x500000000000000) 12:12:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1e76}, &(0x7f00000000c0)=0x8) r4 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r4, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:59 executing program 2: sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:12:59 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x0, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:12:59 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x800}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:12:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:12:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x700000000000000) 12:12:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) bind$isdn(r2, &(0x7f00000000c0)={0x22, 0x6, 0x6, 0x7f, 0x5}, 0x6) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:00 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x300200, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000003) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000100), 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x1000, "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"}, &(0x7f00000012c0)=0x1008) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000001300)={r10, 0x4, 0x1, [0x7]}, 0xa) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r12 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) sendfile(r1, r11, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:00 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x0, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:13:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x800000000000000) 12:13:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:00 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0x0, 0x1, 0x3, 'syz0\x00'}) 12:13:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x900000000000000) 12:13:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x7fff, 0x1, 0x4, {0x2, @vbi={0xffffffff, 0x6, 0x3, 0x7666781a, [0x100, 0x59c], [0x6], 0x109}}, 0x8001}) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:00 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0x0, 0x1, 0x3, 'syz0\x00'}) 12:13:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) prlimit64(r4, 0x1, &(0x7f0000000280)={0x100000000, 0x7d}, 0x0) r5 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x92, 0x206, 0x9, 0x3, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000002c0)={r7, 0x93c}, &(0x7f0000000300)=0xc) sched_setscheduler(r5, 0x5, &(0x7f0000000380)) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x5, 0x60, 0x0, 0x88b, 0x0, 0x8}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r9, 0x0, r8, 0x0, 0x1000000008, 0x0) 12:13:00 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0x0, 0x1, 0x3, 'syz0\x00'}) 12:13:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xa00000000000000) 12:13:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000380)={0xa, @win={{0x7, 0x1f, 0x0, 0x8}, 0x9, 0x6, &(0x7f0000000180)={{0x2, 0x21, 0x3, 0x7a72}, &(0x7f0000000140)={{0x2750, 0x6, 0x2, 0x3}, &(0x7f0000000100)={{0x8, 0x3, 0x200, 0xd53}}}}, 0x200, &(0x7f00000002c0)="dec87efb04619ef9040e2f382bc5ec876f90db2c39eab8bcea0b9f0954fe901e2e4e079a5d0fc1a2b554791ff542656a5db98ff1b2ba20332a90962cef8b910c5c6484e2b45aed4824e23c8bf7fc9861c986a49421680c8cab4148096880d1b18b7c0d47dbdcebaad4cba8eed49b7a79f2517edc957ff3157c734e30224f12fa9664d60a4b391c", 0x4}}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) pipe2(&(0x7f0000000200), 0x800) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 12:13:01 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x0, 0x3, 'syz0\x00'}) 12:13:01 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) write$apparmor_exec(r4, &(0x7f0000000040)={'stack ', '/dev/video0\x00'}, 0x12) 12:13:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xb00000000000000) 12:13:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:01 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x0, 0x3, 'syz0\x00'}) 12:13:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xc00000000000000) 12:13:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r7, 0x1, 0x8, 0x3f}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r8}, &(0x7f0000000180)=0x8) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r9 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r9, 0x0, 0x80000001, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r11, 0x0, r10, 0x0, 0x1000000008, 0x0) 12:13:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xd00000000000000) 12:13:01 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000040)=0x92) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:01 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x0, 0x3, 'syz0\x00'}) 12:13:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 12:13:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xe00000000000000) 12:13:02 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x0, 'syz0\x00'}) 12:13:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xf00000000000000) 12:13:02 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x0, 'syz0\x00'}) 12:13:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfffffffe, 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f00000005c0)={0x2, "6a10154ac6ae104610cd0f6c373f7f402bf639159bd5a63851b3822da1f89ee1", 0x2}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) socketpair(0x1d, 0x800, 0x4, &(0x7f0000000180)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x504, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000) splice(r5, 0x0, r4, 0x0, 0x1000000008, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000140), 0x4) add_key(&(0x7f0000000440)='logon\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="22ea049b666171f21f34270628184306797d2a1e506a86b1b474aae3a984d77c41c5534e3159b9a7f8fe3a63146b030a66cde52cb5282c816d42191504e38ec0c5885a440b301d641d22aa8ff0646cc90b553c7ba79c930e24eeb4c76354030aa47f5a28244e1596af50719c2690d819b6cfe244efec80e5356336b60b65ab2e6a3732240c35b917ccd24e9be35b129ab1c5a08f76da8ac9ab06ec9aced2cc4bb7bf7fb4dc134483db79359324856026fd23d9cabb66c5cfacf58bba4516ee7b58f79713e1cc185657445722d034a998edf068a6a02e59289b03b9465396dbffd1064227a9abac9b30e0be2329707a3b5f043edf1e746ab5", 0xf8, 0xfffffffffffffffb) r8 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r8) r9 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000380)='/dev/video#\x00\x89\x96\xb2\xf6\v\x03\x00*\xec\xe4d\xf2\x06\x00\xda6\xd4\x01\xa5j\xe6#\x89#\x9c\xd4$\xea\xd2)2\xab\x89\xee\x82\x9e0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x1a}, 0x48}) r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r3, 0x0, r1, 0x0, 0x1000000008, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) [ 835.977803][T27534] can: request_module (can-proto-4) failed. 12:13:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:03 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x0, 'syz0\x00'}) 12:13:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x1000000000000000) 12:13:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) r0 = socket(0xb, 0x80000, 0x5) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000010) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) 12:13:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000000)={0x14, 0x14, 0x301, 0x0, 0x0, {0x11, 0xff}}, 0x14}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x12) sendfile(r2, r4, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r10}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r10, 0x2, 0x119}, &(0x7f00000002c0)=0xc) r11 = socket(0x29, 0x800, 0xfd) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x2, &(0x7f0000000040)=0x401, 0x4) r12 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r12, 0x0) ioctl$SIOCRSSL2CALL(r12, 0x89e2, &(0x7f0000000100)=@bcast) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:03 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x0, 0x3, 'syz0\x00'}) 12:13:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syslog(0x9, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2) 12:13:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) [ 836.826648][T27534] can: request_module (can-proto-4) failed. 12:13:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x4000000000000000) 12:13:04 executing program 2: keyctl$invalidate(0x15, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8001, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000801}, 0x20000010) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r6, 0x0, r5, 0x0, 0x1000000008, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0x15) 12:13:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x250002) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000003) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) prlimit64(r3, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) splice(r5, 0x0, r4, 0x0, 0x1000000008, 0x0) 12:13:04 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:04 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x600000000000000) 12:13:04 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0xfc4c5) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0xffffffff00000000) 12:13:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x600000000000000) 12:13:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x200) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x8, 0x0, 0x3, 0x4000000000000000}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$TIOCSIG(r1, 0x40045436, 0x3) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r0, 0x0, 0x1000000008, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x4) 12:13:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x200340, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1}) r4 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r4, 0x0, r0, 0x0, 0x1000000008, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x16000, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000100)={0x3, 0x2, 0xb6c, 0x3, 0x251, 0xffffff13, 0x79b90da, 0x80, 0x6}) 12:13:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x600000000000000) 12:13:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00') sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) r6 = accept$packet(r1, &(0x7f00000002c0), &(0x7f0000000300)=0x14) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='geneve0\x00', 0xffffffffffffffda) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x278c82) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r2, r7, 0x0, 0x102000003) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000100), 0x4) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r10 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r11 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r11, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) sendfile(r9, r10, 0x0, 0x102000003) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100), 0x4) splice(r2, 0x0, r9, 0x0, 0x1000000008, 0x0) 12:13:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x100000001, 0x50000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'erspan0\x00', 0x3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x200) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x80000000, 0xa, 0x4, 0x200000, 0x6, {r1, r2/1000+10000}, {0x1, 0xa, 0x40, 0x1, 0x7, 0x6, "b100745c"}, 0x20, 0x1, @planes=&(0x7f0000000240)={0x81, 0x400, @fd=r3, 0x29}, 0xaa, 0x0, r6}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r8) r9 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='/dev/video#\x00', r8) r10 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r10) keyctl$KEYCTL_MOVE(0x1e, r9, r10, 0x0, 0x0) r11 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r11, 0x0, r7, 0x0, 0x1000000008, 0x0) 12:13:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(0x0, 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:05 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x34200, 0x0) write$P9_RLINK(r4, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:05 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x0, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:13:05 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee00, r1, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0xff, 0x7}, {0x1, 0x8}], r1}, 0x18, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) 12:13:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:05 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) recvfrom$netrom(r2, &(0x7f0000000280)=""/181, 0xb5, 0x10000, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4041, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x10000, 0x0) getsockopt$inet6_dccp_buf(r4, 0x21, 0x2, &(0x7f0000000400)=""/151, &(0x7f00000004c0)=0x97) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0xc180, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000001240)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x18844001}, 0xc, &(0x7f0000001200)={&(0x7f0000001ec0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19e1cc1b}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfe80cd1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6a620ade}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}]}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x4a98, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3fb8, 0x4, 0x0, 0x1, [{0x1b0, 0x1, 0x0, 0x1, [@match={{0xa, 0x1, 'match\x00'}, @val={0x1a0, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_MATCH_INFO={0x26, 0x3, "c19d8d541b131ba5c3f009e51b2edba5e5214cf51bead77c3cb28adac4ae0a96d318"}, @NFTA_MATCH_NAME={0x5, 0x1, '\x00'}, @NFTA_MATCH_INFO={0x47, 0x3, "b41d02d61f8bd3e753887ab913781c941fc906d01ffbc8899146531a25a4d91deafbe9c99dd4d493162293ee33bcabb9d16a7ed9d7912d8950d87f88394733cd7e82e9"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xb, 0x1, 'lookup\x00'}, @NFTA_MATCH_INFO={0xfa, 0x3, "be32540276091bb91bfa77e2d6bcf9dc23666fae030e7bbd672ffbb2fd5c5aad6797c5eeafc7d8ee572d9f4cf60970768b7299fb399ebee32cc63640824927fc6b0ab06d93b6c44a616585b6fdf8abb8016e3c8b706780d3dfc5042ace005f930d85d192e618d146e86a2d0c44bfe86ac093dccc92c74f4424b698c62f2c4e064fcc483de468f754c1c0610cddfe9a89f128f186b4a4330d07afcfd850d8926b759b66a97a74afc69d0d1f268e7a2cdc20ff45b5ee8c98003b94e6882488f829075560ca2244bb04545f75bbfc6799dc33b341eab9c3b94705076e6e9c7fdd5b97e2678ea5f2b7fda4b34b8317a3e7dd9c1891f6f509"}, @NFTA_MATCH_NAME={0x9, 0x1, 'syz2\x00'}]}}]}, {0x1c, 0x1, 0x0, 0x1, [@fwd={{0x8, 0x1, 'fwd\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @void}]}, {0x4cc, 0x1, 0x0, 0x1, [@bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x424, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x6c, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_XOR={0x260, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x90, 0x1, "843c013b3ed52ace630f5999653f07ba0c6917a0dd758dab7a3f5c584e5cc15414727a52266d81b3314d38d708582af07ab976bb618eac10523afa3132b62716fc030f187ab582f7a34ad0d4f195ecea28ba64b869b5d8d394f2696aa1c19377cb7ab6c59e1a1496573aaf83cce64bfcb7737ec31f6a14cbb6eac04eae310fab2a0dcf70a70d4497cddb6547"}, @NFTA_DATA_VALUE={0x52, 0x1, "967927b9f58b037a3851f82a8ea721c326b0f63485811408d6402e0b468d7bb6f427f99a48b789d870e3acbb72e3f85268b7f0cabd8cefcbcaebed369178524a3c78e43fbb4150d6a383dbff171f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "438135adf43f436659d476da6c44050be5da6a7733ea"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "4d37a3f285f4778822da01aaa26cdd737e58ef03e2f944bbc37893f723de513e7d0f6619303ecfb29d59f5e3a2bf1a5a4b46c74883077a3184dbfc76ec26c07595d92f7b53029085662675694ddbc08581879e1e8ff5eb586bdbcd74d5be9b5c1aa86cef4e9cddd92a39670d8e934d1677091279d70dbfe3ecb30277e83cd67964606a0dd38ddfb0936d32ec6a40457dcc92e291eaed8a1671f79d61584eae4746e523143f18a2016e0e08a3415c423e9e4c764872157240bc33a5bb6519045c1e0f38567738481b4d9a3f5ac630ac451fb1a7c55773a46c96c38a5102c6e216fb61f10ec2918147a896e0b09e704ec7a2117de19e"}]}, @NFTA_BITWISE_XOR={0x134, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xbda682574115e78}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xa38530ae0f987307}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x12, 0x1, "b1e113a954e1ff0628a229a45127"}, @NFTA_DATA_VALUE={0x7a, 0x1, "566a7621e1fc078d6425af193fe23809bd62dedaf9aed8135831dad275d4eac8640871c51a4ddab2c17f361b3fcdbfc3c594beffd8c6dd5647748ca454b8a3edf7b05a9e56add08e358ef2e411ea1b416db5522f2584bd9c11ea9c94fbe8ecf7b7d23c6f90be0833ec9ee5cc0dd9b07187a1a2945f5c"}]}, @NFTA_BITWISE_MASK={0x10, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @void}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}]}, {0x90, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}, @immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xce82}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}]}, {0x98, 0x1, 0x0, 0x1, [@cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_OP={0x8}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}]}}]}, {0xf0, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x1030, 0x1, 0x0, 0x1, [@xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}, @target={{0xb, 0x1, 'target\x00'}, @val={0x1008, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x1004, 0x3, "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"}]}}]}, {0xa0, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8}]}}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}]}, {0x2618, 0x1, 0x0, 0x1, [@fib={{0x8, 0x1, 'fib\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0xd60962c6aa4c44c3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2c}]}}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x24f4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x264, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "ec4e576dd01607ca86e9c2d970a4d48ac3f315065714fcb397"}, @NFTA_DATA_VALUE={0x55, 0x1, "72dcce11194bf26fc03de66cf3040eb41f20cb2b53e4182b1c2facdc54de3bb3b658c5ae398e0121f7ae4a95a415553c92efba59d19fd37c287f0e485a6f8b59b13150b02f4b03556745e6befc5aff8f1e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "38f1fefed7ea04e006d4814d877cca61bc747083e63926f0cfb723d902d394727dbeaa106a7d6cad5b188302f0c0391fd00c4c7165f7c4620318ce38464d0cfb78dc41b2db4dd250e49f82b2ecf35dcc448a0fc3d9c8ad5e1d73"}, @NFTA_DATA_VALUE={0x41, 0x1, "cd1282ae5e61ecf0871c33766f14714a4b4b5180be1873cc286e6be1f9a1bf24c50f32d415a47179ffcb8a9f51ac694f9ccdce2ab984f39919854202a9"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DATA={0x227c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "dbbca93ecebbe5593788267310c1ece0e4d9bc4d222fccce6c9bb66c59078876eeb97982a647e83a8112709e47829fd1ee830d466f095778a58b556d961575f4eb9cdce8aac67f9f805cd16afe3303d9d29b91c3f74213e7059a7cb3e3629ebd05f44436c1d8817d69111afbdb4d7063af4ddf18ab2d3554d307a674283926db819e8a91ec556b13fc6463fb5a67cc37e2f90349f85ea0558d27ae661e37585e5e228630483b5716b14425455bec307586d77d8b861fe55b376fc8cd1853f23378355a424256617d80340356f239c2335cbbca7a70807c2a7ac49ef441cc2708e193481f16d9aedf229576577c"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xe0, 0x1, "c12784cd01ea4c3728ae63cad007f6d9e89670238f4e843efbe1e2d4c1a37225f61231f4fc702fbe48da124993115846f97af5e0722cd01f06aafa33b73ccbcb43759f5f05538fd510882fff8c57d99d0b502c40a2a9f38d557be109ff4c81a1533d371538ce5853f8c13d9da714ac59ac1d4948934882c50dab2c9a53699a6969863f706bfb28a46f835a389186d75972294e4f836a30dc67a71b9bf98ea6243de016bdaff55f500440785b622a44359e33562ef951153452f0cad6aa2fc9d109ad4c5f62a815bfe076c2843e49035d77d108539268c45a8bd3c4d2"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "f16589e67137bd631e49aa549a6b2b2676d69de7c1e87b57a27716e57e609384e034c3124e4ef4be452342d4dafdd833cee5e2ec6e509211b4693132"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_TTL={0x5, 0x2, 0xea}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x81}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @void}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1a}]}}]}, {0x1c, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @void}]}]}, @NFTA_RULE_EXPRESSIONS={0xa98, 0x4, 0x0, 0x1, [{0x16c, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xf2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xb}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5b70}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}]}}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0x40, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "70a0644aa1d92bd92af0a612b96be2d1df732d030d6b4ecd2797a72514abbd436a9a3ccbc3dbf55d403aa0dc3b1ed3e4c00bf9b25c"}]}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}]}, {0x108, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xc4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xb3}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8c}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}, @log={{0x8, 0x1, 'log\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x47f}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @void}]}, {0x338, 0x1, 0x0, 0x1, [@log={{0x8, 0x1, 'log\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x81}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}]}}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x280, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x104, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DATA={0x98, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x60, 0x1, "2f81133f29f8ad164a3918ecaec4f8dd32f25eff5688a3dc768d07b00d0b5de6a165533af06be9f0785bcf93e24e8c1f535d2155fa94f17f2e031e728692eb82dd96d697307e56e99bc2724a78548299b970e52696cf64d1d84634da"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xa9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4b}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x73}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x31}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc5}]}}]}, {0x5c, 0x1, 0x0, 0x1, [@queue={{0xa, 0x1, 'queue\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @dup_ipv6={{0x8, 0x1, 'dup\x00'}, @void}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @void}]}, {0xc4, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1a}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x11}]}}]}, {0xc0, 0x1, 0x0, 0x1, [@dynset={{0xb, 0x1, 'dynset\x00'}, @void}, @cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @rt={{0x7, 0x1, 'rt\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}]}, {0x11c, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x22, 0x1, 'procwlan1vmnet1trustedvmnet0*\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1000}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}, @objref={{0xb, 0x1, 'objref\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}, @quota={{0xa, 0x1, 'quota\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}]}, {0x78, 0x1, 0x0, 0x1, [@queue={{0xa, 0x1, 'queue\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xf657}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfffc}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}]}, {0x12c, 0x1, 0x0, 0x1, [@byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}, @fwd={{0x8, 0x1, 'fwd\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x3}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @target={{0xb, 0x1, 'target\x00'}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_INFO={0x25, 0x3, "b1d99e336e0c42a78aa78c38cb56f2f69779e06b2aafa365a893a22be98372b3b5"}, @NFTA_TARGET_NAME={0x18, 0x1, '\'procsecurityvmnet0\x00'}]}}]}, {0x48, 0x1, 0x0, 0x1, [@dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @void}]}]}]}], {0x14}}, 0x4ba0}, 0x1, 0x0, 0x0, 0x20041081}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r8 = socket(0x0, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendmsg$inet(r2, &(0x7f0000000bc0)={&(0x7f0000000680)={0x2, 0x4e20, @rand_addr=0x1f}, 0x10, &(0x7f0000000b00)=[{&(0x7f00000006c0)="07188b174ea40da2b9dbac7b5709c81770e4c62b83bc738838d1ffc91ed8123c73f0da2b7d7b82acea9f40cb0d870612bc66f82adfa43774cbc3b5b63f408763c051f703bf71a258f7a358cc58bc2c8885f06cf7371a9a2027148c24ad14b5dc8905cfd15ba6d21cbc5b06ef940095c810b0092a6b9d14bf9b88bdd11b0506ff8ca321a6cbf83436b272df1c0b580614a9886fd9aff8814c77e3cec1914456d0528d3a4b9f6dd28a008d478e4b4d6d29715b8301127ac0de34f42f349dfc5bd8e1ef371d81198e6d604c4de718bc128373839585f098c3e5a0b2137de49b3a4b61", 0xe1}, {&(0x7f00000007c0)="c47c117217516adaa649a498a456d95997d1f1eb767bff22cfdb5d351f0e84df75e535e903cbbc3865b13d519591788a2ca83fedd23a5d104e259ad033c46bbc0806a550a25e6a8039966c8a9d898696fd7f5351dbf2db550b9164929cd4b8dcc8fa06244bae5281fcbb9f592e6e976808c4071b37ad80e3f41a7a9606fe8b8340c920c1fc1e8dd4385046a6b3dc70f5db91a959e363fb446e714930e3282f07ec27539fad76e69c8de4760400d51e9423c8a98bfe2181fc93c9a40c11cce9142cb99eecf473d543dd1b9e048fca3cf26ccfd9bc650612e8ffa5697cf4dcee8e9ec6e31f8e6a76741e41", 0xea}, {&(0x7f00000008c0)="705dfbb03446e8f974f87b722a932834ec193e202f236b156d0a5bb46e22e3277f804493c037bb264deac13389d6cee0b503ca3205ce27b78cce512a0c512147c6b90086215e07df486c61656ac42e623a4d4c3ac4fafd420afb", 0x5a}, {&(0x7f0000000940)="89ea1250a306e10ccd65a9c79b82f32b57bc32afd3d8f1a9d3c6c50f88ad64344faa2eacbf333f75b97c9e2f1d812c339ca671b985e60d1566c0f6e329d8ecbc31ea7bcd2a0e3fb4515893fce8abad4b8cb9968e07ee705e3d94f8232e08cb74840696dc520fab239c1e62622d26dc14473656f8d8dd05c520a02f56eed9b8bf5129fd7ec3202fc6d9c5008098825793f727095f9c98983eec95176bf6a6e8946e792dfd075a2cb3867fa74c3c927a2540fbfa7c1629f3e46af95bd99104d4", 0xbf}, {&(0x7f0000000a00)="b1a4c5c936a17b9b4ee42e9c9f0b3f747161cb20b2654a37496edc350ea1b2472a64b71645f3e3021ce7c06b4d86e533107ee43b19148fbe532d2f851d", 0x3d}, {&(0x7f0000006a80)="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", 0x1000}, {&(0x7f0000007a80)="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", 0x1000}, {&(0x7f0000000a40)="3b99eca75ba8f7beea33084ad1e71560072d39b22c2aa166f1ac801a44c4d3a880a9895f5b50b4c97aaeceeba4484209ccf717312ac73504b56ed20de7cdc24d8968c7cb9808a98f54cde1cd39031d34c42fb38ee3a8712e6fafcdfb40098fcba5e2fa14c9f2cf4c2dfa338a229e26e720a8f63f54ec15a578bad9dc1c36995e3b20844573ff3ca0b4ae794e", 0x8c}], 0x8, &(0x7f0000000b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x18}, 0x4) sendfile(r1, r6, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @loopback}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x81, 0x3, 0x5}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)="ba5529c263605c84aade46821430c4c48052d0080ec8f9ac2855bc1dcddcd161b32fda31fa802a569d6697bca7da1042dafe1964ac0aedfd59a64362f93450a345d7cf5af9a6c7e703e077b0d2acc51f5b04378e14b2327081a3a9eb46e00f856bc192969257054c64be6f545a1417b577decc69d1", 0x75}], 0xc2480, &(0x7f0000000380)={[{@uni_xlate='uni_xlate=1'}, {@shortname_win95='shortname=win95'}, {@numtail='nonumtail=0'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) sendfile(r0, r1, 0x0, 0x102000003) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000100), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) prlimit64(r3, 0xc, &(0x7f0000000280)={0x1000000009, 0xfffffffffffffc03}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x41, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1, 0x7fff}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r5, 0x0, r4, 0x0, 0x1000000008, 0x0) 12:13:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x80000000, 0x3, 0x0, 0x20, 0x0, 0x0, 0x20}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x30) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1000}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x80000000, 0x2481) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r5, &(0x7f0000000900)={0x2c, 0x8, r7}, 0x10) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000480)=@newpolicy={0xc4, 0x13, 0x300, 0x70bd26, 0x25dfdbfb, {{@in6=@ipv4={[], [], @rand_addr=0x9}, @in=@local, 0x4e24, 0x0, 0x4e23, 0x800, 0x1e, 0xc0, 0x0, 0x32, r7, r8}, {0x4, 0x2, 0x0, 0x9, 0x81, 0x7, 0x5, 0x5}, {0x7, 0x0, 0x6, 0x800}, 0x0, 0xffffffff, 0x1, 0x1}, [@mark={0xc, 0x15, {0x350759, 0xff}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r11 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r11, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r11, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0xb341, 0x9fe, 0xffffffff, 0x80000000, 0x401, 0x43, 0x1000, 0x33d, 0x9, 0x9, 0x20, 0x0, 0xfff, 0x20, 0x400, 0x3ff, 0x3f, 0x7fff, 0x986, 0x9, 0x101, 0xae5, 0x2dd222cf, 0x6, 0xb1, 0x4, 0x7ff, 0x1000, 0x8, 0x7, 0x0, 0x2]}) splice(r10, 0x0, r9, 0x0, 0x1000000008, 0x0) 12:13:06 executing program 0: prlimit64(0x0, 0x1, &(0x7f0000000100)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) r3 = semget$private(0x0, 0x207, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="bfcebd6eeef6b4173c96cb4e991fb321", 0x10) semop(r3, &(0x7f0000000140)=[{0x0, 0x3}], 0x1) semop(r3, &(0x7f0000000200)=[{}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) semop(r3, &(0x7f0000000000)=[{0x3, 0x8d03, 0x1800}, {0x4, 0x40, 0x1800}, {0x3, 0x4, 0x1000}, {0x0, 0xffff, 0x1000}], 0x4) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) setxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@v2={0x3, 0x2, 0xc, 0x10000, 0xde, "7e757d8a85aee2b5fbef3c7ac6a7e1cb4e60ef33bd5b6d52b63219ab47d1f729ed3e39c4444a4ad03e4c8dcb9d42e0cbbb5edb0eb8f30f1aad190382865232ca3fda01a911ca9655f25739b961c533d86d5cd7b3ad9a79383c5f7694b621baa41c96cacaede696447d94333cfb2f74bd13ff4bc8815d532f1e665cddd88db55e1ed5b0d2461ba0bc638a595d20f469ed07dd1875f23367b8714e60b5f4b0b81b3a6bb24953f2a62236d89d7af561c15a10cdbbf601e407b4216cb05696b27bc0ed88c2ca077a2d3ab1f547662f3463452712cf5821ac91cf56a36c97da5a"}, 0xe7, 0x2) 12:13:06 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={0xffffffffffffffff, r3, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:13:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:06 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:06 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000180)={0x2, "b44f"}, 0x3) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x6, @remote, 0x7}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, {{0xa, 0x4e20, 0x4, @loopback, 0x1000}}, {{0xa, 0x4e21, 0x3, @empty, 0x1b}}]}, 0x210) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f00000000c0)={{0x0, 0x0, @identifier="149dd45444faac4f12bea233a6539533"}}) splice(r4, 0x0, r5, 0x0, 0x1000000008, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40040, 0x0) 12:13:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x600000000000000) 12:13:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x7d}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0xffff}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) r6 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r9, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r7, r8, 0x0, 0x102000003) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002a00000100bd7000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="0e00339d48725a8832340d00"], 0x24}, 0x1, 0x0, 0x0, 0x20048080}, 0x4040) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r12, 0x0, r11, 0x0, 0x1000000008, 0x0) 12:13:06 executing program 3: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='c|u\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 12:13:06 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x600000000000000) 12:13:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000007, 0x0) 12:13:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x600000000000000) 12:13:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000007, 0x0) 12:13:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0xb83bafe4fb1e68e6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x77}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000003c0)={@my=0x0}) r6 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r6, 0x0, r1, 0x0, 0x1000000008, 0x0) r7 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000500)="f3a22add03c681030c2c8c7b1ee284dbe16c62c51873bdf1544a7ab64d93896ff951756d17ea002fcdb33e9c0ac0383f59422bb586d131ff18466e83bf4963aa1d48522ec1461ce5321222d30ad28b7958122f866eb19dd1aa24c7852af46bb50bc7bf0337ea289d3477a9ecf79a6a6647ab77d47e8b18", 0x49, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r7, 0x77, 0xfd}, 0x0, &(0x7f0000000200)="d459a4d3680cea234382e25a51f9fb84f572b765d5f8edbc24e6700a33798f61a46e68d7986fec011862938a0984ece426ee9cab6498f732e7d2c87e0e1a3e0653e83f21b49e3cea7f5611fb835cf71f81e8bdb9657fea5ce08a0542fc668ff76736d714134c3a254715a2b77ac17899985421a1b5c8a1", &(0x7f0000000580)=""/253) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000100)={0x6, 'lo\x00', {0x9}}) 12:13:07 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, 0x4}, 0x18) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000003) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000100), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x1, @mcast1, 0xfffffff7}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3ff}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x1000, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}], 0xb4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r4, r8, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x600000000000000) 12:13:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) pidfd_send_signal(r2, 0x27, &(0x7f00000000c0)={0x23, 0x6, 0x101}, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000007, 0x0) 12:13:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x600000000000000) 12:13:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x7c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_LABELS_MASK={0x10, 0x17, [0x200, 0x5a, 0x3]}, @CTA_PROTOINFO={0x2c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x28, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x20}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000005) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r3, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x600000000000000) 12:13:07 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:13:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x9, 0x4, 0x4, 0x80000001, 0x8}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x2000, 0x108000}) pipe(&(0x7f00000001c0)) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x3800) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x250111af8000000, 0x4) 12:13:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x10, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c0, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa051}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2d2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb31}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x42d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x623}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x65f9dd12}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0xc0}, 0x20000080) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:08 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x40080, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0xfffffffffffff000, 0x20080) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x800, 0x2, 0x80000000]}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2040040}, 0x10) timerfd_create(0x5, 0x800) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x17, 0x6, @l2={'ib', 0x3a, 'rose0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) 12:13:08 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:13:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x5) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x501040, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)={r4, 0x5c, "db53276ea02dba3f1b3ea773ac4c1f363257a196f73dbb7300cd0965ab5cb80a6061e78dcb3a2f14ed10a44c20171f62fb78eca2258f2c1646c3055efedbceefdb6295a6b15e05a29e620510e7eb19bf01b36c53b0a301f9eb1ef57f"}, &(0x7f0000000180)=0x64) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r5, 0x0, r1, 0x0, 0x1000000008, 0x0) 12:13:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x1, @empty}, {0xa, 0x4e24, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r4}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r4, 0x1}}, 0x18) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000100), 0x4) write$cgroup_pid(r0, &(0x7f0000000000)=r5, 0x12) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000680)) 12:13:08 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:13:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:08 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=r2) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r3, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x12) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0xc2942) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x84000, 0x0) 12:13:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f00000000c0)={0x0, 0x5, 0xd5dd, 0x4, 0x1, 0x19, 0x200, 0x6, 0x100000000, 0x6, 0x1, 0x5}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x6, 0x3, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r4, 0x0, r3, 0x0, 0x1000000008, 0x0) 12:13:08 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:13:09 executing program 4 (fault-call:4 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) [ 842.163268][T27873] FAULT_INJECTION: forcing a failure. [ 842.163268][T27873] name failslab, interval 1, probability 0, space 0, times 0 [ 842.176002][T27873] CPU: 0 PID: 27873 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 842.184676][T27873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.194761][T27873] Call Trace: [ 842.198088][T27873] dump_stack+0x11d/0x181 [ 842.202624][T27873] should_fail.cold+0xa/0x1a [ 842.207242][T27873] __should_failslab+0xee/0x130 [ 842.212123][T27873] should_failslab+0x9/0x14 [ 842.216703][T27873] kmem_cache_alloc_node_trace+0x3b/0x670 [ 842.222448][T27873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 842.228736][T27873] __kmalloc_node+0x38/0x50 [ 842.233262][T27873] kvmalloc_node+0x71/0x100 [ 842.237785][T27873] iov_iter_get_pages_alloc+0x476/0xb10 [ 842.243377][T27873] ? iov_iter_pipe+0xfa/0x120 [ 842.248069][T27873] default_file_splice_read+0xd5/0x590 [ 842.253550][T27873] ? fsnotify+0x6a9/0x7d0 [ 842.257921][T27873] ? security_file_permission+0x88/0x280 [ 842.263599][T27873] ? rw_verify_area+0xee/0x250 [ 842.268379][T27873] do_splice_to+0xf2/0x130 [ 842.272818][T27873] ? iter_file_splice_write+0x840/0x840 [ 842.278389][T27873] ? iter_file_splice_write+0x840/0x840 [ 842.283946][T27873] do_splice+0xbbb/0xc40 [ 842.288199][T27873] __x64_sys_splice+0x20a/0x220 [ 842.293121][T27873] do_syscall_64+0xcc/0x3a0 [ 842.297637][T27873] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 842.303514][T27873] RIP: 0033:0x45b399 12:13:09 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x242}, 0x0, 0xffffdfffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = accept$inet6(r2, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000005c0)=0x1c) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={r7, 0x1f, 0x8, [0xe25, 0x1, 0xf75f, 0x4, 0x6, 0x5, 0x7, 0x8]}, &(0x7f0000000640)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000680)={r8, 0x5}, &(0x7f00000006c0)=0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r10 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) sendfile(r1, r9, 0x0, 0x102000003) r11 = socket$key(0xf, 0x3, 0x2) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x802a400}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00800000d25be048b4bc75334f9a329ac8ea7f2600fdb58f87bfbb1c6b0475e59c08bac338349db286dd17ca33cb7ed641af0a1b63fe85c9bfc97d9b3b1f9fa5dd812a3ed817db9ed7f55f70fdff4ce626c4cae43d4e96f576", @ANYRES16=r13, @ANYBLOB="02002dbd7000ffdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10) sendto$inet(r12, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r14 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r15 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r15, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r14, 0x4c00, r15) sendfile(r12, r14, 0x0, 0x102000003) setsockopt$inet_int(r12, 0x0, 0x32, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1f, @mcast1, 0x100}}, 0x3, 0x8, 0x7}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r16, &(0x7f0000000340)=0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 842.307406][T27873] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 842.327227][T27873] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 842.335791][T27873] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 842.343827][T27873] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 842.351811][T27873] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 12:13:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r0, 0x0, 0x1000000008, 0x0) pipe(&(0x7f00000000c0)) socket$bt_cmtp(0x1f, 0x3, 0x5) [ 842.359876][T27873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 842.367858][T27873] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000000 12:13:09 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:13:09 executing program 4 (fault-call:4 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r0, &(0x7f00000000c0)="34b8527c6ca4537e265e99931195459c5bd7945ffa728946b61baad55e0198491e1032088fc5b22913c0c489a5e36cbe7625994392624a9617225b4ba9672cdae5522f19dc4e543a3cb34c97e1a51c1ec87590919fc38fdd7629841095fe648b563e6855009bbceee6d2f0783b95", 0x6e, 0x4) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 842.552446][T27895] FAULT_INJECTION: forcing a failure. [ 842.552446][T27895] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 842.565762][T27895] CPU: 0 PID: 27895 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 842.574439][T27895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.584500][T27895] Call Trace: [ 842.587805][T27895] dump_stack+0x11d/0x181 [ 842.592152][T27895] should_fail.cold+0xa/0x1a [ 842.596760][T27895] should_fail_alloc_page+0x50/0x60 [ 842.601969][T27895] __alloc_pages_nodemask+0xd2/0x310 [ 842.607268][T27895] alloc_pages_current+0xd1/0x170 [ 842.612309][T27895] push_pipe+0x170/0x320 [ 842.616623][T27895] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 842.622201][T27895] ? iov_iter_pipe+0xfa/0x120 [ 842.626919][T27895] default_file_splice_read+0xd5/0x590 [ 842.632623][T27895] ? fsnotify+0x6a9/0x7d0 [ 842.636978][T27895] ? security_file_permission+0x88/0x280 [ 842.643633][T27895] ? rw_verify_area+0xee/0x250 [ 842.648410][T27895] do_splice_to+0xf2/0x130 [ 842.652843][T27895] ? iter_file_splice_write+0x840/0x840 [ 842.658409][T27895] ? iter_file_splice_write+0x840/0x840 [ 842.663978][T27895] do_splice+0xbbb/0xc40 [ 842.668330][T27895] __x64_sys_splice+0x20a/0x220 [ 842.673206][T27895] do_syscall_64+0xcc/0x3a0 [ 842.677719][T27895] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 842.683661][T27895] RIP: 0033:0x45b399 [ 842.687567][T27895] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 842.707222][T27895] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 842.715634][T27895] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 842.723737][T27895] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 842.731711][T27895] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 [ 842.739747][T27895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 842.747723][T27895] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000001 12:13:09 executing program 4 (fault-call:4 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8000, 0x8, 0x10000}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 12:13:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) r4 = dup3(r3, r0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001300)={0x53, 0xffffffffffffffff, 0x41, 0x3, @scatter={0x1, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/216, 0xd8}]}, &(0x7f0000000200)="48e24558c599894c3ecfc9547059c8fc5b9144d2f4ee3c487f48281801349ccc6cba02a48f7a0a66629c22d72c56fb422c61f6d15fe1732acfac2c0cff4dcdc9e9", &(0x7f00000002c0)=""/4096, 0x82a, 0x10006, 0x1, &(0x7f00000012c0)}) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r5, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 842.966698][T27902] FAULT_INJECTION: forcing a failure. [ 842.966698][T27902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 842.980087][T27902] CPU: 1 PID: 27902 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 842.988808][T27902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.998928][T27902] Call Trace: [ 843.002228][T27902] dump_stack+0x11d/0x181 [ 843.006618][T27902] should_fail.cold+0xa/0x1a [ 843.011228][T27902] should_fail_alloc_page+0x50/0x60 [ 843.016455][T27902] __alloc_pages_nodemask+0xd2/0x310 [ 843.021830][T27902] alloc_pages_current+0xd1/0x170 [ 843.027299][T27902] push_pipe+0x170/0x320 [ 843.031553][T27902] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 843.037112][T27902] ? iov_iter_pipe+0xfa/0x120 [ 843.041898][T27902] default_file_splice_read+0xd5/0x590 [ 843.047377][T27902] ? fsnotify+0x6a9/0x7d0 [ 843.051731][T27902] ? security_file_permission+0x88/0x280 [ 843.057457][T27902] ? rw_verify_area+0xee/0x250 [ 843.062240][T27902] do_splice_to+0xf2/0x130 [ 843.066667][T27902] ? iter_file_splice_write+0x840/0x840 [ 843.072254][T27902] ? iter_file_splice_write+0x840/0x840 [ 843.077894][T27902] do_splice+0xbbb/0xc40 [ 843.082208][T27902] __x64_sys_splice+0x20a/0x220 [ 843.087075][T27902] do_syscall_64+0xcc/0x3a0 [ 843.091593][T27902] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 843.097483][T27902] RIP: 0033:0x45b399 [ 843.101388][T27902] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 843.121008][T27902] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 843.129867][T27902] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 843.137963][T27902] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 843.145976][T27902] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 [ 843.154057][T27902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:13:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0xa00000, 0x4, 0x80000001, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xd60d8e, 0x1, [], @string=&(0x7f0000000000)=0x46}}) write$FUSE_INTERRUPT(r5, &(0x7f0000000140)={0x10, 0xfffffffffffffffe, 0x1}, 0x10) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) flock(r6, 0x5) [ 843.162035][T27902] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000002 12:13:10 executing program 4 (fault-call:4 fault-nth:3): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8, 0x0) 12:13:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r4, 0x4, 0x8, 0x7, 0x5}, 0x14) [ 843.406255][T27924] FAULT_INJECTION: forcing a failure. [ 843.406255][T27924] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 843.419619][T27924] CPU: 0 PID: 27924 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 843.428610][T27924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.438956][T27924] Call Trace: [ 843.442261][T27924] dump_stack+0x11d/0x181 [ 843.446636][T27924] should_fail.cold+0xa/0x1a [ 843.451324][T27924] should_fail_alloc_page+0x50/0x60 [ 843.456656][T27924] __alloc_pages_nodemask+0xd2/0x310 [ 843.462191][T27924] alloc_pages_current+0xd1/0x170 [ 843.467251][T27924] push_pipe+0x170/0x320 [ 843.471515][T27924] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 843.477170][T27924] ? iov_iter_pipe+0xfa/0x120 [ 843.481931][T27924] default_file_splice_read+0xd5/0x590 [ 843.487519][T27924] ? fsnotify+0x6a9/0x7d0 [ 843.491998][T27924] ? security_file_permission+0x88/0x280 [ 843.497653][T27924] ? rw_verify_area+0xee/0x250 [ 843.502442][T27924] do_splice_to+0xf2/0x130 [ 843.506898][T27924] ? iter_file_splice_write+0x840/0x840 [ 843.512467][T27924] ? iter_file_splice_write+0x840/0x840 [ 843.518079][T27924] do_splice+0xbbb/0xc40 [ 843.522357][T27924] __x64_sys_splice+0x20a/0x220 [ 843.527289][T27924] do_syscall_64+0xcc/0x3a0 [ 843.531858][T27924] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 843.537763][T27924] RIP: 0033:0x45b399 [ 843.541762][T27924] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 843.561421][T27924] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 843.569854][T27924] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 843.577864][T27924] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 843.585845][T27924] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 [ 843.594125][T27924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:13:10 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x88200, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00'}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:10 executing program 3 (fault-call:16 fault-nth:0): open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:13:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xac, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_TUPLE={0x74, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4) sendfile(r0, r1, 0x0, 0x102000003) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000100), 0x4) r4 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000000)=0x80) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r6, 0x0, r5, 0x0, 0x1000000008, 0x0) [ 843.602123][T27924] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000003 12:13:10 executing program 4 (fault-call:4 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 843.800754][T27939] FAULT_INJECTION: forcing a failure. [ 843.800754][T27939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 843.814287][T27939] CPU: 0 PID: 27939 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 843.823114][T27939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.833181][T27939] Call Trace: [ 843.836737][T27939] dump_stack+0x11d/0x181 [ 843.841121][T27939] should_fail.cold+0xa/0x1a [ 843.845734][T27939] should_fail_alloc_page+0x50/0x60 [ 843.850969][T27939] __alloc_pages_nodemask+0xd2/0x310 [ 843.856275][T27939] alloc_pages_current+0xd1/0x170 [ 843.861484][T27939] push_pipe+0x170/0x320 [ 843.865743][T27939] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 843.871393][T27939] ? iov_iter_pipe+0xfa/0x120 [ 843.876240][T27939] default_file_splice_read+0xd5/0x590 [ 843.881724][T27939] ? fsnotify+0x6a9/0x7d0 [ 843.886308][T27939] ? security_file_permission+0x88/0x280 [ 843.891961][T27939] ? rw_verify_area+0xee/0x250 [ 843.896737][T27939] do_splice_to+0xf2/0x130 [ 843.901159][T27939] ? iter_file_splice_write+0x840/0x840 [ 843.906758][T27939] ? iter_file_splice_write+0x840/0x840 [ 843.912338][T27939] do_splice+0xbbb/0xc40 [ 843.917105][T27939] __x64_sys_splice+0x20a/0x220 [ 843.921988][T27939] do_syscall_64+0xcc/0x3a0 [ 843.926499][T27939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 843.932493][T27939] RIP: 0033:0x45b399 [ 843.936411][T27939] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 843.956088][T27939] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 843.964515][T27939] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 843.972609][T27939] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 843.980585][T27939] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 [ 843.988681][T27939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 843.996780][T27939] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000004 12:13:11 executing program 4 (fault-call:4 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) [ 844.102256][T27935] FAULT_INJECTION: forcing a failure. [ 844.102256][T27935] name failslab, interval 1, probability 0, space 0, times 0 [ 844.125469][T27935] CPU: 0 PID: 27935 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 844.134174][T27935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.144311][T27935] Call Trace: [ 844.147621][T27935] dump_stack+0x11d/0x181 [ 844.151977][T27935] should_fail.cold+0xa/0x1a [ 844.156584][T27935] __should_failslab+0xee/0x130 [ 844.161554][T27935] should_failslab+0x9/0x14 [ 844.166074][T27935] __kmalloc+0x53/0x690 [ 844.170313][T27935] ? irq_work_interrupt+0xa/0x20 [ 844.175275][T27935] ? tomoyo_realpath_from_path+0x83/0x4c0 [ 844.181017][T27935] tomoyo_realpath_from_path+0x83/0x4c0 [ 844.186619][T27935] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 844.192123][T27935] tomoyo_path_number_perm+0x10a/0x3c0 [ 844.197622][T27935] tomoyo_file_ioctl+0x2c/0x40 [ 844.202430][T27935] security_file_ioctl+0x6d/0xa0 [ 844.207452][T27935] ksys_ioctl+0x64/0xe0 [ 844.211734][T27935] __x64_sys_ioctl+0x4c/0x60 [ 844.216343][T27935] do_syscall_64+0xcc/0x3a0 [ 844.220898][T27935] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 844.226970][T27935] RIP: 0033:0x45b399 [ 844.230896][T27935] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 844.244915][T27949] FAULT_INJECTION: forcing a failure. [ 844.244915][T27949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 844.250730][T27935] RSP: 002b:00007f7be7932c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.272567][T27935] RAX: ffffffffffffffda RBX: 00007f7be79336d4 RCX: 000000000045b399 [ 844.280565][T27935] RDX: 0000000000000009 RSI: 0000000000004c00 RDI: 0000000000000008 [ 844.288627][T27935] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 844.296671][T27935] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 844.304783][T27935] R13: 00000000000003e5 R14: 00000000004c52ed R15: 0000000000000000 [ 844.312836][T27949] CPU: 1 PID: 27949 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 844.321627][T27949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.331681][T27949] Call Trace: [ 844.335065][T27949] dump_stack+0x11d/0x181 [ 844.339601][T27949] should_fail.cold+0xa/0x1a [ 844.344329][T27949] should_fail_alloc_page+0x50/0x60 [ 844.349634][T27949] __alloc_pages_nodemask+0xd2/0x310 [ 844.354989][T27949] alloc_pages_current+0xd1/0x170 [ 844.360072][T27949] push_pipe+0x170/0x320 [ 844.364343][T27949] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 844.369918][T27949] ? iov_iter_pipe+0xfa/0x120 [ 844.374658][T27949] default_file_splice_read+0xd5/0x590 [ 844.380170][T27949] ? fsnotify+0x6a9/0x7d0 [ 844.384595][T27949] ? security_file_permission+0x88/0x280 [ 844.390262][T27949] ? rw_verify_area+0xee/0x250 [ 844.395063][T27949] do_splice_to+0xf2/0x130 [ 844.399635][T27949] ? iter_file_splice_write+0x840/0x840 [ 844.405324][T27949] ? iter_file_splice_write+0x840/0x840 [ 844.411017][T27949] do_splice+0xbbb/0xc40 [ 844.415404][T27949] __x64_sys_splice+0x20a/0x220 [ 844.420273][T27949] do_syscall_64+0xcc/0x3a0 [ 844.424785][T27949] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 844.430755][T27949] RIP: 0033:0x45b399 12:13:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x16, 0x7, 0x1a5, &(0x7f0000000480)}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x3800) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f00000002c0)="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") fcntl$getownex(r5, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(r8, &(0x7f0000000140)='autogroup\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') connect$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) splice(r1, 0x0, r0, 0x0, 0x1ff, 0x0) [ 844.434658][T27949] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 844.454739][T27949] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 844.463159][T27949] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 844.471378][T27949] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 844.479409][T27949] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 [ 844.487457][T27949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 844.495441][T27949] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000005 12:13:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, 0x0}]) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x10000, 0x0) io_cancel(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f00000002c0)="41ddc32d25e8f07c04d57081bc741b0db9134f929028ddffd01ec9fab0d57f6557e4931b5dbd8902adae1cce3032a2f07b7c80c21d83b2e201287a2302e9c87f8b868776fc2ad38b30f3189e6e476c7d2a9180fc3e5a3fae6e50d915a796130cadba1730a6c2b40426c2030c06006c5d74aed9ef78cd31dc3352f26c6298b12fde5ea406b9192147859d2d5c04b170f34993d21523aa5ddc5eb80699e15d696da53d87e1164aa4702ee07364e4de8d446290290416bb867de8092dd09074", 0xbe, 0x8, 0x0, 0x1, r3}, &(0x7f0000000380)) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r5, 0x0, r4, 0x0, 0x1000000008, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0xc1}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @rand_addr=0x846}], 0x40) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 12:13:11 executing program 4 (fault-call:4 fault-nth:6): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x40000003}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r2}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r5, 0x0, r4, 0x0, 0x1000000008, 0x0) [ 844.650216][T27935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 844.785769][T27971] FAULT_INJECTION: forcing a failure. [ 844.785769][T27971] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 844.799068][T27971] CPU: 0 PID: 27971 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 844.807843][T27971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.817909][T27971] Call Trace: [ 844.821216][T27971] dump_stack+0x11d/0x181 [ 844.825573][T27971] should_fail.cold+0xa/0x1a [ 844.830209][T27971] should_fail_alloc_page+0x50/0x60 [ 844.835430][T27971] __alloc_pages_nodemask+0xd2/0x310 [ 844.840799][T27971] alloc_pages_current+0xd1/0x170 [ 844.845870][T27971] push_pipe+0x170/0x320 [ 844.850764][T27971] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 844.856366][T27971] ? iov_iter_pipe+0xfa/0x120 [ 844.861061][T27971] default_file_splice_read+0xd5/0x590 [ 844.866582][T27971] ? fsnotify+0x6a9/0x7d0 [ 844.870990][T27971] ? security_file_permission+0x88/0x280 [ 844.876660][T27971] ? rw_verify_area+0xee/0x250 [ 844.881474][T27971] do_splice_to+0xf2/0x130 [ 844.885908][T27971] ? iter_file_splice_write+0x840/0x840 [ 844.891708][T27971] ? iter_file_splice_write+0x840/0x840 [ 844.897280][T27971] do_splice+0xbbb/0xc40 [ 844.901602][T27971] __x64_sys_splice+0x20a/0x220 [ 844.906485][T27971] do_syscall_64+0xcc/0x3a0 [ 844.911014][T27971] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 844.916958][T27971] RIP: 0033:0x45b399 [ 844.920871][T27971] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 844.940602][T27971] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 844.949051][T27971] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 844.957127][T27971] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 844.965141][T27971] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 [ 844.973134][T27971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:13:11 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 844.983907][T27971] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000006 12:13:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffc, 0x6eafdd29ebed33ba) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x290801, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:12 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x0, 0x0, 0xffffffff) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="e80000001100010026bd7000fddbdfef23b52ad2f0b0c8db8d3a2572666337353339286573736976287874732d6165732d63652c636d61632d6165403815bb292c6e68706f6c79313330352d617678322900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000200000000000000000000080001001f000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r7, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004010}, 0x4801) sendfile(r1, r2, 0x0, 0x102000003) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) 12:13:12 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x2, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) 12:13:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x6, 0x8, 0x6}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) timerfd_create(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = epoll_create(0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x22, 0x0, 0x2, 0x0, r3, 0x80, [], 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x3c) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x80, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r6, r7, 0x0, 0x102000003) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r10 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r10, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:13:12 executing program 4 (fault-call:4 fault-nth:7): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:12 executing program 2: prlimit64(0x0, 0x1, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) [ 845.460302][T28001] FAULT_INJECTION: forcing a failure. [ 845.460302][T28001] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 845.473614][T28001] CPU: 1 PID: 28001 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 845.482297][T28001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.492465][T28001] Call Trace: [ 845.495796][T28001] dump_stack+0x11d/0x181 [ 845.500171][T28001] should_fail.cold+0xa/0x1a [ 845.504844][T28001] should_fail_alloc_page+0x50/0x60 [ 845.510059][T28001] __alloc_pages_nodemask+0xd2/0x310 [ 845.515355][T28001] alloc_pages_current+0xd1/0x170 [ 845.520384][T28001] push_pipe+0x170/0x320 [ 845.524642][T28001] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 845.530207][T28001] ? iov_iter_pipe+0xfa/0x120 [ 845.534905][T28001] default_file_splice_read+0xd5/0x590 [ 845.540426][T28001] ? fsnotify+0x6a9/0x7d0 [ 845.544869][T28001] ? security_file_permission+0x88/0x280 [ 845.550600][T28001] ? rw_verify_area+0xee/0x250 [ 845.555529][T28001] do_splice_to+0xf2/0x130 [ 845.559959][T28001] ? iter_file_splice_write+0x840/0x840 [ 845.565539][T28001] ? iter_file_splice_write+0x840/0x840 [ 845.571121][T28001] do_splice+0xbbb/0xc40 [ 845.575423][T28001] __x64_sys_splice+0x20a/0x220 [ 845.580339][T28001] do_syscall_64+0xcc/0x3a0 [ 845.584924][T28001] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 845.590826][T28001] RIP: 0033:0x45b399 [ 845.594845][T28001] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 845.614481][T28001] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 845.623058][T28001] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 845.631160][T28001] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 845.639161][T28001] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 [ 845.647143][T28001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 845.655126][T28001] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000007 12:13:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000003) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000100), 0x4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x400, r6}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r7, 0xdb5}, &(0x7f0000000140)=0x8) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) 12:13:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x6, 0x1, 0x0, &(0x7f00000003c0)}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0xb, @raw_data="399308533e6ae5ee3a905ea985e4a31590affd62a4abc0d7c703beec3ed0236be9cd47b1b80c9d3d35d75d56569a151314d80f0e1d389ab1f7cc5c3d99617cc4796756dad6763685cf135b1739b00bf5ac760ffe95fb6063464312ef0fb17e84c02fea3bad2e4ff291331292443cc74891cdfb19051707ab5ae37ad68e3f07eebcac702fc96eb8942cdf3a455076d6c7b5f16e71b90b75c00e9b6740fb34daa1c1927bcece41d0fa1f5e0769a8e03e24c9a6ad9e5b10e4c225858f0623923a5c7f4b33017d2dd21e"}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpgid(r3) ptrace$peeksig(0x4209, r4, &(0x7f0000000200)={0x9, 0x0, 0x1}, &(0x7f00000002c0)=[{}]) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x10, 0xffffffffffffffff, 0x2146f000) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}], 0x20) 12:13:12 executing program 4 (fault-call:4 fault-nth:8): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:12 executing program 3: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x90040, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7f) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu\t&-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0xd7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x10, r6) sendfile(r4, r5, 0x0, 0x102000003) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r3, r4, 0x80, 0x0, &(0x7f0000000100), 0x0, 0xb, 0x4, 0x2, 0xc000, 0x1, 0x3, 'syz0\x00'}) [ 845.911962][T28017] FAULT_INJECTION: forcing a failure. [ 845.911962][T28017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 845.925677][T28017] CPU: 1 PID: 28017 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 845.934533][T28017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.944681][T28017] Call Trace: [ 845.947990][T28017] dump_stack+0x11d/0x181 [ 845.952364][T28017] should_fail.cold+0xa/0x1a [ 845.956981][T28017] should_fail_alloc_page+0x50/0x60 [ 845.962271][T28017] __alloc_pages_nodemask+0xd2/0x310 [ 845.967579][T28017] alloc_pages_current+0xd1/0x170 [ 845.972913][T28017] push_pipe+0x170/0x320 [ 845.977276][T28017] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 845.982890][T28017] ? iov_iter_pipe+0xfa/0x120 [ 845.987592][T28017] default_file_splice_read+0xd5/0x590 [ 845.993124][T28017] ? fsnotify+0x6a9/0x7d0 [ 845.997488][T28017] ? security_file_permission+0x88/0x280 [ 846.003148][T28017] ? rw_verify_area+0xee/0x250 [ 846.008039][T28017] do_splice_to+0xf2/0x130 [ 846.012477][T28017] ? iter_file_splice_write+0x840/0x840 [ 846.018143][T28017] ? iter_file_splice_write+0x840/0x840 [ 846.023764][T28017] do_splice+0xbbb/0xc40 [ 846.028102][T28017] __x64_sys_splice+0x20a/0x220 [ 846.032986][T28017] do_syscall_64+0xcc/0x3a0 [ 846.037733][T28017] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.044470][T28017] RIP: 0033:0x45b399 [ 846.048520][T28017] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.068225][T28017] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 846.076748][T28017] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 846.084736][T28017] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 846.092860][T28017] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 [ 846.100953][T28017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 846.108955][T28017] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000008 12:13:13 executing program 2: prlimit64(0x0, 0x9, &(0x7f0000000280)={0x8, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) timer_create(0x14f1d3ec88893dbd, &(0x7f00000000c0)={0x0, 0x1d, 0x4, @thr={&(0x7f0000000000)="a875d323f83c5d4611d8a706ffef9092a207d6f49371b4cd9dbafefd45d9ea2af475048ead534fd2122f7ed4a0d141707ba37b4eb4", &(0x7f00000002c0)="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"}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) 12:13:13 executing program 4 (fault-call:4 fault-nth:9): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) 12:13:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x3800) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000003) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000100), 0x4) dup2(r2, r3) 12:13:13 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000003) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), 0x4) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x38) [ 846.360100][T28033] FAULT_INJECTION: forcing a failure. [ 846.360100][T28033] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 846.373692][T28033] CPU: 1 PID: 28033 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 846.382367][T28033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.392527][T28033] Call Trace: [ 846.395875][T28033] dump_stack+0x11d/0x181 [ 846.400311][T28033] should_fail.cold+0xa/0x1a [ 846.404943][T28033] should_fail_alloc_page+0x50/0x60 [ 846.410309][T28033] __alloc_pages_nodemask+0xd2/0x310 [ 846.415695][T28033] alloc_pages_current+0xd1/0x170 [ 846.420732][T28033] push_pipe+0x170/0x320 [ 846.425152][T28033] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 846.430791][T28033] ? iov_iter_pipe+0xfa/0x120 [ 846.435493][T28033] default_file_splice_read+0xd5/0x590 [ 846.440999][T28033] ? fsnotify+0x6a9/0x7d0 [ 846.445352][T28033] ? security_file_permission+0x88/0x280 [ 846.451121][T28033] ? rw_verify_area+0xee/0x250 [ 846.455920][T28033] do_splice_to+0xf2/0x130 [ 846.460361][T28033] ? iter_file_splice_write+0x840/0x840 [ 846.465920][T28033] ? iter_file_splice_write+0x840/0x840 [ 846.471537][T28033] do_splice+0xbbb/0xc40 [ 846.475815][T28033] __x64_sys_splice+0x20a/0x220 [ 846.482345][T28033] do_syscall_64+0xcc/0x3a0 [ 846.486913][T28033] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.492829][T28033] RIP: 0033:0x45b399 [ 846.496770][T28033] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.516583][T28033] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 846.524997][T28033] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 846.533104][T28033] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 846.541125][T28033] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 [ 846.549110][T28033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:13:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r0) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) [ 846.557092][T28033] R13: 0000000000000b6c R14: 00000000004ccecb R15: 0000000000000009 12:13:13 executing program 4 (fault-call:4 fault-nth:10): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x600000000000000) [ 846.647164][T28007] ================================================================== [ 846.655429][T28007] BUG: KCSAN: data-race in sctp_association_free / sctp_wait_for_connect [ 846.663889][T28007] [ 846.666237][T28007] read to 0xffff8880a551801c of 1 bytes by task 28012 on cpu 0: [ 846.673891][T28007] sctp_wait_for_connect+0x19d/0x330 [ 846.679192][T28007] __sctp_connect+0x5af/0x670 [ 846.683890][T28007] __sctp_setsockopt_connectx+0x103/0x150 [ 846.689740][T28007] sctp_setsockopt+0x170d/0x5230 [ 846.694684][T28007] sock_common_setsockopt+0x67/0x90 [ 846.699896][T28007] __sys_setsockopt+0x1ce/0x370 [ 846.704760][T28007] __x64_sys_setsockopt+0x70/0x90 [ 846.709819][T28007] do_syscall_64+0xcc/0x3a0 [ 846.714330][T28007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.720213][T28007] [ 846.722569][T28007] write to 0xffff8880a551801c of 1 bytes by task 28007 on cpu 1: [ 846.730418][T28007] sctp_association_free+0x101/0x480 [ 846.735801][T28007] sctp_do_sm+0x277f/0x2f10 [ 846.740524][T28007] sctp_primitive_SHUTDOWN+0x7b/0xa0 [ 846.745942][T28007] sctp_close+0x2a2/0x5e0 [ 846.750366][T28007] inet_release+0x86/0x100 [ 846.754807][T28007] inet6_release+0x4a/0x70 [ 846.759346][T28007] __sock_release+0x85/0x160 [ 846.764022][T28007] sock_close+0x24/0x30 [ 846.768196][T28007] __fput+0x1e1/0x520 [ 846.772262][T28007] ____fput+0x1f/0x30 [ 846.776672][T28007] task_work_run+0xf6/0x130 [ 846.781188][T28007] exit_to_usermode_loop+0x2b4/0x2c0 [ 846.786493][T28007] do_syscall_64+0x384/0x3a0 [ 846.792411][T28007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.798307][T28007] [ 846.800646][T28007] Reported by Kernel Concurrency Sanitizer on: [ 846.802644][T28050] FAULT_INJECTION: forcing a failure. [ 846.802644][T28050] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 846.806808][T28007] CPU: 1 PID: 28007 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 846.806819][T28007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.806838][T28007] ================================================================== [ 846.820247][T28050] CPU: 0 PID: 28050 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 846.828985][T28007] Kernel panic - not syncing: panic_on_warn set ... [ 846.862610][T28050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.872769][T28050] Call Trace: [ 846.876081][T28050] dump_stack+0x11d/0x181 [ 846.880516][T28050] should_fail.cold+0xa/0x1a [ 846.885141][T28050] should_fail_alloc_page+0x50/0x60 [ 846.890384][T28050] __alloc_pages_nodemask+0xd2/0x310 [ 846.895812][T28050] alloc_pages_current+0xd1/0x170 [ 846.900864][T28050] push_pipe+0x170/0x320 [ 846.905158][T28050] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 846.910735][T28050] ? iov_iter_pipe+0xfa/0x120 [ 846.915437][T28050] default_file_splice_read+0xd5/0x590 [ 846.920973][T28050] ? fsnotify+0x6a9/0x7d0 [ 846.925657][T28050] ? security_file_permission+0x88/0x280 [ 846.931576][T28050] ? rw_verify_area+0xee/0x250 [ 846.936473][T28050] do_splice_to+0xf2/0x130 [ 846.940942][T28050] ? iter_file_splice_write+0x840/0x840 [ 846.946537][T28050] ? iter_file_splice_write+0x840/0x840 [ 846.952094][T28050] do_splice+0xbbb/0xc40 [ 846.956408][T28050] __x64_sys_splice+0x20a/0x220 [ 846.961361][T28050] do_syscall_64+0xcc/0x3a0 [ 846.965935][T28050] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.971833][T28050] RIP: 0033:0x45b399 [ 846.975845][T28050] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.995464][T28050] RSP: 002b:00007f930f5fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 847.003889][T28050] RAX: ffffffffffffffda RBX: 00007f930f5fd6d4 RCX: 000000000045b399 [ 847.011946][T28050] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 847.020089][T28050] RBP: 000000000075bf20 R08: 0000001000000008 R09: 0600000000000000 [ 847.028071][T28050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 847.036148][T28050] R13: 0000000000000b6c R14: 00000000004ccecb R15: 000000000000000a [ 847.044146][T28007] CPU: 1 PID: 28007 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 847.052826][T28007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.062936][T28007] Call Trace: [ 847.066227][T28007] dump_stack+0x11d/0x181 [ 847.070574][T28007] panic+0x210/0x640 [ 847.074609][T28007] ? vprintk_func+0x8d/0x140 [ 847.079191][T28007] kcsan_report.cold+0xc/0xd [ 847.083799][T28007] kcsan_setup_watchpoint+0x3fe/0x460 [ 847.089263][T28007] __tsan_unaligned_write1+0xc3/0x100 [ 847.094739][T28007] sctp_association_free+0x101/0x480 [ 847.100040][T28007] sctp_do_sm+0x277f/0x2f10 [ 847.104551][T28007] ? __srcu_read_unlock+0x3e/0x50 [ 847.109581][T28007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 847.115822][T28007] ? debug_smp_processor_id+0x43/0x137 [ 847.121351][T28007] ? free_inode_nonrcu+0x40/0x40 [ 847.126292][T28007] ? rcu_dynticks_curr_cpu_in_eqs+0x70/0xa0 [ 847.132221][T28007] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 847.138464][T28007] ? debug_smp_processor_id+0x43/0x137 [ 847.143925][T28007] ? free_inode_nonrcu+0x40/0x40 [ 847.148873][T28007] ? __call_rcu+0x153/0x390 [ 847.153438][T28007] ? free_inode_nonrcu+0x40/0x40 [ 847.158382][T28007] ? call_rcu+0x29/0x30 [ 847.162567][T28007] ? shmem_free_fc+0x70/0x70 [ 847.167287][T28007] ? shmem_free_in_core_inode+0x90/0x90 [ 847.172828][T28007] ? preempt_count_add+0x6f/0xb0 [ 847.177770][T28007] sctp_primitive_SHUTDOWN+0x7b/0xa0 [ 847.183055][T28007] sctp_close+0x2a2/0x5e0 [ 847.187393][T28007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 847.193751][T28007] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 847.199657][T28007] ? ip_mc_drop_socket+0x132/0x150 [ 847.204787][T28007] inet_release+0x86/0x100 [ 847.209208][T28007] inet6_release+0x4a/0x70 [ 847.213624][T28007] __sock_release+0x85/0x160 [ 847.218213][T28007] sock_close+0x24/0x30 [ 847.222367][T28007] __fput+0x1e1/0x520 [ 847.226351][T28007] ? __sock_release+0x160/0x160 [ 847.231216][T28007] ____fput+0x1f/0x30 [ 847.235196][T28007] task_work_run+0xf6/0x130 [ 847.239710][T28007] exit_to_usermode_loop+0x2b4/0x2c0 [ 847.245002][T28007] do_syscall_64+0x384/0x3a0 [ 847.249586][T28007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.255623][T28007] RIP: 0033:0x414f31 [ 847.259564][T28007] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 847.279374][T28007] RSP: 002b:00007ffd689ab9b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 847.287783][T28007] RAX: 0000000000000000 RBX: 000000000000000a RCX: 0000000000414f31 [ 847.295917][T28007] RDX: 0000000000000000 RSI: 0000000000001673 RDI: 0000000000000009 [ 847.303876][T28007] RBP: 0000000000000001 R08: 0000000033429673 R09: 0000000033429677 [ 847.312111][T28007] R10: 00007ffd689aba90 R11: 0000000000000293 R12: 000000000075c9a0 [ 847.320115][T28007] R13: 000000000075c9a0 R14: 0000000000761468 R15: 000000000075bfd4 [ 847.329660][T28007] Kernel Offset: disabled [ 847.334053][T28007] Rebooting in 86400 seconds..