000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f00000025c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x38, 0x3e9, 0x4, 0x70bd2d, 0x25dfdbfb, {0x14, 0x1, 0x3, 0x0, 0x8, 0x1, 0x6, 0x9, 0x0, 0x3}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x840) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x228, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1c24000}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@multicast2, 0x0, 0x4000, 0x4e24, 0x0, 0xa, 0x0, 0xa0, 0x3b}, {0x9}, {0xc88, 0x200000000, 0xffffffffffffffff, 0x3ff}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x0, 0x3c}, 0x2, @in=@local, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x1, 0xfffffffe, {0xa, 0x4e23, 0xc75, @mcast2, 0x80000001}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="47713136af4c0609fda6979c8ce656cdef31cfc073375989dd9c7028820adcecf0b74cd8d5851f835dc62233f77a5e2a301c9d62ac368308a16888e7b0f0f9ce4225986b7ad82601029a2a9324562e2b3880e53130badf2ae7938d374bad9e1aa1bad7834a8e0aa821ab30b2ad651488c3383f57344206deec09208208226add8ddd6a744ca66d029658cb64a257d4cb", 0x90}, {&(0x7f00000005c0)="4fa46343bfa6d9d6efa97d34cfe1774e2d451142da14fbea5d895a84692e90cbfb31c7aae86fe1dd53c68456b84c950ab51bd2f43dc6894b99729d4c49281bf2b610fadb649c8e5730feba39e0f98e7fec6d79498c1686ef9229", 0x5a}, {&(0x7f0000000640)="397ffe426d7278475462bbd7ef4082728817268626891c83efa6e462694c295f3dd5e7481abb547b39b4d2d3f77e7bc637b7dea923adea11110a077e8c35c54884ef7b14c3b9ce44e9c9c6221886536d7cf537977be12a0802d09b2123e0d9c34c9d71e33bf9cc5ff81b78f028a5d3ae05d1b9a6621e11f95532dcbfb2b8de99977e7460ba92426eed9821ec39c27b8ebc1378b0f856a99423f3a790ab98b9165f9be99330d77a44567ea89433e0de560302ede1703836faae717cb850121929bfcf5b718fea6b764b9e87095a3bb1c3b04e579f68c9a4b3ec3a530fe9c3937bbb3961a1dec78838", 0xe8}], 0x3, &(0x7f00000080c0)=ANY=[@ANYRES16], 0x1010}}, {{&(0x7f0000000780)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)="62c60b72b5a06a3fd71be46a9bed78e99c3fe976abfcb667c919b76c04a38fe02f9a4655967fe80f4d29cc938e6319b3666d1dfa790cdbdf4632d2a0eaeefe4c0c53c4e112fb4c0f8dca23be36", 0x4d}, {&(0x7f0000001940)="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", 0xc00}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1b0}}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x3f, @remote, 0x1, 0x1}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002b80)="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", 0x1000}], 0x1, &(0x7f0000006b80)=ANY=[@ANYBLOB="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"], 0x1490}}, {{&(0x7f0000005080)=@in6={0xa, 0x4e20, 0x9773, @private1={0xfc, 0x1, [], 0x1}, 0x8}, 0x80, &(0x7f0000005280)=[{&(0x7f0000005100)="1233bc3af40968d0e801d95b724303a7c86c329b4be79c19ad34b8bdf40aaeee9a8f872e77d4b17d15351dcab18a2aba4f550ccb68700e5acef48eb47cfaf19841253d08eaffeb", 0x47}, {&(0x7f0000005180)="efe1e1b266d75b910bc333c117d603b71b81eea9fcdf5a5f56c3948bfe166521e1be683cba5f5d8eb8ce2b514b06836db672cfdf007503a2d5aa4a7db3cabd32355083d186dc4ec83f90ae26961416948960123aea24ad6f073455184f900ede541d538971bd358fc5c85c90b265b49dd9ddca9de78a93064d290a335d09e422ce9f", 0x82}, {&(0x7f0000005240)="60065e8cbb71267ed7fb6ca095740de9d61af79d5613afc1ffe1fe92a2b29529fcf635a60d1ce64a5044fe1a40696324e5337fa80196c263ae1343a696", 0x3d}], 0x3, &(0x7f0000003bc0)=ANY=[@ANYRES64], 0x110}}, {{&(0x7f0000005400)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x7, 0x40, "457ddbec9a8d45980335126b97e9179eec63ad716192566949434b8718520f6e4c9cbe118c80bd4f242eb2b6b5d2734b63ba1e23303b24409ab52444fd9946", 0x3f}, 0x80, &(0x7f0000005580)}}], 0x5, 0x2000ff01) socket$inet6(0xa, 0x4, 0x2) 02:17:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5510) 02:17:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a57840", 0x13, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 1979.279909][ T1607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1607 comm=syz-executor.0 [ 1979.296230][ T1631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1631 comm=syz-executor.0 [ 1979.303989][ T1630] overlayfs: filesystem on './file1' not supported as upperdir 02:17:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5525) [ 1979.361471][ T1638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1638 comm=syz-executor.0 [ 1979.389588][ T1638] input: syz0 as /devices/virtual/input/input1012 02:17:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xb7, 0x49, 0x3f, 0x20, 0x13b1, 0x18, 0xf123, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd, 0xd, 0x72, 0x2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c80)={0x14, 0x0, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001240)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001900)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="000ee90000000e70"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x2, 0x8}) [ 1979.444325][ T1638] input: syz0 as /devices/virtual/input/input1017 [ 1979.733438][ T4031] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1979.753432][ T4026] usb 5-1: device not accepting address 121, error -71 [ 1979.760386][ T4026] usb usb5-port1: unable to enumerate USB device [ 1979.983416][ T4031] usb 2-1: Using ep0 maxpacket: 32 02:17:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a57840", 0x13, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045564) 02:17:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x4, 0xaa4) 02:17:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x40203f, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 02:17:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045565) 02:17:32 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0xa82) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366f6f84b00080801000440004000f801002000400003000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1800}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x2000}, {&(0x7f0000010500)="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", 0x120, 0x2800}, {&(0x7f0000010700)="2e202020202020202020201000a0e870325132510000e87032510300000000002e2e2020202020202020201000a0e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000a0e870325132510000e870325104001a040000", 0x80, 0x7000}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xb000}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0xf000}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x17000}], 0x0, &(0x7f0000010f00)) 02:17:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045566) 02:17:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a57840", 0x13, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045567) 02:17:32 executing program 4: r0 = syz_usb_connect$hid(0x3, 0xffffffffffffff2a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x26}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="eb00290000006e5adf49a037458ccb4e561f71a4acf3"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1980.090887][ T1677] input: syz0 as /devices/virtual/input/input1020 [ 1980.273460][ T4031] usb 2-1: New USB device found, idVendor=13b1, idProduct=0018, bcdDevice=f1.23 [ 1980.282501][ T4031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.290995][ T4031] usb 2-1: Product: syz [ 1980.295439][ T4031] usb 2-1: Manufacturer: syz [ 1980.300007][ T4031] usb 2-1: SerialNumber: syz [ 1980.305622][ T4031] usb 2-1: config 0 descriptor?? [ 1980.403367][ T4026] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1980.853428][ T4026] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1980.861554][ T4026] usb 5-1: can't read configurations, error -22 [ 1980.993395][ T4031] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1981.013292][ T4026] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1981.423359][ T4031] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1981.453319][ T4026] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1981.461245][ T4026] usb 5-1: can't read configurations, error -22 [ 1981.468186][ T4026] usb usb5-port1: attempt power cycle [ 1982.183161][ T4026] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1982.353278][ T4031] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1982.363562][ T4031] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1982.375534][ T4031] asix: probe of 2-1:0.0 failed with error -71 [ 1982.382566][ T4031] usb 2-1: USB disconnect, device number 10 [ 1982.433261][ T4026] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1982.441350][ T4026] usb 5-1: can't read configurations, error -22 [ 1982.593121][ T4026] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1982.843157][ T4026] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1982.851372][ T4026] usb 5-1: can't read configurations, error -22 [ 1982.858663][ T4026] usb usb5-port1: unable to enumerate USB device [ 1983.103074][ T1591] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1983.353095][ T1591] usb 2-1: Using ep0 maxpacket: 32 02:17:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045568) 02:17:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0100000000000000e2372fb33d2d0000000000000000000000000000e1ff73000000000000000000000000004880f9559651960f168d6002cc19f0b8fedb466a080ea35e9088a9425dc2a606206e84168481c34189f97363029bd35b144363aa2c4cf6a715648c10154ebc163b4b", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000db000000000000000000400027d4c665b30573c4bbd385f979590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb0704a46e58730000"]) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a57840", 0x13, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x5, 0xaa4) 02:17:35 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000000500000001fcffffffffff17680000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xcc, &(0x7f0000000080)=""/204, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 02:17:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000200)=0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0x800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfc}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x30}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x24000014) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1d6c) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x10}, @empty, @broadcast}, 0xc) 02:17:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045569) 02:17:35 executing program 4: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x13a3, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000080)="a5a600789734396913fcfa126ea1645f29c4645f0400027862079d6205028d1cf6b00a57", 0x24, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRES64=r0]) 02:17:35 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r1, &(0x7f0000004200)="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", 0x3c0000) [ 1983.666821][ T1721] selinux_nlmsg_perm: 3 callbacks suppressed [ 1983.666830][ T1721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1721 comm=syz-executor.0 [ 1983.668019][ T1730] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1983.696075][ T1591] usb 2-1: New USB device found, idVendor=13b1, idProduct=0018, bcdDevice=f1.23 [ 1983.705473][ T1591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 02:17:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a57840", 0x13, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 1983.714692][ T1591] usb 2-1: Product: syz [ 1983.719131][ T1591] usb 2-1: Manufacturer: syz [ 1983.725128][ T1591] usb 2-1: config 0 descriptor?? [ 1983.732381][ T1740] input: syz0 as /devices/virtual/input/input1028 [ 1983.740597][ T1739] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1983.749049][ T1591] usb 2-1: can't set config #0, error -71 02:17:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556a) 02:17:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x7, 0x140, 0xffffffffffffffff, 0x0, [0x31, 0x6e, 0x5f, 0x2e, 0xe0]}, 0x40) [ 1983.763096][ T1591] usb 2-1: USB disconnect, device number 11 [ 1983.775346][ T1730] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1983.790182][ T1739] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 02:17:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a57840", 0x13, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556b) 02:17:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) r7 = accept4$inet(r3, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f00000004c0)=0x10, 0x180800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r8, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1983.806078][ T1721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1721 comm=syz-executor.0 [ 1983.863207][ T1761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1761 comm=syz-executor.0 [ 1983.879532][ T1761] input: syz0 as /devices/virtual/input/input1036 [ 1983.921837][ T1761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1761 comm=syz-executor.0 02:17:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x6, 0xaa4) 02:17:36 executing program 1: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "ace51e1e1665cbe754"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, '/'}, @as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x7f, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0xa4, 0xfffffffffffffffb, 0x5, 0x81}) 02:17:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 02:17:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0xe4}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/136, 0x88}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = fcntl$getown(r1, 0x9) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = fspick(r3, &(0x7f0000000100)='./file0\x00', 0x1) flistxattr(r5, &(0x7f0000000300)=""/182, 0xb6) perf_event_open(&(0x7f000001d000)={0x2, 0xfffffc9f, 0x7e, 0x0, 0x0, 0x0, 0x0, 0xa31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x12, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14) pipe2(&(0x7f00000000c0), 0x4800) 02:17:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a57840", 0x13, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000001c0)=0x4f97, 0x4) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "bb1588907cadaf02b935b1ca017439eb0de3c64989c0e60e1ee9658339128f36e91da274e7d43f062f76a5834db3ad836511b42e63f61e36188868a1a552b3e8cf2b74b9881b59f2b324ca2a663850f8a051a1ea40189429b3ead94e18cbd2c8427e4fdd480e02392badb66bb9b861a0057b65511de6a1506b535ff900f02c194b2c70602f91c48b23cde83c1a5b07cb5f0939a34b98a0a68ccfd7ac3796a490c88179fd2beede60af70b5a1903c8c4b7d33af5f4f1e912a50d49678ccaf8107ca906bbc5acefef98324add07405e9b9ebf67c0e88fbd5fc702d0450edc17d4a2563e9ca9922cdae4a07ef658f6acb58a483153350b14ecda7f7ba5a8cbfaf21"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000225f90f473c029d016ade2372fb3000000000074000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000027d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556e) 02:17:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40049409) 02:17:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 02:17:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40086602) [ 1984.527179][ T1783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1017 sclass=netlink_tcpdiag_socket pid=1783 comm=syz-executor.0 [ 1984.543924][ T1783] input: syz0 as /devices/virtual/input/input1042 [ 1984.588326][ T1783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1017 sclass=netlink_tcpdiag_socket pid=1783 comm=syz-executor.0 02:17:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40087602) [ 1984.793086][ T1591] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1985.202979][ T1591] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1985.212156][ T1591] usb 2-1: config 1 has no interface number 1 [ 1985.218305][ T1591] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1985.231779][ T1591] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 02:17:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x7, 0xaa4) [ 1985.402957][ T1591] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1985.412099][ T1591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.422066][ T1591] usb 2-1: Product: syz [ 1985.426528][ T1591] usb 2-1: Manufacturer: syz [ 1985.431120][ T1591] usb 2-1: SerialNumber: syz [ 1985.752914][ T1591] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1985.760323][ T1591] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 1985.785028][ T1591] usb 2-1: USB disconnect, device number 12 [ 1986.452748][ T1591] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1986.822776][ T1591] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1986.832142][ T1591] usb 2-1: config 1 has no interface number 1 [ 1986.838434][ T1591] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1986.851626][ T1591] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1987.022734][ T1591] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1987.031998][ T1591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.040548][ T1591] usb 2-1: Product: syz [ 1987.045012][ T1591] usb 2-1: Manufacturer: syz [ 1987.049828][ T1591] usb 2-1: SerialNumber: syz 02:17:39 executing program 1: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "ace51e1e1665cbe754"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, '/'}, @as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x7f, 0x0, {0x7}}}}}}}]}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0xa4, 0xfffffffffffffffb, 0x5, 0x81}) 02:17:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x8, 0xaa4) 02:17:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000225f90f473c029d016ade2372fb33d2d0000000000000000000000000000000074000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000027d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98d78410f13ca50c36f0735d2130127469d8f8963b66a9bb30400655e207"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 02:17:39 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="7ea4c3961c1c2366b68e09616cde16b8025ab7d220420021cde87ad18200"], 0x0, 0x0, 0x0, 0x0}, 0x0) 02:17:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4020940d) [ 1987.335254][ T1845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1845 comm=syz-executor.0 [ 1987.355600][ T1845] input: syz0 as /devices/virtual/input/input1054 [ 1987.372890][ T1591] usb 2-1: 2:1 : format type 0 is detected, processed as PCM 02:17:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x405c5503) [ 1987.380536][ T1591] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 1987.405163][ T1591] usb 2-1: USB disconnect, device number 13 [ 1987.418804][ T1845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1845 comm=syz-executor.0 02:17:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x406855c9) 02:17:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000001f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000000cc0)={0x1200, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x11e4, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1}, {}, @device_b, @from_mac=@device_b, @device_b, {0xc}}, {0xb, 0x1, 0x0, 0x0, 0x81}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1}, {0x2}, @device_a, @random="701c1652e737", @random="7e82ecd2094c", {0xa, 0x9}}, {0x1, 0x0, 0x2, 0x1, 0xd5}}}, @a_msdu=[{@device_b, @device_a, 0x1a, "09e19a71f7007e318e2bb45d4cc56972f48a42aca9f7957c7bb9"}, {@device_b, @device_b, 0xa2, "e7554025a24236670c292b309c3f4b617e9d25b4c1ac4564d815963e12ed100d7bb932becf2faf658efff973000230d6db6684dfb4e218d90897a57fc6c3e7a18fc095abff764da940e323e14062a6b5e2ebe609045d15d9b51939083877c73d6f336a81509a71d9a25d83746d40ed72d8f2a71912ac1244fd9d8ff1f4eabe23806b64221360d8c6a18afa6733828d7053b0c253cbc601987bbc15633e73fa3c969e"}, {@broadcast, @broadcast, 0x54, "ded1e50dd9310d5dd5a8401c80c1048408464caf657937635299698e2b35cb16f4c9b7aa192e46680f976022fe39ef288abcb92eb48686a7b70aadc950e64c816083fe24bd373d75021461bb84406ee2875ae32b"}, {@broadcast, @broadcast, 0x4f, "80b3b6586f63a31c44274779d3beb392cc4f7ff6fbddcb5d976e2dacd20ae09213f5f30cb8068c3bf837880dd01592db91b7cec06c57fa46505424f2108d8702fe033bb5d17ff03570e0c1ac940296"}, {@device_b, @broadcast, 0x1000, "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"}]}}]}, 0x1200}}, 0x20040800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "bb1588907cadaf02b935b1ca017439eb0de3c64989c0e60e1ee9658339128f36e91da274e7d43f062f76a5834db3ad836511b42e63f61e36188868a1a552b3e8cf2b74b9881b59f2b324ca2a663850f8a051a1ea40189429b3ead94e18cbd2c8427e4fdd480e02392badb66bb9b861a0057b65511de6a1506b535ff900f02c194b2c70602f91c48b23cde83c1a5b07cb5f0939a34b98a0a68ccfd7ac3796a490c88179fd2beede60af70b5a1903c8c4b7d33af5f4f1e912a50d49678ccaf8107ca906bbc5acefef98324add07405e9b9ebf67c0e88fbd5fc702d0450edc17d4a2563e9ca9922cdae4a07ef658f6acb58a483153350b14ecda7f7ba5a8cbfaf21"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8004552d) [ 1987.435117][ T1870] input: syz0 as /devices/virtual/input/input1059 02:17:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80086601) [ 1987.491611][ T1878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1878 comm=syz-executor.0 [ 1987.505343][ T1878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1878 comm=syz-executor.0 [ 1987.519904][ T1878] input: syz0 as /devices/virtual/input/input1064 [ 1987.582649][ T870] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1987.782576][ T1591] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1987.972639][ T870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1987.983726][ T870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1987.993513][ T870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1988.006728][ T870] usb 5-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 1988.015902][ T870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.024760][ T870] usb 5-1: config 0 descriptor?? [ 1988.172823][ T1591] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1988.182198][ T1591] usb 2-1: config 1 has no interface number 1 [ 1988.188762][ T1591] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1988.201663][ T1591] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1988.372599][ T1591] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1988.381660][ T1591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.390299][ T1591] usb 2-1: Product: syz [ 1988.394768][ T1591] usb 2-1: Manufacturer: syz [ 1988.399357][ T1591] usb 2-1: SerialNumber: syz [ 1988.722588][ T1591] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1988.730002][ T1591] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 1988.764832][ T1591] usb 2-1: USB disconnect, device number 14 [ 1988.772533][ T870] usbhid 5-1:0.0: can't add hid device: -71 [ 1988.778826][ T870] usbhid: probe of 5-1:0.0 failed with error -71 [ 1988.786317][ T870] usb 5-1: USB disconnect, device number 126 02:17:41 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x800c091}, 0x1080) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x28, r8, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xf4, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xf83}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xaf75}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000001400911507100000cace152ec047cf39b0", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300dea823a2ec9e7a2d1ab581b2998797446811e1b3b91f742857ffc5cc588cb24c8885ba47c06714a960b2f3543efa74b1c10b3d7cc99b80736320b85db142ffdbafe58b231d3277644a4c12dac3f74c0edd52d30239446b89a297fc6fe07c99000000000002d658d4773601597593ab549b37f42c0000000000e20c77230dc9249c473dd53674cb23f3a0944a6762c73d16d4afca871e6df93fdc55ad3edcabe6c84ba747d2349f0f6e7642ff8ac31d3e91048e3ea7256987c6e7f9c7c4dbf2982f03cd0d9eddc651af948371f1895017ef33eba6790d574b4de174222892211fd13879934cdb2004f03e3b70c8510124cda8f9514174557236a9f5720e58f9933591b62b6dc2b21945a6576af086f450bf5ac1529b54f2478ea6ff070000e6a81f2f5efad18178fa6e26d514c2fdccb5f051b8d41d9040300d929ff0f79faa6dbb2c008fe19bd0f92e2ada902e12f9b15410f893ed43eb7bc6a8c19fdbd9402fae701cbd77c5b1fc1690390a1fa2ba33e5157ec7057046d69955a27462de7b5481427056caad9755fc68532bc3a2d2b16b0500000037b88b09a34c83889964ba55cd03fc09be77dcd069ac1fb10f6e716e12ad437b87a509344b019593374fa8ed0a2b8496501bb605c522c86b8bbc9d7e4000e95a345afe47bd4f8fdf468e39dc08008b8c69e3f4c0755bd722a28569fe5786634bd0054ac3b8cd8475e7ff775b8d384abd3b7aa71ca96dac7031d3cc815b9269b8db59dd431a8bd9ab00551c0e7a4b1399cbaad479407080446193512cd320712d7b5af1000200000000000022a2cbc83955bd866b1c6c32051a9764ee88352ac145bda1b606c1b1d1f00fa5cb1f155cb252b3db9f43604f851f4423a0fd56993017ecdc7429399ff5194f92877cc33970be7080c88c943f9cf4f3055dbfc18f70f08173d7f7e8a456fbe6ca524a6d559a4fd888b81a8ffacdb3f8977b3a54ce03efa1a0bc1980ddb0a0d4f3c03e5a5f41f06dabc0a77812621076e283b6a28b3c9fdf9e8bc1eaf3c27bf39049555aba62990ac6cdf28a8ca8b0cc247e1349eff50e43a8363ae1195d9993f4e4bcdea8f8edba28ac8088ed6bbaefcfefa4d45d4797e450627ddafbc296ce0f406ab7ae70523423e0673878f609ffae59d0439f49dfb13bfa3db31064da590df87a343de8e3fc44f2ddf119e89caf7111ffaa57c918d7fd92d3176ae4bc2211d8b9d947bad788e85de95bfdfc33a8c6e34f38692065ce798210405440c6af5f377b38214b6ce49132bfba3f7611be6e08feeba24e2ca50d0881d54a25265eb2f54e17eda6deef3baee85e222ec040fd8e1b741717c69aa9fd", @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}]}}}]}, 0x50}}, 0x0) 02:17:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80087601) [ 1989.175289][ T1910] selinux_nlmsg_perm: 2 callbacks suppressed [ 1989.175298][ T1910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=1910 comm=syz-executor.1 [ 1989.339233][ T1914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=1914 comm=syz-executor.1 [ 1989.482408][ T870] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1989.862468][ T870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1989.873663][ T870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1989.884013][ T870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1989.897328][ T870] usb 5-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 1989.906745][ T870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.915732][ T870] usb 5-1: config 0 descriptor?? 02:17:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x9, 0xaa4) 02:17:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 02:17:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:42 executing program 4: r0 = fsopen(&(0x7f0000001480)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) dup2(r2, r0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r3, 0x8929, &(0x7f0000000040)) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2fca7956}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x591845c8}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xae4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1de}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 02:17:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000540)=""/46, 0x2e}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f00000008c0)=""/32, 0x20}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {0x0}], 0x2}}], 0x4, 0x40000002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000007c0)="30eb2297b18c0a2ada6f46f8341ce63ccdab668e820dabde", 0x41395563) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x4, 0x3, 0x104000000}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600c53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 02:17:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 02:17:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) [ 1990.336377][ T1930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1930 comm=syz-executor.0 [ 1990.363331][ T1930] input: syz0 as /devices/virtual/input/input1074 [ 1990.372335][ T870] usbhid 5-1:0.0: can't add hid device: -71 [ 1990.379197][ T870] usbhid: probe of 5-1:0.0 failed with error -71 [ 1990.393703][ T1932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=1932 comm=syz-executor.4 [ 1990.398029][ T870] usb 5-1: USB disconnect, device number 127 [ 1990.419766][ T1944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=1944 comm=syz-executor.4 02:17:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0189436) 02:17:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x30}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040050) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x2fc, 0x0, 0xe26f8035d18aba31, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7, 0x80}}}}, [@NL80211_ATTR_TESTDATA={0xc8, 0x45, "a1244df7c16c11310a888c6bc08b647949f27a5e1e213ad1eb05df44cc9c1ddbaa42a18d115ef0bd71d73e3bdd4c58c56a2eec2abd722d963d03de2392cc98114850a161bd6b946f3eb4b9bcade9a319a191eaa3450e0bc72545cf3c6f000000000000de08f33eb03c71df26390a495f70bc07aea59e44cd94c8be70b295d40be81c37783276e3c259ce9e78a45b5b30bdf13714b728861e88ff46b994dd1227dfc0ea7a419f8dc662ee76d5664a47c1868de6a035dceb1cc8c1756cddf4000000000000"}, @NL80211_ATTR_TESTDATA={0xa4, 0x45, "bb387f7c2b224e68e14f9f478d33cf340e5fbd87485f8bd5c40d99c0a751e40fb9b37f9df1fd5c1ddc1c26796aeb8279142be6f3afb210a9de262a7b2c820a29c27d9d14dc3b53e920bae3dd308cd20f39efdeebed13ca1c2e7d202a60e186b022ef8ac7480d42154bbfaae4291851553714e6358a141612389a589081972e612856a4d56f5af89249107b2fb762c42f160e11eec5322221413ca6d5f9c473e2"}, @NL80211_ATTR_TESTDATA={0x81, 0x45, "02787f09db242ec4526e2e44c17df2af0819aa1dfbe531b17116c8ced692865725e0d35270d2da89a44ffff113425d6dd4cd18d2726d19b663d251beeb650d26152c6c612fe5526437bce10491e1d8638db8be12473cc6732fe4c5a79566df7ee4e65db073aa38d3273713eee9203efa2bd5ce041755c611af31260f8b"}, @NL80211_ATTR_TESTDATA={0x66, 0x45, "e517a89c6a54b8e8f343da767cd97aabf8f3b460950322e15328acb6b08b6c4aad140675b396b9ea059785b8a378b79433126118b0ffef15e0db52f74dd40022c62e3909421e385b672b71bfdf5501267ee6d7f222cfedcf2935332f6b5495e8269a"}, @NL80211_ATTR_TESTDATA={0x79, 0x45, "a2e2bf99117f46890b7c8c60c2eb519ad79976680e249c7f5f5ee0a6e5c95327abbe0e3ebfc0a4059168cce19f9b91aa0b911a435ddef443678f287c6fb550395b9b6ea4cfa8c64191bd0542183d5d0cacdbb75bff9532b0121ce72e03fbbbfa7f07d6a384a46fff6a2d92e9335df102f7a13ad9d4"}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x200440c5}, 0x4004010) 02:17:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000cc0)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e22, @multicast2}, 0xc, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)='veth1_macvtap\x00', 0xff, 0x3ff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000000000000225f90f073c029d016b4b2dd803323bfb60000000000002217a42cfdff66cbb421bb4b842209e7a63dbbb2143f5fad38aa58c3300d116e43e1ae251c69e3a4960b27def571c1c6f5ebf7bdb8c5486e0429927d4bbe0aca8c943480000492e501daac3065e1f98782952f9dbd1932518a571e10aba4243f1761208ee5745a00fc501b9632e44b9d81836c126333a6796ca4c9143bae6d669ea2c2c15c740c88f4a9d9dd8681281e033e465cd80c87a07f09aea61746f9aaacdcce7cdb5a51118680215652d86e3fb9e0d25aea7756774d", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000027d4c665d385f9793463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x661c}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1990.434887][ T1948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1948 comm=syz-executor.0 02:17:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc020660b) [ 1990.526588][ T1956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1956 comm=syz-executor.0 [ 1990.567586][ T1956] input: syz0 as /devices/virtual/input/input1082 [ 1990.644438][ T1956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1956 comm=syz-executor.0 02:17:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0xa, 0xaa4) 02:17:43 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000015800"/20, @ANYRES32=0x0, @ANYBLOB="800207000000000008001b"], 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0xf}, 0x40) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8003, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) 02:17:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 02:17:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000010c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x47, 0x12, 0x5a, 0x2, 0x3, 0x7, 0xc7, 0x38, 0x244, 0x5, 0x1, 0x20, 0x1, 0x538, 0x1ff, 0x3}, [{0x1, 0x200, 0x9, 0x401, 0xfffffc01, 0x4, 0xb07, 0x7}, {0x6474e556, 0x80000001, 0x80, 0x1f, 0x81, 0x8b5, 0x401, 0x401}], "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", [[], []]}, 0x1278) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x400, 0x70bd2c, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x0) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000085f90f473c029d016ade2372fb33d900000000000000000000000000000000074000000", @ANYRES32=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000300)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:43 executing program 4: ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000200)={{}, "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"}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5406, 0x20719ffe) 02:17:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000080)=0xfff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x20000, 0x8a) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r4, 0x0, r2}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:43 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1d6c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000180)={0x110d, 0x0, 0x693, 0x5}, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd700fffdbdf253e0000000c0099040100070012000000"], 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb51e92dcb385aed5d00001a000000380000000400000002000000f0ba95c0633cf9000000000000000003000000000100"/63], 0x0, 0x4c}, 0x20) tkill(0x0, 0x28) [ 1991.163599][ T1981] device vti0 left promiscuous mode 02:17:43 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x800, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x300, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xe24}], 0x1}, 0x1000000}], 0x92, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000140)) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup3(r3, r2, 0x0) munlockall() recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/207, 0xcf}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/108, 0x6c}], 0x9, &(0x7f0000000800)=""/29, 0x1d}, 0xc4}], 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000180)=""/78, &(0x7f0000000200)=0x4e) 02:17:43 executing program 1: perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000240)={0x3c, r3, 0x105, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) [ 1991.200642][ T1979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1979 comm=syz-executor.0 [ 1991.227210][ T1996] input: syz0 as /devices/virtual/input/input1089 [ 1991.237333][ T1979] input: syz0 as /devices/virtual/input/input1087 02:17:43 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x94, &(0x7f0000000000)=ANY=[@ANYBLOB="12011000020000202505a1a44000010203010902820002010960000904000001020d00000724060001eb17042400ff020d24020100000000070000ee0006241a2000090c2407c0810010000200ff01052415020007240a511f090407240a000902eb05241508000905810310007fff040904010000020d00000904010102020d"], 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1d6c) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200)='freezer.state\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0x104}, {r3, 0x2000}, {r4, 0x40}, {r6, 0x65}, {r0, 0xc5e3}], 0x5, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0x4]}, 0x8) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x1d6c) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/128, 0x200000, 0x1000, 0x400, 0x1}, 0x20) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0x1f, 0x13, "ccc98502f8a9a9dc"}) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x2, 0x4, 0x3}}, 0x14) 02:17:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000225f90f473c029d016ad8cbdaae98cfb6ee2372fb33d2d000000000000f4ff0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000027d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) finit_module(r4, &(0x7f0000000300)='/dev/uinput\x00', 0x2) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1991.290732][ T2007] input: syz0 as /devices/virtual/input/input1090 [ 1991.321022][ T1979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=1979 comm=syz-executor.0 [ 1991.368313][ T2021] input: syz0 as /devices/virtual/input/input1092 [ 1991.582146][ T870] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1991.822112][ T870] usb 2-1: Using ep0 maxpacket: 32 [ 1991.942188][ T870] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1991.951024][ T870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.961473][ T870] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1991.974605][ T870] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 02:17:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0xb, 0xaa4) 02:17:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x118, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x118}, 0x1, 0x0, 0x0, 0xa9}, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='westwood\x00', 0x9) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000225f90f473c029d016ade2372fb33d2d000000000000000000000000000000003b0f0000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000027d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:43 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007999d02ff278039a60e2a885a593f9d4827ea4d48e0c452b77d89caec41e7867e971e2000000002613f462acb4244feb138d7505bcafe8b5cc53a631019fefb3e90c2427629135932f9b2f770a21583691283d466b9e480b78939eaefeedc64e968fc06e26729b1045b7d4ef774679f9f294788a20c11390fad2a0702ddc96f825b27643124b69"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x2, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0xa, 0x3, 0x0, 0x40}, @exit], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, r4, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x10, r2}, 0x78) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb1ce}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc2cb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xce}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc040}, 0x20008000) 02:17:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x1, 0x1f, 0x5}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x1000) r5 = accept$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="4c00000009000000027f9620000400077f0500000700000007000000e868178a0000000003000000a000000005000000f7ffffff0000000006000000000000003a18452a00000000ff030000000000000000000026ea6898e006c4b5382b0e71b8fd022f907fb1acc0fa818d106e70c0ac7ba8a57308a8734afc6481feff1c8057358304a8542687c2f1cafa62723e6e9faebfca0d7df77a9a370a8087"]}) lseek(r4, 0x0, 0x2) r6 = open(&(0x7f0000000240)='./bus\x00', 0x80, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r6, 0xc0389423, &(0x7f00000001c0)={0x35da, 0x38, [0x6, 0xfffffffeffffffff, 0x8, 0x200], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendfile(r4, r6, 0x0, 0x8400fffffffa) creat(&(0x7f00000000c0)='./bus\x00', 0x0) [ 1991.987817][ T870] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1992.029337][ T2041] input: syz0 as /devices/virtual/input/input1095 [ 1992.040894][ T2040] input: syz0 as /devices/virtual/input/input1094 02:17:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300), 0x10) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1992.085005][ T2056] input: syz0 as /devices/virtual/input/input1096 02:17:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b940", 0xa, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 1992.162389][ T870] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1992.193359][ T2063] input: syz0 as /devices/virtual/input/input1098 02:17:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xffffffff, 0x0, 0x3, 0x4, 0x0, 0x2000000}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000180)={0x6, 0x80000000, 0x8}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x12a, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='vxcan1\x00', 0x8000, 0x40, 0x7}) [ 1992.225182][ T870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.247710][ T870] usb 2-1: Product: syz [ 1992.254971][ T870] usb 2-1: Manufacturer: syz [ 1992.267325][ T870] usb 2-1: SerialNumber: syz [ 1992.282064][ T2075] input: syz0 as /devices/virtual/input/input1099 02:17:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1992.335182][ T2063] input: syz0 as /devices/virtual/input/input1100 [ 1992.351466][ T2082] input: syz0 as /devices/virtual/input/input1101 [ 1992.421231][ T2086] input: syz0 as /devices/virtual/input/input1102 [ 1992.562476][ T870] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 1992.569115][ T870] cdc_ncm 2-1:1.0: bind() failure [ 1992.602155][ T870] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1992.609423][ T870] usb 2-1: USB disconnect, device number 15 [ 1993.301973][ T870] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1993.551920][ T870] usb 2-1: Using ep0 maxpacket: 32 [ 1993.671991][ T870] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1993.680747][ T870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.691418][ T870] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1993.704604][ T870] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1993.717803][ T870] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1993.881939][ T870] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1993.891002][ T870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.899510][ T870] usb 2-1: Product: syz [ 1993.903941][ T870] usb 2-1: Manufacturer: syz [ 1993.908509][ T870] usb 2-1: SerialNumber: syz 02:17:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000300)={0x7, 0x7ff, 0x400, 0x3, 0x4, 0x2}) 02:17:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x4, 0xffffffff, 0x204, 0x0, 0x0, 0xff}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0xc, 0xaa4) 02:17:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}}, 0xe8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0x6, 0x2, {0x6, @usage=0x1, 0x0, 0x800, 0x3, 0x4, 0x3, 0x400, 0x400, @struct={0x7, 0x800}, 0x71b, 0x5, [0x3f, 0x3ff, 0x7, 0x0, 0x8, 0x3ff]}, {0x3426, @usage=0x2, 0x0, 0xac, 0x4, 0xfffffffffffeffff, 0x167b0a4f, 0x100000001, 0x20, @usage=0x400, 0x8911, 0x9, [0x6, 0x5, 0x43e, 0x6d23f98f, 0xfffffffffffffffc, 0xe791]}, {0x3, @struct={0xfff, 0x5}, 0x0, 0xf25, 0x7, 0x6, 0x7fff, 0x1f, 0x10, @usage=0x6, 0x6, 0x8, [0x873, 0x3, 0x5, 0x4, 0x80000000, 0x7]}, {0x80000000, 0x8000, 0x8000}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000840)={r3, 0x20, 0x1, [0x8, 0x2, 0x7fffffff, 0xa4ee, 0x1000], [0x0, 0x200, 0x81, 0x7ff, 0x6, 0x3, 0x145a, 0x2, 0x9, 0x800, 0x1000, 0x6, 0x6, 0x8, 0x10001, 0x1f, 0xfffffffffffffe00, 0x8001, 0x7f, 0x400, 0x6, 0x9, 0x0, 0x80000001, 0x101, 0x9, 0x1, 0x9, 0x0, 0x21, 0x8, 0x7, 0x68a, 0x1, 0x7fffffff, 0x8000, 0x7, 0xffffffffffff0000, 0x1, 0x3, 0x8, 0x3, 0x3, 0x3, 0x7, 0x9, 0x4, 0x1800000000, 0x179, 0x4, 0x10000, 0x8000, 0x5, 0x942b, 0xdcd, 0x100000000, 0xfffffffffffffff9, 0x0, 0x80, 0x0, 0x5, 0x0, 0x6, 0x5, 0x401, 0xfffffffffffffffe, 0xd9, 0x400, 0x73d3, 0x3a, 0x838, 0x1, 0x2, 0x80000000, 0x9, 0x1, 0x7f, 0x80, 0x3, 0x100000000, 0xfffffffffffffff7, 0x5, 0x3f, 0x40, 0xfffffffffffffff7, 0x81, 0x25, 0x5, 0x4, 0x0, 0x400, 0x8001, 0x1000, 0x6, 0x9, 0x9, 0x0, 0x5, 0x2912, 0x1, 0x7, 0x9, 0x0, 0x8001, 0xf7, 0x1, 0x3, 0x1, 0x0, 0x80000001, 0x9, 0x81, 0x7, 0x5, 0x2, 0xc0e0, 0x6d2d, 0x6, 0x100000000, 0x3, 0x72bc805]}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 02:17:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b940", 0xa, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:46 executing program 1: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x91, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\xafs\xcb7\xf9\xae\x82\xe4\xc0\xa5veMin\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4l\x94\xa1\xdb\x8d9\x87\xdf #W\x10\x17\xae\xa3iTY\xaf\x96\xee\xfb\x0ef\x00\xb6\xeeU\x95\x8d\xde\x9dS\xbb\x92\x1f\x1dS\xb5\xc2Z\xf6\v>t\xc9H1\x8f4\xefl\x10\x0e\x92\xad@m\xd3\x84\xd5\xe8Oo\xc7\x81X\x1f}\xc9h\xd4\xb1a\xef.bK\x0e\x9a\xfe\x99\t\xfa\xbd8\x06+\x02\xa1\xec09\xfb\x92Y\xad\xed\xf5\x88x\x95\xf3HU\x84r\xa7\x16\xbf\xe0\xb5\xdd+*\xcb$f]\xb3\xdc .\a\xad)\xf90\x1b\x1b9\xae\b\xa1 \xe7\xd8\x9exS\xe6\xbf\xe3P\xe5\x7f\xc1\x93\x8f\x04\x81q\t5[\xca\xfc\x94\x82\xde\x00\xc1:\xbd{98\x9e\xaa\xc3&\x8a\xbe\xf2r)\x01\x1a#bQY\xe1\xfb\x88V\xad\xca\xbeS\xcc\xaa\x01\x00\x00\x00\x00\x00\x00\x00.\n\xbb\xd33.=\xdd\xaa\xa8\xa0\fV\xb8\x15\xa68\x9e\x1f\xbdW\r\x1cV\x14\x12\xe0\x86mN.\xfe\x8e\xd4\xd3xM\xe1P\xceH:\xdc\x06\xfckg\x95\x9dO\v\xc7\a\x92\n$\x82\x00\x00\x00\x00\x14\x90\xc7\x14\xd9l\x02\xad\b\xb6\x030xffffffffffffffff}) r2 = dup(r1) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1994.255010][ T870] usb 2-1: USB disconnect, device number 16 [ 1994.267302][ T2130] input: syz0 as /devices/virtual/input/input1104 [ 1994.297141][ T2132] input: syz0 as /devices/virtual/input/input1107 [ 1994.327256][ T2117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2117 comm=syz-executor.0 [ 1994.345108][ T2135] input: syz0 as /devices/virtual/input/input1108 02:17:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r3, 0x8929, &(0x7f0000000040)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sendmsg$AUDIT_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd29, 0x25dfdbfe, {0x6, 0x1, 0x1, r4, 0x0, 0x40000002, 0x7f, 0x6, 0x0, 0x6}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x21081}, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "bb1588907cadaf02b935b1ca017439eb0de3c64989c0e60e1ee9658339128f36e91da274e7d43f062f76a5834db3ad836511b42e63f61e36188868a1a552b3e8cf2b74b9881b59f2b324ca2a663850f8a051a1ea40189429b3ead94e18cbd2c8427e4fdd480e02392badb66bb9b861a0057b65511de6a1506b535ff900f02c194b2c70602f91c48b23cde83c1a5b07cb5f0939a34b98a0a68ccfd7ac3796a490c88179fd2beede60af70b5a1903c8c4b7d33af5f4f1e912a50d49678ccaf8107ca906bbc5acefef98324add07405e9b9ebf67c0e88fbd5fc702d0450edc17d4a2563e9ca9922cdae4a07ef658f6acb58a483153350b14ecda7f7ba5a8cbfaf21"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000225f90f473c029d016ade2372fb33d2d0000000000000000000000000000000074000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000027d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9b7cd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9ba30400655e20704a46e58"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b940", 0xa, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 1994.448565][ T2146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2146 comm=syz-executor.0 [ 1994.466303][ T2144] input: syz0 as /devices/virtual/input/input1110 [ 1994.474343][ T2146] input: syz0 as /devices/virtual/input/input1111 02:17:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1994.570339][ T2164] input: syz0 as /devices/virtual/input/input1113 02:17:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x2, 0x7, 0x3ff, 0xfffffffffffffff9, 0x3, 0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1994.609804][ T2146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2146 comm=syz-executor.0 [ 1994.695782][ T2174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2174 comm=syz-executor.0 [ 1994.710291][ T2174] input: syz0 as /devices/virtual/input/input1116 [ 1994.759848][ T2174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2174 comm=syz-executor.0 02:17:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0xd, 0xaa4) 02:17:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) syz_usb_connect(0x0, 0x39, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10001, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000040)="030000001332ff5b3cdd000000230000000000007d0089339b789ce5d75c1299a20ba7ac23c5ab658e94f08b5c53f3adfc4d8f13531601ca7917a56741f7cbefeaa66e25204095e8fc740c029964426237bbeb01546ea4b4ba0726253bafac0a55619ab23030269f8ffb0a8eee0a3f730101b9904486644e0a5d37b53b2b1992befbb2bfe346b84911ffac15c520b1fc1d5d968bb3aae80f1d3dbccbfaeaa023db8fd6623ddb6e4fc03c538f4b5791d2", 0xb0, 0x800}, {&(0x7f0000000340)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000380)={[{@usrquota='usrquota'}]}) 02:17:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "1dbc50dd261c94c9", "7b6efcd1455ceccd2c2092c8c6a83baa", "ffb1cb1f", "9e2e6fa3f68ead34"}, 0x28) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000dc0)=ANY=[@ANYBLOB="010000000982ff9d118ea4cbc800000a00222fb33d2d000000000000020000000000000000007400"/53, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000faff00000000000000000000002000000000000027d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8849d0ee2eddc7f9bd97fac64eea718bd3b2e4e804fa7e50a2ce6844ca769a055800ee185baf0d54dddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873bb1b89e434ee82a300c6668854c829500f39d1cce39a62925e5dad9e"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:46 executing program 4: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x10}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x240000c5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004004}, 0x81) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x30}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28895}, 0x90) write$ppp(0xffffffffffffffff, &(0x7f0000000400)="b7b03dc3d729863693166b37440d082e282d11b680dfb50fc63c373378cefef8aa2f89e57b1e87d8b8c67fd359f5230fb0c852b00ee65fc08c0cf30b3b327010e342a284ffad7f1595289f5da9e529ade53ed0ba23cba33d86129fea9b892c50d59b0acd6f8e0bb871bb2630325bd448ede45f4b79342838bdd2c192af1b50acf842b052eed3c97d1a02ef09c81b42e879c5f46c5a523e8ef947da71c39ebc08cfedb2336e82f7848bdccbdc5c24c6f9025346dc5efcf6ad72c15662438d79363ed607e5", 0xc4) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x68}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x16c4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) add_key(&(0x7f0000000700)='cifs.spnego\x00', &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780)="8f2e56c979c6077c18639b502f32146bdc3402dbe7e76aebc056c21455566c40b2af31eba1c60788138043cadbf4ea20807d006c3b0e1eb8c4358c529b1947169bc0c3a29923e715e3fc79634209f1773ab6af3f4d138573", 0x58, 0xfffffffffffffffd) getpriority(0x1, 0xffffffffffffffff) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000800)=0x2) ptrace(0x4207, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000840)={0x0, 0x1, 0x0, [0x1000, 0x8, 0x8000, 0x0, 0xffffffffffffffff], [0x8, 0x4, 0x0, 0xfffffffffffffffa, 0xb0, 0x6, 0x8, 0x80000000, 0xfff, 0x2, 0xff, 0xffffffff, 0x203, 0x1000, 0x7, 0x7000000000, 0x1, 0x9, 0x7, 0x8001, 0x7f, 0x1, 0x81, 0x7, 0x7, 0x1000, 0x54, 0x3, 0x794, 0x3, 0x93, 0x6, 0x2, 0x3, 0x1f, 0x101, 0xffffffffffffffff, 0x8000800000000000, 0x6, 0x19, 0x10001, 0x1, 0x0, 0x6db, 0x3ff, 0x9, 0x5, 0x1, 0x1f, 0x200, 0x2000000000, 0x6, 0xf6, 0xedb5, 0x8, 0x1a, 0x7, 0x9, 0x800, 0x0, 0xb06, 0x80000001, 0x1, 0x7, 0x9, 0xdf4, 0xaf, 0x7648000000000, 0x1, 0x4, 0x7, 0x3, 0x4, 0x396, 0x4, 0xff, 0xffffffff, 0x2, 0x2, 0x100, 0x5edebe80, 0x2, 0x4, 0x399a, 0x4, 0x10000, 0x7, 0x100000000, 0x6, 0xffffffff80000000, 0x6, 0xffffffff, 0xcc, 0x81, 0x8, 0x6, 0x4, 0x9, 0x100000001, 0x6, 0xffff, 0x3ff, 0x404, 0x5723, 0x6, 0x6, 0xbe4, 0x9, 0x9, 0x1, 0x1a, 0x8, 0x1f, 0xd65, 0x4, 0x3, 0x3, 0x0, 0x6, 0x1, 0x80]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000c80)={r1, 0x8001, 0x2, 0x1}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000001080)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001100)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x164, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60100}, 0x8000) getpeername(0xffffffffffffffff, &(0x7f0000001440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000014c0)=0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000001500)=[@window={0x3, 0x3, 0x1}, @window={0x3, 0x0, 0x68}, @mss={0x2, 0xe6}, @sack_perm, @mss={0x2, 0x7fffffff}, @window={0x3, 0x1ff, 0xa158}], 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000001540)='TIPCv2\x00') 02:17:46 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000009, 0x4010, r0, 0x0) preadv2(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000140)=""/182, 0xb6}], 0x2, 0x0, 0x0, 0x0) 02:17:47 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000102505f9a44000010203010902"], &(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x6, &(0x7f00000001c0)=@string={0x6, 0x3, "47b77038"}}]}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) 02:17:47 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b7493f20b113180023f10102030109021200010000000009040000000e0d7202"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x98, {0x98, 0x7, "30b96e6c2529bde00c41c33523c686587e5501114a582b5d2783427670db2bcce1ef91ae77116555777ee2c615657647db95ba932dce10ebed0120144a210a211a9750f67f1d6b696d4df0fa7474451fad34fc844738391618f770b5eb7b7ad7c6ef9c2555fcb1a2200e8f1eaba2b9955a1ccc4710a5d7854273f0a7f0e2d5a0e03616822af3d518d92e103efebfdc3caccc47dd7096"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x40, 0x15, 0xab, "af6b1d41f7282e58f56722655034e9cab7939226f50fe5f9d4258348c7fb488536d1af5aa9a0d02e210b60c4a284e8975c1b84d397392fdba4ade85ca9aa676f44679854c0125a9805567741f121a8dddabf908f2ebacb78bb31c74514e238da3ef105e77f37e17ad808590018e0040471bf1a6e3ff20d7a080fbe171ff5b6841df49873fa653525de02f2c7dcd671667c9af19691e786d28598761602be9ef0d3922b61826b8a70bbf90b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xac}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000600)={0x14, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000302"]}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x5460) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) [ 1995.056805][ T2192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2192 comm=syz-executor.0 [ 1995.076611][ T2192] input: syz0 as /devices/virtual/input/input1119 02:17:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x72) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000000000225f90f473c029d01671e7ade2372fb33d2d000000000000000000000000000000007400", @ANYRES32=r3, @ANYBLOB="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"]) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1995.168343][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2218 comm=syz-executor.0 02:17:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 1995.207169][ T2223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2223 comm=syz-executor.0 [ 1995.223434][ T2223] input: syz0 as /devices/virtual/input/input1121 02:17:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "bb1588907cadaf02b935b1ca017439eb0de3c64989c0e60e1ee9658339128f36e91da274e7d43f062f76a5834db3ad836511b42e63f61e36188868a1a552b3e8cf2b74b9881b59f2b324ca2a663850f8a051a1ea40189429b3ead94e18cbd2c8427e4fdd480e02392badb66bb9b861a0057b65511de6a1506b535ff900f02c194b2c70602f91c48b23cde83c1a5b07cb5f0939a34b98a0a68ccfd7ac3796a490c88179fd2beede60af70b5a1903c8c4b7d33af5f4f1e912a50d49678ccaf8107ca906bbc5acefef98324add07405e9b9ebf67c0e88fbd5fc702d0450edc17d4a2563e9ca9922cdae4a07ef658f6acb58a483153350b14ecda7f7ba5a8cbfaf21"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0100000000000000225f90f473c029d016ade2372fb33d2d0000000000000000000000000000000074000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000027d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735df2c9562c1415943cd8b72130127469d8f8963b66a9bb30400655e20704a46e5873e7b9eb3e2049100bb6ac2cd575"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x7f, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1995.274079][ T2223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2223 comm=syz-executor.0 [ 1995.301777][ T1591] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1995.317466][ T2237] input: syz0 as /devices/virtual/input/input1123 [ 1995.370280][ T2241] input: syz0 as /devices/virtual/input/input1124 [ 1995.382044][ T870] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1995.392167][ T4031] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1995.601684][ T1591] usb 4-1: device descriptor read/64, error 18 [ 1995.621723][ T870] usb 2-1: Using ep0 maxpacket: 16 [ 1995.651748][ T4031] usb 5-1: Using ep0 maxpacket: 32 [ 1995.791736][ T870] usb 2-1: unable to get BOS descriptor or descriptor too short 02:17:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0xe, 0xaa4) [ 1995.881756][ T870] usb 2-1: config 0 has no interfaces? [ 1995.941741][ T4031] usb 5-1: New USB device found, idVendor=13b1, idProduct=0018, bcdDevice=f1.23 [ 1995.950821][ T4031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.959387][ T4031] usb 5-1: Product: syz [ 1995.963938][ T4031] usb 5-1: Manufacturer: syz [ 1995.968511][ T4031] usb 5-1: SerialNumber: syz [ 1995.974129][ T4031] usb 5-1: config 0 descriptor?? [ 1996.001657][ T1591] usb 4-1: device descriptor read/64, error 18 [ 1996.041699][ T870] usb 2-1: New USB device found, idVendor=0525, idProduct=a4f9, bcdDevice= 0.40 [ 1996.050774][ T870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.059421][ T870] usb 2-1: Product: syz [ 1996.063864][ T870] usb 2-1: Manufacturer: 띇㡰 [ 1996.068691][ T870] usb 2-1: SerialNumber: syz [ 1996.074279][ T870] usb 2-1: config 0 descriptor?? [ 1996.281632][ T1591] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1996.313104][ T870] usb 2-1: USB disconnect, device number 17 [ 1996.571583][ T1591] usb 4-1: device descriptor read/64, error 18 [ 1996.851678][ T4031] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1996.861669][ T4031] asix: probe of 5-1:0.0 failed with error -32 [ 1996.961575][ T1591] usb 4-1: device descriptor read/64, error 18 [ 1997.081543][ T4026] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1997.089198][ T1591] usb usb4-port1: attempt power cycle [ 1997.321529][ T4026] usb 2-1: Using ep0 maxpacket: 16 [ 1997.481518][ T4026] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1997.571523][ T4026] usb 2-1: config 0 has no interfaces? [ 1997.731692][ T4026] usb 2-1: New USB device found, idVendor=0525, idProduct=a4f9, bcdDevice= 0.40 [ 1997.740712][ T4026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.748703][ T4026] usb 2-1: Product: syz [ 1997.753019][ T4026] usb 2-1: Manufacturer: 띇㡰 [ 1997.757845][ T4026] usb 2-1: SerialNumber: syz [ 1997.764686][ T4026] usb 2-1: config 0 descriptor?? [ 1997.801481][ T1591] usb 4-1: new high-speed USB device number 66 using dummy_hcd 02:17:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce, 0x8}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0xf, 0xaa4) 02:17:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,urer_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x40305828, &(0x7f0000000d00)={0x0, 0x0, "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", "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"}) [ 1997.981490][ T1591] usb 4-1: device descriptor read/8, error -61 [ 1998.002439][ T4026] usb 2-1: USB disconnect, device number 18 02:17:50 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00'}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3, 0x92, 0x101, 0x8}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)=0x1d6c) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x2, 0x13, 0x9, 0x800, 0x29, 0x1, &(0x7f0000000040)="b1c30774a33bdad15d5c9c3b266a7aee0f5cfdf4d33569f4707f6e69d61fed9aafdd425e4af0a318c4"}) sendmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x80, 0x0}}], 0x2, 0x0) [ 1998.036158][ T2274] input: syz0 as /devices/virtual/input/input1125 [ 1998.050572][ T2277] fuse: Unknown parameter 'urer_id' [ 1998.065904][ T2283] fuse: Unknown parameter 'urer_id' [ 1998.066478][ T2275] input: syz0 as /devices/virtual/input/input1126 02:17:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000100)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) prctl$PR_SET_FP_MODE(0x2d, 0x0) 02:17:50 executing program 1: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x129) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') preadv(r2, &(0x7f0000001300), 0x0, 0xfff, 0x0) 02:17:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/503, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000027d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:50 executing program 4: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='\xfe:\x8d\xd0', 0x0) r1 = dup2(r0, 0xffffffffffffffff) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x24010, r1, 0x180000000) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00ef2bfd7e26953cdc6039e3c48a0962b64614b357594790653c651827b926c525743e954a458d27c1030006"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1998.162503][ T2300] input: syz0 as /devices/virtual/input/input1129 [ 1998.187510][ T4031] usb 5-1: USB disconnect, device number 2 [ 1998.191486][ T1591] usb 4-1: device descriptor read/8, error -71 02:17:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) r3 = syz_open_pts(r2, 0x80000) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 02:17:50 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x40010, 0x8, 0x0, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000440)) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0xa0, 0x3b, 0x0, 0xee00}, {0x9, 0x4}, {0xc88, 0x200000000, 0x3}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 02:17:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 1998.229345][ T2314] input: syz0 as /devices/virtual/input/input1130 [ 1998.262680][ T2329] input: syz0 as /devices/virtual/input/input1131 02:17:50 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x80) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) 02:17:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 1998.332553][ T2341] input: syz0 as /devices/virtual/input/input1133 [ 1998.441525][ T2347] input: syz0 as /devices/virtual/input/input1134 02:17:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x5, 0xe0000, 0xf62, 0x3, 0x8, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x48, r3, 0x221, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1f, 0x33, @probe_request={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, @void, @void, @val={0x3, 0x1}, @void, @void}}]}, 0x48}}, 0x0) 02:17:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e0, 0x210, 0x100, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "186e3f569c70208aeeffd8d4f4643be99887d2d17905abc96efe7df0f024"}}, {{@arp={@local, @rand_addr=0x64010100, 0xffffff00, 0x0, 0xa, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x6, 0x5, 0x7f, 0x4, 0x9, 0x1, 'batadv_slave_0\x00', 'veth0\x00', {}, {0xff}, 0x0, 0x104}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="ed309761bbad", @mac=@broadcast, @loopback, @rand_addr=0x64010102, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x101, 0x6}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x430) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1000000010000}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040800) r5 = accept4$inet(r3, 0x0, &(0x7f00000007c0), 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000800)={0x7, 0x7, 0x3}, &(0x7f0000000840)=0x28) r6 = getgid() socket$unix(0x1, 0x2, 0x0) getgroups(0x9, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xee01]) setgroups(0x4, &(0x7f00000001c0)=[0xee00, 0xffffffffffffffff, r6, r7]) 02:17:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "bb1588907cadaf02b935b1ca017439eb0de3c64989c0e60e1ee9658339128f36e91da274e7d43f062f76a5834db3ad836511b42e63f61e36188868a1a552b3e8cf2b74b9881b59f2b324ca2a663850f8a051a1ea40189429b3ead94e18cbd2c8427e4fdd480e02392badb66bb9b861a0057b65511de6a1506b535ff900f02c194b2c70602f91c48b23cde83c1a5b07cb5f0939a34b98a0a68ccfd7ac3796a490c88179fd2beede60af70b5a1903c8c4b7d33af5f4f1e912a50d49678ccaf8107ca906bbc5acefef98324add07405e9b9ebf67c0e88fbd5fc702d0450edc17d4a2563e9ca9922cdae4a07ef658f6acb58a483153350b14ecda7f7ba5a8cbfaf21"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) openat$cgroup(r6, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x10, 0xaa4) 02:17:50 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='cpuset\x00') ioctl$CHAR_RAW_BSZSET(r1, 0x40081271, &(0x7f0000000280)=0x2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x404, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x404c0d7) fgetxattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080)=""/117, 0x75) socket$inet_udplite(0x2, 0x2, 0x11) 02:17:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 1998.902312][ T2362] input: syz0 as /devices/virtual/input/input1135 [ 1998.929767][ T2366] input: syz0 as /devices/virtual/input/input1136 [ 1998.957441][ T2362] input: syz0 as /devices/virtual/input/input1137 02:17:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x3}]}, 0xfffffffffffffdd4}}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x1005, 0x2}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/104, 0x68, 0x1, 0x40}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x1000}], 0x58, 0x0, &(0x7f0000000340)="0b35474d5381c09d051707639eb1f9f1d734ec9409205f5985d1b85fd7ffa2ee2d0ce581f1d75360c5d4e2beb95141950053c94e43a1d616cf0ef7459bda3d1d6ac2f6229e9742d5ed1aaae02d3be4227bc0760ef35e1347"}) 02:17:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x10001, 0x800, 0x1}) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000140)=""/56, 0x38}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd25, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000000000225f90f473c029d016ade2372fb33d2d0000000000000000000000000000000074000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000800000000000000000000000000000000027d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261dfd9dbc31fbb554f19af2cae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db80835da9f5a98a50c36f0735d21400655e20704a46e587300"/159]) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') dup2(r1, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc080, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x5d, &(0x7f0000000180)=0x1, 0x4) chdir(&(0x7f0000000140)='./bus\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r0, &(0x7f0000000340)=ANY=[], 0x4b) sendfile(r0, r0, &(0x7f0000000200), 0xa198) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 02:17:51 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x2a4) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200000, 0x0) recvfrom(r3, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000001c0)=@hci={0x1f, 0x2, 0x1}, 0x80) splice(r1, 0x0, r0, 0x0, 0x8e, 0x0) 02:17:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x2e, {0x0, 0x2, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1999.074042][ T2399] input: syz0 as /devices/virtual/input/input1139 [ 1999.096892][ T2400] input: syz0 as /devices/virtual/input/input1140 02:17:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000017401f7000ca98040002008004000000040010"], 0x18}}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)='{', 0x1}], 0x1) [ 1999.163564][ T2422] input: syz0 as /devices/virtual/input/input1143 [ 1999.274364][ T2435] overlayfs: './file0' not a directory 02:17:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x11, 0xaa4) 02:17:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x3, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7ff, 0x1, 0x4800}}}}, 0x30}}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 02:17:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000280)={{0x0, 0x0, @identifier="e9651048b41f58e629be8d71811cf91f"}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="3d637d938a646306aa892dbdea9e320c5a8ff8a126059d060e7fcad6cadc16c016273c45085346238db0e9ad22e5f6f35f0ad83680781f69c25ecbb31d6bebc599cf189ceae47a95504c16e387dcea7fa8efb4793ddf585a8200d49554b8bab786eb2b0714282731305905a567a39adaa431bafed8d82272983ed5ff674af90cbe6d0f7e039fb56ab811ba5ee0e914bffbf78c1601189ebf7565a638b435c4c17a535624e71271f153e613d7d2", 0xad) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40000, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000001c0)=0x1, 0x4) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000200)) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc080, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x5d, &(0x7f0000000180)=0x1, 0x4) chdir(&(0x7f0000000140)='./bus\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r0, &(0x7f0000000340)=ANY=[], 0x4b) sendfile(r0, r0, &(0x7f0000000200), 0xa198) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 02:17:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="04000010d9431c000000009d7300008500"/32], &(0x7f0000000280)='GPL\x00', 0x5, 0xf0, &(0x7f00000002c0)=""/240, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 1999.750117][ T2445] input: syz0 as /devices/virtual/input/input1145 [ 1999.783417][ T2449] selinux_nlmsg_perm: 10 callbacks suppressed 02:17:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000480)="868be03ea526ffbf3558a3eaaf0197dceb765ba181a6fe2481d0ac6666b04ab37fc0bd5fa20cc79f7d1e3b4e409b5e22d42fbdaf77c49b613b1629b8cccd8d8c0f133730d3b395c162bb8f6b90c635fb0481f818da1c381465d9b60a175e7d28602fa87b1e73e68a0de8b3814a494024874352acfb5b270e9fcedcf409d36cef4f712608bb4a650aabdb41064ec3e83cba748a07ec17bb26ada48797bdf92cc0ecb552ebf1a3315f5cd1eef3f268d5932cb9290c5fed598bf46408d87f495051b3b5e2ea0c5ff99555ae69a7b6c1d6ecde70405736d9b59554188fbe", 0xdc}], 0x1, 0xa) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x62cb, 0x7}, 0x0, 0x0, r3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x30, 0x0, 0x8000, 0x3, 0x2000000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0xc5) inotify_init1(0x800) dup(0xffffffffffffffff) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xffffffff) 02:17:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1999.783427][ T2449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2449 comm=syz-executor.0 [ 1999.836213][ T2449] input: syz0 as /devices/virtual/input/input1146 [ 1999.849552][ T2470] input: syz0 as /devices/virtual/input/input1148 [ 1999.896081][ T2449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2449 comm=syz-executor.0 02:17:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x1d6c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000280)) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000e2023d33e8e5fcd8d4f67d78ee", @ANYRES16=r4, @ANYBLOB="000427bd7000fddbdf251c0000000c009900f8ffffff3f000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24048844) lstat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000400)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x3, 0x1, 0x20, 0x400}, {0x0, 0x8, 0x81, 0x8000}]}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000080)=0x1) r5 = dup(r2) getpgrp(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000380)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 1999.983191][ T2486] input: syz0 as /devices/virtual/input/input1151 [ 2000.006473][ T2488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2488 comm=syz-executor.0 [ 2000.025295][ T2488] input: syz0 as /devices/virtual/input/input1152 [ 2000.082731][ T2497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2497 comm=syz-executor.0 02:17:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) r7 = fsmount(r5, 0x1, 0x4) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f0000000300)={0x1, 0x0, 0x3}) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "bb1588907cadaf02b935b1ca017439eb0de3c64989c0e60e1ee9658339128f36e91da274e7d43f062f76a5834db3ad836511b42e63f61e36188868a1a552b3e8cf2b74b9881b59f2b324ca2a663850f8a051a1ea40189429b3ead94e18cbd2c8427e4fdd480e02392badb66bb9b861a0057b65511de6a1506b535ff900f02c194b2c70602f91c48b23cde83c1a5b07cb5f0939a34b98a0a68ccfd7ac3796a490c88179fd2beede60af70b5a1903c8c4b7d33af5f4f1e912a50d49678ccaf8107ca906bbc5acefef98324add07405e9b9ebf67c0e88fbd5fc702d0450edc17d4a2563e9ca9922cdae4a07ef658f6acb58a483153350b14ecda7f7ba5a8cbfaf21"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r8, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) 02:17:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x12, 0xaa4) 02:17:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, r1, 0x0, 0x0) keyctl$clear(0x7, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0xff01, 0x1000, 0x8, 0xc56b, 0x2, 0x7ff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x6, 0x2, 0x1f, 0x9}, {0x0, 0x3, 0x1}, {0xffdf, 0x80, 0xef, 0x9}, {0xffc1, 0xcd, 0x71, 0x2}, {0xfff, 0x40, 0x2, 0xfffffff7}, {0x2c0, 0x7f, 0x40, 0x8}]}) dup(r4) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2000.578656][ T2510] input: syz0 as /devices/virtual/input/input1156 [ 2000.598883][ T2509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2509 comm=syz-executor.0 02:17:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "bb1588907cadaf02b935b1ca017439eb0de3c64989c0e60e1ee9658339128f36e91da274e7d43f062f76a5834db3ad836511b42e63f61e36188868a1a552b3e8cf2b74b9881b59f2b324ca2a663850f8a051a1ea40189429b3ead94e18cbd2c8427e4fdd480e02392badb66bb9b861a0057b65511de6a1506b535ff900f02c194b2c70602f91c48b23cde83c1a5b07cb5f0939a34b98a0a68ccfd7ac3796a490c88179fd2beede60af70b5a1903c8c4b7d33af5f4f1e912a50d49678ccaf8107ca906bbc5acefef98324add07405e9b9ebf67c0e88fbd5fc702d0450edc17d4a2563e9ca9922cdae4a07ef658f6acb58a483153350b14ecda7f7ba5a8cbfaf21"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2000.650339][ T2523] input: syz0 as /devices/virtual/input/input1158 [ 2000.657009][ T2509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2509 comm=syz-executor.0 02:17:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, r1, 0x0, 0x0) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="568f44836607200699aedc833e3796597c2b57a1614c4182a90dd4a1f130ef757afa9054ee5adb5e5966619dfa5f08bbe174073d47529884057ca642a022d255ac1066b3f4f7b2b17763c8b99a0fbec164127fe15bbd82233e05d25c544ae81ff8ca05b699304f0a93576fc1e34b7edc0970da3e2e30ee48345d0197a4b1b6d1a888aa0a24240356fc80b359b820003a6b6df6a62758b38f4bca8b6a5ad085b1b845fd1035b18d8ee75d120f080c67ed40d661fee50dc3a8d8dd629eb0701f7a", 0xc0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2000.741393][ T2534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2534 comm=syz-executor.0 [ 2000.755935][ T2538] input: syz0 as /devices/virtual/input/input1160 [ 2000.772117][ T2534] input: syz0 as /devices/virtual/input/input1159 [ 2000.898872][ T2534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2534 comm=syz-executor.0 [ 2002.290978][ T6568] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 02:17:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000000980)=""/134, 0x86}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3}, 0x2}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000800)=""/158, 0x9e}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f00000004c0)=""/113, 0x71}}], 0x5, 0x22, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x800, 0xfffffffffffffffd}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x100000000}, 0x0) lseek(0xffffffffffffffff, 0x9, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 02:17:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, r1, 0x0, 0x0) keyctl$clear(0x7, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0xff01, 0x1000, 0x8, 0xc56b, 0x2, 0x7ff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x6, 0x2, 0x1f, 0x9}, {0x0, 0x3, 0x1}, {0xffdf, 0x80, 0xef, 0x9}, {0xffc1, 0xcd, 0x71, 0x2}, {0xfff, 0x40, 0x2, 0xfffffff7}, {0x2c0, 0x7f, 0x40, 0x8}]}) dup(r4) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2006000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0xffffffff}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x11) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x13, 0xaa4) [ 2002.826512][ T2558] input: syz0 as /devices/virtual/input/input1163 [ 2002.839530][ T2563] input: syz0 as /devices/virtual/input/input1165 [ 2002.860998][ T2560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2560 comm=syz-executor.0 [ 2002.877537][ T2560] input: syz0 as /devices/virtual/input/input1164 [ 2002.892368][ T2571] input: syz0 as /devices/virtual/input/input1166 02:17:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x800000003) set_tid_address(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x876, 0x9, 0x1000, 0x5}, 'syz1\x00', 0x24}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:54 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x28) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) chdir(&(0x7f0000000340)='./bus\x00') setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xe398f29}, 0x8) rmdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000380)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) [ 2002.976940][ T2578] input: syz0 as /devices/virtual/input/input1167 02:17:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:55 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x28) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) chdir(&(0x7f0000000340)='./bus\x00') setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xe398f29}, 0x8) rmdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000380)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 02:17:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x1d6c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x3, 0x0, 0xce}}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) clone(0x40000, &(0x7f0000000380)="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", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000001380)="f9675b91c9b09d16677cee38c8845a24ff98f47f83336f659de75937dda301552f95f019967a43784d65cc2b8d8ac6d1526361c89a0a63122c155840670a1cdbc5d656f87bd31e0a9466c4ed0b87876f19c506be6faf6c44f0b3e08ff346ab40cde199987fca010cb87a2edd0ad610099f9807b65db309a28d644dc466a2f571b20c834b5fd4d95998db284ae49512bfa0c47634b3e161c11f2c3759420eb638018ed6e1569e9bea820edb8b92a77e3e1ab2d1cda9998f4dca7d180914d69bd51da1de4a718afa4bd3dc8bbde8a8800b26772b95cbe571fef4f985") ioctl$UI_DEV_CREATE(r0, 0x5501) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000180)="0a11161081f48fc5acbc473f00b63faa712e23551797e1e67c13acf9a037bc10b887") 02:17:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000300), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, 0x0, 0xb, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x10) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2003.092187][ T2560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=2560 comm=syz-executor.0 [ 2003.121563][ T2594] overlayfs: filesystem on './file1' not supported as upperdir [ 2003.193817][ T2602] input: syz0 as /devices/virtual/input/input1171 [ 2003.210639][ T2601] input: syz0 as /devices/virtual/input/input1170 [ 2003.261693][ T2602] input: syz0 as /devices/virtual/input/input1172 02:17:55 executing program 4: r0 = syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@inline_xattr='inline_xattr'}, {@six_active_logs='active_logs=6'}, {@heap='heap'}, {@prjjquota={'prjjquota', 0x3d, 'Q/^**/,^\xc1,:'}}, {@background_gc_sync='background_gc=sync'}, {@noheap='noheap'}, {@fastboot='fastboot'}, {@noflush_merge='noflush_merge'}, {@flush_merge='flush_merge'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'i+::-,$'}}, {@dont_appraise='dont_appraise'}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@euid_lt={'euid<', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$'}}]}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000540)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0xc6725fd8a9bd3a27, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x54}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6ee}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x37e}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000081}, 0x2000c805) futimesat(r0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x77359400}}) 02:17:55 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x28) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) chdir(&(0x7f0000000340)='./bus\x00') setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xe398f29}, 0x8) rmdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000380)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 02:17:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x100000, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000d80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="580000000002010400000000000000000a000000080009400028000280060003400002000006000340000300000c000280050001002f0000000600034000040000090006007070747000000000"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x81) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x800000080000001, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x14, 0xaa4) 02:17:55 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xf], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1d6c) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 02:17:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf250400000008000100013f000008000100000000000800020002000000cfaf3197542161b6526f800000005e16a1b4115527f61d9390bbebe3ffceed55429ccc89fe0398944696a86a15b1032061d57820ce8127d03f0b5294e92b0002000095f3ddec56901588062fe6356d32d16d6a8fa272c726993684ad9b61576e75723fabdf01c178b99ae1d1c1043f6fa35f5015cfa1bc734f0d36e98ee932ee"], 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001700010100000000000000000400000073001680ca27c0003503fc22eb892b72ceacb846bcf078de3e9b660d89ddf7399f649f15ca2c39a2ba758ec66588ffe78b3589e042985a2468034f13731c16cb471105f6e4675ce060f0236732e05c5f54e54ef2becfd09e2c22202e2ee16770da37016b00"/136], 0x88}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000500)=0x1fe00) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x4) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3502020}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf4, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2109}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c91e840}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ad6b0f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a9a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe88b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x675a963e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54fb44a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3018}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb96}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e0921c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2426d544}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x432da43f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6794b9f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d2c2d76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56a8afe4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8d106a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b83}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x537397c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40884}, 0x24004000) [ 2003.714041][ T2632] input: syz0 as /devices/virtual/input/input1175 [ 2003.729637][ T2633] input: syz0 as /devices/virtual/input/input1174 02:17:55 executing program 4: r0 = epoll_create1(0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000140)={'nr0\x00'}) syz_io_uring_setup(0x76d1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 02:17:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x4}) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:modem_device_t:s0\x00', 0x24, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2003.770650][ T2647] input: syz0 as /devices/virtual/input/input1176 02:17:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xcb}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x8929, &(0x7f0000000040)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8c90}, 0x4044814) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x6c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x100}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x81}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROBES={0x5, 0x15, 0x80}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x6c}}, 0xd4) keyctl$assume_authority(0x10, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r5, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = fsmount(r3, 0x1, 0x0) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000380)={0x6, "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"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @identifier="225f90f473c029d016ade2372fb33d2d"}, 0x74, 0x0, [], "27d4c665d385f97914ef590fef310073cd3463e3a278b379f7163c80f7475315a261ae1239a8847f9bd97fac64eea718bd3b2e4e804fa7e50a2ce684ddab09bc5d4ca96c46cab05b80a2ad2942e4531db88835da9f5a98a50c36f0735d2130127469d8f8963b66a9bb30400655e20704a46e5873"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={r7, 0x9, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:55 executing program 1: getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:modules_object_t:s0\x00', 0x26, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x19, 0x2, @thr={&(0x7f0000000200)="a20db1ff8aef52c35044088ceb60a2ab688b65c6e296a7e09d0ddec717e33eb572b2706655dd937063e012f263f56804c66196214e626746c53820efc565fbea1dcf88cdd5f6c977a2d480cc5c8704098ee8df3702c10de2be9cbbb172eb8f05b960cbfd24e5882e0b5e7afd28f7701d05805d6a796cf9d6f5b687f1b3a86b850742f74b6353a2f55da9f8a63c217988f626baa8d07ce612d335b06e847eb06a43172ba861aaf8", &(0x7f0000000680)="11359a1563a5ec935e6edd255d1f5e7bea0c963c0d7774d8526469fcd116a93753e886cf880ba30a33058772daaf42254ac69648f9439fa5575f8b1b3796094b8b50b5f77ba98804f50b22bd9e16222436d26ca7c7a28a8024a95ea1610aee4dd65f882dabb5fa35073712ec6fc91394fc235d8d1469febf44a03d0d4a138d964ac96983"}}, &(0x7f0000000300)=0x0) timer_getoverrun(r3) connect(0xffffffffffffffff, &(0x7f0000000340)=@in6={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, [], 0x6}, 0x9}, 0x80) clone(0x40000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x290, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb0900000}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "d8e2dfcb862cd433918ac7a6ea4e354f85d36bbdeca93bff93078d9a776432caea"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "8cafc4c077cc17e1b3658761be9a96bd3e9e9494ebf6a1a906032e"}}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @loopback, 0x9f7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10000, @mcast1}}}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000840}, 0x40408c4) 02:17:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2003.863918][ T22] audit: type=1400 audit(3201128275.806:78): avc: denied { relabelto } for pid=2670 comm="syz-executor.1" name="NETLINK" dev="sockfs" ino=238538 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:modules_object_t:s0 tclass=netlink_generic_socket permissive=1 [ 2003.904208][ T2674] input: syz0 as /devices/virtual/input/input1181 02:17:55 executing program 1: ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000000)=""/54) 02:17:55 executing program 4: io_destroy(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x96, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x9) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000000)) 02:17:55 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x40004) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38}, 0x0) pipe(&(0x7f0000000140)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) clone(0x40000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2003.911370][ T2676] input: syz0 as /devices/virtual/input/input1180 02:17:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2003.977881][ T2689] input: syz0 as /devices/virtual/input/input1182 02:17:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x15, 0xaa4) 02:17:56 executing program 0: unshare(0x4040000) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = gettid() r3 = getpid() sched_setparam(0xffffffffffffffff, &(0x7f00000003c0)=0xff1e) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) clone3(&(0x7f0000000340)={0x100400000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x3d}, &(0x7f0000000100)=""/206, 0xce, &(0x7f0000000200)=""/208, &(0x7f0000000300)=[r0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, r1, r2, 0x0, r3, 0x0], 0xa}, 0x58) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x8000, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, 0x0) 02:17:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x5, &(0x7f0000001580)=ANY=[@ANYBLOB="18d86da98198240300000000000000000800000000000000010000009500eb7900000002000000950000000000000062a9b835bdaadf90db94dd70990a1e524d23ad51c0c8bbb60367bf0ec9eb04c9070309a9b4bcf6b4748a8114475cb3abbb2aa4a80ddb2b01d7"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5, [], 0x0, 0x17, r3, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0xfffffffe, 0xc, 0xa5c6, 0x5}, 0x10, 0xc615, r3}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x71, 0xb9, &(0x7f0000000380)="9e4a7ffd6dbf90051294df85f1af0faaa1eec21c68c68c7edfbf7e931bc1227eab6a1d24bf20e0761246bd1bd25080524712b780a93226cc732c6255d12aca66246e5b2a8e72710bb918f3d6b3c3e3ba213cf9d1de95d3c2e33902211e78d09a9f641451d2e108a48fe05b1968f7b568de", &(0x7f0000000400)=""/185, 0x8, 0x0, 0x1000, 0x94, &(0x7f00000004c0)="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", &(0x7f00000014c0)="2155c72497626344dd10e31b0c75229192a091ed5a99d3baf13f01b38a74ec79f3ed77897d8ee54d7e6bfbc02c0d64e4ed45c5500a6e489f365496015dfc6ca5566c8eed73bc47c7d1dda0887d67c1cdbbab44f42c76a2510255f9cf0ab3b79516dbe0744345eec4846113ebf7fba96c3453a024b349298728003e21986fd4b2feb68c4644ea02202ce78b7c89e641481635a605"}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000140)={0x1, {0x8, 0xffffff80, 0x1, 0xff, 0x6, 0x3}}) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x408}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x9b}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af30100040000000000000000000000010000000300000000000000000000000000000077020000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002b", 0x81, 0x22100}], 0x0, &(0x7f0000000080)=ANY=[]) splice(r3, &(0x7f0000000080)=0x1, r0, &(0x7f00000000c0)=0x62, 0x5b, 0x5) 02:17:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0x4018480c, &(0x7f0000000040)) 02:17:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:56 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_setup(0x7a81, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x7, 0x0, {0x0, 0x0, r0}}, 0x800) [ 2004.525853][ T2712] input: syz0 as /devices/virtual/input/input1184 02:17:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2004.605676][ T2732] input: syz0 as /devices/virtual/input/input1186 02:17:56 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffff530}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f00000000c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x1, 0x7800, 0xfffff6e4, 0x4, {{0x5, 0x4, 0x0, 0xb, 0x14, 0x68, 0x0, 0xa9, 0x4, 0x0, @rand_addr=0x64010100, @remote}}}}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x84, r7, 0x800, 0x70bd2a, 0x35dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4698}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x200}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c891}, 0xc000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40020000", @ANYRES16=r7, @ANYBLOB="040025bd7000fcdbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000c008f0004000000000000000c00900000000080000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0000000000000000000c0090000400000000000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000c008f0008000000000000000c009000060000000000000008000100706300303030303a30303a31302e300000000008008e00030000000c008f0001000080000000000c00900000000000000000000e000100a23bddc9a07bb37758b79ee417eb2f6e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0046800000000000000c009000475d0000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f00ff7f0000000000000c0090000100000000000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000c008f0020000000000000000c00900080030000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f00bb000000000000000c0090000200000000000000080001007063690011000200303030303a30303a31302e300000000008008e00030000000c008f0000000000000000000c0090000700000000000000"], 0x240}, 0x1, 0x0, 0x0, 0xc881}, 0x20000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd7000fbdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000700000000000000810000000600110000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x404c014) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffe98) 02:17:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0xfffffffc, 0x1004, 0xfffffffa, 0xffff26e6, 0x0, 0x8000000}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x60c1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r3, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0xf, 0x14, 0x122, &(0x7f0000000380)="8fd4e2bdb0de9f4f01d25a3604ed3aca2bb216c02f6b2e237bb096d8bfecaf69498058a6d406ef595116e526c388b9cc2ec11b9cbffcee6feb1d16530d293b71ea3003c0fb60c7d785483f067e97b50f0b66e6083881b35d138c8d3f2511555320fa8e9ec21c20306bec9c5f9da4f2b6247737861eccbd7ccc736e55f2164d517b6e8434254755b4a8d4105a4cc5ace34edd2ee14a1296a57e075092dad87f5adf1daf297753f3d759a42116ea09fd46764ea6d1d1ca2af665b27f467a60a57709418e15a0ecad8d4713563d3dcff4a0777bc8e1e00f05558c5f338f8d90468d560e2df73afc211eef90b8543213139261d92631413202e9aca0906a5e5137fe039a107db8bb87c8e84a40cbf544fdcae074216128ac9fcb5d66b7477cca3e443873524d15c56d8c1fe856ec444ed9222591482983758f6cc113e3a1d2077ce542d1121ef1b8cbf823a3b32d2eee9d7eb6d8f588220f4bbed32fb574591fbc685834ee0e0876a24bcde83f8cf6b158993d231aba854e98a916ad34b29544aa1003f6c704c277a52a2e4d0ca68b16f80bd38098d14ecba9fe6cde92bb39dda141c1be7738c159614f52cfc7194e90dce619eee79a2e405af6e10318ab98fe5059f9210ad0757ad80522668aedf9cc8f2391fd5279ef5e0baf01cfb212e25c945cea2abe7c9ed7c3a463c7e9602e18971658d940d4f1a909542c601ff0ad357f3607db12e806a8143d984dce8b2a26a5790a52581011f2ae8914e9945feb40cb5c0daf73d06875663b311ddc95f8116992d657c2cebc819926af52c5a2db3f4d4f0479c2971060ac0d6b98d1a3eb7571433bce4bcbf1302c28bffbab80a17c402d529996a667c25f4d912d66b96294e9e71a6ff51d7a379a1efc63c1fe79a51aa21996c9eec174a7eabffcd3f73a4f10d9d11f928700b0e7904844a119d0c687e23cd741933215a22f47ace41053eeedaca7a7c7afb974b775dce00fec2ba3e4fde1a78ca9b74e71c6e27d63b6508bb574d130a7299c33f7a47990bc7c03461d0a92163178c04413b384112afed78f40e239180b088e347d42abb45ac339ae7277340703b727e48062f94d7609faaa7cf585adade4b3309e79f0189349eccf9eafba9968f9fdbe7ff59c6a26d22fdfe042d7d59154e06ecbf29b65ad6a263f9ec0a0034efccadda089b767a7f8b5eed1af292bab03c9124959aefc032ff5227474dd4b4c048779f81472ffc7a0c49e4720a174fabf52068ebcb34875e283a0d8225b6cbc0ae3e7c3b9065250054c53c7403362bf4d6350e169fda39da6feb73453aae33d843fcba80b33fb71d0076e453ebb316064a37ed3755efc213e2f0f5645e196b5cf265cc0845e1b6c059e833d2120fb6212f750f887731630f8fafa9bb86b993569a0415e25f286374893fb52f18b2ae87f446a43809216cd63dc78d001"}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2004.701718][ T2739] input: syz0 as /devices/virtual/input/input1188 [ 2004.810688][ T1591] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2005.190738][ T1591] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2005.201671][ T1591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2005.212780][ T1591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2005.222572][ T1591] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2005.235572][ T1591] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2005.244631][ T1591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.253453][ T1591] usb 5-1: config 0 descriptor?? 02:17:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x16, 0xaa4) 02:17:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000000)={[{@fat=@dmask={'dmask'}}]}) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x81, 0x4600) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0) 02:17:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000280)={'raw\x00', 0x2, [{}, {}]}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000fcdbdf250100000000000000024100000010001369623a848ece01d55fe8b6429e4a65727370616e300000"], 0x2c}, 0x1, 0x0, 0x0, 0x44890}, 0x801) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2005.362361][ T2757] input: syz0 as /devices/virtual/input/input1190 [ 2005.731414][ T1591] appleir 0003:05AC:8243.00C2: unknown main item tag 0x0 [ 2005.738620][ T1591] appleir 0003:05AC:8243.00C2: No inputs registered, leaving [ 2005.751414][ T1591] appleir 0003:05AC:8243.00C2: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.4-1/input0 [ 2006.001102][ T1591] usb 5-1: USB disconnect, device number 3 [ 2006.780469][ T4031] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2007.140529][ T4031] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2007.151360][ T4031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2007.162839][ T4031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2007.172920][ T4031] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2007.186356][ T4031] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2007.195782][ T4031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.204715][ T4031] usb 5-1: config 0 descriptor?? 02:17:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000340)={@mcast2, 0x39}) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/98, 0x62}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x1a008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf2508000000080002000500000008000700ffffffff08000700e000000114000600fe8000000000000000000000000000aa0c000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0xaa5f259fb2357b32) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$update(0x2, 0x0, &(0x7f00000003c0)="8a3444dd0681016da2cdc2f9675c09860334e7e7ce725551ea83c657c12f9da8011c9c1309cd3e1f22296bbab4b93c63f85cdff2bead452a6aebbffd25ba452a808ffeb3d5b6876666c111c6ada56f17", 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:17:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x5, 0x1, 0x200) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0xf, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4040840) getegid() sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) 02:17:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:17:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fstat(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r7, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000023c0)={0x670, 0x0, 0x0, [{{0x5, 0x0, 0xb0, 0x5, 0xc60, 0x7fffffff, {0x2, 0x7, 0x3, 0xff, 0x180000, 0x0, 0x8, 0x3, 0x5, 0xa000, 0x77b, 0x0, 0x0, 0x85, 0x7}}, {0x0, 0x4, 0xc, 0x5, '/dev/uinput\x00'}}, {{0x3, 0x2, 0x1, 0xbc0a, 0x602a1605, 0x1, {0x2, 0x4, 0x4, 0x6, 0xa3b1, 0x1f, 0x10000000, 0x80000000, 0x3, 0x8000, 0x69, 0xee00, 0xee00, 0x1000003f, 0x8}}, {0x2, 0x100000000, 0x0, 0xb537}}, {{0x1, 0x3, 0x0, 0x8, 0x5, 0x432, {0x0, 0x8, 0x6, 0x80000000, 0x9, 0x4, 0x8, 0x2, 0xfb, 0x8000, 0xffffff7f, 0x0, 0xffffffffffffffff, 0x7ff, 0x400}}, {0x0, 0x6, 0xc, 0x5, '/dev/uinput\x00'}}, {{0x4, 0x0, 0x6, 0x400000000, 0xa70, 0x800000, {0x2, 0xfffffffffffffd4c, 0x1f8, 0x1, 0x6, 0x1, 0x9, 0x2, 0x2, 0x4000, 0x3, 0x0, 0xffffffffffffffff, 0x5, 0x800}}, {0x4, 0x3ff, 0xc, 0x34c, '/dev/uinput\x00'}}, {{0x1, 0x1, 0x9, 0x3, 0xff, 0x1, {0x5, 0x7, 0x5, 0xfb0a, 0x10001, 0x8, 0x1, 0x3, 0x4, 0x6000, 0x6, r1, 0xee01, 0x2, 0x9}}, {0x1, 0x200022, 0xc, 0x6, '/dev/uinput\x00'}}, {{0x1, 0x0, 0x4, 0xff, 0xfffffffe, 0x1c, {0x6, 0x0, 0x6, 0x2, 0x2, 0xb, 0xa54, 0xfffffffd, 0x3, 0x8000, 0x8001, r3, 0xffffffffffffffff, 0x6b29, 0x81}}, {0x3, 0x80, 0x5, 0x80, 'syz0\x00'}}, {{0x2, 0x1, 0x79, 0x5, 0x80000000, 0x58e, {0x5, 0x9, 0x6, 0x3, 0x7, 0xfffffffffffeffff, 0x575f3ab0, 0x400, 0x5, 0xa000, 0x8, 0xee01, 0xee00, 0x8, 0x1}}, {0x4, 0x100000001, 0x1, 0x1e81b358, '^'}}, {{0x2, 0x0, 0x5, 0x2, 0x7, 0x400, {0x6, 0x4, 0x8, 0x1, 0x1, 0x3, 0x400, 0x4, 0x3ff, 0x2000, 0x10000, 0xee00, r5, 0x20, 0x7f}}, {0x5, 0xf5, 0xc, 0x3d, '/dev/uinput\x00'}}, {{0x6, 0x2, 0x5, 0x7fffffff, 0x3, 0x7fff, {0x6, 0x5, 0xe7c, 0x100, 0x2, 0x6, 0xff, 0x9, 0x7, 0x6ddb6d7c675bbf4f, 0xff, 0x0, 0xee01, 0xffff, 0x8}}, {0x1, 0x8de6, 0x5, 0xf82, 'syz0\x00'}}, {{0x4, 0x3, 0x0, 0x6, 0x3f, 0x4, {0x6, 0x5, 0x509b, 0x0, 0x5, 0x1, 0x2, 0x8, 0x7ff, 0x6000, 0x400, 0xee01, r7, 0x1, 0x7fff}}, {0x2, 0x1, 0x2, 0x6, '\\}'}}]}, 0x670) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x17, 0xaa4) [ 2007.501088][ T4031] appleir 0003:05AC:8243.00C3: unknown main item tag 0x0 [ 2007.508293][ T4031] appleir 0003:05AC:8243.00C3: No inputs registered, leaving [ 2007.518886][ T4031] appleir 0003:05AC:8243.00C3: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.4-1/input0 [ 2007.537769][ T4031] usb 5-1: USB disconnect, device number 4 [ 2007.566364][ T2797] input: syz0 as /devices/virtual/input/input1192 [ 2007.581526][ T2796] selinux_nlmsg_perm: 6 callbacks suppressed [ 2007.581536][ T2796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=2796 comm=syz-executor.0 02:17:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x5, 0x1, 0x200) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0xf, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4040840) getegid() sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) [ 2007.606883][ T2805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=2805 comm=syz-executor.0 02:17:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x1d6c) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x275a, 0x0) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f0000000180)='./bus\x00', 0x8, 0x4, &(0x7f0000000480)=[{&(0x7f00000001c0)="2c31f05dae3fbc9099e9585fc56bb284627b15a8e42dd3da31fb962c8a4c89cc4b8284aa2951d7799d521d2965475ecc745c39264c3eb9f0b0bbba282a3cf2fdc84ffa69a6017c004efc58a96f7abd95a603aa50c228195ff0cd828c93c8def52a5d044b9c1956419c", 0x69, 0x10001}, {&(0x7f0000000240)="47604b6c8db0dc4219beef68c96dc885ca9cfed89943827a965c3e024264d11dbd733efc19c9f93098dae982182a57576ed06d85a264247c275e3024a10e6da614f5205676cec2dd71e45e573b36d2b4f7549f11204c559107efaa85f482ecb4a3c70b5bfbb1f654b22b3c670b34cb5ce9ad4cc4916757dafd9ce460569a7896f4664a1145746d677507aaeb", 0x8c, 0xdfe8}, {&(0x7f0000000300)="d1405d7c70f963c1979bc37405d86326d0a5c8b108c1a0424c4ff7e326537a4b09c4334c2e48fe9ad5fc4036507eb2eb4007e2aebfb56becf3af4ac6", 0x3c, 0x8}, {&(0x7f00000003c0)="a21665b26892e8f1ed9993f618f24bfe9d0851b3aac7155d88cd30802ab1ec387efea9c53765b122349bf9b8e567f577b8332a2ec67f6ff2cbda910c4fc20507af6e8da189dce54aa2877a75e0fbe42a70de9034eaffe27a2bafd29d5206029f165f84c252e42b04981548b87dc0f807b6dcc6868bae3e56dbae7af97f8ae742d07409cad735942203955cef3d32fcb43a", 0x91, 0x8}], 0x0, &(0x7f0000000500)={[{@inline_data='inline_data'}, {@six_active_logs='active_logs=6'}, {@flush_merge='flush_merge'}, {@disable_ext_identify='disable_ext_identify'}], [{@seclabel='seclabel'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/null\x00'}}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80042, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r2) ftruncate(r2, 0x40) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) [ 2007.641126][ T2812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=2812 comm=syz-executor.0 02:17:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 02:17:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000340)={@mcast2, 0x39}) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/98, 0x62}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x1a008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf2508000000080002000500000008000700ffffffff08000700e000000114000600fe8000000000000000000000000000aa0c000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0xaa5f259fb2357b32) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$update(0x2, 0x0, &(0x7f00000003c0)="8a3444dd0681016da2cdc2f9675c09860334e7e7ce725551ea83c657c12f9da8011c9c1309cd3e1f22296bbab4b93c63f85cdff2bead452a6aebbffd25ba452a808ffeb3d5b6876666c111c6ada56f17", 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 2007.778025][ T2824] input: syz0 as /devices/virtual/input/input1194 02:17:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1c020000, 0x0, &(0x7f0000000200), 0x202400, &(0x7f00000000c0)={[{@data_journal='data=journal'}]}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0x0, 0x2, 0x11, 0x19, "f083468b4c1e88c87139a453a42d733637944fa5a2450fc36ad4929568f554ae1f562fc81def56e5cf8cb6f969e6ce7812d20f8ac3685f573b9848d7aa99e1d2", "93fb9dd8de6ad48e3bb67c26e98c81d0b1247b7b06177df041d81169a6f43789f6858b30b527d14e746889d41737c727c16238706e6dedbe160e3cbb19bf76ed", "69d3c7bb7e6de4debe6abbd23a0d6905baed9ec2db0d7b247afb96a30c126391", [0xfffffffffffffff8, 0x9]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000240)={0x3c, r1, 0x105, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x634, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0xa}}}}, [@NL80211_ATTR_TESTDATA={0xda, 0x45, "9ed4c18d5be380e1ca0a757b59bdb8e20229da2c4ba21202da299736b32b969bda924e9cde7055a9233f0f8c97da79f36f51ffded5a1554ad68a48a894d98f99661b5304f98a30ecc28f5ca4ac9030964891ab07863c431e2d096564749d6d8bc4771ad23524b64357ac54dddf4c4e64db52ceab8db9aaf6575051e2a5ba602b690289789e1087dca28c09adb9056e150857f0889f0845d58aa591cf059a50f8bdb8a55da78ff500c69ee46ff70cf5884bf06a8d1ebf82ae57efd2d54d96b1ce09193311cd87398d4ffd79815cc4aa64c4a19c9dbe17"}, @NL80211_ATTR_TESTDATA={0x93, 0x45, "2ca8c5b5b93c1f4685819a23e2e984b9e88ef742099ab3d78f9f677c2236f37339c89cdfcdd786ba351065fc1f09f94266968ba8aead995b457714f47038b05be71b99aa117a4447ad3888ab03ddc51f30db68699f91d86291265d5414d3cca6bd2625eaf0398d9f8c6305978a3a53fba31636d90866f54bf5952ed93b08a32cd3d4d510564b6606a9c717d22b12e4"}, @NL80211_ATTR_TESTDATA={0xd1, 0x45, "4fed732452c492f12a8018261a62a35303a394cddc3d80dc71cb7aa27b15c771a0bd8c5f22b2a1f237bc63b7d507bba887562f782fb283ec7abbd365b92a3fc910479364c432efcc97c0af9775c746470a61fb02245c0d473b0a81b96c735e883a036221f3f2aad73f326d9b0c6f561def33269f40d106d27027369e7ae620152a26c0018791483680f3242023c414978e7def1d6861ac490593c1b60179fa3f9b1e78ed634432df044ca8433a994f611f5984170a3acd843ca9e33765cc72d1958de5c686353db19111c4ba89"}, @NL80211_ATTR_TESTDATA={0x89, 0x45, "a174aed826dc4acf0d9d79691403eedd08caa8dffa325daf6938ecd5aec9f4502f7577f9e3b184fde98cb6d73a3078b2a9bbc9f2fbc34898347f73908d1bebcce479fbe7d101b717f39f0dd2f552e278362327140b251a5f5431147be2c5a4b717900e75314fdc68f4e76b504d538fdc6cbc4ddf8d52df3071d245efb6e3e37db81b078a9c"}, @NL80211_ATTR_TESTDATA={0xdd, 0x45, "a29815b5eeb5ac1bb35d981daf3c1997dc6012b2a272a9d09436e1edeb720a2178ad0d77d22ee5165cab63402dd0ee73a3d9ba87cd50f78757e61aefea3015ab0f05011b9cafa016b99b1cdbe05768cf821372adebff26f1932f5985a96cee9f5ef0fdbd179b8abce6c9c9ccd58cfc1b86aff1dc126660aa1726364bf952b2cbb666b727ae2409f0d00e19508397aa7d46409bbd24ee6dc6c8e9f474c345f4e09b8247243ac8446ae731940c6c188336c7527e7726ea3167cdcfc1e278749de91221667d7cf241ce10bb9ea7743e188afe0b83f26edc3bbab1"}, @NL80211_ATTR_TESTDATA={0x8e, 0x45, "0b1ce2d710994c4669497dd47bb03dc9f8c19cb35a38a4838e79f1725bc90826cd123ea45607cf7cadf9b51c399abb5e892ca53caa82cbf22cf7252813c02b51e0097c1e9e12c4244ac3ccf244a4c07ac5c9ff043def02e06903d76637a5e7fb2e3cb4214eec9282e654eea7ca875ff75bf31966fd1ec00bad5ef4a59e944dcac658bc17d4cedff2d1c8"}, @NL80211_ATTR_TESTDATA={0xe0, 0x45, "45bc4d24245c586d918e57f1ff6a50721d31b1d5b1de9af7a9e197195a6b1c16c66244e4a7451786b53ad5a2da078411a4bce25e13ab87329fa6cd369db8fedf4342badbcb3c440211ee24da7843d1e5f6085ddf633dad1f6e185ee0859d012069ed6240eb1ff1a019f4ed056db412b7819f01fa60fa39841bb5e3ab0d8af5625fb9e6d727400ec33f4dfb02d2653cf3a132f1156504f46d75893c3a0a90487bb75b2e2a703a80cb647ffa6c342c39c8307e7f87b5e0a5f306371d3f8867f240cdc3ce21d5b5a2d2997c12a85b398c2bca121d8fe1a9ab50bff655b7"}, @NL80211_ATTR_TESTDATA={0xe9, 0x45, "1f979e06089a0c82746248c76d399af409ce55b2cadbbf0bf61255daaee4a7276a6fb94777b08608a9c04d382cd754f3cac4f652416eca3cf2981ed058c316f6ec39a301d5224f8ffb87048b80c826cb64608057e52d3f5056b183326f5493b82f8f4a13d178c5cfff53df0aa69d3d344078f367c700e9dbb8f0b00440ed6ba5f939f2ca9e5737954faadad84fcdd7d0a489ef1028e170280d3e89055e8ffdc23abf1e4e68ff4d05a9586f537ed6fde2010a11ef8478aa71e1076eeae973bbf3b1693b4f355b3b444b1fb27e2d328ed9c1aca7637b4fdc1f1da1e07244c3c73c0172f6911c"}]}, 0x634}, 0x1, 0x0, 0x0, 0x810}, 0x20008000) 02:17:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x0, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:17:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000001700001000"/23], 0x18}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close(r1) 02:17:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x1d6c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x83) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2007.824713][ T2831] input: syz0 as /devices/virtual/input/input1195 [ 2007.830358][ T870] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2007.891319][ T2847] input: syz0 as /devices/virtual/input/input1196 [ 2007.951345][ T2851] fuse: Bad value for 'fd' [ 2007.962248][ T2853] input: syz0 as /devices/virtual/input/input1197 [ 2008.080489][ T870] usb 2-1: Using ep0 maxpacket: 16 [ 2008.200398][ T870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2008.213245][ T870] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2008.222956][ T870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.231868][ T870] usb 2-1: config 0 descriptor?? [ 2008.270837][ T870] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2008.471512][ T870] usb 2-1: USB disconnect, device number 19 [ 2008.690284][ T6568] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2008.940267][ T870] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 2009.300277][ T870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2009.313063][ T870] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2009.322679][ T870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.331563][ T870] usb 2-1: config 0 descriptor?? [ 2009.370642][ T870] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 02:18:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9049, 0x0, 0x1000000}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x6, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0xc, 0xfff, {0x52, 0x8005, 0x5, {0x9, 0x7}, {0x1, 0x9}, @ramp={0xae7, 0x1, {0x6, 0x20, 0x7, 0xd28e}}}, {0x56, 0x9, 0x9, {0x0, 0x1f}, {0x7, 0x5}, @cond=[{0x3, 0xfe01, 0x9, 0x9, 0x7, 0x5}, {0x6, 0x1, 0x9, 0x81, 0x9, 0x6}]}}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x3a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8001}, 0x40408, 0x4, 0x0, 0x1, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = getpid() write$cgroup_pid(r2, &(0x7f00000001c0)=r5, 0x12) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a014, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 02:18:03 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 02:18:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x0, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x288a00) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000100)=0x200800) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:03 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000080000000006000000600000000f0000000000000001000000010000000040000000400000ffffff3fd2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013c00)=ANY=[@ANYBLOB="9f"]) move_mount(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x31) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 02:18:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x18, 0xaa4) 02:18:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)={[{@default_permissions='default_permissions'}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@default_permissions='default_permissions'}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 2011.267424][ T870] usb 2-1: USB disconnect, device number 20 [ 2011.299108][ T2880] input: syz0 as /devices/virtual/input/input1198 02:18:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) getpid() r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x0, 0xb, 0x4, 0x0, 0x7, 0x0, 0x7c3bbd1f}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x1) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index, 0x4000800000, 0x0, 0x0, 0x0, 0x0, {0xffff}}, 0xfffffffe) syz_io_uring_complete(r6) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[{&(0x7f0000000000)="05f9dd648f1e1fba0f5b77b525051b5501d4b8d01eef20c1c43a491cea8a36efe5bedbd692cb2bd0e2e2e9e218c939fbebe98fa3038c77cc3683f5345769679ce7470c9c8daacc8b2421b3e3fe5a85ee3f65d5f300d6701609836a3b6d591d24ec9d81118cbf700dc4c88560701e19abbcdf55d62fce443074ea8e2a94f2aa8e60834c8b15a2c2e9f2ca58a2b686103acb9506edceb24175f8b5b7ec1074b11aa1e4f1b0fe71b9635e1381ab064aa32b5c187a8204033251a08b2a382fd759", 0xbf, 0x2}, {&(0x7f00000000c0)="7af128dbf09b6ea5bf5d3d7188ca4b656f5146cf53cbed8b290926dcdc7665", 0x1f, 0xffffffffffffffff}, {&(0x7f0000000100)="0540549f13b505e1c9f6961885dfc150efc2d05039a45d96c777b94b375fb4df8e553290effa75", 0x27, 0x5}, {&(0x7f0000000180)="0574ce5b11313f4eb6636a049b503f109b7d484e616ce43db2cb1919eac8feec8263f30844b0cb40ceec5f06dc2048eea406fdc611a15a5f2563dcaeef40c1bc7edc9891e1da16a3bfb37b7a36efd0936c61c81be154390a4fc05a9a5014a6749d235034de4f7b9dc4df6c5f289f20e67a5cf7a48057c273b3aead80504c76243c8bc8bac3b9778095d882c7b8a9aa86bcd22b559a97a0d05f52ede45f0e36a93e5446c400daa967ae953081cb8542c8f76af89fccb9c5", 0xb7, 0x10001}, {&(0x7f0000000240)="e2705b2139aba2cdd602ec65a1971b2203e3262bbb36223c4c0d748bd4ba093c2872cba7eb901ad9050d7a709cfcfd21da02eaa40000e81f899dbf844d78248e611239c04e42877d6dc82972516704c1e35e622166ba1b36a1be2c5bafa4c1ca63eab964db001053d0b8e5753b7c03397f410c", 0x73, 0x67}, {&(0x7f00000002c0), 0xffffffffffffff9c}], 0x22012, 0x0) 02:18:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x0, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2011.334299][ T2890] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 02:18:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x8, {0xfffffffc, 0x7, 0x6, 0x100, 0x0, 0xffffffad}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x40, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)=0x400) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) [ 2011.404026][ T2896] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 02:18:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)={[{@default_permissions='default_permissions'}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@default_permissions='default_permissions'}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 02:18:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x0, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:03 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000007140)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, 0x0}}], 0x1, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:18:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2011.595858][ T2914] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2011.595949][ T2916] input: syz0 as /devices/virtual/input/input1202 02:18:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000200)={0x4, 0x9, 0x5}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000140)='./bus\x00', 0x0) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x50) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 02:18:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x19, 0xaa4) 02:18:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x1d6c) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz1\x00', {0x4, 0x1, 0x8000, 0x7}, 0x29, [0x80, 0xdf93, 0x2, 0x0, 0x1ff, 0x83, 0x8, 0xf1, 0x5, 0x28a4, 0x8, 0x7, 0x2, 0x101, 0x5, 0x8, 0x6, 0x80000001, 0x5, 0x8001, 0x8000, 0x1, 0xfffffffd, 0x7f7d6a76, 0x1, 0x4, 0x5, 0xc81b, 0x4, 0x2, 0x50000000, 0x0, 0x4, 0x8000, 0xf421, 0xb1, 0x13d6, 0x5, 0x2, 0x200, 0x0, 0x78e, 0x19, 0x8001, 0x71, 0x4, 0x3ff, 0x11e8, 0x8, 0xe0, 0x1, 0x8000, 0x3, 0x172b, 0x9, 0x8001, 0x9, 0x7, 0x4, 0x6, 0x1, 0xffff5cc4, 0x4, 0x7ff], [0x401, 0x38b, 0x20, 0x0, 0x8792, 0x100, 0x2, 0xffffffff, 0x1, 0x8, 0x400, 0xffff8001, 0x100, 0x8000, 0x22, 0x6, 0x3, 0xffffff80, 0x3b6, 0x7fff, 0x200000, 0x4, 0x20, 0x0, 0x200, 0x0, 0x8, 0x2, 0x31f5, 0x3, 0x101, 0x8, 0x8, 0x800000, 0x1, 0x4, 0x4, 0x8, 0x8, 0x1, 0xfffffffe, 0x1, 0x10000, 0x9, 0x7, 0x0, 0xffffff67, 0x3f, 0x8, 0x8, 0x8, 0x101, 0x3, 0x5, 0xffffffc1, 0x2, 0x9, 0x9, 0xfff, 0x4, 0x3e80, 0x800, 0x5, 0x5], [0x1, 0xffffffff, 0x2840, 0x81, 0x0, 0x3, 0x9, 0x4, 0x1, 0xfffffffa, 0x7, 0x2d0f74b4, 0x8, 0x1ff, 0x8, 0x8, 0xffffffff, 0x4, 0x1ff, 0x4, 0x20, 0x1, 0x8, 0x1, 0x81, 0x7fffffff, 0x9, 0x101, 0x5, 0x1, 0x3f, 0x2, 0xff, 0x7, 0x4, 0xffffff85, 0x2, 0x80000000, 0x1, 0x80, 0x81, 0x9, 0x5, 0xa993, 0x401, 0x8, 0x99, 0xc491, 0x11e1, 0x80800, 0x3, 0xfffffffb, 0x5, 0x1, 0x10000, 0x9, 0x78480fc0, 0x8001, 0x4, 0x8001, 0x9, 0x1, 0xc79e7133, 0x168], [0x10000, 0x2, 0x0, 0xb031, 0x3, 0x2, 0x80, 0xfb50, 0x1, 0x1, 0x7, 0x6, 0x1f, 0x10000, 0x1, 0x99db, 0x1, 0x100, 0x1ff, 0x8, 0x8, 0x6, 0x1, 0x9, 0x6, 0x4, 0x7, 0x1ff, 0x101, 0x9, 0x8, 0x3, 0x4, 0x8, 0x8001, 0x0, 0x1, 0x2, 0x1, 0x9, 0x10001, 0x200, 0x8, 0x2, 0x0, 0x400, 0x321c, 0x5, 0x1, 0x100, 0x7, 0x5, 0x80000000, 0xffb, 0x7f, 0x8, 0x10000, 0x7, 0x8000, 0x4, 0x8000, 0x4, 0x8, 0x8]}, 0x45c) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8800cb7d", @ANYRES16=r4, @ANYBLOB="000128bd7000ffdbdf25090000006c000380050008007f0000000800030000000000080003000200000008000500ac1414331400060020010000000000000000000000000000140002006272696467655f736c6176655f3100000500080000000000060004000800000008000500ac1414bb080005000a01010108000500f8060000"], 0x88}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300)='mptcp_pm\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x700, 0x700, 0x6fe5, 0x1, {{0x1e, 0x4, 0x1, 0x34, 0x78, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp={0x44, 0x10, 0x94, 0x0, 0xa, [0x401, 0x8, 0x6]}, @timestamp={0x44, 0x28, 0x76, 0x0, 0xe, [0x8, 0x2, 0x1, 0x3, 0xfffffff8, 0x80000000, 0x4, 0x1, 0x2]}, @timestamp_prespec={0x44, 0x14, 0x8c, 0x3, 0x1, [{@broadcast, 0x2}, {@broadcast, 0x6}]}, @ssrr={0x89, 0x17, 0xb7, [@broadcast, @multicast2, @empty, @multicast1, @multicast2]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x8c, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x58885398a4c802f9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000a40)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:04 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000007140)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, 0x0}}], 0x1, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:18:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xe3f, 0x7ff}, 0x0, 0x2, 0x0, 0x0, 0x1000000000, 0xfffffffd}, r0, 0xfffffffffffffffe, r2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000580)=ANY=[@ANYRES32], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000484) close(r4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0xb) [ 2012.131661][ T2945] input: syz0 as /devices/virtual/input/input1204 [ 2012.197617][ T2955] input: syz0 as /devices/virtual/input/input1205 02:18:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x0, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x820) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x0, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2012.392615][ T2978] input: syz0 as /devices/virtual/input/input1206 02:18:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x0, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2012.471309][ T2988] input: syz0 as /devices/virtual/input/input1208 02:18:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x0, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 02:18:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x1a, 0xaa4) 02:18:04 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x2, 0x0) ioctl$FIONCLEX(r1, 0x5450) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x1}}) 02:18:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3b}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x9) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xac) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0xc2474ed16366810e}, {{@in=@rand_addr=0x64010101, 0x100, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 02:18:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0xa) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x90) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/135, 0x87}], 0x1, &(0x7f0000000240)=""/125, 0x7d}, 0x10000}, {{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/179, 0xb3}], 0x2, &(0x7f0000000480)=""/120, 0x78}, 0x8}], 0x2, 0x102, &(0x7f0000000580)) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 02:18:04 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155dd6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x1) truncate(&(0x7f0000000200)='./file0/bus\x00', 0x0) 02:18:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x2008d}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x40, 0x9, 0x8, 0x0, 0x3f, 0x20}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000040)=""/4, &(0x7f0000000100)=0x4) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="eae328dc"], 0xd) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r0, r1, 0x0, 0x1c575) socket$nl_route(0x10, 0x3, 0x0) 02:18:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="00010000000000a9f1e819f5d06ac75066f41a", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e906a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef000000000000000154ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6dd7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4d64f90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682600000080000000007048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f66de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af261566d326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47102b178a6ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44ea462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd00", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000004380)='./file0/file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002000)='./file0/file0\x00', 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) [ 2013.002482][ T3017] input: syz0 as /devices/virtual/input/input1210 02:18:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:05 executing program 1: listen(0xffffffffffffffff, 0xffd7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)={{0x77359400}, {r0, r1/1000+60000}}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x10000, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1d6c) r3 = openat$cgroup_type(r2, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000001c0)='threaded\x00', 0x9) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaa0000000000069078ac1414bbac1414aa00004e22000000550000000000000012d4a5757fe6e49c050757db3a56180c0e3c85ca550ea47ad2d6bebb16ef0e48809487010b718fa5e60d9f07ac14c7b81a8483a6659aebe63127e5a57c26dde52f561e", @ANYRESOCT, @ANYRES32=0x41424344, @ANYRES32=r2], 0x0) 02:18:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001700)=[{{&(0x7f0000000100)=@vsock, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000e00)=""/149, 0x95}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000600)=""/128, 0x80}, {&(0x7f0000000c00)=""/237, 0xed}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/239, 0xef}], 0x1, &(0x7f00000007c0)=""/189, 0xbd}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/263, 0x107}, 0x6}, {{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000ac0)=""/218, 0xda}, {&(0x7f0000000d00)=""/243, 0xf3}, {&(0x7f0000000fc0)=""/109, 0x6d}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x5, &(0x7f00000010c0)=""/122, 0x7a}}, {{&(0x7f0000001140)=@ipx, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}], 0x2, &(0x7f0000001240)=""/124, 0x7c}, 0x8a7}], 0x5, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050300000000ffffffff2000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000007000000"], 0x28}}, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r6, 0x2008002) sendfile(r4, r6, 0x0, 0x200fff) [ 2013.045729][ T3037] input: syz0 as /devices/virtual/input/input1211 02:18:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x180) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000140)={0x400000100002f, {0x2000005, 0x1, 0xce, 0x4, 0x0, 0x7f}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f00000000c0)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000001c0)=0x1) 02:18:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:05 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1d6c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r4, 0x29, 0x3, 0x40, 0x0, 0x4, @private1, @loopback, 0x7800, 0x80, 0x7}}) sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x1c, 0x0}}], 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r5, 0x8929, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000001) 02:18:05 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a8a440000102030109021b0001010100a909"], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81101) setsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f0000000040)=0x7, 0x4) 02:18:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x1b, 0xaa4) 02:18:05 executing program 1: syz_read_part_table(0xfffffffffffffff5, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="0ebf6a0847acc3a63ca8ca77326536e64fd9d07eed4bdf", 0x17, 0x2}]) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff61}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 02:18:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f00000017c0)=ANY=[@ANYBLOB="9feb010018000008000000002c0000002e00000002000059060000000400000d800000000000000000000000000000ff0f00"/70], &(0x7f0000001880)=""/247, 0x46, 0xf7, 0x1}, 0x20) 02:18:05 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x403}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xd7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x5}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0xc, &(0x7f0000000180)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "5b22be38b379bb2bdd090000088a7a32"}]}}) accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) [ 2013.929681][ T3064] input: syz0 as /devices/virtual/input/input1212 02:18:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket(0x1e, 0x4, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fc0) 02:18:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400100008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x4000000}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000400)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='nfs_export=off,uid>', @ANYRESDEC, @ANYBLOB="2c646f6e740000707072616973652c7375626a5f757365723d2ca72a2b5b2c646f6e745f61707072616973652c726f6f74636f6e746578743d73746166665f752c657569643eb94f6da1fad5020000000000000099d3b5bf1dab2c4ca04c821aec20c22c5d13008a3f632737899651d13ab83d0eaffc0069ae6f64fb339f0bd29b06d86d5b30ff5a0c521da9ff17615ebfa87a6864fa34e6dd237d82ed9881faa8b183b6098192eb7a4bc89d3f8870352edc076b85122c9655d75eb100d24e8ff41402fc5553d7ca2221", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:18:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x30}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) [ 2014.003654][ T3093] input: syz1 as /devices/virtual/input/input1214 02:18:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket(0x1e, 0x4, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fc0) [ 2014.053406][ T3102] input: syz0 as /devices/virtual/input/input1216 [ 2014.115454][ T3102] input: syz0 as /devices/virtual/input/input1217 [ 2014.156855][ T3112] overlayfs: unrecognized mount option "uid>18446744073709551615" or missing value [ 2014.169019][ T3112] fuse: Bad value for 'fd' 02:18:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, 0x7, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3ff}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x41, 0x7, 0x1, 0x0, "a765624ca6e8c6a36f7c56d38638581b5c8156dd66d96877992315b45ab9a3323d74869e261b482db57ccc89bdfb5fae1656c96a39eeff038c73f739dc"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4804}, 0x44004) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000080)) 02:18:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket(0x1e, 0x4, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fc0) [ 2014.199747][ T870] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2014.271213][ T3116] input: syz0 as /devices/virtual/input/input1218 [ 2014.279796][ T4031] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2014.323612][ T3126] input: syz0 as /devices/virtual/input/input1219 [ 2014.549620][ T4031] usb 2-1: Using ep0 maxpacket: 16 [ 2014.599681][ T870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2014.609912][ T870] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2014.669713][ T4031] usb 2-1: unable to get BOS descriptor set [ 2014.749697][ T4031] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2014.759837][ T4031] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2014.768800][ T4031] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2014.780594][ T870] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2014.789796][ T4031] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2014.799508][ T870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.808293][ T870] usb 1-1: Product: syz [ 2014.813244][ T870] usb 1-1: Manufacturer: syz [ 2014.817862][ T870] usb 1-1: SerialNumber: syz [ 2014.860623][ T3133] overlayfs: unrecognized mount option "uid>18446744073709551615" or missing value [ 2014.969647][ T4031] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2014.978794][ T4031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.987332][ T4031] usb 2-1: Product: syz [ 2014.991764][ T4031] usb 2-1: Manufacturer: syz [ 2014.996330][ T4031] usb 2-1: SerialNumber: syz [ 2015.040209][ T4031] cdc_ncm 2-1:1.0: bind() failure [ 2015.110191][ T870] usb 1-1: USB disconnect, device number 76 [ 2015.240969][ T1590] usb 2-1: USB disconnect, device number 21 [ 2015.869532][ T1590] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2016.009477][ T1591] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2016.229532][ T1590] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.239662][ T1590] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2016.269446][ T1591] usb 2-1: Using ep0 maxpacket: 16 [ 2016.389462][ T1591] usb 2-1: unable to get BOS descriptor set [ 2016.399677][ T1590] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2016.408780][ T1590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.416813][ T1590] usb 1-1: Product: syz [ 2016.421068][ T1590] usb 1-1: Manufacturer: syz [ 2016.425629][ T1590] usb 1-1: SerialNumber: syz [ 2016.469528][ T1591] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2016.479855][ T1591] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2016.488694][ T1591] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2016.500451][ T1591] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 02:18:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000240)={0x3c, r4, 0x105, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x76}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xb00, 0x0) 02:18:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x1c, 0xaa4) 02:18:08 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff2400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000a1e01006e6574656d0000001e"], 0x3}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000206000000000000000000000000160003a8db204b683a6e65742c706f72742c6e6574000000050006"], 0x1}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000009060000000000000000c4f90700000000000000000000000500010007fbffff0c0007800b001abc844eba149d058a1d49de7b6b704c41991b4c102a814156631c41d720c2065755fba15ec5ab0507b89e13d09aab789b83a95fa12c17d65c89a5f5841501a9231e37d2fe41bb90e201b64a161fb126bc153b94c3898563fe8a8a0f36f3abc0331baea6b4c761670c1ab0b7c4ecfa0683818e6a99476296f15ca556d860e17268e8170cb1c81aba1682e8825a75e93ed59e0f47dce28db872762507d06a3b50d20584ade7c7121ece2aabee64b46631dcb373c09aec36b404f0a881438cc9664ac9ab8e98df2d56707d193a5dc4d90feae2f5e294f27fe0d4b2afc7c477a29a9351b1dbf2e05939e9ed49ba7d163f170c069055c90287804ed018da65ac32e21249336892dc428a"], 0x1}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f15b9409b0d1b849ac00200a5780200", 0x16, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4100000013000100000000000001000007"], 0x1}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000240)={0x3c, r1, 0x105, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x20044001) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='E', 0x10a73, 0x4004800, 0x0, 0xffffff7c) [ 2016.669473][ T1591] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2016.678517][ T1591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.686679][ T1591] usb 2-1: Product: syz [ 2016.690872][ T1591] usb 2-1: Manufacturer: syz [ 2016.695448][ T1591] usb 2-1: SerialNumber: syz [ 2016.701052][ T1590] usb 1-1: USB disconnect, device number 77 [ 2016.730704][ T3156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3156 comm=syz-executor.4 [ 2016.742418][ T3157] input: syz0 as /devices/virtual/input/input1220 [ 2016.745068][ T3160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3160 comm=syz-executor.4 [ 2016.763879][ T1591] cdc_ncm 2-1:1.0: bind() failure [ 2016.846059][ T3164] input: syz0 as /devices/virtual/input/input1221 02:18:08 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fstat(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = getpid() sendmsg$netlink(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r6}}}], 0x20}, 0x0) r8 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fstat(r8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r9, 0xffffffffffffffff) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r11, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000080)={0x150, 0xfffffffffffffffe, r1, [{{0x3, 0x2, 0x0, 0xff, 0x40, 0x1, {0x3, 0x1, 0x8001, 0x2000000, 0x5, 0x4, 0x9, 0x10001, 0x8000, 0xa000, 0x4, r3, r6, 0x7}}, {0x0, 0xfffffffffffff820, 0x0, 0x868}}, {{0x0, 0x3, 0x2bb, 0x2, 0x2, 0x9, {0x0, 0x1f, 0xe7b, 0x7, 0x0, 0xfffffffffffffff9, 0x3, 0x1, 0x0, 0x1000, 0x70, r9, r11, 0x0, 0x6}}, {0x2, 0x7, 0xb, 0xe0200000, 'huge=advise'}}]}, 0x150) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@huge_advise='huge=advise'}]}) 02:18:08 executing program 4: clone(0x6818800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x0, 0x160, 0x160, 0x0, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 02:18:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000200)=0x8001) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x20004000) 02:18:08 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x404, 0x101}, 0x0) r0 = getpid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa8}, {0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) [ 2016.970437][ T1590] usb 2-1: USB disconnect, device number 22 02:18:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0x80, 0x200, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x67, 0x0, 0xf0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010100, {[@noop]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000a4ee2dbd7000fcdbf4250a0000000c000800090000000000000008000300ff0f0000c086b997553f0704e56a239f28fca8483c451454e7dba54c37699600bcdce5ea74fa728d14ca396f161d7bbd9ba4a607571cb15dcbb3eb673f9af8b3f6810602bbe6532102889641af183c9960a300"/125], 0x28}}, 0x0) [ 2017.013575][ T3179] input: syz0 as /devices/virtual/input/input1222 [ 2017.024947][ T3178] tmpfs: Unsupported parameter 'huge' 02:18:09 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000180)={0x7, 0x7fff, 0x2d04, 0x6, 0x15}) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000340)={0x15, 0x10, 0x13, 0x10, 0x4, 0x5, 0x3, 0x76, 0xffffffffffffffff}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) pwritev(r3, &(0x7f00000024c0)=[{&(0x7f0000000240)="7a802503dc693ab71eee9350e692cbdcfbcea91ba7044de9c20e0c299f66d9cc7572a8eb6ce6dcf7621cd4374e293fede68dca97a34dc6dfa2d9061858d6780524dffcacd8252ae76f375b4a134256076b4903ac9fc94601d49c55852732a0fabdd9bd6a469a8d8fd30653f952daa1bd74d63d2f3f954264e2ebf023ac434f1aefb54d88505874f125b84f0bc0d5207999852915ab4e1c705ea19bc2cec2796148bbc4981d1d471ceb7f3a88af81af7da816076c31727341e1aa69ce19307d20881578c513ab1e609e6c5c42b9a7", 0xce}, {&(0x7f0000001440)="7d9f27cf02dd28e651a63a28fe5bf7667308cfb76bef1472b7ebdc011b7fc8c1cafb7d48585d22b4c88ae9a565939a8f6620c271b1756fdf53b3b1ffc425bf9f1fe0f63009968ee1678f92711ce8e2da69527e0b33e07550f70c27c00fb8f8a40b0585a0aaee48f8d2469247d9eefa176b8102d5010bd17ac2361f5151bfe53ad4eb1e4b8e39fcb6be2fc5b38b1ffd38462626a9ca5b08d8530904e5a0c1c00b44e1798266e27d0f5c32c016f500d3c863c5e0aac468ab16a986264cd98ebace7e1a327e796cc72c844ea61767fa7dc9d0ca1d1b9044abe74ae74649d8938d6df2778a888f91d6c1", 0xe8}, {&(0x7f00000003c0)="b6a103bc61911f74afb82625f77291fca5aabdc8edbc2021d81e4a399730837439400ac1d300790163ffd88b79", 0x2d}, {&(0x7f0000003580)="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", 0x1000}, {&(0x7f0000001400)="39d5c08beba632f2d55625bb268253d0b35170ac4908c18a042d0eb9f7b7797039af9287882540bff43f803c1d1ba1", 0x2f}, {&(0x7f0000002540)="db204abfd272af77a22d4ed1545c7d441c930e12c63af88aa8953ea6e69ab46fa474563dd6d547708e07a3d80c233866eaca323d85db9ab45fc02c11a7840c9a7573d6b5833a5820bbe9ccf3acddf3c41ce1bcd6da8ce59c39364e028f125bd5abb0e46dc2b2f02b4bd76275ae78df8dd3f5da6f1e356315d2fe9d2ac6d810fbd330ae4e4bde20b2be9d86faa6ade5ee8c0f68192280eddd20221d21eb7fc861892a005add046bae81bd2ff2ce434de232bdbe78eb7a8bdf4bbe16909cb6618e50ca1ca8ac2cb70e4538453dbcc92a68f826a7b73280f542abeaf2bc2e20a094a6b0f7ce7b23845166a94b499c189d0392b4d61b4e95dd1d95458e09a96d90ff1599a27a16c00632a59866311ef0755dbf71eac391b38d44080532ef958411c05da8e9c4caed6f7c745da496fdc223a0a2011d7db89a83bf96c9f7039128831dbb1b1d72e7d602d8e6808cf360cf74a6986d39f3a9ca953f6a290f0ee416efa9b61d4300e7ad795dab2dc37103b3d44b2a765e7d11abb85a790b7ccf41bc51b2e5f7f69d42da5bf275c369101b3e5089da6e6da0f77489be918b1a460fc721117b4fc3cb820119c6ced6dbb2dc62c6611aeba6453e9ac9eea3bf96997b994351e9f16928cbf99452851acce959136e1873cca0534746efcbe8a26b18dd3689b28f270b823be9c2eb66b318fa45506dd00c1ccb7fa79f66e9f81569ddb0fe0afdf342c4a961fa2b2c357411efec0f5df31345a9f2a821dbfdaea3fa0a64c0b0996058c5e78aa59c9fcf0e54fd1fce5ad14b494e1cb79f4494389be0f867b013944ceb09de08bdc892798e817173cbd815a443405d32dc158314039b2da47bfa50c6e22c0b665941386cb9fa646a625a0b3dc52f0a3adf3722f2ead4aa0bb72379c080b33552581c47611de388f379223b7d17357b79dc8fbbb2a1d5109528d8c5fcb023f0db4f9444a85e7ec723038b3df338259e58679e53fd1dd96ac538377212ff5968f72ec614c5053544125a271647c361885e2f0f6650224493c2690e4249211bec3167f8ad696e9c11c6c22516c1f7402d0228c6e20e84d4037a0eb1f6fa0d77a883134ee7a627073721fde13cbbb1bbaf24edda77ea4b04ada64d9eaebd2fed551f5f2f2136f4e1b7d38e28a9c00710f7677fe84789c2cb821dc06300824217c9403bf0aa3d84e47c1104b4a64823075874e5da5dd707972ade03caedaf46bd571e380eba1b7b35b91e1ad9b9c2b0a6bebef39e493e9ea890e87c23b8b4278afaf8aa5cac7f9781d16c2f58c67addfe6ccfd618b210592075b17696dd569a8a1c527bb5753b3e9536e009ce703235a4cdba708efe6db86c63dd13ac425b37380c4bd1c44a80c08edc1e9a8461e8717c6a14b089402041d57600630c0d0e3d61a463ba21842ab93360d112f2e8b0b7c21260ba26893884b5acd9e7d4a16585c2c22f1cef95b8e936b165406fcce2a152b5424d01f2a63dc082d1644fcb2e25da86a9b83f5f91b7355ec01466127a5e83359b0e2b17c4a10cbfed5d40b7d1cb8a4be12a6b4efaa2bc11d38b90701d4dc2bf69a625e9c0a761947b1b02a7e90dcc69529f1210d2e8f6833a3cf6de3358396678fa35bd5e1685997acfb33a12879830635a926d58929bc85f424e6e02034341993c3e95475f8fe88180c3a5b284bc06299868914092ca9340898c3b2097f8bcf867ffca79d76c3ab1da5a94525f410a26fca8fbb8681cd6c5381eea078b4273ec83f3b735546a9a94411344e19ca6cfc331f7eb5d04cac8ef239e892543b9da80f276d42600cac888aad8ef99d4a79d62f4ffcfe7b64cd8af6424c8d98a231a2acd6fecb29254fce99cb382cb3b094ae40962c6f8dc82d3ddf97b968f90ae39b5b91f9082d64af7c7cf56b034964ab49c93bc948660b3d282137302af11f98c73a70c79d3cea5361f85828a7d94f646d2b88dcc10c8de82925c58be59a4bdf0562c17fc5bd7969cd1d9eab40e20ae58c5a81c6bb140cd5928a2797341237f00af4ca21c2f2315b988c243d0b119cd837d89e77c1a2bdca0ec35270cc8b9dc31ec04f64098d8bda8970b773b82deef16f407221a45af908b558b941c45f81d00fdc446e79a60f90452e8f1d31191853a1d4930724eb625d7c9ec088d21df0876a5dbe308447d797b3f8600f523af600b563668b113bc36aad2561a0a253da1620ef1f36c87531929eb5ca77f0011976fecef18f0ac406e72966dfd9bf347a51efa6e498208ce528236e90689d3f03411f3d73e494ab5361c0abab80667f6a9ab6fc31df4193b0d8cb957b4d88871d428a9623dc5620a7f0b778f52642bcf4a3993d4aa340ad14bb0e7e12786e3332a67a8968ca8b4913557b137eb651391554967f1c0e00dbdffbbb6695a4a3fcc6e602a1a9b9dbeec34e8441833601e73d83629a373a8247cc057bbefdc101995222ed1fe14c8298f5cf7e48ee9aa94bb4468112ac48131ca480b5b08c5a7a4de29815a8f329e7935295947a157f3d655d31e775cdf77d2de9fa7588c91ba11dee6310e0e6d249a0e10b904ccc2218d1b6b59725500e28980f7e8852ceb6d6a6647c85fb7ecacd5a32adf620a46ae0a428584f3e0a74d4517db02b4a9b1df389916694ff159a786d39642a6d5cbb5036aab644a147dbfc6e2aa51db0e940b9f6f9205ab6514bdf1dd1f8d63ac8cfff6184fef57b60669a82a111d9f35192f42f69ba2108ca428a96277b616926de020c8260f7ffe88fd2707e81ffb5d46f2dd23864641c08f82ce296c095c3858e20836946e6b6422546ec6a2b0f514b9abefb76f837003fe52b314ad36b4d785795be8fb709fc02c2dd0cf42f8ca42140a102d9676c1fe2371aed47c07ca23ded8cdfdac61c28eefb11c8a71080ca3d951a85ed9f9a3ae7f8bdd7f995a74ee0fd336044f06fd58b6a8c57b0844ff7d32606095704591190b4c73194931668767458da59e860dcea87dc753dd5840907da2cd2353f6046befa4eebc37d3be4110bc4533fa9d24004ed6c8a6cb97db2d9721eb6c1cbe2180be4f15e1eccf8f7c71a2fc93db1a59c58f0019985d209ffb1b79ef0e08fc30c5299dd6a6c605654553149d8c78a470620fda12afec4ba74aa361b75e1270c4b61b92b7df0e4f16a408b6b6fb179f824e4c49d98202f47b3061024545fbf678eb709ae3c02bce80404e4d8099eb7955bbb3e633da9a9169df3e2e0fe790af01d417dd65bc345589208c7bfbd10da333c1b9d9da091ebcd3398308f3689a6a4df67734c94fea907ce5da03f41b06fd7564053b7bb98fb3ef961ce0d24acd7896594f9b36ae269cff44e6438b2516a110da25665539c1ed0f8f08c1d5bf4417bc3627f01e1f47b4ae14aef4fead9b25d4a3124731807749b1a5731ecbb25894ab35ba53a28ac858b246860a77eb4ea53e1968437c004f5736d745d059e83fb1bd83a4f10a60476863247f0f59965c4d140bc7de468885ff9f7caea306f633ff7707a4b5b085dbb9d872ffa7cb63c35c844275e2756131e95eaaafa8254800c3d75455321a82cb677a11d3723705970b3d27f91066a10830571a943452ad7f5518c5f5deca04996f91431b3cfb05f9e45d49ab91b123d7c05ff635f710ae8ad13ee54ddb2fb3d0136a9e82174e63c343880346127af42c1b8b3e87d606cf704ae5fb6cffe0a53691c9ba639f770074b6b94f28f0448a740f78c8cdba6c38c286206a78a7f1df134ff771219bd8a0334bd33bd2408c11ed68d6bf812106a5abe7437a9028535787655753d8a63fd3542fefc7cadbeb37c078a9231ab955ec62dd7fcfaacf0000000000000000dfbf4a65dc5dc631b5de9d1cd276f86f4d7f66016c45e8b987f8e0c74d32ac8c60b803afb69b7e5c4440af39f3d7009458ffc5de6d5b7b1cb6e67094eb13e721e5dc43928bc46231c066cf4cac3c00625989949725d58419b061bd811f6623906518d71c2bbe8bfa441058ae0d1dbcbfad5e14d4f60c35f738fbc63878bd08a5bbc6ca1c891df49cf1d4bc86c965b6219a9db00c1c0b063a8eab562e60d13a7e4ff23f0b2ea5263a7f20f3841263a5ddf433b35aea93e9b95a24c9a31f60597dbc4150a0ecdd9ece30116b8f4ac87ec5cf99590d25dc598e14c594f55c3e59ec6ffd1ce0b0926520a439318a59735ad51ca3d98faaa9567dca8254a14af3f0934fae3cfe132ef547cf0cbc29330cb68941b9e4b1ba151eb34145e75ff292ba0f2b83a756208c8c9c679ca7d5c6faced16103cb4be03712c70de9b3ce04a62f953f8db91880f823d3cffd6c7b0bd7618c60fe45870f8b13b96897aca0a6947cb220dd2e86a2861dec7cd5e1ccdbb5c271a470e0b663b4448a9ac0befbb40451bc37b403c9847be8eecfaafb6e03db81642afe3cac91eb4fddfa9c8465ab1266792731a9ed34151b6ddc97dbad49f4058d2cce4757d02384f03e198f84c72d9fa1e3ed1710a396259adc31e428995457692c46138e8539b9ce820024d52dcde0cd2892dde2116befd48340e02034e41560bbe04802db1c9245c5dbcbfb44bd12d2d5905a92ded2999b073f92cc6918ae5dcb12355d688cd5e626e35bb39a54a78e297505b7ec8d56aac42eaebd1e73b3c1b5d76aead1b0b4e0f4ef01fe299ea10da5b533bb12ab13fefece625df11f5f8581a26b39e72bc7ebaab4a5531bf408404baa6321e4d5bdc99705b47e169e04c93187df9bcb8b3fa5e55c9c2eff8742232aa7209751e11088cb49fab2d2b498a9bcfc937025ff989ed5403fe782ebfd66286e91c770f31d0f44cae830a1ac75bf02bcc8cfc3b82eccce9919fa136d856aa504ea72165c1ec80096c79da284ed4cfff8c20e1dd98d5e96a3695ce6a2fa1330f6639dac79d6aba33f87ee3be3ef7a6bd89ffaed18a67e7fd96f41f16f626452faeb76a801571166b95fdd5eea9b060589eb4426c88cf3bfd0e3b12cc3956a9e1bb2223a075b06f89272a67b181a772883822a93461c6a7059240afc785f22bed2b71b7d37d1591a26795b718373bdb17f45dd646828dd80536fad51e2b2af33bea07f67dd7297f866ddd85fd17e49fa305c1e370389ff0f7f65a611d1ae2f4cd9deff275727a7418c326329cd59a426f5f301ce64a91d727f17ff590249d8377515136849d3679b41bb4abee3785d6486f5a05384ad85a7f06a8fc51e5e959d31426b55e0a5aba1af65f4b0d6de29db86ba4d265ae7b889bf927ca1f340240102c2468a05c75c0992126d38670725116ca3f488fb57d14727a43200a15d16ac15c6d30f098582155b87b836f7fd8f339952bc9a2cf2962bf63e260bfd8b7ef41d9a8edb4c626925a4f97d05842dc2b0b2aa375cf3d6de071c679f735ce6420905659496831a9faa517a59ee12d81b0306d492380f7d9734e521be188356494d0c1123b0fe042f1d121fd9c5ff3f7dc1691b090c3cc3997a531a772d0760a7beffe849ac8dae4d2dbd3c841ac4926307b7c4b0afdb381c96428b5c01cadbff5a5ab105ace162a7ecd4dc091eb887cb7aa2affd3f30357d1c4095d63fc624c408c8a8ee31b9466408a130812dc9e78f1d7ccc0ef695858b083dde647cf2f908d1fc1d0b2e37e3b20283726531399cfc219473e74522a49d9d4879945935cd4893a33413e8a50b9c9c2f5745de756160d274e48a8c3ed5541b2e559a25bb62a3931d0c6918b8f5f22df293e0aaf94a8b76b62cb86868aaf90c8f00df1f00975db8134f57b1329e791d8e0ba38362d6511ba9ff53ac3d019a791a926cc851772b16ef7c7c949021e35093c380a8b38a5bd238", 0x1002}, {&(0x7f0000002440)="9c5b6ade99738b56116842bb2bedfa9690477e892b412a7b8fc8f71ea751c739fc7ae75035bfd341e780345243109dfcdf75878c7e9f38156ed4bfe3fb5c822debd067bb8a1a2216dab2c82d", 0x4c}], 0x7, 0x101, 0x803) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) ioctl$int_out(r5, 0x2a30, &(0x7f0000000200)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)=ANY=[@ANYRES32=r6], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) 02:18:09 executing program 0: sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x520, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}]}, 0x1c}}, 0x14) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, 0x2, 0x7, 0x201, 0x0, 0x0, {0xe, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2bf}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xee15}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x201}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x40}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000880}, 0x80) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000340)={0x9, 0x1, 0x2, 0x1, 0x0, [0xfff, 0x2, 0x6, 0x3f]}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x47ef, 0x7, 0x8, 0x4}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa500232}, 0xc, &(0x7f0000001700)={&(0x7f0000000640)={0x10bc, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x47, 0x45, "5298d240fe2aa5eb00f8da9a711ca7f1fe136cce847caf6dd44a36fedd6bad1c27fd4f3b7c67eee41503aa9a8f0c856d28cc14ba5f91e1e3007e9447ed3920a2367c4b"}, @NL80211_ATTR_TESTDATA={0x5c, 0x45, "c635ea5fb984b5da27489917858883fb9a90946d0d7d204ee01a03c92993266516fa044bee8e736420c2bfca0e6c924dcb3877c72b4039eb7041b2aea10a30549fd9421a00654690c174bba186dc7ec1d6980aff824ce929"}]}, 0x10bc}, 0x1, 0x0, 0x0, 0x50}, 0x240000d4) syz_open_dev$char_usb(0xc, 0xb4, 0x1f) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000001780)={'dummy0\x00', {0x2, 0x0, @loopback}}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x53}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x4011) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f00000018c0), 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x14c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x9}, {0xff, 0x3}, {0x2, 0x1}, {0x7, 0x7}, {0x4, 0x5}, {0x8, 0x3}, {}, {0x8, 0x1}, {0x8, 0x2}, {0x7}, {0x4, 0x3}, {0x1, 0x2}, {0xff, 0x5}], "ec51374b1283ee7c"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x3f, 0x1}, {0x5}, {0x2, 0x5}, {0xeb, 0x7}, {0x3a, 0x4}, {0x81, 0x4}, {0xf2, 0x7}, {0xf6, 0x1}, {0x7, 0x2}, {0x40}, {0x4, 0x5}, {0x4, 0x5}, {0x2, 0x2}, {0x3, 0x4}, {0x1}, {0x3f, 0x4}, {0x1, 0x3}], "5c9356fd4aa578e5"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xf9, 0x3}, {0x19}, {0xff, 0x4}, {0xd5, 0x5}, {0x2, 0x6}, {}, {0x7, 0x3}, {0x6b, 0x4}, {0x0, 0x6}, {0x3, 0x6}, {0x40}, {0x1f, 0x4}, {0x4, 0x5}, {0x40, 0x2}, {0x4, 0x7}], "7754e7256fcfbb6a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x81, 0x4}, {0x9, 0x2}, {0x4, 0x1}, {0x8, 0x5}, {0x7, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x20, 0x7}, {0x4, 0x2}, {0x7, 0x1}, {0x0, 0x6}, {0x8, 0x3}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0x7}, {0x81, 0x6}, {0x6f, 0x3}], "f9a69ba772621ee7"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3f, 0x6}, {0x1f, 0x4}, {0x2}, {0x2b}, {0x65, 0x4}, {0x9, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x20, 0x6}], "bff673a51390d295"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7}, {0xfe, 0x5}, {0x1}, {0xbf, 0x5}, {0x80, 0x4}, {0x1, 0x3}], "e6fe84da0bb0b993"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x93, 0x1}], "fd2783b97f3cf868"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xd7, 0x7}, {0x1}, {0x8, 0x7}, {0x4, 0x1}, {0x3f, 0x7}, {0x59, 0x5}, {0x78, 0x7}, {0x6}, {0xd3, 0x4}, {0xf9, 0x2}, {0x2}, {0x39, 0x1}, {0x67}, {0xff, 0x3}], "332a8e1b8c972efd"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001b40)) capget(&(0x7f0000001b80)={0x19980330, 0xffffffffffffffff}, &(0x7f0000001bc0)={0x36, 0x1000, 0x81, 0x7, 0x7ff, 0x7}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001c00)) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000001c40)=""/26) [ 2017.093336][ T3179] input: syz0 as /devices/virtual/input/input1223 02:18:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @dev, @multicast2}, &(0x7f0000000500)=0xc) pidfd_send_signal(0xffffffffffffffff, 0x19, &(0x7f0000000540)={0x5, 0x2, 0x3}, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x1d6c) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000280)=""/142, 0x8e}], 0x4) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2017.214159][ T3208] input: syz0 as /devices/virtual/input/input1224 [ 2017.291620][ T3214] input: syz0 as /devices/virtual/input/input1225 02:18:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x1d, 0xaa4) 02:18:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:09 executing program 4: request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='^:\'*\x00', 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000001c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x3, 0x7f}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0x104, 0x0, &(0x7f0000000140)="e460cdfbef2408000000fd9286dd6a", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 02:18:09 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x1e, 0x53, 0x12, 0x8, 0x3f0, 0x70c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x31, 0x35}}]}}]}}, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@hci, &(0x7f0000000280)=0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000480)={0x6, 'wlan1\x00', {0x9b}, 0x7fff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000240)={0x3c, r3, 0x105, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x40c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r7, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r10, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80000}, 0x40000) 02:18:09 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x66, 0x23, 0xf, 0x40, 0x17ef, 0x7203, 0xe1dd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x47, 0x7c, 0x34}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "1b65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)={0x0, 0x0, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xb7, 0x49, 0x3f, 0x20, 0x13b1, 0x18, 0xf123, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd, 0xd, 0x72, 0x2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0xfffffffffffffd89}}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001240)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000001900)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000140)={0x20, 0x0, 0x1, "a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 02:18:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:09 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="000000bda859d4132d5098d1b29dd398d4000000000044893c9dd459fdbe086f1a"], 0x1555555555555641}) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)=""/4096, 0x1000) 02:18:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24ca0220}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="feb4522172c38ca0736751b16d65104f55e8c4848813e22fe91e13241451d3090000000000000000082fec58a24a1604402d72000000af3eddc91cbc31b114ce0d3779b8381a46a00000dddabb25f284863e9abff55106b497e8a5368a52a08e6ab69423e77ec8ad00f43e40d5f345a08af973f2e8c6e13712f3f85cde00883d20e02e814cd033e2c97ac186fc2bce95ef435a9dbdd9213240e445b967b046d61f42f834cba8c93729d3e0b4e19aaa6bb836e392621a5224ea0390150965f78bb17bda43658ae8595c4336610655"], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16, @ANYBLOB="00012dbd7000f1dbdf2501000000200001801400020069703665727370616e3000000000000008000100", @ANYRES32, @ANYBLOB="980002800c00018008000100000000002400018008000100010000000800010003000000080001000300000008000100080000000c00018008000100030000004c0001800800010006000000080001000500000008000100080000000800010006000000080001000000000008000100020000000800010004000000080001000500000008000100030000000c0001800800010002000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24040081}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)={0x12ac, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "bde4e7a2695cc4c359541a40560a89ee76d13760d9d4ec06df673df88e2206fda88363c7760f174bee6acbc18685898d5fe6c419ce6031065b2edf16d34efa8ce3266522ab9bacbe29e647fa94f805af3ad946466e1bde1261c49eeb8c885bc41af63c3d687d1fe828688a822d0752c164fdeca00cf7237efaa539922d64b175cc7361a3280ec266c17a858f"}]}, @ETHTOOL_A_WOL_MODES={0x11fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "ecb425a0ffadfcdeaad6aee593a87f7db7adde5273f9be1ff9575dd60555a930d32e81437185e4d6474dfa113f06195f1be63b2f3f8fbcfc34cd7014d0a062401c9b79d1b29b92d819a366455dc52d67e2c0fc58b52191a439047d7507c7d1784ddb711f00d3c46046c5cff0b1fd2d8d1f3fdbd686fd1c41"}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "cb3246ebea1e7ba2d4554cc0bdfdf38169d5a191c791111ba5e50a9be395eeeb854d1d41c00f4901d6a6d0d5e358e819e30a76e4290e3517da1fd957b8cf5311001ebe7cb1f8037ff9e0583e4f596e504a4d2eaed6ee22498217196dfb996bdae044e65881937c3f3a83117cf063479ea4d74d4945df6b4e54807fd5ec"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ';\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x2b, 0x2, '\x00\x83Y\x86\xa7Q\x81-\x13\x14\xa0M=\x10i\x1bh\x05\xd5\x97;\xee\x17Kn\xf4\xee}\x17\xbcA\x15N\x0e\x98\x94\xfc\xb4\xe2'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\{\x00'}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '){\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+^$@@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "51cc71606bf8cdb1f625e5056e37ece2dbf38023f839c608ff26e2c482"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}]}, 0x12ac}, 0x1, 0x0, 0x0, 0x805}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc010000c5598c0061219dc7f805a52b47f02445b4108b1c1a8ded4497713846f40b", @ANYRES16, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0xe4}, 0x14000815) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x7, 0x6, 0x10, @remote, @private0={0xfc, 0x0, [], 0x1}, 0xf2f6e7be383c4379, 0x8, 0xffff, 0x5}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="04002abd7000fddbdf2516000000050002000100000005000400010000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000000000008366772650000000000e600"/34], 0x5c}}, 0x20004000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x5, 0x9, 0x8, @private0, @dev={0xfe, 0x80, [], 0xe}, 0x80, 0x0, 0x101, 0x6}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xa0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2017.899284][ T870] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2017.923998][ T3239] input: syz0 as /devices/virtual/input/input1226 [ 2017.939255][ T1590] usb 5-1: new high-speed USB device number 5 using dummy_hcd 02:18:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2018.139243][ T870] usb 1-1: Using ep0 maxpacket: 8 [ 2018.199242][ T1591] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2018.269302][ T870] usb 1-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 2018.278386][ T870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.287754][ T870] usb 1-1: config 0 descriptor?? [ 2018.339487][ T1590] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=e1.dd [ 2018.341542][ T870] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2018.350643][ T1590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.358767][ T870] usb-storage 1-1:0.0: Quirks match for vid 03f0 pid 070c: 8000 [ 2018.364581][ T1590] usb 5-1: config 0 descriptor?? 02:18:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x1e, 0xaa4) 02:18:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x87, @rand_addr=0x64010101, 0x4e20, 0x2, 'sh\x00', 0x0, 0x2, 0x44}, {@rand_addr=0x64010102, 0x4e24, 0x0, 0xdc, 0x1f, 0x400}}, 0x44) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x0, 0x6, 0x53, @dev={0xfe, 0x80, [], 0x18}, @remote, 0x20, 0x20, 0x6, 0xcb8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xff, 0x4, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, 0x8000, 0x1, 0x0, 0x9}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x20, 0x33d9, 0x28, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x80, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x64, 0x85da, 0x40, @dev={0xfe, 0x80, [], 0x13}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x8, 0x2}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x150, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2018.460744][ T3265] input: syz0 as /devices/virtual/input/input1228 [ 2018.546547][ T4026] usb 1-1: USB disconnect, device number 78 [ 2018.599299][ T1591] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2018.679259][ T1591] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2018.690151][ T1591] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2018.700582][ T1591] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2018.710748][ T1591] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2018.720878][ T1591] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2018.731431][ T1591] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2018.979190][ T1591] usb 2-1: string descriptor 0 read error: -22 [ 2018.985490][ T1591] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2018.995171][ T1591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.069191][ T1590] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2019.279228][ T1591] cdc_ncm 2-1:1.0: bind() failure [ 2019.284995][ T1591] cdc_ncm 2-1:1.1: bind() failure [ 2019.291614][ T1590] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2019.302415][ T1591] usb 2-1: USB disconnect, device number 23 [ 2019.308775][ T1590] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 2019.319114][ T870] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2019.589076][ T870] usb 1-1: Using ep0 maxpacket: 8 [ 2019.719143][ T870] usb 1-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 2019.728264][ T870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.737117][ T870] usb 1-1: config 0 descriptor?? [ 2019.779681][ T870] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2019.787208][ T870] usb-storage 1-1:0.0: Quirks match for vid 03f0 pid 070c: 8000 02:18:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2019.983591][ T870] usb 1-1: USB disconnect, device number 79 [ 2020.009031][ T4031] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2020.429033][ T4031] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2020.509044][ T4031] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2020.519921][ T4031] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2020.530395][ T4031] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2020.540448][ T4031] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2020.550487][ T4031] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2020.560460][ T4031] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2020.808983][ T4031] usb 2-1: string descriptor 0 read error: -22 [ 2020.815202][ T4031] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2020.824797][ T4031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.889243][ T3231] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2020.949033][ T1590] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2020.959052][ T1590] asix: probe of 5-1:0.0 failed with error -71 [ 2020.966130][ T1590] usb 5-1: USB disconnect, device number 5 [ 2020.979012][ T4031] cdc_ncm 2-1:1.0: bind() failure [ 2020.984768][ T4031] cdc_ncm 2-1:1.1: bind() failure [ 2020.991168][ T4031] usb 2-1: USB disconnect, device number 24 [ 2021.698861][ T4031] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2022.058894][ T4031] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=e1.dd [ 2022.067921][ T4031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.078226][ T4031] usb 5-1: config 0 descriptor?? 02:18:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x722, 0x5, 0x9, 0x10000, 0x0, 0x0, 0x3}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000580)=""/246, 0xf6}, 0x10000}], 0x3, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x4, 0x3, 0x0, 0x0, 0x2, 0x7}, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x48) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46800) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x100000000, 0x4}) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7d) 02:18:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x4e7, 0x20003, 0xce, 0x81, 0x0, 0xfffffffd}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x40) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{0x81, 0x7, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x21, 0xaa4) 02:18:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:14 executing program 1: mknod(&(0x7f0000000040)='./bus\x00', 0x8591, 0x2000000) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[], 0x1) r1 = open(&(0x7f00000001c0)='./bus\x00', 0xa02, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r0, 0x0, 0xffffffff, 0x0) [ 2022.246170][ T4031] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2022.274335][ T4031] asix: probe of 5-1:0.0 failed with error -71 [ 2022.288838][ T4031] usb 5-1: USB disconnect, device number 6 02:18:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fc0) 02:18:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fc0) 02:18:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fc0) [ 2022.564826][ T3337] input: syz0 as /devices/virtual/input/input1232 02:18:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc0000b, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000300)=ANY=[]) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) 02:18:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200fc0) 02:18:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2022.667302][ T3351] input: syz0 as /devices/virtual/input/input1234 02:18:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200fc0) 02:18:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x17ef, 0x6047, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) 02:18:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x1, 0x0, 0xce, 0x5, 0xfffffffc}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sched_yield() ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:15 executing program 1: clone(0x2000000002100500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x35, 0x4, 0x3e8, 0x0, 0x0, 0xe8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond=[0x1d], 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x438) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r1, 0x8929, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3ff8000}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0xc0) 02:18:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCGIFMTU(r2, 0x8990, &(0x7f0000000040)={'geneve0\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40007, 0x0}}], 0x4000000000003be, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002480)={{}, r6, 0xe, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000050000000000000008000000000000000000000000000000000000000000003c3500060000000000000066cd000000"]}, @subvolid}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000880)={{}, r6, 0x10, @inherit={0x70, 0x0}, @devid}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000003a40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000340)={0x11, 0x4, {0x401, @struct={0x6, 0x9}, r8, 0x7ff, 0x2, 0x1f, 0x5a1, 0x23, 0x0, @usage, 0x80000000, 0x8, [0x0, 0x4, 0x6, 0x7, 0x7]}, {0x0, @struct={0x5}, 0x0, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, @usage, 0x8000, 0x3, [0x0, 0x10000, 0x1, 0x8c, 0x34, 0x1]}, {0x5, @struct={0x5498, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x2, [0x80000001, 0x1, 0x0, 0x6]}, {0xffffffff, 0xffffffffffffff01, 0x9}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000180)={{}, r6, 0x10, @inherit={0x90, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x9, {0x39, 0x8, 0x101, 0x0, 0x5}, [0x3, 0x2, 0xcd, 0xfffffffffffffff8, 0x2, 0xffffffff, 0xffffffffffffffe1, 0x3, 0x8738]}}, @devid=r8}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000300)={r8, 0x100, 0x2}) 02:18:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x22, 0xaa4) 02:18:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6300, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r1, 0x8929, &(0x7f0000000040)) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 02:18:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200fc0) [ 2023.327775][ T3371] x_tables: duplicate underflow at hook 2 [ 2023.335629][ T3372] input: syz0 as /devices/virtual/input/input1236 [ 2023.339384][ T3371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=3371 comm=syz-executor.1 [ 2023.359210][ T3384] x_tables: duplicate underflow at hook 2 02:18:15 executing program 4: sync() r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x30004050}, 0x10) read(r0, 0x0, 0x0) 02:18:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000240)={0x3c, r3, 0x105, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x42a}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40100, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x74) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x1f, 0x9c4e, 0x11, 0x7, 0xb, 0x0, 0x6, 0x49, 0xffffffffffffffff}) r2 = fsmount(r1, 0x1, 0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x10000000}) syz_io_uring_setup(0x6b16, &(0x7f00000000c0)={0x0, 0xcbcb, 0x1, 0x1, 0x1a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000200)={0xe, 0x0, 0x5, 0x13, 0xa, 0x5, 0x0, 0x1a}) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}]}, 0x68}}, 0x40) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x201, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x80) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000500)=0x1) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x2c8, &(0x7f0000000540)={[{0x6f, 0x4e00, "869665147f7081d67fca5178cd6d517ec2c09625b40df6a1c2dc919a2160c1aa5ac1115a306cf4d4767aa61fbc9f88f5e60fe31f53b34d00999f8f8c234b3b00e6af9ac1b992eecb240c58939442bd84236214d4cd4f5f8b46e9e84c2bed35df1b12a52b0d9a12650354bae992329b"}, {0x25, 0x4e00, "08adc992ba643a3dc80d5700b77e583c3b0c1e883894547a4d8a4066d6f798b6a9022e2374"}, {0x15, 0x4e00, "04d2148136ec7f9b30cb38a75685caa9117c88471c"}, {0xfe, 0x4e00, "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"}, {0xbd, 0x4e00, "27634b9f8d6132f4c4e849c87621ac95544009b9b91c6d6e14a3154da9900ab067d6ed850753966cd71c78c6cc9392df00b14d59f6874fa6fe8037345d6d38434e45531d2305ddfa43eeaba1e1cd1d9e267122e26d21bc532d6d768d5b914cb78d411b757030325d2587d371c14233f4ab82c219cabf5004115bf44549ac101432aa9c938bba49102459249184a9d4a2db7e5f5b8cb344f541f8da2b2d8db20fb0faeca3650482cd1224da6179196b2e3f1ec714d296c15316ba348844"}, {0x3f, 0x4e00, "b958d0955fb1982cc60223a6154009978c421f101e40bb4b5f0d3cf152532fd4d71790e58094b018adbb982dc87cfac4cf720cf4e2dd496a96fda1ef6321ab"}]}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff}, 0xc000) write$P9_RAUTH(r7, &(0x7f0000000880)={0x14, 0x67, 0x2, {0x0, 0x0, 0x8}}, 0x14) getsockname$inet(r5, &(0x7f00000008c0)={0x2, 0x0, @multicast1}, &(0x7f0000000900)=0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000940)=0x202520, 0x4) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000980)) [ 2023.408063][ T3402] input: syz0 as /devices/virtual/input/input1237 [ 2023.414869][ T3394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=3394 comm=syz-executor.1 [ 2023.431894][ T3408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=3408 comm=syz-executor.1 02:18:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fsmount(r1, 0x0, 0xf4) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x1000, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000400000002000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000001bcdc81909b3d96f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000000000000000000000000000000000000000e6677aa2c5821ae60000000002"], 0x290) close(r2) 02:18:15 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000faff0046c10b00000000000004000000000000009500000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x1d6c) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000002100)={0x18, 0x7ffffffffffffff4, r2}, 0x18) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000002140)=""/4096) [ 2023.487296][ T3419] input: syz0 as /devices/virtual/input/input1238 [ 2023.536962][ T3433] input: syz0 as /devices/virtual/input/input1239 [ 2023.608685][ T4031] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2023.988675][ T4031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2023.999681][ T4031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2024.011395][ T4031] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 2024.020494][ T4031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.029199][ T4031] usb 1-1: config 0 descriptor?? [ 2024.502052][ T4031] lenovo 0003:17EF:6047.00C4: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 2024.699967][ T4031] usb 1-1: USB disconnect, device number 80 [ 2025.478434][ T1590] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2025.838463][ T1590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2025.849353][ T1590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2025.859114][ T1590] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 2025.868114][ T1590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.876834][ T1590] usb 1-1: config 0 descriptor?? [ 2026.169954][ T1590] lenovo 0003:17EF:6047.00C5: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 02:18:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) 02:18:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}, {0x5d1, 0x5, 0x80, 0x81}, {0xff, 0x3, 0x0, 0x3ff}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 02:18:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:18 executing program 1: ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='veth0_to_hsr\x00'}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x86001, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000007040)='/proc/self/net/pfkey\x00', 0x545001, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000e10000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, [], 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000007080)=0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) rt_tgsigqueueinfo(r4, r5, 0xc, &(0x7f00000070c0)={0x3e, 0x0, 0x8}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000007000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c6d0000", @ANYRES16=r6, @ANYBLOB="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"/27926], 0x6d1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20080000) 02:18:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a050c03000000000001090224ff0f00000000000000000903000000092100000001222900090581030000000000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$sock(r4, &(0x7f00000004c0)={&(0x7f0000000280)=@sco={0x1f, @fixed={[], 0x12}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000380)="c45e94ac8bdd2dc80ea949dc07653d4384cc86c1d76ecbd4614e4082e4a8fe6a7cba8bae4261d01db7edd6925834315d683e8608b4c9c378d966ee50122a54148e980f7b125915e1a06770727fa114000d5745c7868b708ba88344b4e45a75315d9c736d35f7d3815a11a01dfbaf66d03fc7d809aff83f982851869b809b0665e42317061355b7e7c51374fb40228950d476c2ee8c1215fddaff0eb4a91139df5bb5179ac249befda0a827e034af9b9477052af37c5e86dca8960882be86de0f9d8829c4155e58e6d1ebf5e6750bc76f245944b76b0d4b", 0xd7}], 0x1, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x800}}], 0x18}, 0x4ce9c44c247ea631) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1e, &(0x7f0000000100)={0x18, 0x635}) r5 = signalfd4(r1, &(0x7f0000000180)={[0x2]}, 0x8, 0x80800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x800, 0x7, {{0xa, 0x4, 0x3, 0x7, 0x28, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @loopback, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0xf, "d6c2ef7f71b71d66babca268da"}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000540)={@empty, r6}, 0x14) 02:18:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x23, 0xaa4) 02:18:18 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='block_bio_queue\x00', r0}, 0x10) r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x7) 02:18:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) [ 2026.321743][ T4031] usb 1-1: USB disconnect, device number 81 [ 2026.348234][ T3454] input: syz0 as /devices/virtual/input/input1240 02:18:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000100)={0x4, 0x28, [], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2026.410175][ T3477] input: syz0 as /devices/virtual/input/input1242 02:18:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) [ 2026.462673][ T3482] input: syz0 as /devices/virtual/input/input1243 02:18:18 executing program 1: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0x5, "5fcd637c1ae995"}, 0x9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 02:18:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0xfffe, 0x9, 0x8, 0x6}, 'syz1\x00', 0x3d}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2026.538742][ T22] audit: type=1326 audit(3201128298.489:79): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3489 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x7ff00000 [ 2026.564484][ T3492] input: syz0 as /devices/virtual/input/input1244 02:18:18 executing program 2 (fault-call:10 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2026.580028][ T22] audit: type=1326 audit(3201128298.489:80): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3489 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=1 compat=0 ip=0x4176f1 code=0x7ff00000 [ 2026.604724][ T22] audit: type=1326 audit(3201128298.489:81): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3489 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=1 compat=0 ip=0x4176f1 code=0x7ff00000 [ 2026.636181][ T3498] input: syz1 as /devices/virtual/input/input1245 [ 2026.637837][ T3500] FAULT_INJECTION: forcing a failure. [ 2026.637837][ T3500] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.660228][ T22] audit: type=1326 audit(3201128298.489:82): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3489 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45de59 code=0x7ff00000 [ 2026.664745][ T3500] CPU: 1 PID: 3500 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2026.692489][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2026.702551][ T3500] Call Trace: [ 2026.705827][ T3500] dump_stack+0x1b0/0x21e [ 2026.710137][ T3500] ? devkmsg_release+0x11c/0x11c [ 2026.715077][ T3500] ? show_regs_print_info+0x12/0x12 [ 2026.720257][ T3500] ? avc_denied+0x1c0/0x1c0 [ 2026.724757][ T3500] should_fail+0x6fb/0x860 [ 2026.729156][ T3500] ? setup_fault_attr+0x2b0/0x2b0 [ 2026.734245][ T3500] ? avc_has_perm+0xbd/0x260 [ 2026.738832][ T3500] ? avc_has_perm+0x15f/0x260 [ 2026.743490][ T3500] ? alloc_pipe_info+0xa1/0x3a0 [ 2026.748322][ T3500] should_failslab+0x5/0x20 [ 2026.752824][ T3500] kmem_cache_alloc_trace+0x39/0x270 [ 2026.758092][ T3500] alloc_pipe_info+0xa1/0x3a0 [ 2026.762747][ T3500] splice_direct_to_actor+0x94e/0xb00 [ 2026.768096][ T3500] ? avc_has_perm+0xbd/0x260 [ 2026.772677][ T3500] ? match_file+0x120/0x120 [ 2026.777159][ T3500] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 2026.782508][ T3500] ? do_splice_direct+0x3d0/0x3d0 [ 2026.787511][ T3500] ? pipe_to_sendpage+0x300/0x300 [ 2026.792531][ T3500] ? security_file_permission+0x128/0x300 [ 2026.798240][ T3500] do_splice_direct+0x279/0x3d0 [ 2026.803070][ T3500] ? splice_direct_to_actor+0xb00/0xb00 [ 2026.808609][ T3500] ? security_file_permission+0x128/0x300 [ 2026.814305][ T3500] do_sendfile+0x89d/0x1110 [ 2026.818794][ T3500] ? compat_writev+0x390/0x390 [ 2026.823553][ T3500] ? security_file_permission+0x128/0x300 [ 2026.829260][ T3500] ? vfs_write+0x427/0x4f0 [ 2026.833664][ T3500] ? fput_many+0x42/0x1a0 [ 2026.837971][ T3500] __x64_sys_sendfile64+0x1ae/0x220 [ 2026.843151][ T3500] ? __ia32_sys_sendfile+0x240/0x240 [ 2026.848416][ T3500] do_syscall_64+0xcb/0x150 [ 2026.852903][ T3500] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2026.858776][ T3500] RIP: 0033:0x45de59 [ 2026.862650][ T3500] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2026.882230][ T3500] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2026.890617][ T3500] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2026.898593][ T3500] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2026.906544][ T3500] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2026.914496][ T3500] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000000 [ 2026.922445][ T3500] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2026.938313][ T4031] usb 1-1: new high-speed USB device number 82 using dummy_hcd 02:18:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x0, "9af0c90a865c71"}, 0x9, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f00000011c0)=ANY=[], 0x5000, 0x0) llistxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0xf, 0x9, 0x2, 0xa, 0x0, 0x2, 0x1, 0x131, 0x1}) 02:18:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000100)={0x1, 0x3, 0x1, 0x1}) socketpair(0x1a, 0x4, 0x20, &(0x7f00000003c0)) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x401, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x88400, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032abd7000fcdbdf25050000000800010070636900110002c66e9b58303a30303a31302e30000008000800030001000000080001007063690011000200303030303a30308ed846623019fd6f1add5eb73a31302e30"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) 02:18:19 executing program 2 (fault-call:10 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2027.191378][ T3509] FAULT_INJECTION: forcing a failure. [ 2027.191378][ T3509] name failslab, interval 1, probability 0, space 0, times 0 [ 2027.208264][ T3509] CPU: 1 PID: 3509 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2027.208478][ T3508] input: syz0 as /devices/virtual/input/input1246 [ 2027.218333][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2027.218337][ T3509] Call Trace: [ 2027.218355][ T3509] dump_stack+0x1b0/0x21e [ 2027.218363][ T3509] ? devkmsg_release+0x11c/0x11c [ 2027.218373][ T3509] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2027.218382][ T3509] ? show_regs_print_info+0x12/0x12 [ 2027.218389][ T3509] ? avc_denied+0x1c0/0x1c0 [ 2027.218396][ T3509] should_fail+0x6fb/0x860 [ 2027.218402][ T3509] ? setup_fault_attr+0x2b0/0x2b0 [ 2027.218409][ T3509] ? setup_fault_attr+0x2b0/0x2b0 [ 2027.218421][ T3509] ? avc_has_perm+0xbd/0x260 [ 2027.281267][ T3509] ? avc_has_perm+0x15f/0x260 [ 2027.285926][ T3509] ? kcalloc+0x32/0x60 [ 2027.289974][ T3509] should_failslab+0x5/0x20 [ 2027.294453][ T3509] __kmalloc+0x5f/0x2c0 [ 2027.298590][ T3509] ? kmem_cache_alloc_trace+0xc3/0x270 [ 2027.304025][ T3509] kcalloc+0x32/0x60 [ 2027.307902][ T3509] alloc_pipe_info+0x1b9/0x3a0 [ 2027.312646][ T3509] splice_direct_to_actor+0x94e/0xb00 [ 2027.317995][ T3509] ? avc_has_perm+0xbd/0x260 [ 2027.322574][ T3509] ? match_file+0x120/0x120 [ 2027.327067][ T3509] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 2027.332433][ T3509] ? do_splice_direct+0x3d0/0x3d0 [ 2027.337439][ T3509] ? pipe_to_sendpage+0x300/0x300 [ 2027.342450][ T3509] ? security_file_permission+0x128/0x300 [ 2027.348152][ T3509] do_splice_direct+0x279/0x3d0 [ 2027.353022][ T3509] ? splice_direct_to_actor+0xb00/0xb00 [ 2027.358552][ T3509] ? security_file_permission+0x128/0x300 [ 2027.364341][ T3509] do_sendfile+0x89d/0x1110 [ 2027.368826][ T3509] ? compat_writev+0x390/0x390 [ 2027.373583][ T3509] ? security_file_permission+0x128/0x300 [ 2027.379288][ T3509] ? vfs_write+0x427/0x4f0 [ 2027.383683][ T3509] ? fput_many+0x42/0x1a0 [ 2027.387994][ T3509] __x64_sys_sendfile64+0x1ae/0x220 [ 2027.393180][ T3509] ? __ia32_sys_sendfile+0x240/0x240 [ 2027.398447][ T3509] do_syscall_64+0xcb/0x150 [ 2027.402933][ T3509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2027.408803][ T3509] RIP: 0033:0x45de59 [ 2027.412678][ T3509] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2027.418253][ T4031] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 2027.432278][ T3509] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2027.432287][ T3509] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2027.432291][ T3509] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2027.432295][ T3509] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2027.432306][ T3509] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000001 [ 2027.458210][ T4031] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2027.464879][ T3509] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2027.509394][ T4031] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 15 [ 2027.519062][ T4031] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 2027.528078][ T4031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.537636][ T4031] usb 1-1: config 0 descriptor?? [ 2027.555989][ T3508] input: syz0 as /devices/virtual/input/input1247 02:18:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000017002703c41f7000ca9804ffcca5fc367f2c1600"/36], 0x18}}, 0x0) fchmod(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f00000000c0)={0x1, 0x1f}) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)='{', 0x1}], 0x1) close(r1) unlink(0x0) r3 = eventfd(0x8d) read$eventfd(r3, &(0x7f0000000000), 0x8) 02:18:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x24, 0xaa4) 02:18:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2a) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:18:21 executing program 1: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0201fdffffff0acb0000ff45ac0000ffffff8500e93103000000000000008000000063000000e100e2ff877700720030070085ffffff00000000008000da55aa", 0x40, 0x1c0}]) 02:18:21 executing program 2 (fault-call:10 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:21 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 02:18:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:21 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x8200) symlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00') getresgid(&(0x7f0000001f80), &(0x7f0000001fc0), &(0x7f0000002000)) [ 2029.480215][ T1590] usb 1-1: USB disconnect, device number 82 [ 2029.508306][ T3543] input: syz0 as /devices/virtual/input/input1248 [ 2029.525140][ T3544] FAULT_INJECTION: forcing a failure. 02:18:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x0, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000ff9000/0x2000)=nil) 02:18:21 executing program 0: r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000d80)={0x14, 0x0, &(0x7f0000000cc0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00032a0000002a037afa3967214989661c85465abddf9ccfe0359fdd77fbb4e2cc59c2e5f5411e69dc19ef4dbe812b5fc09e4151813c932cd154193f60c5fdf57d314f6bdaa598c92375e7fab3fb4e0deb83b8"], 0x0, 0x0, 0x0}, 0x0) [ 2029.525140][ T3544] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2029.534370][ T3549] input: syz0 as /devices/virtual/input/input1249 [ 2029.555121][ T3544] CPU: 1 PID: 3544 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2029.565192][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2029.575234][ T3544] Call Trace: [ 2029.578517][ T3544] dump_stack+0x1b0/0x21e [ 2029.582829][ T3544] ? devkmsg_release+0x11c/0x11c [ 2029.587737][ T3544] ? show_regs_print_info+0x12/0x12 [ 2029.592928][ T3544] ? unwind_get_return_address_ptr+0x130/0x130 [ 2029.599048][ T3544] should_fail+0x6fb/0x860 [ 2029.603456][ T3544] ? setup_fault_attr+0x2b0/0x2b0 [ 2029.608455][ T3544] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2029.613802][ T3544] ? xas_load+0x46f/0x4c0 [ 2029.618115][ T3544] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2029.623629][ T3544] ? find_get_entry+0x5da/0x670 [ 2029.628446][ T3544] ? xa_load+0x323/0x340 [ 2029.632655][ T3544] __do_page_cache_readahead+0x244/0x510 [ 2029.638258][ T3544] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2029.644669][ T3544] ? unwind_next_frame+0x1c07/0x22b0 [ 2029.649943][ T3544] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2029.655631][ T3544] generic_file_read_iter+0x626/0x20a0 [ 2029.661064][ T3544] ? find_get_pages_range_tag+0xae0/0xae0 [ 2029.666750][ T3544] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2029.672091][ T3544] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2029.678128][ T3544] generic_file_splice_read+0x491/0x780 [ 2029.683652][ T3544] ? splice_shrink_spd+0xb0/0xb0 [ 2029.688571][ T3544] ? security_file_permission+0x1e9/0x300 [ 2029.694255][ T3544] ? splice_shrink_spd+0xb0/0xb0 [ 2029.699157][ T3544] splice_direct_to_actor+0x3cf/0xb00 [ 2029.704507][ T3544] ? do_splice_direct+0x3d0/0x3d0 [ 2029.709498][ T3544] ? pipe_to_sendpage+0x300/0x300 [ 2029.714492][ T3544] ? security_file_permission+0x128/0x300 [ 2029.720200][ T3544] do_splice_direct+0x279/0x3d0 [ 2029.725031][ T3544] ? splice_direct_to_actor+0xb00/0xb00 [ 2029.730549][ T3544] ? security_file_permission+0x128/0x300 [ 2029.736247][ T3544] do_sendfile+0x89d/0x1110 [ 2029.740725][ T3544] ? compat_writev+0x390/0x390 [ 2029.745455][ T3544] ? security_file_permission+0x128/0x300 [ 2029.751141][ T3544] ? vfs_write+0x427/0x4f0 [ 2029.755523][ T3544] ? fput_many+0x42/0x1a0 [ 2029.759820][ T3544] __x64_sys_sendfile64+0x1ae/0x220 [ 2029.764998][ T3544] ? __ia32_sys_sendfile+0x240/0x240 [ 2029.770262][ T3544] do_syscall_64+0xcb/0x150 [ 2029.774733][ T3544] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2029.780590][ T3544] RIP: 0033:0x45de59 [ 2029.784451][ T3544] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2029.804036][ T3544] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2029.812414][ T3544] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2029.820356][ T3544] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 02:18:21 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x4, &(0x7f0000000100)={0x0, 0x34, 0x1, @thr={&(0x7f0000000240)="7ef77deb509a7400d9809f58a5531a8a5248dd1fb80c1fda5c89d65d601f46383c1081a4102b20d1d910ef5ede8f14cd55ebf796b813b0a3e38a1eb447cdfd0729010e154217c922471caf762ec84afef2455e33bd59900b481359851f88bb327ddffee259b693bcfc54164dd12a59d2f3837e65569df303e20d860cbe744ab3af1ca187b7e14c64ea5d50ef328be26cb31b08e77d62d7af8e9be7ecd42c693521926bb3ce7fc00203d7fc549895b68a8de709850d9fb45382530c16aca1ac4ef1d581de349ef019ae86cba936bb6e657f940695b3f551ab389afaf22cd51fcd505b7081c9f3c23819f486b7f48f4cf3fbd8a69c5c7bbb29edfe53fdb851f7214974c660f3b79af1f94820482b90617881c6e7bf2a2632396026758851aebbaf5291a6c55a7715536086832116f668357f9a8c8e20db3eeef817b76c6f621099770de914343412c85344b78cdbc4d96bd9485f4c347104841bd2e19b3245a7ea9297c7804d99d08cad6bd2c69696abeb7561f0847e15a56e5ed1f1198397588d5160a8b7ddc8e08ec81b7668b61036ee1f5909116b02be974898d712141a8aaf588de9b89cc2770b455b43ee5a1afa357a3be6a121dabaef78a4eaad49564ac3d2cd5f81b06562df1da39cf906cb2ffbdb6960befbb7ac13d8f52158fc112793bd4626747258e3477afc20789648a6dbea84ec35c4fb8035baaf7ebe7b84fac39c28de633d4aede0690d7bad596ab7622b4fb72582b3b99b0cc1249be80bd691e8be14f39ab405cdd21d0dd6591e9acfaba7934f8b121e0be477ff7a5a4916665373653394c4d2e10019b2efb6631a6ded6305e05899c2a218fab5a0ddd69057625634b0e6a871dd04ba2b86ee4dcff9336fb6808d6c732c1583c932e5ddcee7fcf60600b09ee67f7e4e30cfa99864ae7949f661cb8d6bc418e6d0bd35b41860f02e6e4c29342406b4f80e06db5e197cf5b6c1a6122dcebf1f9fe06277164d7815791d4058b596b7448ff2bbd7a3283d475132b51fa46945eda4af5b6d507ede177cf0189f471c967028e553e3de7edbafc62da3d6490772e361e8f5a4007ec76e5637bab585fe830db6041654310f87aaa6adec02f19e70347524274e05b8a837ac2eecc372cd6722d86b5b5657705626ef53c8e9ec5f3d67cd0f3aab78ebeb2a1c285c424d4b38006a2ff409a73c113ffa0fc2ae50edc0df54176b40ad8463e1b4c3f898f28abcea3943e0313f4f111e49165fd619e2d1037a437c35aafd218bd93411f7a2c0d4b299a4df284e124d82888526dcee8dde9636ba9f32b932dcbb625d2a95dd56be09d073ab810f1ff1a94f7aa2bd2db93fd89694414b8249ac14bc370e3fe2b97b2bf16577f82302c2d905fe9c56fd23f58835a876532f317a9def09107e00323160630c666ba43e9e37218e5b1a5edf652e483bfa6e6e8ed669987fca664d554dce275042109f35f90354f7599570757728f7644e6c9ef5e25409285e5265d1bc13d16e2af27d009412986b29a46f85a55d4330676d7eea2e9c4d63c620cd33da398745a6825254d56f1652ed57c28205e87e29ab78036bd9391d5d4d0c9c3156ce5a0270d5f810afb298d945ac518e977d0fd52bec08d037d0333db113dce6b5ee11509d9acf79a8c91f28bf2416aea44cb213ff293eb566c0e7bc1aeaafcf8df8482570034c27203fc143b5c3587f6fb9bf70508211668248dd00614b2e0bbdfa031d828e1b7c7c1bca3cc47ab30fcffff4244b54c70bfeb9df05ae3a3d7ca243b905520fb8deaac39450d49de9c44b183021421b83052ecda56db8903f65945d3d4e175988eb838d2a3e91f7340d74ecae89c8585d174a722095500e2c27b9061ab33bf195db3c3387bf4702bcaabe60c32cdc7a715c181102b00b70c005f6cd42971446ec5999f4caf039102740173c227deaa60019c22ba6d10773564590bced957ddc888a157fe70a603eab0c65ccf28250768ea1475ce0859db879b8b06fe96b2c825c5ef62623fb279d721a4d82fe4bfc1686baa4c4f27b6b0d6f4eae0f7ca71ca76550f460d0a96b6ad76fafe20fb3661e88b009d402badba84e146aa8fca0a18fd12385cc5f3cd67a2e000f383d80522d8b3d085650dc33673a88c268a4d44c9a67148d873e06e19cc71b12d8fd59370c4194990d21bee5b1f4a8ce1b8cdca3513b75ae7e47482be5497e3e2af17e9a9aa234ff40c5387e74b1b03866522682eb5a20f15070bceb4d3221b0eeaf91066b230f792b3d973d4735ee0b226d2a9780b91093399f5ecb695026343e093c0582d4c3c2317394578765740e3e8d648d8adcf91d1723006677e9cd6e87203b021cd16adf1fa7455dc6106720363b1c75ce7622b3e0c70a290c3e1f15f3a050d8aa6c8afb438aea1bf4d14d54d5c7a4cd4e6a5b2abb16dfd32e9074362d38271f20133f8a12be1db6089c2e3e0ae480895e2e3863a2ae48662c36e591797e288caa5f08f3b80a104fb361e3ee2089da1b22a63406277f0f014915dfd4747ba4fe8b4fced5754358f1916c55145bfd6e5c833361d45b50d7823e3163628d8cdc5eb5b8bebd8c7ea9945af107794248740db6161e4fca7c89b2328480b02d8a9d7a49f659d9d0551ef728cad4656af301a0be4acdd30d7b1135270c81063c43b0451b86e8dd39a757ef0acfe484718c20958d6e5850ec70058c8c94da61bcc855bdeba1276c3dac730e939fa2d3883a5c2d97f70e9d67dfee481971cec7e4621797e62a8f33b691d27ae91234ed588ab496c503067fc534c3fa4234e8897652b24bce682c86d08d1e532974203123c2b604a8ab28be711c1f5c611401fa308c35f617ff769444274b00e0e5e7547ae5aaaae808562f17b331adc2cdae65ed6c85f1a1dd4bf9f8a3ea1d7098c3ee501b984c64db432fa51eafc3c8001c38240f638de5343c36d7152c7fd0529b0c5f2d2e6b2fd83d8a1dc95524c25a0040b7c29ba199f31f749fa6b0f1edba46e85402d637e25e84e018d737bbbf44dcac63c32b0de153e4dbf4cc61c329d0da9c9218e601809134662581d33d38890d0f76f027ba38c16d991524ef7a3d3ccd40b3e34b40180c9277dcfa98c140b45091821941c850a77139daff1d367e077df1350efa9850f7bec9d3145c3ccb0f4672f69590376b88c537f35a8c4a5fb7422717dae03c28c88543aad0f4963cf7e2a7515fc5d2d5128b4866b77ae66cc83538354c01036d3ab3565c4e50573efffadaf4cbbd541773039ab901ce257e1021832d923ad45bfc070710d87618ade5cff027783bb95fa36656eec2d4b75ff73e271da498c2bc1d97dee41f7b58b6b6e4158a87b9d8cb38ccf5942d190985a54920c991debd48cdf946f4afa7fa06cd8fbb63f9006287b033f92470c8c828155938aad120af4043273f2ccb4f9ff48c3267296f769bba3e4ec1e5cf152e2e40034f58eafdddd1561137169fd721febdecfaca505e953771e663cdfbf2c18b1519ba8584ba00121e7a7fb5ec344443ff0eb934e554161e38d5f7702b03670cb094b8ff162b1da5c4d8b2a8f9e618df3a18ffef6c98ccde4f34c3ef1ddf8736dfca6be2ae8c5dcae4b0f228550093573b90199b4ce4e82efc6e69e72fc93a6a73ec5365a96283581df2c9cf7dfb105a679a97d6dfde083d8783d8942e2ba08ccd16f3b3dd7ce3648861d7730e1e36cc61f16fb3529ab0c232b2db0530205b3d9d0b5efa3532a2e02267e3a9c6dbdcd6340b368c4f837f9b94c6f2e9decc1893cabbdfd7fc45643ecae0d817d33491c9454e7d470d5f05e37d79ff54584b1ff29099929457dba674f8c96c8b3bf4d8882e80ba12f38c96d0f0cbb0dec690c5db45a541fca18840f3bb51fe3a04b6b10668c17c7eb1919b53f6f96f4b17af5e151d9ca0d21be7d4a7539ffa7844683cf119c00aa926d163df135deed697732355ac7acbe23badb0d871c711bd88df203b86704d842376dc043b1d8bf1458b7f9ad42cc52895e534e0ecc6417d446b944ab1e5e2e8f5e1ce0b1e55e6235bc75bc89c8eb172b71c06d0c2ca2ea988c567976f75685278af52f5efd1c88fedf48bff019a27bbb55608eb75890f2956875f5b3878002ab8894a15e4bd20e577ec59ecf8b738c8c724de7ca39bd6ca60f77afd62bbe35812b5a507a420ce9aec8b9488086c6b21e0d01b237a5c5d1ed0b001d6d6a523194e2fa6de40ed5e99a444797dd24f4a4cf1b0d463ca36bf6086c197926b00093bfc040ff126b4756f03cddfc75fa06b4e9e60d2de7b35253b9ab7a4eb4785c51049b7a113f61485ca8e72967cf46918f4a604a2baf04a738daeb972e041a6451c40d0e421bed5940caf496a355540f6d13e2388fa7fbad3772689ce7ea88e61ab7cab046db5e3376c81ab7744de69e4f914138793e3d0fedf0a73a796e09c7e1d0a83fb560586ba4c880ffb4762da5816ded67936a5e2f91d90804bc6901b3574a09e840559df713ef290f2d2478cdda98d3be26808ae8c9de18846c1868f8e18a6cf6165007b2f05f600844814556ec0d4f6192e697c93dcb92357f5797720bdbc90924ed655628d3f2cee9ee134a0584cf010c94524962474801bae8809dc9acf704c692abd209e2d9e54614e4ad705816042dad1ffcc49a394962415dce779ada4434f577a8a7e86baa93484d91a1debef2b99dd629fc1be66fbc5fdae7c0b813dd59285a1293a1e7395b78683a3e7a481c3a072bd0f98c36150d2f7d2bea863da777ff4ee06ea27849eec1b49607d925152570db05c7bd4bd9c9105e8120bcb77f39af1d2a795532dc85311ab7fb9caba5c6c1d1643432ba94a81b8b05f7b8dbbdab55331d33ea90f1a20f35544ca59d47e70cb9a5db5aa87daa3b72a74d38b5b4600beeed1e7653d50e34f37024534ada024302e24b7ca5d98f3be7ca8e76f26ec09ff310c81d04422598fa033d513c57b08d7e57fb8159e872716e15f58e29705f48666090e11ce6d1365c1d2a3beadedef0401878095a79cb71c31a2eaba2668e7fba09ab8d5371c9f9080fec749c9c8beacb5995b2f87907fdaa8f3684c92ce6c873bfb440638e4cd1548fa6dbc56a1a0c94502affcb50500b78fbfa0ebb473ea54e82c1365a228af7363205d0835b9f2b51a29a0a1cb6fe671e159aa343465496c937aeaed6b3a91fb1ddcb9106d31e4e5655f554ec50e0afa56c8c089afdc1b41b122f38d95dea0c2ae829e9f16b65a6f26a8f9c8788ec3ae5401c0765d4234540207de6122ccb80d9c2488e712ef2ad1bccddc5b0cd33080ce550dc93003a5aaeb7aadc6c5a5fbcd169386bee95c92ebf84f9c011c0bb275c514d37497cad4e7492472480771cfb3f48bec94c4ff0ea31203ea96578ff3a3f4d979731f13ed6a33067d811aefb00d8bf177e1d454d1638f7c54dc2d2d9617b03ebb58dc179e140e43d8871d2671b47a0140595c5b13901e6070c521e66dd7f1e2c9de08bfcb5de9e32f4d5116534b8f9440012e8e45ea2031cfa7fcc73e8c5addce014c85106d3f98b05b4b00f4c08cfe459960ce42ab0c543951e931383f78285ef6e500b7860e9f7ec9e37d948e9d3d6d414d4f4ed8514ae655dd68d6728056e5781695aa497611cf7e6764a90c0fd19312c9b44fe5b07ddc9cfeb4d1a020a8ef00daace0fc795120092360e4dcff871fc8259c21bcee2ea55611465dac2c912042999eb0c3be37f8ac1c3dfe08b9906ea8f308956f44ffcef923ab28f928c71648dac5bdfc75fa6928e73bdf2ba5390e261344441b8febd0db1a0dad2db573619dcddd54036f10", &(0x7f0000000000)="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"}}, &(0x7f00000001c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x5000000000016) [ 2029.828309][ T3544] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2029.836264][ T3544] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000002 [ 2029.844214][ T3544] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061103c0000000000c60000000000e5ff9500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map, r0, 0x7}, 0xb) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000000c0)={{0x2, 0x0, @descriptor="e94aa8cb38a8050f"}}) 02:18:21 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000d0000052406000105240000000d240f0100000000000000000006241a6df4f57dcd0000002600000009058103000000000009000000"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)=""/23, &(0x7f0000000180)=0x17) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 2029.897471][ T3543] input: syz0 as /devices/virtual/input/input1250 [ 2030.187913][ T1591] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2030.198507][ T1590] usb 1-1: new full-speed USB device number 83 using dummy_hcd 02:18:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x25, 0xaa4) 02:18:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2a) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:18:22 executing program 2 (fault-call:10 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2030.337800][ T3591] FAULT_INJECTION: forcing a failure. [ 2030.337800][ T3591] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2030.351657][ T3591] CPU: 0 PID: 3591 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2030.361720][ T3591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2030.371767][ T3591] Call Trace: [ 2030.375059][ T3591] dump_stack+0x1b0/0x21e [ 2030.379381][ T3591] ? devkmsg_release+0x11c/0x11c [ 2030.384310][ T3591] ? show_regs_print_info+0x12/0x12 [ 2030.389500][ T3591] ? kasan_alloc_pages+0x4a/0x60 [ 2030.394427][ T3591] should_fail+0x6fb/0x860 [ 2030.398835][ T3591] ? setup_fault_attr+0x2b0/0x2b0 [ 2030.403858][ T3591] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2030.409227][ T3591] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2030.414764][ T3591] ? find_get_entry+0x5da/0x670 [ 2030.419605][ T3591] ? xa_load+0x323/0x340 [ 2030.423837][ T3591] __do_page_cache_readahead+0x244/0x510 [ 2030.429580][ T3591] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2030.435988][ T3591] ? unwind_next_frame+0x1c07/0x22b0 [ 2030.441264][ T3591] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2030.446972][ T3591] generic_file_read_iter+0x626/0x20a0 [ 2030.452430][ T3591] ? find_get_pages_range_tag+0xae0/0xae0 [ 2030.458139][ T3591] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2030.463502][ T3591] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2030.469568][ T3591] ? avc_denied+0x1c0/0x1c0 [ 2030.474067][ T3591] generic_file_splice_read+0x491/0x780 [ 2030.479614][ T3591] ? splice_shrink_spd+0xb0/0xb0 [ 2030.484551][ T3591] ? security_file_permission+0x1e9/0x300 [ 2030.490390][ T3591] ? splice_shrink_spd+0xb0/0xb0 [ 2030.495323][ T3591] splice_direct_to_actor+0x3cf/0xb00 [ 2030.500692][ T3591] ? do_splice_direct+0x3d0/0x3d0 [ 2030.505710][ T3591] ? pipe_to_sendpage+0x300/0x300 [ 2030.510732][ T3591] ? security_file_permission+0x128/0x300 [ 2030.516440][ T3591] do_splice_direct+0x279/0x3d0 [ 2030.521283][ T3591] ? splice_direct_to_actor+0xb00/0xb00 [ 2030.526912][ T3591] ? security_file_permission+0x128/0x300 [ 2030.532618][ T3591] do_sendfile+0x89d/0x1110 [ 2030.537112][ T3591] ? compat_writev+0x390/0x390 [ 2030.541866][ T3591] ? security_file_permission+0x128/0x300 [ 2030.547574][ T3591] ? vfs_write+0x427/0x4f0 [ 2030.551986][ T3591] ? fput_many+0x42/0x1a0 [ 2030.556306][ T3591] __x64_sys_sendfile64+0x1ae/0x220 [ 2030.561497][ T3591] ? __ia32_sys_sendfile+0x240/0x240 [ 2030.566781][ T3591] do_syscall_64+0xcb/0x150 [ 2030.571281][ T3591] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2030.577173][ T3591] RIP: 0033:0x45de59 [ 2030.581065][ T3591] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2030.600669][ T3591] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2030.609073][ T3591] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2030.617040][ T3591] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2030.625004][ T3591] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2030.632977][ T3591] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000003 [ 2030.640940][ T3591] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2030.658874][ T3590] input: syz0 as /devices/virtual/input/input1252 02:18:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2a) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 2030.717860][ T1591] usb 2-1: Using ep0 maxpacket: 16 [ 2030.764427][ T3600] input: syz0 as /devices/virtual/input/input1253 02:18:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2a) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 2030.847941][ T1590] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2030.857067][ T1591] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.871565][ T1590] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2030.884043][ T1591] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 02:18:22 executing program 2 (fault-call:10 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2030.908676][ T1591] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2030.915350][ T1590] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2030.947075][ T3608] input: syz0 as /devices/virtual/input/input1254 [ 2030.955971][ T3611] FAULT_INJECTION: forcing a failure. [ 2030.955971][ T3611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2030.987992][ T3611] CPU: 1 PID: 3611 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2030.998064][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2031.008105][ T3611] Call Trace: [ 2031.011391][ T3611] dump_stack+0x1b0/0x21e [ 2031.015710][ T3611] ? devkmsg_release+0x11c/0x11c [ 2031.020638][ T3611] ? show_regs_print_info+0x12/0x12 [ 2031.025824][ T3611] ? kasan_alloc_pages+0x4a/0x60 [ 2031.030747][ T3611] should_fail+0x6fb/0x860 [ 2031.035150][ T3611] ? setup_fault_attr+0x2b0/0x2b0 [ 2031.040166][ T3611] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2031.045530][ T3611] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2031.051064][ T3611] ? find_get_entry+0x5da/0x670 [ 2031.055900][ T3611] ? xa_load+0x323/0x340 [ 2031.060128][ T3611] __do_page_cache_readahead+0x244/0x510 [ 2031.065857][ T3611] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2031.072261][ T3611] ? unwind_next_frame+0x1c07/0x22b0 [ 2031.077531][ T3611] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2031.083241][ T3611] generic_file_read_iter+0x626/0x20a0 [ 2031.088695][ T3611] ? find_get_pages_range_tag+0xae0/0xae0 [ 2031.094399][ T3611] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2031.099759][ T3611] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2031.105810][ T3611] ? avc_denied+0x1c0/0x1c0 [ 2031.110303][ T3611] generic_file_splice_read+0x491/0x780 [ 2031.115838][ T3611] ? splice_shrink_spd+0xb0/0xb0 [ 2031.120767][ T3611] ? security_file_permission+0x1e9/0x300 [ 2031.126473][ T3611] ? splice_shrink_spd+0xb0/0xb0 [ 2031.131398][ T3611] splice_direct_to_actor+0x3cf/0xb00 [ 2031.136764][ T3611] ? do_splice_direct+0x3d0/0x3d0 [ 2031.141774][ T3611] ? pipe_to_sendpage+0x300/0x300 [ 2031.146793][ T3611] ? security_file_permission+0x128/0x300 [ 2031.152507][ T3611] do_splice_direct+0x279/0x3d0 [ 2031.157349][ T3611] ? splice_direct_to_actor+0xb00/0xb00 [ 2031.162889][ T3611] ? security_file_permission+0x128/0x300 [ 2031.168597][ T3611] do_sendfile+0x89d/0x1110 [ 2031.173094][ T3611] ? compat_writev+0x390/0x390 [ 2031.177849][ T3611] ? security_file_permission+0x128/0x300 [ 2031.183555][ T3611] ? vfs_write+0x427/0x4f0 [ 2031.187959][ T3611] ? fput_many+0x42/0x1a0 [ 2031.192283][ T3611] __x64_sys_sendfile64+0x1ae/0x220 [ 2031.197470][ T3611] ? __ia32_sys_sendfile+0x240/0x240 [ 2031.202748][ T3611] do_syscall_64+0xcb/0x150 [ 2031.207240][ T3611] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2031.213116][ T3611] RIP: 0033:0x45de59 [ 2031.216996][ T3611] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2031.236589][ T3611] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2031.244989][ T3611] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 02:18:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x26, 0xaa4) [ 2031.252950][ T3611] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2031.260911][ T3611] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2031.268871][ T3611] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000004 [ 2031.276834][ T3611] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2a) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2031.377921][ T1591] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2031.387239][ T1590] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2031.400712][ T1590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.410059][ T1591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.420213][ T1591] usb 2-1: Product: syz [ 2031.424448][ T1590] usb 1-1: Product: syz [ 2031.429464][ T1591] usb 2-1: Manufacturer: syz [ 2031.434341][ T1590] usb 1-1: Manufacturer: syz [ 2031.439861][ T1591] usb 2-1: SerialNumber: syz [ 2031.444681][ T1590] usb 1-1: SerialNumber: syz [ 2031.451106][ T3622] input: syz0 as /devices/virtual/input/input1255 [ 2031.719813][ T1591] usb 2-1: USB disconnect, device number 25 [ 2031.917831][ T1590] usb 1-1: 0:2 : does not exist [ 2032.119064][ T1591] usb 1-1: USB disconnect, device number 83 [ 2032.457702][ T4031] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2032.697659][ T4031] usb 2-1: Using ep0 maxpacket: 16 [ 2032.817823][ T4031] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2032.827923][ T4031] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2032.836754][ T4031] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2032.887626][ T870] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 2033.017691][ T4031] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2033.026833][ T4031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.035488][ T4031] usb 2-1: Product: syz [ 2033.040062][ T4031] usb 2-1: Manufacturer: syz [ 2033.057716][ T4031] usb 2-1: can't set config #1, error -71 [ 2033.063990][ T4031] usb 2-1: USB disconnect, device number 26 [ 2033.277747][ T870] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2033.286477][ T870] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2033.297305][ T870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 02:18:25 executing program 0: dup(0xffffffffffffffff) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2800, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='devpts\x00', &(0x7f0000000100)='security&vmnet0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 02:18:25 executing program 2 (fault-call:10 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3e80ddca8e0af5cf}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040082}, 0xc800) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000200)=""/12, 0xc}], 0x1, 0x0, 0x0) 02:18:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x27, 0xaa4) 02:18:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2a) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x84) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x3}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000140)=""/105, 0x69) [ 2033.443712][ T3651] input: syz0 as /devices/virtual/input/input1256 [ 2033.452708][ T3654] input: syz0 as /devices/virtual/input/input1261 [ 2033.460382][ T3652] FAULT_INJECTION: forcing a failure. [ 2033.460382][ T3652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2033.467147][ T3661] input: syz0 as /devices/virtual/input/input1262 [ 2033.479442][ T3652] CPU: 1 PID: 3652 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2033.480218][ T870] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2033.490115][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2033.490118][ T3652] Call Trace: [ 2033.490136][ T3652] dump_stack+0x1b0/0x21e [ 2033.490144][ T3652] ? devkmsg_release+0x11c/0x11c [ 2033.490151][ T3652] ? show_regs_print_info+0x12/0x12 [ 2033.490159][ T3652] ? kasan_alloc_pages+0x4a/0x60 [ 2033.490166][ T3652] should_fail+0x6fb/0x860 [ 2033.490174][ T3652] ? setup_fault_attr+0x2b0/0x2b0 [ 2033.490186][ T3652] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2033.490197][ T3652] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2033.490211][ T3652] ? find_get_entry+0x5da/0x670 [ 2033.490218][ T3652] ? xa_load+0x323/0x340 [ 2033.490224][ T3652] __do_page_cache_readahead+0x244/0x510 [ 2033.490237][ T3652] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2033.506497][ T870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.509290][ T3652] ? unwind_next_frame+0x1c07/0x22b0 [ 2033.509300][ T3652] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2033.509309][ T3652] generic_file_read_iter+0x626/0x20a0 [ 2033.509320][ T3652] ? find_get_pages_range_tag+0xae0/0xae0 [ 2033.509333][ T3652] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2033.517056][ T870] usb 1-1: Product: syz [ 2033.521921][ T3652] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2033.521931][ T3652] ? avc_denied+0x1c0/0x1c0 [ 2033.521943][ T3652] generic_file_splice_read+0x491/0x780 [ 2033.521954][ T3652] ? splice_shrink_spd+0xb0/0xb0 [ 2033.521964][ T3652] ? security_file_permission+0x1e9/0x300 [ 2033.521977][ T3652] ? splice_shrink_spd+0xb0/0xb0 [ 2033.529064][ T870] usb 1-1: Manufacturer: syz [ 2033.532076][ T3652] splice_direct_to_actor+0x3cf/0xb00 [ 2033.532085][ T3652] ? do_splice_direct+0x3d0/0x3d0 [ 2033.532096][ T3652] ? pipe_to_sendpage+0x300/0x300 [ 2033.537174][ T3657] devpts: called with bogus options [ 2033.541488][ T3652] ? security_file_permission+0x128/0x300 [ 2033.541496][ T3652] do_splice_direct+0x279/0x3d0 [ 2033.541504][ T3652] ? splice_direct_to_actor+0xb00/0xb00 [ 2033.541514][ T3652] ? security_file_permission+0x128/0x300 [ 2033.541520][ T3652] do_sendfile+0x89d/0x1110 [ 2033.541534][ T3652] ? compat_writev+0x390/0x390 [ 2033.701523][ T3652] ? security_file_permission+0x128/0x300 [ 2033.707212][ T3652] ? vfs_write+0x427/0x4f0 [ 2033.711600][ T3652] ? fput_many+0x42/0x1a0 [ 2033.715897][ T3652] __x64_sys_sendfile64+0x1ae/0x220 [ 2033.721062][ T3652] ? __ia32_sys_sendfile+0x240/0x240 [ 2033.726318][ T3652] do_syscall_64+0xcb/0x150 [ 2033.730791][ T3652] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2033.736664][ T3652] RIP: 0033:0x45de59 [ 2033.740525][ T3652] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2033.760109][ T3652] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2033.768486][ T3652] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2033.776438][ T3652] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2033.784388][ T3652] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 02:18:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000380)='\x80\xe8~w\x98\xb5\xbe\xed\xc6b\xd9z\xab\xd38=\x06\x89\x1a^\xf9\xd7\xbc\x8e\x8cbE\' \x8f5\xc4\xd3\x1b\xfc\x00\b&\x9b\xf4D\xb0!j\xbee@\xceO\xb0\xd25\x19n\xf1\xcb\xbb\xb8\xd3cdM6W9\xc8=\xb28Ys\xf8\xee\x06L\xfe\xe0\xbe=aK\x86\x9dX\xd3E\x93n9j\x9b\xf8\x81=\xfa\x9b;\xdc~7j\xe9\xed\x05i\xd4j\x16\x8c\x93-\xa28\x16\xb0\xc6\xc5g\x8d\xab\xf8\xf1\xeam~\xed\xe7\xb2\x93a\xae>\xf9\xe2\x12\x1a\xa8fs\xa7\xdc6I\xed)l\xc7\xba', 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000960) r4 = socket(0x10, 0x80002, 0x0) sendfile(r4, r0, 0x0, 0x7) [ 2033.792331][ T3652] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000005 [ 2033.800286][ T3652] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2033.810012][T24159] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2033.813106][ T3669] devpts: called with bogus options [ 2033.825565][ T870] usb 1-1: can't set config #1, error -71 [ 2033.835373][ T870] usb 1-1: USB disconnect, device number 84 02:18:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2a) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:25 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) syz_mount_image$tmpfs(&(0x7f0000002180)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)=ANY=[@ANYBLOB=',fscontext=']) 02:18:25 executing program 2 (fault-call:10 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2033.939306][ T3681] input: syz0 as /devices/virtual/input/input1263 [ 2033.948415][ T3687] SELinux: security_context_str_to_sid() failed for (dev tmpfs, type tmpfs) errno=-22 [ 2033.965600][ T3690] SELinux: security_context_str_to_sid() failed for (dev tmpfs, type tmpfs) errno=-22 [ 2033.980085][ T3691] FAULT_INJECTION: forcing a failure. 02:18:25 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ea8585dc"], 0xd) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='memory.current\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000800)=""/186, 0xba}, {&(0x7f00000008c0)=""/73, 0x49}, {&(0x7f0000000940)=""/246, 0xf6}], 0x5, &(0x7f0000000ac0)=""/69, 0x45}, 0x600}, {{&(0x7f0000000b40)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000bc0)=""/9, 0x9}, {&(0x7f0000000c00)=""/255, 0xff}, {&(0x7f0000000d00)=""/8, 0x8}, {&(0x7f0000000d40)=""/119, 0x77}, {&(0x7f0000000dc0)=""/250, 0xfa}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/93, 0x5d}, {&(0x7f0000000f40)=""/174, 0xae}], 0x8}, 0xcc0}, {{&(0x7f0000001080)=@x25, 0x80, &(0x7f0000001200)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000001100)}, {&(0x7f0000001140)=""/10, 0xa}, {&(0x7f0000001180)=""/92, 0x5c}], 0x4}, 0xc2cf}], 0x3, 0x40012000, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000010000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000600)={0x0}) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)={{r4, 0x101, 0x400, 0x8, 0x200, 0x3f, 0x7, 0x776, 0x7, 0x7, 0x1, 0xd4cf, 0x1ff, 0xff, 0x7}, 0x10, [0x0, 0x0]}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x11}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "acad46ab007b145e2ef89d7e5b"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendfile(r0, r2, 0x0, 0x1c575) 02:18:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2033.980085][ T3691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2033.994152][ T3691] CPU: 1 PID: 3691 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2034.004214][ T3691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2034.006918][ T3696] input: syz0 as /devices/virtual/input/input1264 [ 2034.014265][ T3691] Call Trace: [ 2034.014281][ T3691] dump_stack+0x1b0/0x21e [ 2034.014290][ T3691] ? devkmsg_release+0x11c/0x11c [ 2034.014299][ T3691] ? show_regs_print_info+0x12/0x12 [ 2034.014312][ T3691] ? kasan_alloc_pages+0x4a/0x60 [ 2034.043258][ T3691] should_fail+0x6fb/0x860 [ 2034.047664][ T3691] ? setup_fault_attr+0x2b0/0x2b0 [ 2034.052675][ T3691] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2034.058029][ T3691] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2034.063553][ T3691] ? find_get_entry+0x5da/0x670 [ 2034.068397][ T3691] ? xa_load+0x323/0x340 [ 2034.072622][ T3691] __do_page_cache_readahead+0x244/0x510 [ 2034.080140][ T3691] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2034.086525][ T3691] ? unwind_next_frame+0x1c07/0x22b0 [ 2034.091778][ T3691] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2034.097473][ T3691] generic_file_read_iter+0x626/0x20a0 [ 2034.102926][ T3691] ? find_get_pages_range_tag+0xae0/0xae0 [ 2034.108619][ T3691] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2034.113961][ T3691] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2034.120030][ T3691] ? avc_denied+0x1c0/0x1c0 [ 2034.124601][ T3691] generic_file_splice_read+0x491/0x780 [ 2034.130137][ T3691] ? splice_shrink_spd+0xb0/0xb0 [ 2034.135068][ T3691] ? security_file_permission+0x1e9/0x300 [ 2034.140760][ T3691] ? splice_shrink_spd+0xb0/0xb0 [ 2034.145699][ T3691] splice_direct_to_actor+0x3cf/0xb00 [ 2034.151065][ T3691] ? do_splice_direct+0x3d0/0x3d0 [ 2034.156063][ T3691] ? pipe_to_sendpage+0x300/0x300 [ 2034.161060][ T3691] ? security_file_permission+0x128/0x300 [ 2034.166866][ T3691] do_splice_direct+0x279/0x3d0 [ 2034.171778][ T3691] ? splice_direct_to_actor+0xb00/0xb00 [ 2034.177299][ T3691] ? security_file_permission+0x128/0x300 [ 2034.182988][ T3691] do_sendfile+0x89d/0x1110 [ 2034.187469][ T3691] ? compat_writev+0x390/0x390 [ 2034.192213][ T3691] ? security_file_permission+0x128/0x300 [ 2034.197905][ T3691] ? vfs_write+0x427/0x4f0 [ 2034.202312][ T3691] ? fput_many+0x42/0x1a0 [ 2034.206617][ T3691] __x64_sys_sendfile64+0x1ae/0x220 [ 2034.211791][ T3691] ? __ia32_sys_sendfile+0x240/0x240 [ 2034.217046][ T3691] do_syscall_64+0xcb/0x150 [ 2034.221521][ T3691] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2034.227402][ T3691] RIP: 0033:0x45de59 [ 2034.231265][ T3691] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2034.250855][ T3691] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2034.259236][ T3691] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2034.267178][ T3691] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2034.275122][ T3691] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2034.283062][ T3691] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000006 02:18:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x8001) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x1d6c) r5 = syz_usb_connect$cdc_ecm(0x4, 0x9b, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x1, 0x1, 0xba, 0xf0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x6, 0x24, 0x6, 0x0, 0x0, "93"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x6, 0x0, 0x7}, [@mdlm_detail={0x34, 0x24, 0x13, 0x4, "f0221be44a527af94e8ac7ad2cae03aad1d7b8e8bf08597c4ab6ce94fb082deb1d62b52a3124f12954c5723cda421870"}, @acm={0x4, 0x24, 0x2, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0xea49, 0xf7, 0x3c, 0x800, 0x20}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x5, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9e, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x4, 0x97}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x3f, 0x6, 0x1, 0x20, 0x4}, 0x4c, &(0x7f00000004c0)={0x5, 0xf, 0x4c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x3, 0xa7, 0x0, 0x20}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x200, 0xf00f, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x8, 0x8f}, @ssp_cap={0x18, 0x10, 0xa, 0x1b, 0x3, 0xfff, 0x0, 0x101, [0x0, 0xc030, 0xff00f0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x3f, 0x6}]}, 0x5, [{0x47, &(0x7f0000000540)=@string={0x47, 0x3, "691513a4e50290901d473b0a25f7840675122dcba72771bbb8bb13daa6993165f8a38bb7f12dc5d99265ea7ff464542875a35ae2c435f43e7b225590b5c85ecdea85309052"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x7040}}, {0x2, &(0x7f0000000640)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000840)={0x14, &(0x7f0000000740)={0x0, 0x4, 0x8b, {0x8b, 0x2, "73bb80b7d83d098863db2c31df4a25368f181039eea3891c1e342a47e488890a36e57e4fd6a765fda01c176959c6adaf103f91a04e5a01e0733243fcfe0ec5b7e7ddced36d75dd3cc6cec1574a7203724342964230b5b1940907040a1fcd388595bc76cb1f85de8b947eb4ee8f450fb6d617841922c5bf67b46935635586dbc29aceb752b89d0fb67c"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000880)={0x40, 0x16, 0x5a, "11d37c25e2dd97946c30fde9340e59609379b84142667ab959abc80c1da8157048ad8eb3403cdd5d695904d9d31ed3f3809515478028eb092b377cc14e5d5c88ecc570efbf73f8cc5fe267043046c39a14179f247a060f8b2757"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x9}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f0000000380)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f00000002c0)) io_setup(0x4, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_getevents(r7, 0x20, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000200)={r8, r9+10000000}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2034.291001][ T3691] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x28, 0xaa4) 02:18:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2034.355635][ T3707] input: syz0 as /devices/virtual/input/input1266 [ 2034.426564][ T3716] input: syz0 as /devices/virtual/input/input1267 02:18:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2a) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:26 executing program 2 (fault-call:10 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2034.520029][ T3725] input: syz0 as /devices/virtual/input/input1268 [ 2034.535362][ T3727] FAULT_INJECTION: forcing a failure. [ 2034.535362][ T3727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2034.549576][ T3727] CPU: 1 PID: 3727 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2034.559626][ T3727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2034.569658][ T3727] Call Trace: [ 2034.572938][ T3727] dump_stack+0x1b0/0x21e [ 2034.577237][ T3727] ? devkmsg_release+0x11c/0x11c [ 2034.582143][ T3727] ? show_regs_print_info+0x12/0x12 [ 2034.587324][ T3727] ? kasan_alloc_pages+0x4a/0x60 [ 2034.592237][ T3727] should_fail+0x6fb/0x860 [ 2034.596622][ T3727] ? setup_fault_attr+0x2b0/0x2b0 [ 2034.601631][ T3727] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2034.606981][ T3727] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2034.612508][ T3727] ? find_get_entry+0x5da/0x670 [ 2034.617345][ T3727] ? xa_load+0x323/0x340 [ 2034.621557][ T3727] __do_page_cache_readahead+0x244/0x510 [ 2034.627160][ T3727] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2034.633604][ T3727] ? unwind_next_frame+0x1c07/0x22b0 [ 2034.638866][ T3727] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2034.644563][ T3727] generic_file_read_iter+0x626/0x20a0 [ 2034.650025][ T3727] ? find_get_pages_range_tag+0xae0/0xae0 [ 2034.655730][ T3727] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2034.661075][ T3727] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2034.667111][ T3727] ? avc_denied+0x1c0/0x1c0 [ 2034.671689][ T3727] generic_file_splice_read+0x491/0x780 [ 2034.677206][ T3727] ? splice_shrink_spd+0xb0/0xb0 [ 2034.682113][ T3727] ? security_file_permission+0x1e9/0x300 [ 2034.687810][ T3727] ? splice_shrink_spd+0xb0/0xb0 [ 2034.692773][ T3727] splice_direct_to_actor+0x3cf/0xb00 [ 2034.698114][ T3727] ? do_splice_direct+0x3d0/0x3d0 [ 2034.703118][ T3727] ? pipe_to_sendpage+0x300/0x300 [ 2034.708181][ T3727] ? security_file_permission+0x128/0x300 [ 2034.713876][ T3727] do_splice_direct+0x279/0x3d0 [ 2034.718716][ T3727] ? splice_direct_to_actor+0xb00/0xb00 [ 2034.724250][ T3727] ? security_file_permission+0x128/0x300 [ 2034.729944][ T3727] do_sendfile+0x89d/0x1110 [ 2034.734425][ T3727] ? compat_writev+0x390/0x390 [ 2034.739160][ T3727] ? security_file_permission+0x128/0x300 [ 2034.744873][ T3727] ? vfs_write+0x427/0x4f0 [ 2034.749259][ T3727] ? fput_many+0x42/0x1a0 [ 2034.753576][ T3727] __x64_sys_sendfile64+0x1ae/0x220 [ 2034.758742][ T3727] ? __ia32_sys_sendfile+0x240/0x240 [ 2034.764011][ T3727] do_syscall_64+0xcb/0x150 [ 2034.768500][ T3727] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2034.774360][ T3727] RIP: 0033:0x45de59 [ 2034.778221][ T3727] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2034.797795][ T3727] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2034.806172][ T3727] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2034.814110][ T3727] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2034.822065][ T3727] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2034.830004][ T3727] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000007 [ 2034.837945][ T3727] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2034.920313][ T3736] input: syz0 as /devices/virtual/input/input1269 02:18:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:26 executing program 2 (fault-call:10 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2035.028717][ T3742] input: syz0 as /devices/virtual/input/input1270 [ 2035.049328][ T3746] FAULT_INJECTION: forcing a failure. [ 2035.049328][ T3746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2035.063108][ T3746] CPU: 1 PID: 3746 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 02:18:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2035.073163][ T3746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2035.083206][ T3746] Call Trace: [ 2035.086499][ T3746] dump_stack+0x1b0/0x21e [ 2035.090818][ T3746] ? devkmsg_release+0x11c/0x11c [ 2035.092797][ T3751] input: syz0 as /devices/virtual/input/input1271 [ 2035.095748][ T3746] ? show_regs_print_info+0x12/0x12 [ 2035.095758][ T3746] ? kasan_alloc_pages+0x4a/0x60 [ 2035.095770][ T3746] should_fail+0x6fb/0x860 [ 2035.116640][ T3746] ? setup_fault_attr+0x2b0/0x2b0 [ 2035.121659][ T3746] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2035.127024][ T3746] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2035.132559][ T3746] ? find_get_entry+0x5da/0x670 [ 2035.137399][ T3746] ? xa_load+0x323/0x340 [ 2035.141662][ T3746] __do_page_cache_readahead+0x244/0x510 [ 2035.147297][ T3746] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2035.153682][ T3746] ? unwind_next_frame+0x1c07/0x22b0 [ 2035.158940][ T3746] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2035.164626][ T3746] generic_file_read_iter+0x626/0x20a0 [ 2035.170059][ T3746] ? find_get_pages_range_tag+0xae0/0xae0 [ 2035.175764][ T3746] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2035.181104][ T3746] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2035.187139][ T3746] ? avc_denied+0x1c0/0x1c0 [ 2035.191612][ T3746] generic_file_splice_read+0x491/0x780 [ 2035.197126][ T3746] ? splice_shrink_spd+0xb0/0xb0 [ 2035.202050][ T3746] ? security_file_permission+0x1e9/0x300 [ 2035.207750][ T3746] ? splice_shrink_spd+0xb0/0xb0 [ 2035.212652][ T3746] splice_direct_to_actor+0x3cf/0xb00 [ 2035.217990][ T3746] ? do_splice_direct+0x3d0/0x3d0 [ 2035.222979][ T3746] ? pipe_to_sendpage+0x300/0x300 [ 2035.227973][ T3746] ? security_file_permission+0x128/0x300 [ 2035.233664][ T3746] do_splice_direct+0x279/0x3d0 [ 2035.238492][ T3746] ? splice_direct_to_actor+0xb00/0xb00 [ 2035.244008][ T3746] ? security_file_permission+0x128/0x300 [ 2035.249696][ T3746] do_sendfile+0x89d/0x1110 [ 2035.254167][ T3746] ? compat_writev+0x390/0x390 [ 2035.258899][ T3746] ? security_file_permission+0x128/0x300 [ 2035.264600][ T3746] ? vfs_write+0x427/0x4f0 [ 2035.268982][ T3746] ? fput_many+0x42/0x1a0 [ 2035.273279][ T3746] __x64_sys_sendfile64+0x1ae/0x220 [ 2035.278444][ T3746] ? __ia32_sys_sendfile+0x240/0x240 [ 2035.283707][ T3746] do_syscall_64+0xcb/0x150 [ 2035.288193][ T3746] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2035.294107][ T3746] RIP: 0033:0x45de59 [ 2035.297974][ T3746] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2035.317551][ T3746] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:18:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9049}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x6, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0xc, 0xfff, {0x52, 0x8005, 0x5, {0x9, 0x7}, {0x0, 0x9}, @ramp={0xae7, 0x1, {0x6, 0x20, 0x0, 0xd28e}}}, {0x56, 0x9, 0x0, {0x0, 0x1f}, {0x7, 0x5}, @cond=[{0x0, 0xfe01, 0x9, 0x9, 0x7, 0x5}, {0x0, 0x1, 0x9, 0x0, 0x9, 0x6}]}}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xc2}, 0x8200, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$hiddev(r2, &(0x7f00000002c0)=""/136, 0x88) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a014, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3, 0x1200000000000000}], 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="79506bf857220bf53f2a42000000000e3482060000eeffffff0046fdff07e1b7cc4f085611003efdd31c53aaabf4dde8acf3120200000000b6181e1b9c09c4bf642ea7f529d515f0ff0700007aea9aba6fab5d00dc6b5eda781f525677004c23c1e28a9eab1fa37c3c99fcb30be956439f53ef9eafad60d03f15d628b6c0ac218f3c0096a0edae288e5d6a0400007051d0696fca35f01049dc73992e49148c51ed71c2e2502160fac9c354d395ace1f4431dca5d84f8189040d9da23c29a407afe1fe7b594c37d7a84d4813f641f54f33eeb4b5cb530dd3289628d257ccd46d9b141060cff4422ca559953c07b3f015ea6acb1158168b0cb6e4c4c948d59de7a3223e7a7ff6e7f59baa611cdbee25ca89167ca8129537efe462018d0d504a74d8632981e7c56cc4894e301d46c031ac318514788ad77912ac3723d06f8cadce6970c1861c3467a0880a2705ee39cf09a0cef61cc7fee54ea0a0dea350164c399cee1e0106d6f9dd5b5252e1cbcdb19612892f40da2a9157521698541d50840c14a37c9d11b6c775aa8660d05639b792bad83be935b7a"]) 02:18:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x29, 0xaa4) [ 2035.325954][ T3746] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2035.333899][ T3746] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2035.341858][ T3746] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2035.349804][ T3746] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000008 [ 2035.357751][ T3746] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2035.483089][ T3768] input: syz0 as /devices/virtual/input/input1272 [ 2035.544449][ T3775] input: syz0 as /devices/virtual/input/input1273 02:18:27 executing program 2 (fault-call:10 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) fcntl$notify(0xffffffffffffffff, 0x402, 0xf) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000140)) [ 2035.630427][ T3781] input: syz0 as /devices/virtual/input/input1274 [ 2035.638196][ T3782] FAULT_INJECTION: forcing a failure. [ 2035.638196][ T3782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2035.644203][ T3783] input: syz0 as /devices/virtual/input/input1275 [ 2035.658273][ T3782] CPU: 1 PID: 3782 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2035.668328][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2035.678372][ T3782] Call Trace: [ 2035.681654][ T3782] dump_stack+0x1b0/0x21e [ 2035.686112][ T3782] ? devkmsg_release+0x11c/0x11c [ 2035.691027][ T3782] ? show_regs_print_info+0x12/0x12 [ 2035.696196][ T3782] ? kasan_alloc_pages+0x4a/0x60 [ 2035.701112][ T3782] should_fail+0x6fb/0x860 [ 2035.705556][ T3782] ? setup_fault_attr+0x2b0/0x2b0 [ 2035.710571][ T3782] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2035.716044][ T3782] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2035.721559][ T3782] ? find_get_entry+0x5da/0x670 [ 2035.726379][ T3782] ? xa_load+0x323/0x340 [ 2035.730592][ T3782] __do_page_cache_readahead+0x244/0x510 [ 2035.736198][ T3782] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2035.742594][ T3782] ? unwind_next_frame+0x1c07/0x22b0 [ 2035.747855][ T3782] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2035.753545][ T3782] generic_file_read_iter+0x626/0x20a0 [ 2035.759043][ T3782] ? find_get_pages_range_tag+0xae0/0xae0 [ 2035.764731][ T3782] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2035.770073][ T3782] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2035.776106][ T3782] ? avc_denied+0x1c0/0x1c0 [ 2035.780584][ T3782] generic_file_splice_read+0x491/0x780 [ 2035.786103][ T3782] ? splice_shrink_spd+0xb0/0xb0 [ 2035.791020][ T3782] ? security_file_permission+0x1e9/0x300 [ 2035.796714][ T3782] ? splice_shrink_spd+0xb0/0xb0 [ 2035.801637][ T3782] splice_direct_to_actor+0x3cf/0xb00 [ 2035.806979][ T3782] ? do_splice_direct+0x3d0/0x3d0 [ 2035.811972][ T3782] ? pipe_to_sendpage+0x300/0x300 [ 2035.816968][ T3782] ? security_file_permission+0x128/0x300 [ 2035.822667][ T3782] do_splice_direct+0x279/0x3d0 [ 2035.827498][ T3782] ? splice_direct_to_actor+0xb00/0xb00 [ 2035.833015][ T3782] ? security_file_permission+0x128/0x300 [ 2035.838701][ T3782] do_sendfile+0x89d/0x1110 [ 2035.843173][ T3782] ? compat_writev+0x390/0x390 [ 2035.847903][ T3782] ? security_file_permission+0x128/0x300 [ 2035.853591][ T3782] ? vfs_write+0x427/0x4f0 [ 2035.857990][ T3782] ? fput_many+0x42/0x1a0 [ 2035.862299][ T3782] __x64_sys_sendfile64+0x1ae/0x220 [ 2035.867482][ T3782] ? __ia32_sys_sendfile+0x240/0x240 [ 2035.872737][ T3782] do_syscall_64+0xcb/0x150 [ 2035.877223][ T3782] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2035.883081][ T3782] RIP: 0033:0x45de59 [ 2035.886958][ T3782] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2035.906532][ T3782] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2035.914914][ T3782] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2035.923465][ T3782] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 02:18:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9049}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x6, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0xc, 0xfff, {0x52, 0x8005, 0x5, {0x9, 0x7}, {0x0, 0x9}, @ramp={0xae7, 0x1, {0x6, 0x20, 0x0, 0xd28e}}}, {0x56, 0x9, 0x0, {0x0, 0x1f}, {0x7, 0x5}, @cond=[{0x0, 0xfe01, 0x9, 0x9, 0x7, 0x5}, {0x0, 0x1, 0x9, 0x0, 0x9, 0x6}]}}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xc2}, 0x8200, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$hiddev(r2, &(0x7f00000002c0)=""/136, 0x88) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a014, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3, 0x1200000000000000}], 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="79506bf857220bf53f2a42000000000e3482060000eeffffff0046fdff07e1b7cc4f085611003efdd31c53aaabf4dde8acf3120200000000b6181e1b9c09c4bf642ea7f529d515f0ff0700007aea9aba6fab5d00dc6b5eda781f525677004c23c1e28a9eab1fa37c3c99fcb30be956439f53ef9eafad60d03f15d628b6c0ac218f3c0096a0edae288e5d6a0400007051d0696fca35f01049dc73992e49148c51ed71c2e2502160fac9c354d395ace1f4431dca5d84f8189040d9da23c29a407afe1fe7b594c37d7a84d4813f641f54f33eeb4b5cb530dd3289628d257ccd46d9b141060cff4422ca559953c07b3f015ea6acb1158168b0cb6e4c4c948d59de7a3223e7a7ff6e7f59baa611cdbee25ca89167ca8129537efe462018d0d504a74d8632981e7c56cc4894e301d46c031ac318514788ad77912ac3723d06f8cadce6970c1861c3467a0880a2705ee39cf09a0cef61cc7fee54ea0a0dea350164c399cee1e0106d6f9dd5b5252e1cbcdb19612892f40da2a9157521698541d50840c14a37c9d11b6c775aa8660d05639b792bad83be935b7a"]) 02:18:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2035.931410][ T3782] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2035.939349][ T3782] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000009 [ 2035.947288][ T3782] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2036.008231][ T3795] input: syz0 as /devices/virtual/input/input1276 [ 2036.021593][ T3781] input: syz0 as /devices/virtual/input/input1277 02:18:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x30, {0x40000002, 0x0, 0xd2, 0x0, 0x0, 0x1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r8, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}]}, 0x44}}, 0x4040018) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000100)={{r1}, 0x6, &(0x7f0000000080)=[0xb3, 0x8, 0x0, 0x9, 0x7, 0x1f], 0x0, 0x6, [0x80000000, 0x4, 0x7, 0x200]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000180)=0x7) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x804) 02:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x2a, 0xaa4) [ 2036.200946][ T3806] input: syz0 as /devices/virtual/input/input1278 02:18:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:28 executing program 2 (fault-call:10 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2036.265932][ T3811] input: syz0 as /devices/virtual/input/input1279 [ 2036.273511][ T3817] input: syz0 as /devices/virtual/input/input1280 [ 2036.289008][ T3819] input: syz0 as /devices/virtual/input/input1281 02:18:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2036.335364][ T3830] input: syz0 as /devices/virtual/input/input1282 [ 2036.355949][ T3831] FAULT_INJECTION: forcing a failure. [ 2036.355949][ T3831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2036.374721][ T3831] CPU: 0 PID: 3831 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2036.378784][ T3838] input: syz0 as /devices/virtual/input/input1283 [ 2036.384787][ T3831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2036.384790][ T3831] Call Trace: [ 2036.384806][ T3831] dump_stack+0x1b0/0x21e [ 2036.384820][ T3831] ? devkmsg_release+0x11c/0x11c [ 2036.413728][ T3831] ? show_regs_print_info+0x12/0x12 [ 2036.418974][ T3831] ? kasan_alloc_pages+0x4a/0x60 [ 2036.423897][ T3831] should_fail+0x6fb/0x860 [ 2036.428302][ T3831] ? setup_fault_attr+0x2b0/0x2b0 [ 2036.433309][ T3831] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2036.438648][ T3831] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2036.444158][ T3831] ? find_get_entry+0x5da/0x670 [ 2036.448976][ T3831] ? xa_load+0x323/0x340 [ 2036.453190][ T3831] __do_page_cache_readahead+0x244/0x510 [ 2036.458810][ T3831] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2036.465194][ T3831] ? unwind_next_frame+0x1c07/0x22b0 [ 2036.470456][ T3831] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2036.476168][ T3831] generic_file_read_iter+0x626/0x20a0 [ 2036.481608][ T3831] ? find_get_pages_range_tag+0xae0/0xae0 [ 2036.487306][ T3831] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2036.492645][ T3831] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2036.498681][ T3831] ? avc_denied+0x1c0/0x1c0 [ 2036.503163][ T3831] generic_file_splice_read+0x491/0x780 [ 2036.508693][ T3831] ? splice_shrink_spd+0xb0/0xb0 [ 2036.513626][ T3831] ? security_file_permission+0x1e9/0x300 [ 2036.519329][ T3831] ? splice_shrink_spd+0xb0/0xb0 [ 2036.524235][ T3831] splice_direct_to_actor+0x3cf/0xb00 [ 2036.529598][ T3831] ? do_splice_direct+0x3d0/0x3d0 [ 2036.534588][ T3831] ? pipe_to_sendpage+0x300/0x300 [ 2036.539586][ T3831] ? security_file_permission+0x128/0x300 [ 2036.545271][ T3831] do_splice_direct+0x279/0x3d0 [ 2036.550101][ T3831] ? splice_direct_to_actor+0xb00/0xb00 [ 2036.555622][ T3831] ? security_file_permission+0x128/0x300 [ 2036.561327][ T3831] do_sendfile+0x89d/0x1110 [ 2036.565809][ T3831] ? compat_writev+0x390/0x390 [ 2036.570566][ T3831] ? security_file_permission+0x128/0x300 [ 2036.576263][ T3831] ? vfs_write+0x427/0x4f0 [ 2036.580659][ T3831] ? fput_many+0x42/0x1a0 [ 2036.584983][ T3831] __x64_sys_sendfile64+0x1ae/0x220 [ 2036.590156][ T3831] ? __ia32_sys_sendfile+0x240/0x240 [ 2036.595419][ T3831] do_syscall_64+0xcb/0x150 [ 2036.599893][ T3831] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2036.605761][ T3831] RIP: 0033:0x45de59 [ 2036.609636][ T3831] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2036.629777][ T3831] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2036.638350][ T3831] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2036.646300][ T3831] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2036.654258][ T3831] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2036.662199][ T3831] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000a [ 2036.670139][ T3831] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:28 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x0, 0x8, 0x81, 0x100}, {0x3, 0x2, 0x8, 0xffffe30a}, {0xedb8, 0x3, 0x81, 0x7}, {0x1, 0xa, 0x3, 0x1000}]}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) [ 2036.713081][ T3811] input: syz0 as /devices/virtual/input/input1284 02:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2036.792501][ T3852] input: syz0 as /devices/virtual/input/input1285 [ 2036.817555][ T3858] input: syz0 as /devices/virtual/input/input1286 02:18:28 executing program 2 (fault-call:10 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2036.854208][ T3864] input: syz0 as /devices/virtual/input/input1287 [ 2036.878984][ T3867] FAULT_INJECTION: forcing a failure. [ 2036.878984][ T3867] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2036.892699][ T3867] CPU: 1 PID: 3867 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2036.902780][ T3867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2036.912809][ T3867] Call Trace: [ 2036.916073][ T3867] dump_stack+0x1b0/0x21e [ 2036.920372][ T3867] ? devkmsg_release+0x11c/0x11c [ 2036.925287][ T3867] ? show_regs_print_info+0x12/0x12 [ 2036.930482][ T3867] ? kasan_alloc_pages+0x4a/0x60 [ 2036.935400][ T3867] should_fail+0x6fb/0x860 [ 2036.939801][ T3867] ? setup_fault_attr+0x2b0/0x2b0 [ 2036.944800][ T3867] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2036.950144][ T3867] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2036.955669][ T3867] ? find_get_entry+0x5da/0x670 [ 2036.960662][ T3867] ? xa_load+0x323/0x340 [ 2036.964887][ T3867] __do_page_cache_readahead+0x244/0x510 [ 2036.970488][ T3867] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2036.976883][ T3867] ? unwind_next_frame+0x1c07/0x22b0 [ 2036.982149][ T3867] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2036.987841][ T3867] generic_file_read_iter+0x626/0x20a0 [ 2036.993274][ T3867] ? find_get_pages_range_tag+0xae0/0xae0 [ 2036.998983][ T3867] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2037.004339][ T3867] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2037.010375][ T3867] ? avc_denied+0x1c0/0x1c0 [ 2037.014849][ T3867] generic_file_splice_read+0x491/0x780 [ 2037.020363][ T3867] ? splice_shrink_spd+0xb0/0xb0 [ 2037.025271][ T3867] ? security_file_permission+0x1e9/0x300 [ 2037.030957][ T3867] ? splice_shrink_spd+0xb0/0xb0 [ 2037.035866][ T3867] splice_direct_to_actor+0x3cf/0xb00 [ 2037.041217][ T3867] ? do_splice_direct+0x3d0/0x3d0 [ 2037.046232][ T3867] ? pipe_to_sendpage+0x300/0x300 [ 2037.051250][ T3867] ? security_file_permission+0x128/0x300 [ 2037.056945][ T3867] do_splice_direct+0x279/0x3d0 [ 2037.061766][ T3867] ? splice_direct_to_actor+0xb00/0xb00 [ 2037.067313][ T3867] ? security_file_permission+0x128/0x300 [ 2037.073009][ T3867] do_sendfile+0x89d/0x1110 [ 2037.077491][ T3867] ? compat_writev+0x390/0x390 [ 2037.082224][ T3867] ? security_file_permission+0x128/0x300 [ 2037.087912][ T3867] ? vfs_write+0x427/0x4f0 [ 2037.092297][ T3867] ? fput_many+0x42/0x1a0 [ 2037.096597][ T3867] __x64_sys_sendfile64+0x1ae/0x220 [ 2037.101777][ T3867] ? __ia32_sys_sendfile+0x240/0x240 [ 2037.107038][ T3867] do_syscall_64+0xcb/0x150 [ 2037.111526][ T3867] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2037.117392][ T3867] RIP: 0033:0x45de59 [ 2037.121255][ T3867] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2037.140829][ T3867] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:18:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2037.149214][ T3867] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2037.157160][ T3867] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2037.165104][ T3867] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2037.173053][ T3867] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000b [ 2037.181005][ T3867] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x2b, 0xaa4) [ 2037.244763][ T3878] input: syz0 as /devices/virtual/input/input1288 [ 2037.276546][ T3879] input: syz0 as /devices/virtual/input/input1289 02:18:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x4, 0xce}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x8, 0x4, 0xc49, 0x2}, 'syz1\x00', 0x1a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) shutdown(r1, 0x1) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000200)={0x401, &(0x7f0000000380)="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"}) ioctl$UI_DEV_CREATE(r0, 0x5501) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000100)=""/107, &(0x7f0000000080)=0x6b) 02:18:29 executing program 2 (fault-call:10 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2037.339384][ T3889] input: syz0 as /devices/virtual/input/input1290 [ 2037.358474][ T3898] input: syz0 as /devices/virtual/input/input1291 [ 2037.370382][ T3897] FAULT_INJECTION: forcing a failure. [ 2037.370382][ T3897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2037.384210][ T3897] CPU: 1 PID: 3897 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2037.394261][ T3897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2037.404292][ T3897] Call Trace: [ 2037.407579][ T3897] dump_stack+0x1b0/0x21e [ 2037.411891][ T3897] ? devkmsg_release+0x11c/0x11c [ 2037.416803][ T3897] ? show_regs_print_info+0x12/0x12 [ 2037.421970][ T3897] ? kasan_alloc_pages+0x4a/0x60 [ 2037.426888][ T3897] should_fail+0x6fb/0x860 [ 2037.431286][ T3897] ? setup_fault_attr+0x2b0/0x2b0 [ 2037.436278][ T3897] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2037.441625][ T3897] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2037.447151][ T3897] ? find_get_entry+0x5da/0x670 [ 2037.451986][ T3897] ? xa_load+0x323/0x340 [ 2037.456197][ T3897] __do_page_cache_readahead+0x244/0x510 [ 2037.461808][ T3897] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2037.468217][ T3897] ? unwind_next_frame+0x1c07/0x22b0 [ 2037.473475][ T3897] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2037.479182][ T3897] generic_file_read_iter+0x626/0x20a0 [ 2037.484652][ T3897] ? find_get_pages_range_tag+0xae0/0xae0 [ 2037.490345][ T3897] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2037.495689][ T3897] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2037.501731][ T3897] ? avc_denied+0x1c0/0x1c0 [ 2037.506204][ T3897] generic_file_splice_read+0x491/0x780 [ 2037.511726][ T3897] ? splice_shrink_spd+0xb0/0xb0 [ 2037.516649][ T3897] ? security_file_permission+0x1e9/0x300 [ 2037.522352][ T3897] ? splice_shrink_spd+0xb0/0xb0 [ 2037.527262][ T3897] splice_direct_to_actor+0x3cf/0xb00 [ 2037.532604][ T3897] ? do_splice_direct+0x3d0/0x3d0 [ 2037.537597][ T3897] ? pipe_to_sendpage+0x300/0x300 [ 2037.542599][ T3897] ? security_file_permission+0x128/0x300 [ 2037.548299][ T3897] do_splice_direct+0x279/0x3d0 [ 2037.553133][ T3897] ? splice_direct_to_actor+0xb00/0xb00 [ 2037.558662][ T3897] ? security_file_permission+0x128/0x300 [ 2037.564349][ T3897] do_sendfile+0x89d/0x1110 [ 2037.568844][ T3897] ? compat_writev+0x390/0x390 [ 2037.573580][ T3897] ? security_file_permission+0x128/0x300 [ 2037.579273][ T3897] ? vfs_write+0x427/0x4f0 [ 2037.583660][ T3897] ? fput_many+0x42/0x1a0 [ 2037.587960][ T3897] __x64_sys_sendfile64+0x1ae/0x220 [ 2037.593127][ T3897] ? __ia32_sys_sendfile+0x240/0x240 [ 2037.598386][ T3897] do_syscall_64+0xcb/0x150 [ 2037.602862][ T3897] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2037.608743][ T3897] RIP: 0033:0x45de59 [ 2037.612605][ T3897] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2037.632177][ T3897] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2037.640558][ T3897] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2037.648511][ T3897] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2037.656458][ T3897] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2037.664400][ T3897] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000c [ 2037.672359][ T3897] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2037.767387][ T3908] input: syz0 as /devices/virtual/input/input1292 02:18:29 executing program 2 (fault-call:10 fault-nth:13): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2037.812188][ T3914] input: syz0 as /devices/virtual/input/input1293 [ 2037.825350][ T3917] FAULT_INJECTION: forcing a failure. [ 2037.825350][ T3917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2037.839348][ T3917] CPU: 0 PID: 3917 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2037.852264][ T3917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2037.863406][ T3917] Call Trace: [ 2037.867460][ T3917] dump_stack+0x1b0/0x21e [ 2037.872223][ T3917] ? devkmsg_release+0x11c/0x11c [ 2037.878759][ T3917] ? show_regs_print_info+0x12/0x12 [ 2037.884813][ T3917] ? kasan_alloc_pages+0x4a/0x60 [ 2037.889920][ T3917] should_fail+0x6fb/0x860 [ 2037.894809][ T3917] ? setup_fault_attr+0x2b0/0x2b0 [ 2037.899891][ T3917] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2037.905533][ T3917] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2037.912070][ T3917] ? find_get_entry+0x5da/0x670 [ 2037.917561][ T3917] ? xa_load+0x323/0x340 [ 2037.921791][ T3917] __do_page_cache_readahead+0x244/0x510 [ 2037.931364][ T3917] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2037.938015][ T3917] ? unwind_next_frame+0x1c07/0x22b0 [ 2037.944681][ T3917] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2037.952209][ T3917] generic_file_read_iter+0x626/0x20a0 [ 2037.957735][ T3917] ? find_get_pages_range_tag+0xae0/0xae0 [ 2037.965096][ T3917] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2037.970719][ T3917] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2037.977546][ T3917] ? avc_denied+0x1c0/0x1c0 [ 2037.982463][ T3917] generic_file_splice_read+0x491/0x780 [ 2037.988258][ T3917] ? splice_shrink_spd+0xb0/0xb0 [ 2037.993653][ T3917] ? security_file_permission+0x1e9/0x300 [ 2037.999529][ T3917] ? splice_shrink_spd+0xb0/0xb0 [ 2038.004437][ T3917] splice_direct_to_actor+0x3cf/0xb00 [ 2038.010063][ T3917] ? do_splice_direct+0x3d0/0x3d0 [ 2038.015082][ T3917] ? pipe_to_sendpage+0x300/0x300 [ 2038.020093][ T3917] ? security_file_permission+0x128/0x300 [ 2038.025875][ T3917] do_splice_direct+0x279/0x3d0 [ 2038.030812][ T3917] ? splice_direct_to_actor+0xb00/0xb00 [ 2038.036361][ T3917] ? security_file_permission+0x128/0x300 [ 2038.042628][ T3917] do_sendfile+0x89d/0x1110 [ 2038.047391][ T3917] ? compat_writev+0x390/0x390 [ 2038.052339][ T3917] ? security_file_permission+0x128/0x300 [ 2038.058035][ T3917] ? vfs_write+0x427/0x4f0 [ 2038.062427][ T3917] ? fput_many+0x42/0x1a0 [ 2038.066745][ T3917] __x64_sys_sendfile64+0x1ae/0x220 [ 2038.071924][ T3917] ? __ia32_sys_sendfile+0x240/0x240 [ 2038.077274][ T3917] do_syscall_64+0xcb/0x150 [ 2038.081777][ T3917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2038.087643][ T3917] RIP: 0033:0x45de59 [ 2038.091512][ T3917] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:18:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x2c, 0xaa4) [ 2038.111204][ T3917] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2038.119730][ T3917] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2038.127869][ T3917] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2038.135834][ T3917] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.143796][ T3917] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000d [ 2038.151759][ T3917] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@in={0x2, 0x4e22, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="27214763b4ab9a6679c8138724379c8edffcb53ad47583f1e97c3c3a0260ae937f43c5ba13ac56b903d02fbc4a14c51f8fd6033cd1eb08870f553d0d26f0bece169453caffcbb63c5bde6e212fbbb9089b8cd8f8dde009dc0720b1af3caa038bd1a9958f7650ee541ccbda510b9a5c68", 0x70}, {&(0x7f0000000380)="9101d0cc4937b2ab5bb180aab13188c31be9ee5bc6a60e8207e68bf592c68a69edb0f078b614f8e4bf9dbee5923fc00ff95228098cbc01973ccf3502ae6328a6c9c0b0525b8ae9205b6e2505b288bcc2099957326a74fc3461034586277da2a84e63c69ab5d5be412489c5f7a302fbb9a75dac3a40e4f13888f8acf82bb5680b16fefd7abb068b03abbdc0604f1da9180abd8a84d42cf9a997681c29cad6c567660bd0de048e674c3a6ffe7033aee172af964689c9a48d84a6130375db9841cd33b305969982358b607543978eba5dc37c16814f9db59caf106ce549178a4b734fb4fe2cf3a91192386938868ac9", 0xee}], 0x2}, 0x20) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x33, {0x0, 0x0, 0xce, 0x0, 0x0, 0x8}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x9, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x88) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000080)={0x77359400}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2038.188286][ T3900] input: syz0 as /devices/virtual/input/input1294 02:18:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:30 executing program 2 (fault-call:10 fault-nth:14): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2038.253392][ T3929] input: syz0 as /devices/virtual/input/input1295 [ 2038.313490][ T3941] input: syz0 as /devices/virtual/input/input1296 [ 2038.324220][ T3942] FAULT_INJECTION: forcing a failure. [ 2038.324220][ T3942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2038.337958][ T3942] CPU: 1 PID: 3942 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2038.348011][ T3942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2038.358045][ T3942] Call Trace: [ 2038.361348][ T3942] dump_stack+0x1b0/0x21e [ 2038.365702][ T3942] ? devkmsg_release+0x11c/0x11c [ 2038.370650][ T3942] ? show_regs_print_info+0x12/0x12 [ 2038.375834][ T3942] ? kasan_alloc_pages+0x4a/0x60 [ 2038.380757][ T3942] should_fail+0x6fb/0x860 [ 2038.385185][ T3942] ? setup_fault_attr+0x2b0/0x2b0 [ 2038.390186][ T3942] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2038.395535][ T3942] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2038.401624][ T3942] ? find_get_entry+0x5da/0x670 [ 2038.406454][ T3942] ? xa_load+0x323/0x340 [ 2038.410889][ T3942] __do_page_cache_readahead+0x244/0x510 [ 2038.416539][ T3942] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2038.422931][ T3942] ? unwind_next_frame+0x1c07/0x22b0 [ 2038.428196][ T3942] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2038.433887][ T3942] generic_file_read_iter+0x626/0x20a0 [ 2038.439332][ T3942] ? find_get_pages_range_tag+0xae0/0xae0 [ 2038.445089][ T3942] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2038.450459][ T3942] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2038.456513][ T3942] ? avc_denied+0x1c0/0x1c0 [ 2038.461015][ T3942] generic_file_splice_read+0x491/0x780 [ 2038.466537][ T3942] ? splice_shrink_spd+0xb0/0xb0 [ 2038.471485][ T3942] ? security_file_permission+0x1e9/0x300 [ 2038.477313][ T3942] ? splice_shrink_spd+0xb0/0xb0 [ 2038.482311][ T3942] splice_direct_to_actor+0x3cf/0xb00 [ 2038.487665][ T3942] ? do_splice_direct+0x3d0/0x3d0 [ 2038.493206][ T3942] ? pipe_to_sendpage+0x300/0x300 [ 2038.498238][ T3942] ? security_file_permission+0x128/0x300 [ 2038.503933][ T3942] do_splice_direct+0x279/0x3d0 [ 2038.508764][ T3942] ? splice_direct_to_actor+0xb00/0xb00 [ 2038.514310][ T3942] ? security_file_permission+0x128/0x300 [ 2038.520003][ T3942] do_sendfile+0x89d/0x1110 [ 2038.524507][ T3942] ? compat_writev+0x390/0x390 [ 2038.529276][ T3942] ? security_file_permission+0x128/0x300 [ 2038.534999][ T3942] ? vfs_write+0x427/0x4f0 [ 2038.539396][ T3942] ? fput_many+0x42/0x1a0 [ 2038.543702][ T3942] __x64_sys_sendfile64+0x1ae/0x220 [ 2038.548883][ T3942] ? __ia32_sys_sendfile+0x240/0x240 [ 2038.554193][ T3942] do_syscall_64+0xcb/0x150 [ 2038.558678][ T3942] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2038.564556][ T3942] RIP: 0033:0x45de59 [ 2038.568445][ T3942] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2038.594257][ T3942] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:18:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2038.607718][ T3942] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2038.616267][ T3942] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2038.624219][ T3942] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.632169][ T3942] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000e [ 2038.640117][ T3942] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2038.691853][ T3949] input: syz0 as /devices/virtual/input/input1297 02:18:30 executing program 2 (fault-call:10 fault-nth:15): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2038.748215][ T3954] input: syz0 as /devices/virtual/input/input1298 [ 2038.764988][ T3957] FAULT_INJECTION: forcing a failure. [ 2038.764988][ T3957] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2038.778525][ T3957] CPU: 1 PID: 3957 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2038.789702][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2038.792362][ T3958] input: syz0 as /devices/virtual/input/input1299 [ 2038.802020][ T3957] Call Trace: [ 2038.802038][ T3957] dump_stack+0x1b0/0x21e [ 2038.802047][ T3957] ? devkmsg_release+0x11c/0x11c [ 2038.802054][ T3957] ? show_regs_print_info+0x12/0x12 [ 2038.802061][ T3957] ? kasan_alloc_pages+0x4a/0x60 [ 2038.802068][ T3957] should_fail+0x6fb/0x860 [ 2038.802079][ T3957] ? setup_fault_attr+0x2b0/0x2b0 [ 2038.840752][ T3957] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2038.846124][ T3957] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2038.851665][ T3957] ? find_get_entry+0x5da/0x670 [ 2038.856512][ T3957] ? xa_load+0x323/0x340 [ 2038.860866][ T3957] __do_page_cache_readahead+0x244/0x510 [ 2038.866915][ T3957] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2038.873613][ T3957] ? unwind_next_frame+0x1c07/0x22b0 [ 2038.879560][ T3957] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2038.886351][ T3957] generic_file_read_iter+0x626/0x20a0 [ 2038.891984][ T3957] ? find_get_pages_range_tag+0xae0/0xae0 02:18:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4ab4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040841}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2038.898635][ T3957] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2038.904402][ T3957] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2038.904630][ T3969] input: syz0 as /devices/virtual/input/input1300 [ 2038.911339][ T3957] ? avc_denied+0x1c0/0x1c0 [ 2038.911352][ T3957] generic_file_splice_read+0x491/0x780 [ 2038.911361][ T3957] ? splice_shrink_spd+0xb0/0xb0 [ 2038.911375][ T3957] ? security_file_permission+0x1e9/0x300 [ 2038.939676][ T3957] ? splice_shrink_spd+0xb0/0xb0 [ 2038.944653][ T3957] splice_direct_to_actor+0x3cf/0xb00 [ 2038.950027][ T3957] ? do_splice_direct+0x3d0/0x3d0 [ 2038.955030][ T3957] ? pipe_to_sendpage+0x300/0x300 [ 2038.960031][ T3957] ? security_file_permission+0x128/0x300 [ 2038.965824][ T3957] do_splice_direct+0x279/0x3d0 [ 2038.970649][ T3957] ? splice_direct_to_actor+0xb00/0xb00 [ 2038.976219][ T3957] ? security_file_permission+0x128/0x300 [ 2038.981958][ T3957] do_sendfile+0x89d/0x1110 [ 2038.986665][ T3957] ? compat_writev+0x390/0x390 [ 2038.991505][ T3957] ? security_file_permission+0x128/0x300 [ 2038.997228][ T3957] ? vfs_write+0x427/0x4f0 [ 2039.001636][ T3957] ? fput_many+0x42/0x1a0 [ 2039.005957][ T3957] __x64_sys_sendfile64+0x1ae/0x220 [ 2039.011129][ T3957] ? __ia32_sys_sendfile+0x240/0x240 [ 2039.016398][ T3957] do_syscall_64+0xcb/0x150 [ 2039.020905][ T3957] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2039.026794][ T3957] RIP: 0033:0x45de59 [ 2039.030748][ T3957] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2039.051871][ T3957] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2039.060752][ T3957] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2039.069582][ T3957] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2039.079070][ T3957] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2039.089386][ T3957] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000f 02:18:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x2d, 0xaa4) [ 2039.097346][ T3957] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2039.188262][ T3982] input: syz0 as /devices/virtual/input/input1301 02:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:31 executing program 2 (fault-call:10 fault-nth:16): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2039.265220][ T3990] input: syz0 as /devices/virtual/input/input1302 [ 2039.275347][ T3993] FAULT_INJECTION: forcing a failure. [ 2039.275347][ T3993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2039.289344][ T3993] CPU: 1 PID: 3993 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2039.299603][ T3993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2039.309660][ T3993] Call Trace: 02:18:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2039.313219][ T3993] dump_stack+0x1b0/0x21e [ 2039.317556][ T3993] ? devkmsg_release+0x11c/0x11c [ 2039.322582][ T3993] ? show_regs_print_info+0x12/0x12 [ 2039.327865][ T3993] ? kasan_alloc_pages+0x4a/0x60 [ 2039.328332][ T3998] input: syz0 as /devices/virtual/input/input1303 [ 2039.332899][ T3993] should_fail+0x6fb/0x860 [ 2039.332910][ T3993] ? setup_fault_attr+0x2b0/0x2b0 [ 2039.332924][ T3993] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2039.332933][ T3993] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2039.332946][ T3993] ? find_get_entry+0x5da/0x670 [ 2039.365228][ T3993] ? xa_load+0x323/0x340 [ 2039.369675][ T3993] __do_page_cache_readahead+0x244/0x510 [ 2039.375470][ T3993] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2039.382560][ T3993] ? unwind_next_frame+0x1c07/0x22b0 [ 2039.387924][ T3993] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2039.393765][ T3993] generic_file_read_iter+0x626/0x20a0 [ 2039.399287][ T3993] ? find_get_pages_range_tag+0xae0/0xae0 [ 2039.404977][ T3993] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2039.410336][ T3993] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2039.416403][ T3993] ? avc_denied+0x1c0/0x1c0 [ 2039.420910][ T3993] generic_file_splice_read+0x491/0x780 [ 2039.426429][ T3993] ? splice_shrink_spd+0xb0/0xb0 [ 2039.431344][ T3993] ? security_file_permission+0x1e9/0x300 [ 2039.437167][ T3993] ? splice_shrink_spd+0xb0/0xb0 [ 2039.442201][ T3993] splice_direct_to_actor+0x3cf/0xb00 [ 2039.447553][ T3993] ? do_splice_direct+0x3d0/0x3d0 [ 2039.452559][ T3993] ? pipe_to_sendpage+0x300/0x300 [ 2039.457601][ T3993] ? security_file_permission+0x128/0x300 [ 2039.463315][ T3993] do_splice_direct+0x279/0x3d0 [ 2039.468209][ T3993] ? splice_direct_to_actor+0xb00/0xb00 [ 2039.474096][ T3993] ? security_file_permission+0x128/0x300 [ 2039.480430][ T3993] do_sendfile+0x89d/0x1110 [ 2039.486415][ T3993] ? compat_writev+0x390/0x390 [ 2039.491635][ T3993] ? security_file_permission+0x128/0x300 [ 2039.497744][ T3993] ? vfs_write+0x427/0x4f0 [ 2039.502765][ T3993] ? fput_many+0x42/0x1a0 [ 2039.507395][ T3993] __x64_sys_sendfile64+0x1ae/0x220 [ 2039.513027][ T3993] ? __ia32_sys_sendfile+0x240/0x240 [ 2039.518581][ T3993] do_syscall_64+0xcb/0x150 [ 2039.523384][ T3993] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2039.529688][ T3993] RIP: 0033:0x45de59 [ 2039.534429][ T3993] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2039.554105][ T3993] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2039.562487][ T3993] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2039.570437][ T3993] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2039.578378][ T3993] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2039.586321][ T3993] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000010 [ 2039.594278][ T3993] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2039.679974][ T4009] input: syz0 as /devices/virtual/input/input1305 [ 2039.713282][ T4014] input: syz0 as /devices/virtual/input/input1306 02:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:31 executing program 2 (fault-call:10 fault-nth:17): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2039.770380][ T4021] input: syz0 as /devices/virtual/input/input1307 [ 2039.807710][ T4027] FAULT_INJECTION: forcing a failure. [ 2039.807710][ T4027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2039.821065][ T4027] CPU: 1 PID: 4027 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2039.831145][ T4027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2039.841187][ T4027] Call Trace: [ 2039.844450][ T4027] dump_stack+0x1b0/0x21e [ 2039.848754][ T4027] ? devkmsg_release+0x11c/0x11c [ 2039.853666][ T4027] ? show_regs_print_info+0x12/0x12 [ 2039.858830][ T4027] ? kasan_alloc_pages+0x4a/0x60 [ 2039.863738][ T4027] should_fail+0x6fb/0x860 [ 2039.868133][ T4027] ? setup_fault_attr+0x2b0/0x2b0 [ 2039.873149][ T4027] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2039.878496][ T4027] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2039.884013][ T4027] ? find_get_entry+0x5da/0x670 [ 2039.888836][ T4027] ? xa_load+0x323/0x340 [ 2039.893050][ T4027] __do_page_cache_readahead+0x244/0x510 [ 2039.898660][ T4027] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2039.905047][ T4027] ? unwind_next_frame+0x1c07/0x22b0 [ 2039.910350][ T4027] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2039.916052][ T4027] generic_file_read_iter+0x626/0x20a0 [ 2039.921537][ T4027] ? find_get_pages_range_tag+0xae0/0xae0 [ 2039.927222][ T4027] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2039.932710][ T4027] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2039.938760][ T4027] ? avc_denied+0x1c0/0x1c0 [ 2039.943240][ T4027] generic_file_splice_read+0x491/0x780 [ 2039.948753][ T4027] ? splice_shrink_spd+0xb0/0xb0 [ 2039.953659][ T4027] ? security_file_permission+0x1e9/0x300 [ 2039.959370][ T4027] ? splice_shrink_spd+0xb0/0xb0 [ 2039.964275][ T4027] splice_direct_to_actor+0x3cf/0xb00 [ 2039.969616][ T4027] ? do_splice_direct+0x3d0/0x3d0 [ 2039.974620][ T4027] ? pipe_to_sendpage+0x300/0x300 [ 2039.979617][ T4027] ? security_file_permission+0x128/0x300 [ 2039.985300][ T4027] do_splice_direct+0x279/0x3d0 [ 2039.990117][ T4027] ? splice_direct_to_actor+0xb00/0xb00 [ 2039.995629][ T4027] ? security_file_permission+0x128/0x300 [ 2040.001312][ T4027] do_sendfile+0x89d/0x1110 [ 2040.005792][ T4027] ? compat_writev+0x390/0x390 [ 2040.010521][ T4027] ? security_file_permission+0x128/0x300 [ 2040.016204][ T4027] ? vfs_write+0x427/0x4f0 [ 2040.020586][ T4027] ? fput_many+0x42/0x1a0 [ 2040.024895][ T4027] __x64_sys_sendfile64+0x1ae/0x220 [ 2040.030061][ T4027] ? __ia32_sys_sendfile+0x240/0x240 [ 2040.035314][ T4027] do_syscall_64+0xcb/0x150 [ 2040.039786][ T4027] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2040.045656][ T4027] RIP: 0033:0x45de59 [ 2040.049530][ T4027] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2040.069103][ T4027] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2040.077485][ T4027] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2040.085426][ T4027] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2040.093374][ T4027] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2040.101326][ T4027] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000011 [ 2040.109284][ T4027] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x2e, 0xaa4) [ 2040.192553][ T4041] input: syz0 as /devices/virtual/input/input1308 02:18:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:32 executing program 2 (fault-call:10 fault-nth:18): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2040.272549][ T4049] input: syz0 as /devices/virtual/input/input1309 [ 2040.289953][ T4052] FAULT_INJECTION: forcing a failure. [ 2040.289953][ T4052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2040.298652][ T4053] input: syz0 as /devices/virtual/input/input1310 [ 2040.312762][ T4052] CPU: 0 PID: 4052 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 02:18:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x42f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2040.322835][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2040.332864][ T4052] Call Trace: [ 2040.336134][ T4052] dump_stack+0x1b0/0x21e [ 2040.340437][ T4052] ? devkmsg_release+0x11c/0x11c [ 2040.345358][ T4052] ? show_regs_print_info+0x12/0x12 [ 2040.350544][ T4052] ? kasan_alloc_pages+0x4a/0x60 [ 2040.355470][ T4052] should_fail+0x6fb/0x860 [ 2040.359869][ T4052] ? setup_fault_attr+0x2b0/0x2b0 [ 2040.364927][ T4052] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2040.370274][ T4052] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2040.375839][ T4052] ? find_get_entry+0x5da/0x670 [ 2040.379702][ T4060] input: syz0 as /devices/virtual/input/input1311 [ 2040.380665][ T4052] ? xa_load+0x323/0x340 [ 2040.380675][ T4052] __do_page_cache_readahead+0x244/0x510 [ 2040.380687][ T4052] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2040.403272][ T4052] ? unwind_next_frame+0x1c07/0x22b0 [ 2040.408538][ T4052] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2040.414227][ T4052] generic_file_read_iter+0x626/0x20a0 [ 2040.419656][ T4052] ? find_get_pages_range_tag+0xae0/0xae0 [ 2040.425344][ T4052] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2040.430692][ T4052] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2040.436724][ T4052] ? avc_denied+0x1c0/0x1c0 [ 2040.441201][ T4052] generic_file_splice_read+0x491/0x780 [ 2040.446719][ T4052] ? splice_shrink_spd+0xb0/0xb0 [ 2040.451659][ T4052] ? security_file_permission+0x1e9/0x300 [ 2040.457346][ T4052] ? splice_shrink_spd+0xb0/0xb0 [ 2040.462253][ T4052] splice_direct_to_actor+0x3cf/0xb00 [ 2040.467625][ T4052] ? do_splice_direct+0x3d0/0x3d0 [ 2040.472643][ T4052] ? pipe_to_sendpage+0x300/0x300 [ 2040.477659][ T4052] ? security_file_permission+0x128/0x300 [ 2040.483345][ T4052] do_splice_direct+0x279/0x3d0 [ 2040.488162][ T4052] ? splice_direct_to_actor+0xb00/0xb00 [ 2040.493688][ T4052] ? security_file_permission+0x128/0x300 [ 2040.499380][ T4052] do_sendfile+0x89d/0x1110 [ 2040.503851][ T4052] ? compat_writev+0x390/0x390 [ 2040.508580][ T4052] ? security_file_permission+0x128/0x300 [ 2040.514269][ T4052] ? vfs_write+0x427/0x4f0 [ 2040.518664][ T4052] ? fput_many+0x42/0x1a0 [ 2040.523049][ T4052] __x64_sys_sendfile64+0x1ae/0x220 [ 2040.528214][ T4052] ? __ia32_sys_sendfile+0x240/0x240 [ 2040.533465][ T4052] do_syscall_64+0xcb/0x150 [ 2040.537936][ T4052] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2040.543794][ T4052] RIP: 0033:0x45de59 [ 2040.547656][ T4052] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2040.567228][ T4052] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2040.575608][ T4052] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2040.583558][ T4052] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2040.591505][ T4052] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2040.599459][ T4052] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000012 [ 2040.607406][ T4052] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2040.696778][T24159] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2040.697179][ T4069] input: syz0 as /devices/virtual/input/input1312 02:18:32 executing program 2 (fault-call:10 fault-nth:19): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2040.749689][ T4073] input: syz0 as /devices/virtual/input/input1313 [ 2040.767180][ T4076] FAULT_INJECTION: forcing a failure. [ 2040.767180][ T4076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2040.780687][ T4076] CPU: 0 PID: 4076 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2040.790729][ T4076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2040.800762][ T4076] Call Trace: [ 2040.804046][ T4076] dump_stack+0x1b0/0x21e [ 2040.808368][ T4076] ? devkmsg_release+0x11c/0x11c [ 2040.813302][ T4076] ? show_regs_print_info+0x12/0x12 [ 2040.818488][ T4076] ? kasan_alloc_pages+0x4a/0x60 [ 2040.819263][ T4082] input: syz0 as /devices/virtual/input/input1315 [ 2040.823429][ T4076] should_fail+0x6fb/0x860 [ 2040.823439][ T4076] ? setup_fault_attr+0x2b0/0x2b0 [ 2040.823449][ T4076] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2040.823462][ T4076] ? gfp_pfmemalloc_allowed+0x130/0x130 02:18:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$UHID_INPUT2(r2, &(0x7f0000000100)={0xc, {0x3c, "638bb4f9dcaa3be0d20a86f33a0bbc6a51dc8e7935b7de5dbbdc54c4b6b091473f9e73a930557139d2af28fb4e64a6bcbd99b67006c666877e7188f8"}}, 0x42) wait4(0xffffffffffffffff, &(0x7f0000000080), 0x1000000, &(0x7f0000000180)) [ 2040.850120][ T4076] ? find_get_entry+0x5da/0x670 [ 2040.854960][ T4076] ? xa_load+0x323/0x340 [ 2040.859208][ T4076] __do_page_cache_readahead+0x244/0x510 [ 2040.864813][ T4076] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2040.871285][ T4076] ? unwind_next_frame+0x1c07/0x22b0 [ 2040.876567][ T4076] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2040.882266][ T4076] generic_file_read_iter+0x626/0x20a0 [ 2040.887717][ T4076] ? find_get_pages_range_tag+0xae0/0xae0 [ 2040.893413][ T4076] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2040.898773][ T4076] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2040.904831][ T4076] ? avc_denied+0x1c0/0x1c0 [ 2040.909319][ T4076] generic_file_splice_read+0x491/0x780 [ 2040.914850][ T4076] ? splice_shrink_spd+0xb0/0xb0 [ 2040.919769][ T4076] ? security_file_permission+0x1e9/0x300 [ 2040.925457][ T4076] ? splice_shrink_spd+0xb0/0xb0 [ 2040.930373][ T4076] splice_direct_to_actor+0x3cf/0xb00 [ 2040.935730][ T4076] ? do_splice_direct+0x3d0/0x3d0 [ 2040.940740][ T4076] ? pipe_to_sendpage+0x300/0x300 [ 2040.945734][ T4076] ? security_file_permission+0x128/0x300 [ 2040.951418][ T4076] do_splice_direct+0x279/0x3d0 [ 2040.956240][ T4076] ? splice_direct_to_actor+0xb00/0xb00 [ 2040.961768][ T4076] ? security_file_permission+0x128/0x300 [ 2040.967461][ T4076] do_sendfile+0x89d/0x1110 [ 2040.971948][ T4076] ? compat_writev+0x390/0x390 [ 2040.976691][ T4076] ? security_file_permission+0x128/0x300 [ 2040.982395][ T4076] ? vfs_write+0x427/0x4f0 [ 2040.986794][ T4076] ? fput_many+0x42/0x1a0 [ 2040.991102][ T4076] __x64_sys_sendfile64+0x1ae/0x220 [ 2040.996278][ T4076] ? __ia32_sys_sendfile+0x240/0x240 [ 2041.001531][ T4076] do_syscall_64+0xcb/0x150 [ 2041.006002][ T4076] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2041.012383][ T4076] RIP: 0033:0x45de59 [ 2041.016261][ T4076] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2041.035834][ T4076] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:18:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x2f, 0xaa4) [ 2041.044214][ T4076] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2041.052166][ T4076] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2041.060122][ T4076] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2041.068084][ T4076] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000013 [ 2041.076307][ T4076] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:33 executing program 2 (fault-call:10 fault-nth:20): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2041.205259][ T4097] input: syz0 as /devices/virtual/input/input1316 [ 2041.223777][ T4100] FAULT_INJECTION: forcing a failure. [ 2041.223777][ T4100] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2041.237642][ T4100] CPU: 0 PID: 4100 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2041.247715][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2041.257749][ T4100] Call Trace: [ 2041.261033][ T4100] dump_stack+0x1b0/0x21e [ 2041.265350][ T4100] ? devkmsg_release+0x11c/0x11c [ 2041.270266][ T4100] ? show_regs_print_info+0x12/0x12 [ 2041.275439][ T4100] ? kasan_alloc_pages+0x4a/0x60 [ 2041.280346][ T4100] should_fail+0x6fb/0x860 [ 2041.284732][ T4100] ? setup_fault_attr+0x2b0/0x2b0 [ 2041.289728][ T4100] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2041.295073][ T4100] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2041.300606][ T4100] ? find_get_entry+0x5da/0x670 [ 2041.305521][ T4100] ? xa_load+0x323/0x340 [ 2041.309746][ T4100] __do_page_cache_readahead+0x244/0x510 [ 2041.315360][ T4100] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2041.321748][ T4100] ? unwind_next_frame+0x1c07/0x22b0 [ 2041.327005][ T4100] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2041.332706][ T4100] generic_file_read_iter+0x626/0x20a0 [ 2041.338143][ T4100] ? find_get_pages_range_tag+0xae0/0xae0 [ 2041.343836][ T4100] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2041.349240][ T4100] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2041.355286][ T4100] ? avc_denied+0x1c0/0x1c0 [ 2041.359777][ T4100] generic_file_splice_read+0x491/0x780 [ 2041.365307][ T4100] ? splice_shrink_spd+0xb0/0xb0 [ 2041.370235][ T4100] ? security_file_permission+0x1e9/0x300 [ 2041.375925][ T4100] ? splice_shrink_spd+0xb0/0xb0 [ 2041.380829][ T4100] splice_direct_to_actor+0x3cf/0xb00 [ 2041.386171][ T4100] ? do_splice_direct+0x3d0/0x3d0 [ 2041.391165][ T4100] ? pipe_to_sendpage+0x300/0x300 [ 2041.396166][ T4100] ? security_file_permission+0x128/0x300 [ 2041.401860][ T4100] do_splice_direct+0x279/0x3d0 [ 2041.406694][ T4100] ? splice_direct_to_actor+0xb00/0xb00 [ 2041.412232][ T4100] ? security_file_permission+0x128/0x300 [ 2041.417917][ T4100] do_sendfile+0x89d/0x1110 [ 2041.422406][ T4100] ? compat_writev+0x390/0x390 [ 2041.427137][ T4100] ? security_file_permission+0x128/0x300 [ 2041.432825][ T4100] ? vfs_write+0x427/0x4f0 [ 2041.437220][ T4100] ? fput_many+0x42/0x1a0 [ 2041.441519][ T4100] __x64_sys_sendfile64+0x1ae/0x220 [ 2041.446692][ T4100] ? __ia32_sys_sendfile+0x240/0x240 [ 2041.451953][ T4100] do_syscall_64+0xcb/0x150 [ 2041.456433][ T4100] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2041.462292][ T4100] RIP: 0033:0x45de59 [ 2041.466155][ T4100] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2041.485726][ T4100] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2041.494109][ T4100] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 02:18:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2041.502055][ T4100] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2041.509998][ T4100] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2041.517954][ T4100] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000014 [ 2041.525933][ T4100] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x1d6c) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2041.580003][ T4082] input: syz0 as /devices/virtual/input/input1317 [ 2041.595373][ T4105] input: syz0 as /devices/virtual/input/input1318 02:18:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x210, 0x4) 02:18:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:33 executing program 2 (fault-call:10 fault-nth:21): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2041.657909][ T4116] input: syz0 as /devices/virtual/input/input1321 02:18:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2041.706937][ T4126] input: syz0 as /devices/virtual/input/input1322 [ 2041.723151][ T4127] FAULT_INJECTION: forcing a failure. [ 2041.723151][ T4127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2041.736659][ T4127] CPU: 1 PID: 4127 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2041.746705][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2041.756753][ T4127] Call Trace: [ 2041.760035][ T4127] dump_stack+0x1b0/0x21e [ 2041.762499][ T4131] input: syz0 as /devices/virtual/input/input1323 [ 2041.764372][ T4127] ? devkmsg_release+0x11c/0x11c [ 2041.764383][ T4127] ? show_regs_print_info+0x12/0x12 [ 2041.764395][ T4127] ? kasan_alloc_pages+0x4a/0x60 [ 2041.785791][ T4127] should_fail+0x6fb/0x860 [ 2041.790177][ T4127] ? setup_fault_attr+0x2b0/0x2b0 [ 2041.795181][ T4127] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2041.800538][ T4127] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2041.806054][ T4127] ? find_get_entry+0x5da/0x670 [ 2041.810888][ T4127] ? xa_load+0x323/0x340 [ 2041.815099][ T4127] __do_page_cache_readahead+0x244/0x510 [ 2041.820700][ T4127] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2041.827084][ T4127] ? unwind_next_frame+0x1c07/0x22b0 [ 2041.832340][ T4127] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2041.838030][ T4127] generic_file_read_iter+0x626/0x20a0 [ 2041.843467][ T4127] ? find_get_pages_range_tag+0xae0/0xae0 [ 2041.849155][ T4127] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2041.854498][ T4127] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2041.860535][ T4127] ? avc_denied+0x1c0/0x1c0 [ 2041.865010][ T4127] generic_file_splice_read+0x491/0x780 [ 2041.870529][ T4127] ? splice_shrink_spd+0xb0/0xb0 [ 2041.875434][ T4127] ? security_file_permission+0x1e9/0x300 [ 2041.881142][ T4127] ? splice_shrink_spd+0xb0/0xb0 [ 2041.886050][ T4127] splice_direct_to_actor+0x3cf/0xb00 [ 2041.891397][ T4127] ? do_splice_direct+0x3d0/0x3d0 [ 2041.896399][ T4127] ? pipe_to_sendpage+0x300/0x300 [ 2041.901422][ T4127] ? security_file_permission+0x128/0x300 [ 2041.907115][ T4127] do_splice_direct+0x279/0x3d0 [ 2041.911937][ T4127] ? splice_direct_to_actor+0xb00/0xb00 [ 2041.917454][ T4127] ? security_file_permission+0x128/0x300 [ 2041.923142][ T4127] do_sendfile+0x89d/0x1110 [ 2041.927633][ T4127] ? compat_writev+0x390/0x390 [ 2041.932372][ T4127] ? security_file_permission+0x128/0x300 [ 2041.938070][ T4127] ? vfs_write+0x427/0x4f0 [ 2041.942453][ T4127] ? fput_many+0x42/0x1a0 [ 2041.946757][ T4127] __x64_sys_sendfile64+0x1ae/0x220 [ 2041.951937][ T4127] ? __ia32_sys_sendfile+0x240/0x240 [ 2041.957205][ T4127] do_syscall_64+0xcb/0x150 [ 2041.961686][ T4127] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2041.967554][ T4127] RIP: 0033:0x45de59 [ 2041.971426][ T4127] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2041.991013][ T4127] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2041.999396][ T4127] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2042.007338][ T4127] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2042.015286][ T4127] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2042.023250][ T4127] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000015 [ 2042.031200][ T4127] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x30, 0xaa4) 02:18:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x8324, 0x800, 0x7}, 'syz0\x00', 0x7}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) readahead(r2, 0xffffffffffff1a00, 0x100000001) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2042.087921][ T4116] input: syz0 as /devices/virtual/input/input1324 02:18:34 executing program 2 (fault-call:10 fault-nth:22): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2042.130342][ T4143] input: syz0 as /devices/virtual/input/input1325 [ 2042.169298][ T4148] FAULT_INJECTION: forcing a failure. [ 2042.169298][ T4148] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2042.187694][ T4148] CPU: 0 PID: 4148 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2042.197767][ T4148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2042.207808][ T4148] Call Trace: [ 2042.207825][ T4148] dump_stack+0x1b0/0x21e [ 2042.207834][ T4148] ? devkmsg_release+0x11c/0x11c [ 2042.207842][ T4148] ? show_regs_print_info+0x12/0x12 [ 2042.207849][ T4148] ? kasan_alloc_pages+0x4a/0x60 [ 2042.207857][ T4148] should_fail+0x6fb/0x860 [ 2042.207864][ T4148] ? setup_fault_attr+0x2b0/0x2b0 [ 2042.207875][ T4148] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2042.207885][ T4148] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2042.207894][ T4148] ? find_get_entry+0x5da/0x670 [ 2042.207901][ T4148] ? xa_load+0x323/0x340 [ 2042.207910][ T4148] __do_page_cache_readahead+0x244/0x510 [ 2042.207918][ T4148] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2042.207932][ T4148] ? unwind_next_frame+0x1c07/0x22b0 02:18:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2042.230539][ T4148] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2042.230549][ T4148] generic_file_read_iter+0x626/0x20a0 [ 2042.230562][ T4148] ? find_get_pages_range_tag+0xae0/0xae0 [ 2042.230569][ T4148] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2042.230582][ T4148] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2042.250842][ T4148] ? avc_denied+0x1c0/0x1c0 [ 2042.250859][ T4148] generic_file_splice_read+0x491/0x780 [ 2042.272755][ T4160] input: syz0 as /devices/virtual/input/input1329 [ 2042.277170][ T4148] ? splice_shrink_spd+0xb0/0xb0 [ 2042.277187][ T4148] ? security_file_permission+0x1e9/0x300 [ 2042.277193][ T4148] ? splice_shrink_spd+0xb0/0xb0 [ 2042.277204][ T4148] splice_direct_to_actor+0x3cf/0xb00 [ 2042.343465][ T4148] ? do_splice_direct+0x3d0/0x3d0 [ 2042.348458][ T4148] ? pipe_to_sendpage+0x300/0x300 [ 2042.353451][ T4148] ? security_file_permission+0x128/0x300 [ 2042.359138][ T4148] do_splice_direct+0x279/0x3d0 [ 2042.363999][ T4148] ? splice_direct_to_actor+0xb00/0xb00 [ 2042.369514][ T4148] ? security_file_permission+0x128/0x300 [ 2042.375211][ T4148] do_sendfile+0x89d/0x1110 [ 2042.379697][ T4148] ? compat_writev+0x390/0x390 [ 2042.384435][ T4148] ? security_file_permission+0x128/0x300 [ 2042.390173][ T4148] ? vfs_write+0x427/0x4f0 [ 2042.394557][ T4148] ? fput_many+0x42/0x1a0 [ 2042.398855][ T4148] __x64_sys_sendfile64+0x1ae/0x220 [ 2042.404025][ T4148] ? __ia32_sys_sendfile+0x240/0x240 [ 2042.409328][ T4148] do_syscall_64+0xcb/0x150 [ 2042.413805][ T4148] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2042.419665][ T4148] RIP: 0033:0x45de59 [ 2042.423528][ T4148] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2042.443100][ T4148] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2042.451576][ T4148] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2042.459536][ T4148] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2042.467476][ T4148] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2042.475415][ T4148] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000016 [ 2042.483356][ T4148] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:34 executing program 2 (fault-call:10 fault-nth:23): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2042.595205][ T4167] input: syz0 as /devices/virtual/input/input1330 [ 2042.597413][ T4168] input: syz0 as /devices/virtual/input/input1331 [ 2042.637980][ T4175] input: syz0 as /devices/virtual/input/input1333 [ 2042.639123][ T4176] FAULT_INJECTION: forcing a failure. [ 2042.639123][ T4176] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2042.663127][ T4176] CPU: 1 PID: 4176 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2042.673221][ T4176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2042.683264][ T4176] Call Trace: 02:18:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2042.684606][ T4184] input: syz0 as /devices/virtual/input/input1334 [ 2042.686544][ T4176] dump_stack+0x1b0/0x21e [ 2042.686553][ T4176] ? devkmsg_release+0x11c/0x11c [ 2042.686561][ T4176] ? show_regs_print_info+0x12/0x12 [ 2042.686569][ T4176] ? kasan_alloc_pages+0x4a/0x60 [ 2042.686577][ T4176] should_fail+0x6fb/0x860 [ 2042.686585][ T4176] ? setup_fault_attr+0x2b0/0x2b0 [ 2042.686595][ T4176] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2042.686607][ T4176] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2042.733880][ T4176] ? find_get_entry+0x5da/0x670 [ 2042.738702][ T4176] ? xa_load+0x323/0x340 [ 2042.742917][ T4176] __do_page_cache_readahead+0x244/0x510 [ 2042.748523][ T4176] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2042.754907][ T4176] ? unwind_next_frame+0x1c07/0x22b0 [ 2042.760168][ T4176] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2042.765883][ T4176] generic_file_read_iter+0x626/0x20a0 [ 2042.771328][ T4176] ? find_get_pages_range_tag+0xae0/0xae0 [ 2042.777040][ T4176] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2042.782385][ T4176] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2042.788426][ T4176] ? avc_denied+0x1c0/0x1c0 [ 2042.792911][ T4176] generic_file_splice_read+0x491/0x780 [ 2042.798425][ T4176] ? splice_shrink_spd+0xb0/0xb0 [ 2042.803333][ T4176] ? security_file_permission+0x1e9/0x300 [ 2042.809032][ T4176] ? splice_shrink_spd+0xb0/0xb0 [ 2042.813934][ T4176] splice_direct_to_actor+0x3cf/0xb00 [ 2042.819429][ T4176] ? do_splice_direct+0x3d0/0x3d0 [ 2042.824423][ T4176] ? pipe_to_sendpage+0x300/0x300 [ 2042.829431][ T4176] ? security_file_permission+0x128/0x300 [ 2042.835118][ T4176] do_splice_direct+0x279/0x3d0 [ 2042.839940][ T4176] ? splice_direct_to_actor+0xb00/0xb00 [ 2042.845465][ T4176] ? security_file_permission+0x128/0x300 [ 2042.851193][ T4176] do_sendfile+0x89d/0x1110 [ 2042.855668][ T4176] ? compat_writev+0x390/0x390 [ 2042.860400][ T4176] ? security_file_permission+0x128/0x300 [ 2042.866096][ T4176] ? vfs_write+0x427/0x4f0 [ 2042.870499][ T4176] ? fput_many+0x42/0x1a0 [ 2042.874809][ T4176] __x64_sys_sendfile64+0x1ae/0x220 [ 2042.879975][ T4176] ? __ia32_sys_sendfile+0x240/0x240 [ 2042.885233][ T4176] do_syscall_64+0xcb/0x150 [ 2042.889704][ T4176] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2042.895599][ T4176] RIP: 0033:0x45de59 [ 2042.899473][ T4176] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2042.919044][ T4176] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2042.927424][ T4176] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 02:18:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x31, 0xaa4) [ 2042.935376][ T4176] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2042.943404][ T4176] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2042.951343][ T4176] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000017 [ 2042.959286][ T4176] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:35 executing program 2 (fault-call:10 fault-nth:24): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2043.068670][ T4197] input: syz0 as /devices/virtual/input/input1335 [ 2043.108488][ T4201] FAULT_INJECTION: forcing a failure. [ 2043.108488][ T4201] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2043.121714][ T4201] CPU: 0 PID: 4201 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2043.131748][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2043.141774][ T4201] Call Trace: [ 2043.145039][ T4201] dump_stack+0x1b0/0x21e [ 2043.149358][ T4201] ? devkmsg_release+0x11c/0x11c [ 2043.154270][ T4201] ? show_regs_print_info+0x12/0x12 [ 2043.159472][ T4201] ? kasan_alloc_pages+0x4a/0x60 [ 2043.164383][ T4201] should_fail+0x6fb/0x860 [ 2043.168767][ T4201] ? setup_fault_attr+0x2b0/0x2b0 [ 2043.173771][ T4201] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2043.179118][ T4201] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2043.184644][ T4201] ? find_get_entry+0x5da/0x670 [ 2043.189464][ T4201] ? xa_load+0x323/0x340 [ 2043.193687][ T4201] __do_page_cache_readahead+0x244/0x510 [ 2043.199305][ T4201] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2043.205706][ T4201] ? unwind_next_frame+0x1c07/0x22b0 [ 2043.211013][ T4201] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2043.216708][ T4201] generic_file_read_iter+0x626/0x20a0 [ 2043.222148][ T4201] ? find_get_pages_range_tag+0xae0/0xae0 [ 2043.227837][ T4201] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2043.233193][ T4201] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2043.239233][ T4201] ? avc_denied+0x1c0/0x1c0 [ 2043.243716][ T4201] generic_file_splice_read+0x491/0x780 [ 2043.249244][ T4201] ? splice_shrink_spd+0xb0/0xb0 [ 2043.254161][ T4201] ? security_file_permission+0x1e9/0x300 [ 2043.259854][ T4201] ? splice_shrink_spd+0xb0/0xb0 [ 2043.264766][ T4201] splice_direct_to_actor+0x3cf/0xb00 [ 2043.270109][ T4201] ? do_splice_direct+0x3d0/0x3d0 [ 2043.275111][ T4201] ? pipe_to_sendpage+0x300/0x300 [ 2043.280115][ T4201] ? security_file_permission+0x128/0x300 [ 2043.285800][ T4201] do_splice_direct+0x279/0x3d0 [ 2043.290617][ T4201] ? splice_direct_to_actor+0xb00/0xb00 [ 2043.296132][ T4201] ? security_file_permission+0x128/0x300 [ 2043.301819][ T4201] do_sendfile+0x89d/0x1110 [ 2043.306300][ T4201] ? compat_writev+0x390/0x390 [ 2043.311032][ T4201] ? security_file_permission+0x128/0x300 [ 2043.316719][ T4201] ? vfs_write+0x427/0x4f0 [ 2043.321114][ T4201] ? fput_many+0x42/0x1a0 [ 2043.325419][ T4201] __x64_sys_sendfile64+0x1ae/0x220 [ 2043.330605][ T4201] ? __ia32_sys_sendfile+0x240/0x240 [ 2043.335882][ T4201] do_syscall_64+0xcb/0x150 [ 2043.340372][ T4201] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2043.346258][ T4201] RIP: 0033:0x45de59 [ 2043.350289][ T4201] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:18:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2043.369871][ T4201] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2043.378262][ T4201] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2043.386206][ T4201] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2043.394153][ T4201] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2043.402144][ T4201] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000018 [ 2043.410088][ T4201] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2043.449415][ T4205] input: syz0 as /devices/virtual/input/input1336 [ 2043.474396][ T4207] input: syz0 as /devices/virtual/input/input1337 02:18:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8001}, [@call={0x85, 0x0, 0x0, 0x44}, @ldst={0x1, 0x1, 0x6, 0x0, 0x5, 0x0, 0x4}, @jmp={0x5, 0x1, 0x7, 0x8, 0x3, 0xfffffffffffffffe, 0x4}, @jmp={0x5, 0x1, 0x3, 0x3, 0x0, 0x20, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @ldst={0x0, 0x3, 0x0, 0x2, 0x2, 0xffffffffffffff86, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, @generic={0x0, 0x2, 0x8, 0x20, 0xffffffff}]}, &(0x7f0000000080)='GPL\x00', 0xcd81, 0x3, &(0x7f0000000180)=""/3, 0x41100, 0x0, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x1, 0x20, 0x101}, 0x10, 0x15007, r3}, 0x78) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r6, 0xf505, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fedbdf25110000003c0003800800020001000000080003003f000000080001002c630000080001002000000008000300a4ffffff080003000200000008000100ff010000"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000081) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x3, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x4800}}}}, 0x30}}, 0x0) r5 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x100) dup3(r4, r5, 0x80000) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:35 executing program 2 (fault-call:10 fault-nth:25): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2043.540256][ T4217] input: syz0 as /devices/virtual/input/input1338 [ 2043.573836][ T4223] input: syz0 as /devices/virtual/input/input1341 [ 2043.604867][ T4229] input: syz0 as /devices/virtual/input/input1342 [ 2043.614609][ T4230] FAULT_INJECTION: forcing a failure. [ 2043.614609][ T4230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2043.629236][ T4230] CPU: 0 PID: 4230 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2043.639293][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2043.649339][ T4230] Call Trace: [ 2043.652647][ T4230] dump_stack+0x1b0/0x21e [ 2043.656994][ T4230] ? devkmsg_release+0x11c/0x11c [ 2043.661908][ T4230] ? show_regs_print_info+0x12/0x12 [ 2043.667106][ T4230] ? kasan_alloc_pages+0x4a/0x60 [ 2043.672012][ T4230] should_fail+0x6fb/0x860 [ 2043.676409][ T4230] ? setup_fault_attr+0x2b0/0x2b0 [ 2043.681427][ T4230] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2043.686862][ T4230] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2043.692377][ T4230] ? find_get_entry+0x5da/0x670 [ 2043.697202][ T4230] ? xa_load+0x323/0x340 [ 2043.701445][ T4230] __do_page_cache_readahead+0x244/0x510 [ 2043.707049][ T4230] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2043.713438][ T4230] ? unwind_next_frame+0x1c07/0x22b0 [ 2043.718688][ T4230] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2043.724410][ T4230] generic_file_read_iter+0x626/0x20a0 [ 2043.729839][ T4230] ? find_get_pages_range_tag+0xae0/0xae0 [ 2043.735532][ T4230] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2043.740879][ T4230] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2043.746934][ T4230] ? avc_denied+0x1c0/0x1c0 [ 2043.751410][ T4230] generic_file_splice_read+0x491/0x780 [ 2043.756923][ T4230] ? splice_shrink_spd+0xb0/0xb0 [ 2043.761834][ T4230] ? security_file_permission+0x1e9/0x300 [ 2043.767533][ T4230] ? splice_shrink_spd+0xb0/0xb0 [ 2043.772440][ T4230] splice_direct_to_actor+0x3cf/0xb00 [ 2043.777780][ T4230] ? do_splice_direct+0x3d0/0x3d0 [ 2043.782776][ T4230] ? pipe_to_sendpage+0x300/0x300 [ 2043.787771][ T4230] ? security_file_permission+0x128/0x300 [ 2043.793460][ T4230] do_splice_direct+0x279/0x3d0 [ 2043.798284][ T4230] ? splice_direct_to_actor+0xb00/0xb00 [ 2043.803806][ T4230] ? security_file_permission+0x128/0x300 [ 2043.809510][ T4230] do_sendfile+0x89d/0x1110 [ 2043.813988][ T4230] ? compat_writev+0x390/0x390 [ 2043.818718][ T4230] ? security_file_permission+0x128/0x300 [ 2043.824404][ T4230] ? vfs_write+0x427/0x4f0 [ 2043.828790][ T4230] ? fput_many+0x42/0x1a0 [ 2043.833096][ T4230] __x64_sys_sendfile64+0x1ae/0x220 [ 2043.838270][ T4230] ? __ia32_sys_sendfile+0x240/0x240 [ 2043.843540][ T4230] do_syscall_64+0xcb/0x150 [ 2043.848024][ T4230] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2043.853884][ T4230] RIP: 0033:0x45de59 [ 2043.857749][ T4230] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2043.877324][ T4230] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2043.885710][ T4230] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2043.893657][ T4230] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 02:18:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2043.901602][ T4230] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2043.909547][ T4230] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000019 [ 2043.917490][ T4230] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:35 executing program 4: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:18:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x32, 0xaa4) 02:18:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:35 executing program 4: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:18:35 executing program 4: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:18:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2044.056323][ T4257] input: syz0 as /devices/virtual/input/input1346 02:18:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) fcntl$notify(r0, 0x402, 0x80000012) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:36 executing program 2 (fault-call:10 fault-nth:26): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2044.135652][ T4271] input: syz0 as /devices/virtual/input/input1348 [ 2044.135807][ T4272] input: syz0 as /devices/virtual/input/input1349 [ 2044.150434][ T4274] FAULT_INJECTION: forcing a failure. [ 2044.150434][ T4274] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2044.169917][ T4274] CPU: 0 PID: 4274 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 02:18:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2044.179993][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2044.188514][ T4281] input: syz0 as /devices/virtual/input/input1350 [ 2044.190034][ T4274] Call Trace: [ 2044.190048][ T4274] dump_stack+0x1b0/0x21e [ 2044.190063][ T4274] ? devkmsg_release+0x11c/0x11c [ 2044.208935][ T4274] ? show_regs_print_info+0x12/0x12 [ 2044.214125][ T4274] ? kasan_alloc_pages+0x4a/0x60 [ 2044.219064][ T4274] should_fail+0x6fb/0x860 [ 2044.223449][ T4274] ? setup_fault_attr+0x2b0/0x2b0 [ 2044.228443][ T4274] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2044.233786][ T4274] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2044.239302][ T4274] ? find_get_entry+0x5da/0x670 [ 2044.244120][ T4274] ? xa_load+0x323/0x340 [ 2044.248344][ T4274] __do_page_cache_readahead+0x244/0x510 [ 2044.253959][ T4274] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2044.260359][ T4274] ? unwind_next_frame+0x1c07/0x22b0 [ 2044.265625][ T4274] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2044.271311][ T4274] generic_file_read_iter+0x626/0x20a0 [ 2044.276746][ T4274] ? find_get_pages_range_tag+0xae0/0xae0 [ 2044.282433][ T4274] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2044.287789][ T4274] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2044.293830][ T4274] ? avc_denied+0x1c0/0x1c0 [ 2044.298320][ T4274] generic_file_splice_read+0x491/0x780 [ 2044.303846][ T4274] ? splice_shrink_spd+0xb0/0xb0 [ 2044.308756][ T4274] ? security_file_permission+0x1e9/0x300 [ 2044.314468][ T4274] ? splice_shrink_spd+0xb0/0xb0 [ 2044.319391][ T4274] splice_direct_to_actor+0x3cf/0xb00 [ 2044.324776][ T4274] ? do_splice_direct+0x3d0/0x3d0 [ 2044.329771][ T4274] ? pipe_to_sendpage+0x300/0x300 [ 2044.334765][ T4274] ? security_file_permission+0x128/0x300 [ 2044.340452][ T4274] do_splice_direct+0x279/0x3d0 [ 2044.345277][ T4274] ? splice_direct_to_actor+0xb00/0xb00 [ 2044.350795][ T4274] ? security_file_permission+0x128/0x300 [ 2044.356489][ T4274] do_sendfile+0x89d/0x1110 [ 2044.360963][ T4274] ? compat_writev+0x390/0x390 [ 2044.365700][ T4274] ? security_file_permission+0x128/0x300 [ 2044.371391][ T4274] ? vfs_write+0x427/0x4f0 [ 2044.375792][ T4274] ? fput_many+0x42/0x1a0 [ 2044.380103][ T4274] __x64_sys_sendfile64+0x1ae/0x220 [ 2044.385278][ T4274] ? __ia32_sys_sendfile+0x240/0x240 [ 2044.390539][ T4274] do_syscall_64+0xcb/0x150 [ 2044.395013][ T4274] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2044.400886][ T4274] RIP: 0033:0x45de59 [ 2044.404754][ T4274] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2044.424332][ T4274] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2044.432724][ T4274] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2044.440668][ T4274] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2044.448622][ T4274] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2044.456563][ T4274] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001a [ 2044.464506][ T4274] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2044.486716][ T4286] input: syz0 as /devices/virtual/input/input1351 02:18:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x33, 0xaa4) 02:18:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:36 executing program 2 (fault-call:10 fault-nth:27): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2044.832864][ T4303] input: syz0 as /devices/virtual/input/input1352 [ 2044.840574][ T4304] input: syz0 as /devices/virtual/input/input1354 [ 2044.843045][ T4302] input: syz0 as /devices/virtual/input/input1353 [ 2044.859182][ T4307] input: syz0 as /devices/virtual/input/input1355 [ 2044.860039][ T4308] FAULT_INJECTION: forcing a failure. [ 2044.860039][ T4308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2044.879483][ T4308] CPU: 0 PID: 4308 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2044.889536][ T4308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2044.899567][ T4308] Call Trace: [ 2044.902835][ T4308] dump_stack+0x1b0/0x21e [ 2044.907135][ T4308] ? devkmsg_release+0x11c/0x11c [ 2044.912039][ T4308] ? show_regs_print_info+0x12/0x12 [ 2044.917258][ T4308] ? kasan_alloc_pages+0x4a/0x60 [ 2044.922166][ T4308] should_fail+0x6fb/0x860 [ 2044.926578][ T4308] ? setup_fault_attr+0x2b0/0x2b0 [ 2044.931597][ T4308] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2044.936941][ T4308] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2044.942460][ T4308] ? find_get_entry+0x5da/0x670 [ 2044.947351][ T4308] ? xa_load+0x323/0x340 [ 2044.951568][ T4308] __do_page_cache_readahead+0x244/0x510 [ 2044.957168][ T4308] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2044.963549][ T4308] ? unwind_next_frame+0x1c07/0x22b0 [ 2044.968802][ T4308] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2044.974497][ T4308] generic_file_read_iter+0x626/0x20a0 [ 2044.979928][ T4308] ? find_get_pages_range_tag+0xae0/0xae0 [ 2044.985618][ T4308] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2044.990957][ T4308] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2044.996989][ T4308] ? avc_denied+0x1c0/0x1c0 [ 2045.001511][ T4308] generic_file_splice_read+0x491/0x780 [ 2045.007035][ T4308] ? splice_shrink_spd+0xb0/0xb0 [ 2045.011989][ T4308] ? security_file_permission+0x1e9/0x300 [ 2045.017674][ T4308] ? splice_shrink_spd+0xb0/0xb0 [ 2045.022605][ T4308] splice_direct_to_actor+0x3cf/0xb00 [ 2045.027945][ T4308] ? do_splice_direct+0x3d0/0x3d0 [ 2045.032935][ T4308] ? pipe_to_sendpage+0x300/0x300 [ 2045.037926][ T4308] ? security_file_permission+0x128/0x300 [ 2045.043631][ T4308] do_splice_direct+0x279/0x3d0 [ 2045.048449][ T4308] ? splice_direct_to_actor+0xb00/0xb00 [ 2045.053965][ T4308] ? security_file_permission+0x128/0x300 [ 2045.059662][ T4308] do_sendfile+0x89d/0x1110 [ 2045.064140][ T4308] ? compat_writev+0x390/0x390 [ 2045.068875][ T4308] ? security_file_permission+0x128/0x300 [ 2045.074578][ T4308] ? vfs_write+0x427/0x4f0 [ 2045.078967][ T4308] ? fput_many+0x42/0x1a0 [ 2045.083261][ T4308] __x64_sys_sendfile64+0x1ae/0x220 [ 2045.088441][ T4308] ? __ia32_sys_sendfile+0x240/0x240 [ 2045.093704][ T4308] do_syscall_64+0xcb/0x150 [ 2045.098186][ T4308] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2045.104055][ T4308] RIP: 0033:0x45de59 [ 2045.107929][ T4308] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:18:37 executing program 0: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 2045.127516][ T4308] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2045.135900][ T4308] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2045.143841][ T4308] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2045.151802][ T4308] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2045.159741][ T4308] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001b [ 2045.167696][ T4308] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:37 executing program 0: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:18:37 executing program 0: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:18:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x34, 0xaa4) 02:18:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x1]}, 0x8) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x164, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4c0d9db5}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x4004081) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = fcntl$dupfd(r0, 0x0, r1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x4, 0xe3, 0x81, 0x81, 0x48, @mcast2, @private1, 0x7800, 0x8000, 0x0, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="1000ff010000fedbdf25120000000800080000000080080009000900000008000700ff00000008000900000000001800018014000200776c616e31000000000000000000000008000800ffff0000540001800800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f627269646765001400020076657468305f746f5f7465616d0000002400018008000100", @ANYRES32=r7, @ANYBLOB="0800602cae144e06904fa5d16b4ff7e51633fa16", @ANYRES32=r8, @ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x40810}, 0x4011) 02:18:37 executing program 2 (fault-call:10 fault-nth:28): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2045.686175][ T4346] input: syz0 as /devices/virtual/input/input1359 [ 2045.698365][ T4352] FAULT_INJECTION: forcing a failure. [ 2045.698365][ T4352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2045.715847][ T4349] input: syz0 as /devices/virtual/input/input1361 [ 2045.727750][ T4359] input: syz0 as /devices/virtual/input/input1362 02:18:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2045.734233][ T4352] CPU: 0 PID: 4352 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2045.744284][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2045.746724][ T4363] input: syz0 as /devices/virtual/input/input1363 [ 2045.754325][ T4352] Call Trace: [ 2045.754344][ T4352] dump_stack+0x1b0/0x21e [ 2045.754353][ T4352] ? devkmsg_release+0x11c/0x11c [ 2045.754371][ T4352] ? show_regs_print_info+0x12/0x12 [ 2045.778404][ T4352] ? kasan_alloc_pages+0x4a/0x60 [ 2045.783311][ T4352] should_fail+0x6fb/0x860 [ 2045.787801][ T4352] ? setup_fault_attr+0x2b0/0x2b0 [ 2045.792798][ T4352] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2045.798141][ T4352] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2045.803654][ T4352] ? find_get_entry+0x5da/0x670 [ 2045.808475][ T4352] ? xa_load+0x323/0x340 [ 2045.812693][ T4352] __do_page_cache_readahead+0x244/0x510 [ 2045.818356][ T4352] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2045.824740][ T4352] ? unwind_next_frame+0x1c07/0x22b0 [ 2045.829995][ T4352] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2045.835686][ T4352] generic_file_read_iter+0x626/0x20a0 [ 2045.841115][ T4352] ? find_get_pages_range_tag+0xae0/0xae0 [ 2045.846881][ T4352] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2045.852411][ T4352] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2045.858452][ T4352] ? avc_denied+0x1c0/0x1c0 [ 2045.862929][ T4352] generic_file_splice_read+0x491/0x780 [ 2045.868444][ T4352] ? splice_shrink_spd+0xb0/0xb0 [ 2045.873351][ T4352] ? security_file_permission+0x1e9/0x300 [ 2045.879036][ T4352] ? splice_shrink_spd+0xb0/0xb0 [ 2045.883953][ T4352] splice_direct_to_actor+0x3cf/0xb00 [ 2045.889301][ T4352] ? do_splice_direct+0x3d0/0x3d0 [ 2045.894297][ T4352] ? pipe_to_sendpage+0x300/0x300 [ 2045.899294][ T4352] ? security_file_permission+0x128/0x300 [ 2045.904981][ T4352] do_splice_direct+0x279/0x3d0 [ 2045.909810][ T4352] ? splice_direct_to_actor+0xb00/0xb00 [ 2045.915326][ T4352] ? security_file_permission+0x128/0x300 [ 2045.921027][ T4352] do_sendfile+0x89d/0x1110 [ 2045.925498][ T4352] ? compat_writev+0x390/0x390 [ 2045.930234][ T4352] ? security_file_permission+0x128/0x300 [ 2045.935921][ T4352] ? vfs_write+0x427/0x4f0 [ 2045.940305][ T4352] ? fput_many+0x42/0x1a0 [ 2045.944602][ T4352] __x64_sys_sendfile64+0x1ae/0x220 [ 2045.949769][ T4352] ? __ia32_sys_sendfile+0x240/0x240 [ 2045.955036][ T4352] do_syscall_64+0xcb/0x150 [ 2045.959511][ T4352] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2045.965464][ T4352] RIP: 0033:0x45de59 02:18:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2045.969325][ T4352] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2045.988900][ T4352] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2045.997284][ T4352] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2046.005235][ T4352] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2046.013175][ T4352] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2046.021139][ T4352] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001c [ 2046.029079][ T4352] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2046.075850][ T4370] input: syz0 as /devices/virtual/input/input1364 02:18:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2046.126852][ T4374] input: syz0 as /devices/virtual/input/input1365 [ 2046.156809][ T4379] input: syz0 as /devices/virtual/input/input1366 [ 2046.198153][ T4346] input: syz0 as /devices/virtual/input/input1367 02:18:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x35, 0xaa4) 02:18:38 executing program 2 (fault-call:10 fault-nth:29): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2046.561809][ T4403] input: syz0 as /devices/virtual/input/input1368 [ 2046.564139][ T4401] input: syz0 as /devices/virtual/input/input1369 [ 2046.576680][ T4405] input: syz0 as /devices/virtual/input/input1370 [ 2046.581116][ T4409] input: syz0 as /devices/virtual/input/input1371 [ 2046.600007][ T4412] FAULT_INJECTION: forcing a failure. [ 2046.600007][ T4412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2046.613425][ T4412] CPU: 1 PID: 4412 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2046.623470][ T4412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2046.633554][ T4412] Call Trace: [ 2046.636820][ T4412] dump_stack+0x1b0/0x21e [ 2046.641130][ T4412] ? devkmsg_release+0x11c/0x11c [ 2046.646042][ T4412] ? show_regs_print_info+0x12/0x12 [ 2046.651210][ T4412] ? kasan_alloc_pages+0x4a/0x60 [ 2046.656123][ T4412] should_fail+0x6fb/0x860 [ 2046.660514][ T4412] ? setup_fault_attr+0x2b0/0x2b0 [ 2046.665563][ T4412] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2046.670918][ T4412] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2046.676439][ T4412] ? find_get_entry+0x5da/0x670 [ 2046.681267][ T4412] ? xa_load+0x323/0x340 [ 2046.685481][ T4412] __do_page_cache_readahead+0x244/0x510 [ 2046.691081][ T4412] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2046.697463][ T4412] ? unwind_next_frame+0x1c07/0x22b0 [ 2046.702714][ T4412] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2046.708410][ T4412] generic_file_read_iter+0x626/0x20a0 [ 2046.713843][ T4412] ? find_get_pages_range_tag+0xae0/0xae0 [ 2046.719529][ T4412] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2046.724869][ T4412] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2046.730903][ T4412] ? avc_denied+0x1c0/0x1c0 [ 2046.735375][ T4412] generic_file_splice_read+0x491/0x780 [ 2046.740888][ T4412] ? splice_shrink_spd+0xb0/0xb0 [ 2046.745796][ T4412] ? security_file_permission+0x1e9/0x300 [ 2046.751483][ T4412] ? splice_shrink_spd+0xb0/0xb0 [ 2046.756404][ T4412] splice_direct_to_actor+0x3cf/0xb00 [ 2046.761744][ T4412] ? do_splice_direct+0x3d0/0x3d0 [ 2046.766753][ T4412] ? pipe_to_sendpage+0x300/0x300 [ 2046.771746][ T4412] ? security_file_permission+0x128/0x300 [ 2046.777430][ T4412] do_splice_direct+0x279/0x3d0 [ 2046.782263][ T4412] ? splice_direct_to_actor+0xb00/0xb00 [ 2046.787779][ T4412] ? security_file_permission+0x128/0x300 [ 2046.793467][ T4412] do_sendfile+0x89d/0x1110 [ 2046.797938][ T4412] ? compat_writev+0x390/0x390 [ 2046.802674][ T4412] ? security_file_permission+0x128/0x300 [ 2046.808360][ T4412] ? vfs_write+0x427/0x4f0 [ 2046.812742][ T4412] ? fput_many+0x42/0x1a0 [ 2046.817044][ T4412] __x64_sys_sendfile64+0x1ae/0x220 [ 2046.822224][ T4412] ? __ia32_sys_sendfile+0x240/0x240 [ 2046.827484][ T4412] do_syscall_64+0xcb/0x150 [ 2046.831977][ T4412] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2046.837858][ T4412] RIP: 0033:0x45de59 [ 2046.841722][ T4412] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:18:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2046.861303][ T4412] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2046.869683][ T4412] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2046.877642][ T4412] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2046.885583][ T4412] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2046.893541][ T4412] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001d [ 2046.901483][ T4412] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:38 executing program 1: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 2046.940893][ T4419] input: syz0 as /devices/virtual/input/input1372 [ 2046.978900][ T4424] input: syz0 as /devices/virtual/input/input1373 02:18:38 executing program 1: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:18:38 executing program 1: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 02:18:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:39 executing program 2 (fault-call:10 fault-nth:30): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x36, 0xaa4) 02:18:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2047.420403][ T4445] input: syz0 as /devices/virtual/input/input1374 [ 2047.429334][ T4446] FAULT_INJECTION: forcing a failure. [ 2047.429334][ T4446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2047.433929][ T4450] input: syz0 as /devices/virtual/input/input1375 [ 2047.447413][ T4446] CPU: 1 PID: 4446 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2047.459037][ T4446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2047.469074][ T4446] Call Trace: [ 2047.472362][ T4446] dump_stack+0x1b0/0x21e [ 2047.476692][ T4446] ? devkmsg_release+0x11c/0x11c [ 2047.481626][ T4446] ? show_regs_print_info+0x12/0x12 [ 2047.486824][ T4446] ? kasan_alloc_pages+0x4a/0x60 [ 2047.491755][ T4446] should_fail+0x6fb/0x860 [ 2047.496144][ T4446] ? setup_fault_attr+0x2b0/0x2b0 [ 2047.501149][ T4446] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2047.507837][ T4446] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2047.513385][ T4446] ? find_get_entry+0x5da/0x670 [ 2047.518202][ T4446] ? xa_load+0x323/0x340 [ 2047.522413][ T4446] __do_page_cache_readahead+0x244/0x510 [ 2047.528129][ T4446] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2047.534530][ T4446] ? unwind_next_frame+0x1c07/0x22b0 [ 2047.539781][ T4446] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2047.545485][ T4446] generic_file_read_iter+0x626/0x20a0 [ 2047.550927][ T4446] ? find_get_pages_range_tag+0xae0/0xae0 [ 2047.556620][ T4446] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2047.561960][ T4446] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2047.567997][ T4446] ? avc_denied+0x1c0/0x1c0 [ 2047.572470][ T4446] generic_file_splice_read+0x491/0x780 [ 2047.577988][ T4446] ? splice_shrink_spd+0xb0/0xb0 [ 2047.582958][ T4446] ? security_file_permission+0x1e9/0x300 [ 2047.588659][ T4446] ? splice_shrink_spd+0xb0/0xb0 [ 2047.593573][ T4446] splice_direct_to_actor+0x3cf/0xb00 [ 2047.598923][ T4446] ? do_splice_direct+0x3d0/0x3d0 [ 2047.603913][ T4446] ? pipe_to_sendpage+0x300/0x300 [ 2047.608909][ T4446] ? security_file_permission+0x128/0x300 [ 2047.614599][ T4446] do_splice_direct+0x279/0x3d0 [ 2047.619419][ T4446] ? splice_direct_to_actor+0xb00/0xb00 [ 2047.624932][ T4446] ? security_file_permission+0x128/0x300 [ 2047.630617][ T4446] do_sendfile+0x89d/0x1110 [ 2047.635100][ T4446] ? compat_writev+0x390/0x390 [ 2047.639848][ T4446] ? security_file_permission+0x128/0x300 [ 2047.645544][ T4446] ? vfs_write+0x427/0x4f0 [ 2047.649932][ T4446] ? fput_many+0x42/0x1a0 [ 2047.654230][ T4446] __x64_sys_sendfile64+0x1ae/0x220 [ 2047.659401][ T4446] ? __ia32_sys_sendfile+0x240/0x240 [ 2047.664653][ T4446] ? do_syscall_64+0x80/0x150 [ 2047.669311][ T4446] ? do_syscall_64+0x9c/0x150 [ 2047.673962][ T4446] do_syscall_64+0xcb/0x150 [ 2047.678452][ T4446] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2047.684366][ T4446] RIP: 0033:0x45de59 [ 2047.688230][ T4446] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2047.707834][ T4446] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2047.716393][ T4446] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2047.724352][ T4446] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2047.732304][ T4446] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2047.740247][ T4446] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001e [ 2047.748192][ T4446] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) lstat(&(0x7f0000000080)='\x00', &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x1d6c) fallocate(r0, 0x0, 0xff, 0x4) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{0x7, 0x7f, 0xffff, 0x800}, 'syz0\x00', 0x11}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:41 executing program 2 (fault-call:10 fault-nth:31): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x37, 0xaa4) 02:18:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2049.581949][ T4470] input: syz0 as /devices/virtual/input/input1377 [ 2049.595697][ T4467] FAULT_INJECTION: forcing a failure. [ 2049.595697][ T4467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2049.598183][ T4472] input: syz0 as /devices/virtual/input/input1378 [ 2049.617298][ T4467] CPU: 0 PID: 4467 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 02:18:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2049.627354][ T4467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2049.627358][ T4467] Call Trace: [ 2049.627374][ T4467] dump_stack+0x1b0/0x21e [ 2049.627383][ T4467] ? devkmsg_release+0x11c/0x11c [ 2049.627392][ T4467] ? show_regs_print_info+0x12/0x12 [ 2049.627399][ T4467] ? kasan_alloc_pages+0x4a/0x60 [ 2049.627407][ T4467] should_fail+0x6fb/0x860 [ 2049.627416][ T4467] ? setup_fault_attr+0x2b0/0x2b0 [ 2049.627426][ T4467] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2049.627435][ T4467] ? gfp_pfmemalloc_allowed+0x130/0x130 02:18:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2049.627449][ T4467] ? find_get_entry+0x5da/0x670 [ 2049.650810][ T4477] input: syz0 as /devices/virtual/input/input1380 [ 2049.655127][ T4467] ? xa_load+0x323/0x340 [ 2049.655139][ T4467] __do_page_cache_readahead+0x244/0x510 [ 2049.655152][ T4467] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2049.680398][ T4467] ? unwind_next_frame+0x1c07/0x22b0 [ 2049.680406][ T4467] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2049.680419][ T4467] generic_file_read_iter+0x626/0x20a0 [ 2049.713097][ T4467] ? find_get_pages_range_tag+0xae0/0xae0 02:18:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2049.713111][ T4467] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2049.735261][ T4467] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2049.735269][ T4467] ? avc_denied+0x1c0/0x1c0 [ 2049.735284][ T4467] generic_file_splice_read+0x491/0x780 [ 2049.751338][ T4467] ? splice_shrink_spd+0xb0/0xb0 [ 2049.756266][ T4467] ? security_file_permission+0x1e9/0x300 [ 2049.756277][ T4467] ? splice_shrink_spd+0xb0/0xb0 [ 2049.756284][ T4467] splice_direct_to_actor+0x3cf/0xb00 [ 2049.756292][ T4467] ? do_splice_direct+0x3d0/0x3d0 [ 2049.756303][ T4467] ? pipe_to_sendpage+0x300/0x300 [ 2049.782226][ T4467] ? security_file_permission+0x128/0x300 [ 2049.787938][ T4467] do_splice_direct+0x279/0x3d0 [ 2049.792757][ T4467] ? splice_direct_to_actor+0xb00/0xb00 [ 2049.798269][ T4467] ? security_file_permission+0x128/0x300 [ 2049.803953][ T4467] do_sendfile+0x89d/0x1110 [ 2049.808477][ T4467] ? compat_writev+0x390/0x390 [ 2049.813206][ T4467] ? security_file_permission+0x128/0x300 [ 2049.818978][ T4467] ? vfs_write+0x427/0x4f0 [ 2049.823358][ T4467] ? fput_many+0x42/0x1a0 [ 2049.827652][ T4467] __x64_sys_sendfile64+0x1ae/0x220 [ 2049.832827][ T4467] ? __ia32_sys_sendfile+0x240/0x240 [ 2049.838095][ T4467] do_syscall_64+0xcb/0x150 [ 2049.842576][ T4467] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2049.848438][ T4467] RIP: 0033:0x45de59 [ 2049.852303][ T4467] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2049.871877][ T4467] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2049.880264][ T4467] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2049.888217][ T4467] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2049.896168][ T4467] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2049.904106][ T4467] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001f [ 2049.912044][ T4467] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2049.957540][ T4492] input: syz0 as /devices/virtual/input/input1385 02:18:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000380)={{0x2, 0x100, 0xd7, 0xff, 0x7, 0x799}, 0x2c4, [0x1ff, 0x401, 0xa, 0x5, 0x0, 0x4, 0x0, 0x3, 0x101, 0x0, 0x2, 0x7f, 0xffff, 0x10001, 0x5, 0x6, 0x10001, 0x8, 0x1000, 0xe0000, 0x10000, 0x5, 0xa727, 0x401, 0x367, 0x7, 0x0, 0x5, 0x3, 0x4, 0x7, 0x3, 0x2, 0x7, 0xfffffffe, 0x80000000, 0x3, 0x9, 0x7f, 0x80000000, 0xffffff81, 0x7, 0x10001, 0x401, 0x5, 0x5, 0x3ff, 0x0, 0x3f, 0xce8, 0x5788000, 0x10001, 0x1f, 0x8f, 0xffffffff, 0x6, 0x2, 0x7fffffff, 0x81, 0xe1, 0x2c789ec4, 0x0, 0x62, 0x8, 0x1, 0xeb8, 0x8000, 0x200, 0x5, 0xbb, 0x6, 0xe0, 0x8, 0x8001, 0x7fffffff, 0xa8, 0x306d, 0x0, 0xe5a310dd, 0x9, 0xc97, 0xfffff715, 0x7, 0xb9, 0x2, 0x56f8, 0x7, 0x0, 0x5, 0x9, 0x80000001, 0x6f6f, 0x7ff, 0x5fd363df, 0x3, 0x1ff, 0xfc, 0x4, 0x4, 0xb0e9, 0x401, 0x2, 0x0, 0x3ff, 0x56f9, 0x401, 0x5, 0x4, 0x5, 0x9, 0x4, 0x3, 0x367, 0x6, 0x80, 0x0, 0x20, 0x1d, 0x81, 0x2, 0x5a8, 0x100, 0x200, 0x6, 0x401, 0x9, 0x7, 0x6, 0x3ff, 0x1000, 0x5, 0x10001, 0x2, 0x101, 0xfffffffc, 0x4, 0xf346, 0x40, 0x1, 0x10000, 0x0, 0x8, 0x2d5a, 0x1, 0xffff, 0x8, 0x3, 0x1, 0x6, 0x2, 0x3, 0x7, 0x40, 0x4, 0x4, 0x8, 0x8, 0x8, 0x3, 0xd2432000, 0x8, 0x7fff, 0x3, 0x6, 0x1, 0x7ff, 0xe71f, 0x9, 0x1ff, 0x80000001, 0x100, 0xab5c, 0x6, 0x3ff, 0x3, 0x80, 0x1, 0x4, 0x8, 0x64, 0xfffffffa, 0x95, 0x101, 0x7, 0x6, 0x6, 0x401, 0x4, 0x2, 0x9, 0xa411, 0x5, 0x965, 0x2, 0x8, 0x7, 0x101, 0x3ff, 0x4, 0x10001, 0x7, 0x7, 0x7, 0x800, 0x1, 0xfff, 0xfffffffa, 0x2, 0x5, 0x2, 0xa3dd, 0x7fff, 0x2, 0x0, 0x4, 0x7, 0x1ff, 0x7ff, 0x1ff, 0x1, 0x0, 0x1, 0x100, 0x3, 0x4bc0, 0x7ff, 0x9, 0x10001, 0x3, 0x1, 0xfe, 0x9, 0x2, 0x1, 0x5, 0x8, 0x3, 0x5, 0x2, 0x8001, 0x7, 0x80000001, 0x0, 0x7, 0xfffffffd, 0x7fff, 0x3902, 0x4, 0x9, 0x0, 0x4940, 0x80000001, 0xfffffff8, 0x1ff, 0xffffff00, 0x100, 0x8000, 0x40, 0x4, 0x8, 0x6, 0x32fd, 0x80000000, 0x1, 0xc0000000, 0x200, 0x8, 0x100, 0x5, 0x8000, 0x3, 0x2000000, 0x8, 0xffffff81, 0x200, 0x109037b7, 0x2460, 0x5, 0x6, 0x3ff, 0x6, 0x79, 0x1, 0x4, 0x0, 0xfffffffb, 0x9, 0xfffffffd, 0x5, 0x412, 0x9, 0x5, 0x32c, 0x3, 0xffffffff, 0x8, 0x10001, 0x0, 0x30800000, 0x2198, 0x5, 0x6, 0x90, 0x8279, 0x7, 0x100, 0x8, 0x8, 0x4350, 0x9, 0x200, 0x9, 0x1, 0x10001, 0x6b, 0x80, 0x0, 0x0, 0x0, 0x9, 0x101, 0x0, 0x2, 0x0, 0x5, 0x2, 0x1, 0x49, 0x5, 0xffffff80, 0x2, 0x2, 0x6, 0x8fe, 0x9, 0x7fffffff, 0x900, 0x1, 0x200, 0x4, 0x9ab4, 0x0, 0x200, 0x1000, 0x70, 0x5, 0x48, 0xdda, 0x80000001, 0xf8000000, 0xff, 0x5, 0x2, 0x7fffffff, 0x5, 0x279, 0x7a, 0x10001, 0x1, 0x100000, 0x8, 0x5, 0x2, 0x8, 0x5, 0x7fff, 0x6, 0x101, 0x6, 0x5f82, 0x10001, 0xbeed, 0x10001, 0x7, 0x9, 0xe916, 0x8, 0x2, 0x0, 0xff, 0x1578, 0x37a40, 0xa5, 0x2, 0x2, 0x1e0b, 0x3, 0x9, 0x8, 0x5, 0x7, 0x80, 0x5, 0x7fffffff, 0xffff, 0x80000001, 0xfe, 0x10000, 0x101, 0x0, 0x8, 0x4f, 0x3, 0x9, 0x9, 0x2, 0x1, 0x80, 0x6, 0x1, 0x3f, 0xe4, 0x8000, 0x6, 0x6, 0x7f, 0x0, 0xfff, 0x101, 0x4, 0x80000000, 0x5, 0x3, 0x682c, 0x3, 0xff, 0x7, 0x4, 0x5, 0x9, 0x7fff, 0x7f, 0x5, 0x4, 0x7, 0x5, 0x13d, 0x80000000, 0xc2b, 0x6, 0x1f, 0x67fa, 0x328974cc, 0x88a, 0x1f, 0x5, 0x7ff, 0x80000001, 0x5, 0x10000, 0x4, 0x8, 0x8001, 0x32c, 0x4, 0x3, 0x68a, 0x9, 0xfb5, 0x39ed, 0x4, 0x800, 0x1000, 0x6, 0x392, 0x1f, 0xa58, 0xad, 0x8, 0x7fffffff, 0x464, 0x86, 0xfffffff9, 0xf326d2a0, 0x1, 0x3, 0x3, 0x6e, 0x80000000, 0x4, 0x10000, 0x7f, 0x10001, 0x8, 0x0, 0x5, 0x4819, 0x81, 0xffff, 0x81, 0x7, 0x20, 0xfe, 0x4, 0x1d80000, 0x1ff, 0x8, 0x6, 0x1, 0x651a, 0x15ea37d3, 0x1, 0x1, 0x3ff, 0x80, 0x3, 0xa02e, 0x1000, 0x2367, 0x2, 0x1, 0xfffffff7, 0x9, 0x3a, 0x7, 0x3, 0x800, 0x9, 0x7ba, 0x6, 0x10001, 0x1, 0x4, 0x7, 0x2a2c, 0x1, 0x9, 0x8, 0x8, 0x0, 0x9, 0x7, 0x8, 0x40, 0x3f, 0x1000, 0x4, 0x6, 0x3ff, 0x7, 0x8, 0x28, 0x5, 0x5, 0xc65, 0x49cb, 0x2, 0x0, 0x7c2, 0x1d40, 0x1800, 0x3, 0xdb, 0x4, 0x5, 0x5, 0x9, 0xb4, 0x8, 0x4, 0xffffff99, 0xffffffff, 0x1, 0x55f, 0xbd57, 0xfffffffa, 0x1000, 0x1e16, 0x9, 0x3f, 0x6, 0x20, 0x9, 0x400, 0x2, 0x80000000, 0x8, 0x2, 0x80, 0xfff, 0x6, 0x6, 0x9, 0xdf70, 0xe811, 0xffff, 0x10001, 0x9, 0x5, 0x0, 0xff, 0x8, 0x80000000, 0x2, 0x7f, 0x10001, 0xeb, 0x3ff, 0x101, 0xffe00000, 0x8, 0x2, 0x6, 0x3, 0x0, 0x8, 0x6, 0xc7d, 0x1, 0x1, 0x7ff, 0xffffffff, 0x8, 0x4, 0x4c3e, 0x3, 0x0, 0x77, 0x4, 0xfffffffe, 0x5, 0x9, 0x0, 0x90000, 0x47, 0x2, 0x81, 0x0, 0x3, 0x1, 0x80000001, 0x6ce, 0x84d, 0x10001, 0x3ff, 0x6, 0x8, 0x8, 0x2, 0x3f, 0x3, 0x4, 0xff, 0x6, 0x101, 0x4, 0xfffffe00, 0x5, 0x101, 0xf80000, 0x8, 0x360, 0x8e, 0x80, 0x32f, 0x3, 0x60, 0x7f, 0x10000, 0xe779, 0xfff, 0x5, 0x4, 0x2, 0x7f, 0x80, 0xc7, 0x80, 0xfffffffe, 0xed, 0x8, 0x401, 0x40, 0x4, 0x2, 0x7, 0x2, 0x2e, 0x1, 0x5, 0x400, 0xe053, 0x3, 0x6, 0x5, 0x2, 0x106cc0, 0x9, 0x56f, 0x8, 0x3, 0x1, 0x1, 0x2, 0x5, 0x7f, 0x9, 0x3, 0x1f, 0x8000, 0xffff, 0x2176, 0x7, 0x2, 0xef, 0x81, 0x1, 0x80, 0x2, 0x8, 0x8000, 0x6, 0x0, 0x80000001, 0xee7, 0x9eb, 0x2, 0xc81e, 0x10000, 0x1000, 0x8, 0x3, 0x14000000, 0xb1, 0x349ea2d1, 0xe3, 0x4, 0x2, 0x4, 0x8e, 0x6, 0x9, 0x401, 0xffff, 0x10001, 0x6, 0x0, 0x9, 0x6, 0x0, 0x8, 0x3, 0x1ff, 0x2, 0x7, 0xa49, 0x10000, 0x1f, 0x7, 0x3f, 0x6, 0x9, 0x8, 0xffff, 0x3bd, 0x7, 0x4, 0x0, 0x3, 0x51, 0xffffffff, 0x0, 0x1, 0x9, 0x400, 0x7, 0x1, 0x3, 0x987, 0x80000001, 0x81, 0x9, 0x400, 0x0, 0x6, 0x7ff, 0x100, 0x2, 0x732a, 0x1, 0x7746, 0x3, 0x200, 0x3, 0x0, 0x0, 0x3b1, 0xf8, 0x4, 0x7, 0x6, 0x43, 0x0, 0x80000000, 0x1, 0x1, 0x1, 0x0, 0x20000000, 0x8, 0x198, 0x0, 0x80000001, 0xfffffffd, 0x2e, 0x1be4, 0x7fff, 0x8, 0x0, 0x8, 0x5, 0xfffffff8, 0x1, 0x80000000, 0x9, 0x1f, 0xc1b, 0x2, 0x80000000, 0x3ff, 0x7, 0x10000, 0x100, 0x5, 0x1000, 0xfff, 0x4, 0x7fff, 0x7, 0x80000001, 0x8, 0xfb, 0x4, 0x7, 0x7, 0x80, 0x4, 0x3, 0x10001, 0xffffffff, 0x7f, 0x3, 0x308, 0x8, 0x1, 0x0, 0x7, 0x3, 0x2, 0x9, 0x2, 0x3, 0x3f, 0x101, 0x9, 0x902, 0x7, 0x200, 0x40, 0x4, 0xffff745b, 0x707f, 0x5, 0xffffffff, 0x10001, 0x0, 0x800, 0x100, 0xffff7409, 0xa68, 0x1000, 0x7fffffff, 0x10000, 0x3, 0x7fff, 0x82, 0x8001, 0xffff, 0x81, 0x3bf, 0x4, 0x81, 0x6, 0xfffffffe, 0x9, 0x4, 0x200, 0x4, 0x6d6, 0xc66, 0x40, 0x4, 0x10001, 0x6, 0x2, 0x3, 0x7ff, 0xfff, 0x1f, 0x6, 0x0, 0x5, 0x5, 0xffffffff, 0x7f, 0x463, 0x5d8a2adf, 0x7, 0x4, 0x2, 0x0, 0x8, 0x101, 0x2, 0xffff, 0x788, 0x1, 0x0, 0x3, 0x8c80, 0xffffff13, 0x1e, 0x8, 0x7, 0x1, 0x64, 0x1, 0xce, 0x101, 0x8242, 0x4, 0x80, 0x7, 0x80000001, 0x5, 0x1, 0x8, 0x200, 0x8, 0x4, 0x7, 0x6, 0x44a7, 0xff, 0xfffffff8, 0x4, 0xbc9, 0x90, 0x8000, 0x80000001, 0x80, 0x1, 0x9, 0xf3, 0x6, 0x3, 0x400, 0x9, 0x2, 0xe25, 0x3f, 0x3, 0x40, 0x9, 0x2, 0xffffffc0, 0x0, 0x8, 0x2, 0x1, 0x8000, 0x5, 0x6, 0x7b7dfaf2, 0x0, 0x7, 0x7, 0x3f, 0x7fffffff, 0x43, 0x3, 0xffffffff, 0x3d60, 0x94, 0x10000, 0x4a, 0x4, 0x8000, 0x281d, 0x400, 0x1, 0x1ff, 0x7fffffff, 0x0, 0x1, 0x2, 0x4, 0x883, 0xffffffff, 0x6, 0xdc8, 0x2, 0xddc7, 0x5, 0x1, 0x9, 0x1, 0x3, 0x2, 0xffffffe1, 0x2d63, 0x5, 0x6, 0x1, 0x4, 0x64f, 0xd8, 0x9, 0xfff, 0xfb9, 0x2, 0x400, 0x10000, 0x400]}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000280)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @loopback}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@loopback, @ipv4={[], [], @multicast2}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7, 0xfc00, 0x0, 0x400, 0xc4, 0x80000000, r4}) r5 = dup(r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=""/47) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:18:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:42 executing program 2 (fault-call:10 fault-nth:32): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2050.036576][ T4501] input: syz0 as /devices/virtual/input/input1387 [ 2050.056531][ T4503] input: syz0 as /devices/virtual/input/input1388 [ 2050.063414][ T4507] input: syz0 as /devices/virtual/input/input1389 [ 2050.110398][ T4512] FAULT_INJECTION: forcing a failure. [ 2050.110398][ T4512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2050.124018][ T4512] CPU: 1 PID: 4512 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2050.134155][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.144190][ T4512] Call Trace: [ 2050.147460][ T4512] dump_stack+0x1b0/0x21e [ 2050.151762][ T4512] ? devkmsg_release+0x11c/0x11c [ 2050.156672][ T4512] ? show_regs_print_info+0x12/0x12 [ 2050.161839][ T4512] ? kasan_alloc_pages+0x4a/0x60 [ 2050.166750][ T4512] should_fail+0x6fb/0x860 [ 2050.171136][ T4512] ? setup_fault_attr+0x2b0/0x2b0 [ 2050.176224][ T4512] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2050.181575][ T4512] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2050.187206][ T4512] ? find_get_entry+0x5da/0x670 [ 2050.192029][ T4512] ? xa_load+0x323/0x340 [ 2050.196252][ T4512] __do_page_cache_readahead+0x244/0x510 [ 2050.201866][ T4512] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2050.208278][ T4512] ? unwind_next_frame+0x1c07/0x22b0 [ 2050.213541][ T4512] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2050.219249][ T4512] generic_file_read_iter+0x626/0x20a0 [ 2050.224677][ T4512] ? find_get_pages_range_tag+0xae0/0xae0 [ 2050.230452][ T4512] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2050.235791][ T4512] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2050.241826][ T4512] ? avc_denied+0x1c0/0x1c0 [ 2050.246313][ T4512] generic_file_splice_read+0x491/0x780 [ 2050.251841][ T4512] ? splice_shrink_spd+0xb0/0xb0 [ 2050.256772][ T4512] ? security_file_permission+0x1e9/0x300 [ 2050.262467][ T4512] ? splice_shrink_spd+0xb0/0xb0 [ 2050.267374][ T4512] splice_direct_to_actor+0x3cf/0xb00 [ 2050.272715][ T4512] ? do_splice_direct+0x3d0/0x3d0 [ 2050.277724][ T4512] ? pipe_to_sendpage+0x300/0x300 [ 2050.282722][ T4512] ? security_file_permission+0x128/0x300 [ 2050.288409][ T4512] do_splice_direct+0x279/0x3d0 [ 2050.293248][ T4512] ? splice_direct_to_actor+0xb00/0xb00 [ 2050.298766][ T4512] ? security_file_permission+0x128/0x300 [ 2050.304453][ T4512] do_sendfile+0x89d/0x1110 [ 2050.308924][ T4512] ? compat_writev+0x390/0x390 [ 2050.313656][ T4512] ? security_file_permission+0x128/0x300 [ 2050.319362][ T4512] ? vfs_write+0x427/0x4f0 [ 2050.323760][ T4512] ? fput_many+0x42/0x1a0 [ 2050.328065][ T4512] __x64_sys_sendfile64+0x1ae/0x220 [ 2050.333241][ T4512] ? __ia32_sys_sendfile+0x240/0x240 [ 2050.338514][ T4512] do_syscall_64+0xcb/0x150 [ 2050.342994][ T4512] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2050.348862][ T4512] RIP: 0033:0x45de59 [ 2050.352725][ T4512] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2050.372314][ T4512] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2050.380697][ T4512] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2050.388646][ T4512] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2050.396588][ T4512] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 02:18:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x38, 0xaa4) 02:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2050.404550][ T4512] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000020 [ 2050.412502][ T4512] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2050.468786][ T4524] input: syz0 as /devices/virtual/input/input1391 [ 2050.482570][ T4528] input: syz0 as /devices/virtual/input/input1392 02:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2050.526023][ T4539] input: syz0 as /devices/virtual/input/input1396 02:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2050.606960][ T4546] input: syz0 as /devices/virtual/input/input1398 [ 2050.625303][ T4549] input: syz0 as /devices/virtual/input/input1399 [ 2050.671621][ T4557] input: syz0 as /devices/virtual/input/input1400 02:18:42 executing program 2 (fault-call:10 fault-nth:33): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2050.762876][ T4565] FAULT_INJECTION: forcing a failure. [ 2050.762876][ T4565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2050.780131][ T4565] CPU: 0 PID: 4565 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2050.790197][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.800241][ T4565] Call Trace: [ 2050.803529][ T4565] dump_stack+0x1b0/0x21e [ 2050.807850][ T4565] ? devkmsg_release+0x11c/0x11c [ 2050.812781][ T4565] ? show_regs_print_info+0x12/0x12 [ 2050.817972][ T4565] ? kasan_alloc_pages+0x4a/0x60 [ 2050.822901][ T4565] should_fail+0x6fb/0x860 [ 2050.827308][ T4565] ? setup_fault_attr+0x2b0/0x2b0 [ 2050.832326][ T4565] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2050.837688][ T4565] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2050.843221][ T4565] ? find_get_entry+0x5da/0x670 [ 2050.848056][ T4565] ? xa_load+0x323/0x340 [ 2050.852288][ T4565] __do_page_cache_readahead+0x244/0x510 [ 2050.857910][ T4565] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2050.864311][ T4565] ? unwind_next_frame+0x1c07/0x22b0 [ 2050.869584][ T4565] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2050.875292][ T4565] generic_file_read_iter+0x626/0x20a0 [ 2050.880751][ T4565] ? find_get_pages_range_tag+0xae0/0xae0 [ 2050.886459][ T4565] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2050.891819][ T4565] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2050.897879][ T4565] ? avc_denied+0x1c0/0x1c0 [ 2050.902373][ T4565] generic_file_splice_read+0x491/0x780 [ 2050.907907][ T4565] ? splice_shrink_spd+0xb0/0xb0 [ 2050.912838][ T4565] ? security_file_permission+0x1e9/0x300 [ 2050.918546][ T4565] ? splice_shrink_spd+0xb0/0xb0 [ 2050.923470][ T4565] splice_direct_to_actor+0x3cf/0xb00 [ 2050.928830][ T4565] ? do_splice_direct+0x3d0/0x3d0 [ 2050.933850][ T4565] ? pipe_to_sendpage+0x300/0x300 [ 2050.938862][ T4565] ? security_file_permission+0x128/0x300 [ 2050.944566][ T4565] do_splice_direct+0x279/0x3d0 [ 2050.949407][ T4565] ? splice_direct_to_actor+0xb00/0xb00 [ 2050.954948][ T4565] ? security_file_permission+0x128/0x300 [ 2050.960656][ T4565] do_sendfile+0x89d/0x1110 [ 2050.965149][ T4565] ? compat_writev+0x390/0x390 [ 2050.969905][ T4565] ? security_file_permission+0x128/0x300 [ 2050.975613][ T4565] ? vfs_write+0x427/0x4f0 [ 2050.980012][ T4565] ? fput_many+0x42/0x1a0 [ 2050.984336][ T4565] __x64_sys_sendfile64+0x1ae/0x220 [ 2050.989521][ T4565] ? __ia32_sys_sendfile+0x240/0x240 [ 2050.994798][ T4565] do_syscall_64+0xcb/0x150 [ 2050.999290][ T4565] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2051.005164][ T4565] RIP: 0033:0x45de59 [ 2051.009045][ T4565] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2051.028636][ T4565] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2051.037037][ T4565] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2051.044999][ T4565] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2051.052959][ T4565] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2051.060920][ T4565] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000021 [ 2051.068882][ T4565] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x39, 0xaa4) 02:18:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:43 executing program 2 (fault-call:10 fault-nth:34): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2051.326023][ T4579] input: syz0 as /devices/virtual/input/input1401 [ 2051.333788][ T4580] input: syz0 as /devices/virtual/input/input1402 [ 2051.344101][ T4581] input: syz0 as /devices/virtual/input/input1403 [ 2051.351812][ T4578] FAULT_INJECTION: forcing a failure. [ 2051.351812][ T4578] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.364396][ T4578] CPU: 0 PID: 4578 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2051.374438][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2051.384479][ T4578] Call Trace: [ 2051.387770][ T4578] dump_stack+0x1b0/0x21e [ 2051.392086][ T4578] ? devkmsg_release+0x11c/0x11c [ 2051.397014][ T4578] ? show_regs_print_info+0x12/0x12 [ 2051.402203][ T4578] ? memset+0x1f/0x40 [ 2051.406176][ T4578] ? unwind_next_frame+0x1c07/0x22b0 [ 2051.411450][ T4578] should_fail+0x6fb/0x860 [ 2051.415854][ T4578] ? setup_fault_attr+0x2b0/0x2b0 [ 2051.420864][ T4578] ? xas_create+0xe07/0x1360 [ 2051.425438][ T4578] should_failslab+0x5/0x20 [ 2051.429931][ T4578] kmem_cache_alloc+0x36/0x250 [ 2051.434683][ T4578] xas_create+0xe07/0x1360 [ 2051.439090][ T4578] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 2051.444626][ T4578] xas_store+0x93/0x13b0 [ 2051.448858][ T4578] ? _raw_spin_lock_irq+0xa2/0x180 [ 2051.453959][ T4578] ? _raw_spin_lock_irqsave+0x1c0/0x1c0 [ 2051.459494][ T4578] ? xas_load+0x46f/0x4c0 [ 2051.463811][ T4578] __add_to_page_cache_locked+0x390/0x8a0 [ 2051.469610][ T4578] ? add_to_page_cache_locked+0x30/0x30 [ 2051.475152][ T4578] ? workingset_activation+0x150/0x150 [ 2051.480602][ T4578] ? unwind_next_frame+0x1c07/0x22b0 [ 2051.485880][ T4578] add_to_page_cache_lru+0x11d/0x280 [ 2051.491164][ T4578] ? __add_to_page_cache_locked+0x8a0/0x8a0 [ 2051.497045][ T4578] ? memset+0x1f/0x40 [ 2051.501014][ T4578] ? unwind_next_frame+0x1c07/0x22b0 [ 2051.506291][ T4578] ext4_mpage_readpages+0x467/0x1eb0 [ 2051.511567][ T4578] ? __rcu_read_lock+0x50/0x50 [ 2051.516322][ T4578] ? ext4_end_bio+0x590/0x590 [ 2051.520984][ T4578] ? prep_new_page+0x11a/0x380 [ 2051.525739][ T4578] ? ext4_readpages+0x8b/0x110 [ 2051.530488][ T4578] ? ext4_journalled_set_page_dirty+0x30/0x30 [ 2051.536541][ T4578] read_pages+0x108/0x3f0 [ 2051.540862][ T4578] ? __do_page_cache_readahead+0x510/0x510 [ 2051.546654][ T4578] ? find_get_entry+0x5da/0x670 [ 2051.551490][ T4578] ? xa_load+0x323/0x340 [ 2051.555727][ T4578] __do_page_cache_readahead+0x470/0x510 [ 2051.561354][ T4578] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 2051.567758][ T4578] ? unwind_next_frame+0x1c07/0x22b0 [ 2051.573029][ T4578] ? page_cache_sync_readahead+0xa3/0x3c0 [ 2051.578735][ T4578] generic_file_read_iter+0x626/0x20a0 [ 2051.584194][ T4578] ? find_get_pages_range_tag+0xae0/0xae0 [ 2051.589900][ T4578] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 2051.595267][ T4578] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2051.601324][ T4578] ? avc_denied+0x1c0/0x1c0 [ 2051.605818][ T4578] generic_file_splice_read+0x491/0x780 [ 2051.611363][ T4578] ? splice_shrink_spd+0xb0/0xb0 [ 2051.616290][ T4578] ? security_file_permission+0x1e9/0x300 [ 2051.622105][ T4578] ? splice_shrink_spd+0xb0/0xb0 [ 2051.627031][ T4578] splice_direct_to_actor+0x3cf/0xb00 [ 2051.632392][ T4578] ? do_splice_direct+0x3d0/0x3d0 [ 2051.637399][ T4578] ? pipe_to_sendpage+0x300/0x300 [ 2051.642413][ T4578] ? security_file_permission+0x128/0x300 [ 2051.648123][ T4578] do_splice_direct+0x279/0x3d0 [ 2051.652971][ T4578] ? splice_direct_to_actor+0xb00/0xb00 [ 2051.658509][ T4578] ? security_file_permission+0x128/0x300 [ 2051.664215][ T4578] do_sendfile+0x89d/0x1110 [ 2051.668711][ T4578] ? compat_writev+0x390/0x390 [ 2051.673463][ T4578] ? security_file_permission+0x128/0x300 [ 2051.679172][ T4578] ? vfs_write+0x427/0x4f0 [ 2051.683573][ T4578] ? fput_many+0x42/0x1a0 [ 2051.687892][ T4578] __x64_sys_sendfile64+0x1ae/0x220 [ 2051.693080][ T4578] ? __ia32_sys_sendfile+0x240/0x240 [ 2051.698353][ T4578] do_syscall_64+0xcb/0x150 [ 2051.702846][ T4578] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2051.708719][ T4578] RIP: 0033:0x45de59 [ 2051.712597][ T4578] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2051.732186][ T4578] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2051.740589][ T4578] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2051.748553][ T4578] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2051.756524][ T4578] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2051.764487][ T4578] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000022 [ 2051.772449][ T4578] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2051.855995][ T4594] input: syz0 as /devices/virtual/input/input1404 02:18:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2051.941262][ T4599] input: syz0 as /devices/virtual/input/input1405 02:18:43 executing program 2 (fault-call:10 fault-nth:35): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2051.985490][ T4606] input: syz0 as /devices/virtual/input/input1406 [ 2052.011319][ T4608] FAULT_INJECTION: forcing a failure. [ 2052.011319][ T4608] name failslab, interval 1, probability 0, space 0, times 0 [ 2052.024569][ T4608] CPU: 1 PID: 4608 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2052.034624][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2052.044669][ T4608] Call Trace: [ 2052.047952][ T4608] dump_stack+0x1b0/0x21e [ 2052.052274][ T4608] ? devkmsg_release+0x11c/0x11c [ 2052.057201][ T4608] ? show_regs_print_info+0x12/0x12 [ 2052.062385][ T4608] ? kmem_cache_alloc+0x1d5/0x250 [ 2052.067397][ T4608] ? workingset_activation+0x150/0x150 [ 2052.072843][ T4608] should_fail+0x6fb/0x860 [ 2052.077247][ T4608] ? setup_fault_attr+0x2b0/0x2b0 [ 2052.082266][ T4608] ? mem_cgroup_charge_statistics+0x12a/0x7d0 [ 2052.088323][ T4608] ? __alloc_skb+0x88/0x4d0 [ 2052.092816][ T4608] should_failslab+0x5/0x20 [ 2052.097310][ T4608] kmem_cache_alloc+0x36/0x250 [ 2052.102062][ T4608] __alloc_skb+0x88/0x4d0 [ 2052.106383][ T4608] ? xas_nomem+0x177/0x1b0 [ 2052.110786][ T4608] tipc_msg_build+0x74a/0x1b20 [ 2052.115539][ T4608] ? _local_bh_enable+0x30/0x30 [ 2052.120378][ T4608] ? tipc_nametbl_lookup_dst_nodes+0x33f/0x380 [ 2052.126523][ T4608] tipc_sendmcast+0x92a/0xeb0 [ 2052.131191][ T4608] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2052.136815][ T4608] ? memset+0x1f/0x40 [ 2052.140787][ T4608] ? unwind_next_frame+0x1c07/0x22b0 [ 2052.146061][ T4608] ? wait_woken+0x250/0x250 [ 2052.150564][ T4608] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2052.156098][ T4608] __tipc_sendmsg+0x120d/0x2d30 [ 2052.160942][ T4608] ? local_bh_enable+0x20/0x20 [ 2052.165695][ T4608] ? blk_flush_plug_list+0x4b7/0x500 [ 2052.171057][ T4608] ? prep_new_page+0x11a/0x380 [ 2052.175813][ T4608] ? _raw_spin_lock_bh+0xa4/0x180 [ 2052.180829][ T4608] ? _local_bh_enable+0x30/0x30 [ 2052.185665][ T4608] ? memset+0x1f/0x40 [ 2052.189643][ T4608] ? selinux_socket_sendmsg+0x10b/0x320 [ 2052.195177][ T4608] ? lock_sock_nested+0x25a/0x320 [ 2052.200192][ T4608] ? xas_load+0x468/0x4c0 [ 2052.204509][ T4608] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2052.210217][ T4608] ? tipc_recvmsg+0x17c0/0x17c0 [ 2052.215054][ T4608] tipc_sendmsg+0x51/0x70 [ 2052.219374][ T4608] kernel_sendmsg+0xe2/0x120 [ 2052.223951][ T4608] sock_no_sendpage+0x13f/0x1b0 [ 2052.228788][ T4608] ? __receive_sock+0xb0/0xb0 [ 2052.233455][ T4608] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2052.239158][ T4608] ? __receive_sock+0xb0/0xb0 [ 2052.243824][ T4608] sock_sendpage+0xd0/0x120 [ 2052.248317][ T4608] pipe_to_sendpage+0x23b/0x300 [ 2052.253157][ T4608] ? sock_fasync+0xf0/0xf0 [ 2052.257559][ T4608] ? generic_splice_sendpage+0x200/0x200 [ 2052.263179][ T4608] ? atime_needs_update+0x2cf/0x570 [ 2052.268366][ T4608] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2052.274339][ T4608] __splice_from_pipe+0x2d3/0x870 [ 2052.279355][ T4608] ? generic_splice_sendpage+0x200/0x200 [ 2052.284976][ T4608] generic_splice_sendpage+0x172/0x200 [ 2052.290430][ T4608] ? iter_file_splice_write+0xf20/0xf20 [ 2052.295966][ T4608] ? direct_splice_actor+0x25/0x120 [ 2052.301157][ T4608] splice_direct_to_actor+0x496/0xb00 [ 2052.306519][ T4608] ? do_splice_direct+0x3d0/0x3d0 [ 2052.311529][ T4608] ? pipe_to_sendpage+0x300/0x300 [ 2052.316543][ T4608] ? security_file_permission+0x128/0x300 [ 2052.322249][ T4608] do_splice_direct+0x279/0x3d0 [ 2052.327098][ T4608] ? splice_direct_to_actor+0xb00/0xb00 [ 2052.332638][ T4608] ? security_file_permission+0x128/0x300 [ 2052.338341][ T4608] do_sendfile+0x89d/0x1110 [ 2052.342832][ T4608] ? compat_writev+0x390/0x390 [ 2052.347587][ T4608] ? security_file_permission+0x128/0x300 [ 2052.353302][ T4608] ? vfs_write+0x427/0x4f0 [ 2052.357715][ T4608] ? fput_many+0x42/0x1a0 [ 2052.362032][ T4608] __x64_sys_sendfile64+0x1ae/0x220 [ 2052.367224][ T4608] ? __ia32_sys_sendfile+0x240/0x240 [ 2052.372498][ T4608] do_syscall_64+0xcb/0x150 [ 2052.376990][ T4608] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2052.382867][ T4608] RIP: 0033:0x45de59 [ 2052.386757][ T4608] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2052.406346][ T4608] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2052.414748][ T4608] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2052.422711][ T4608] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2052.430775][ T4608] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2052.438739][ T4608] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000023 [ 2052.446701][ T4608] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x3a, 0xaa4) 02:18:44 executing program 2 (fault-call:10 fault-nth:36): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2052.533375][ T4619] FAULT_INJECTION: forcing a failure. [ 2052.533375][ T4619] name failslab, interval 1, probability 0, space 0, times 0 [ 2052.546664][ T4623] input: syz0 as /devices/virtual/input/input1407 [ 2052.568985][ T4619] CPU: 1 PID: 4619 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2052.579065][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2052.589114][ T4619] Call Trace: [ 2052.592400][ T4619] dump_stack+0x1b0/0x21e [ 2052.596719][ T4619] ? devkmsg_release+0x11c/0x11c [ 2052.601650][ T4619] ? show_regs_print_info+0x12/0x12 [ 2052.606838][ T4619] ? kmem_cache_alloc+0x1d5/0x250 [ 2052.611852][ T4619] ? workingset_update_node+0xe7/0x150 [ 2052.617299][ T4619] should_fail+0x6fb/0x860 [ 2052.621706][ T4619] ? setup_fault_attr+0x2b0/0x2b0 [ 2052.626715][ T4619] ? setup_fault_attr+0x2b0/0x2b0 [ 2052.631737][ T4619] ? mem_cgroup_charge_statistics+0x12a/0x7d0 [ 2052.637794][ T4619] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 2052.643337][ T4619] ? tipc_msg_build+0x74a/0x1b20 [ 2052.648267][ T4619] should_failslab+0x5/0x20 [ 2052.652762][ T4619] __kmalloc_track_caller+0x5d/0x2b0 [ 2052.658036][ T4619] ? kmem_cache_alloc+0x1d5/0x250 [ 2052.663047][ T4619] ? tipc_msg_build+0x74a/0x1b20 [ 2052.667973][ T4619] __alloc_skb+0xd1/0x4d0 [ 2052.672291][ T4619] tipc_msg_build+0x74a/0x1b20 [ 2052.677042][ T4619] ? _local_bh_enable+0x30/0x30 [ 2052.681883][ T4619] ? tipc_nametbl_lookup_dst_nodes+0x33f/0x380 [ 2052.688027][ T4619] tipc_sendmcast+0x92a/0xeb0 [ 2052.692700][ T4619] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2052.698333][ T4619] ? memset+0x1f/0x40 [ 2052.702308][ T4619] ? unwind_next_frame+0x1c07/0x22b0 [ 2052.707590][ T4619] ? wait_woken+0x250/0x250 [ 2052.712090][ T4619] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2052.717626][ T4619] __tipc_sendmsg+0x120d/0x2d30 [ 2052.722474][ T4619] ? local_bh_enable+0x20/0x20 [ 2052.727229][ T4619] ? blk_flush_plug_list+0x4b7/0x500 [ 2052.732503][ T4619] ? prep_new_page+0x11a/0x380 [ 2052.737259][ T4619] ? _raw_spin_lock_bh+0xa4/0x180 [ 2052.742272][ T4619] ? _local_bh_enable+0x30/0x30 [ 2052.747118][ T4619] ? memset+0x1f/0x40 [ 2052.751099][ T4619] ? selinux_socket_sendmsg+0x10b/0x320 [ 2052.756638][ T4619] ? lock_sock_nested+0x25a/0x320 [ 2052.761654][ T4619] ? xas_load+0x468/0x4c0 [ 2052.765978][ T4619] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2052.771689][ T4619] ? tipc_recvmsg+0x17c0/0x17c0 [ 2052.776526][ T4619] tipc_sendmsg+0x51/0x70 [ 2052.780855][ T4619] kernel_sendmsg+0xe2/0x120 [ 2052.785436][ T4619] sock_no_sendpage+0x13f/0x1b0 [ 2052.790276][ T4619] ? __receive_sock+0xb0/0xb0 [ 2052.794942][ T4619] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2052.800649][ T4619] ? __receive_sock+0xb0/0xb0 [ 2052.805314][ T4619] sock_sendpage+0xd0/0x120 [ 2052.809823][ T4619] pipe_to_sendpage+0x23b/0x300 [ 2052.814665][ T4619] ? sock_fasync+0xf0/0xf0 [ 2052.819071][ T4619] ? generic_splice_sendpage+0x200/0x200 [ 2052.824690][ T4619] ? atime_needs_update+0x2cf/0x570 [ 2052.829879][ T4619] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2052.835850][ T4619] __splice_from_pipe+0x2d3/0x870 [ 2052.840863][ T4619] ? generic_splice_sendpage+0x200/0x200 [ 2052.846482][ T4619] generic_splice_sendpage+0x172/0x200 [ 2052.851927][ T4619] ? iter_file_splice_write+0xf20/0xf20 [ 2052.857460][ T4619] ? direct_splice_actor+0x25/0x120 [ 2052.862646][ T4619] splice_direct_to_actor+0x496/0xb00 [ 2052.868008][ T4619] ? do_splice_direct+0x3d0/0x3d0 [ 2052.873021][ T4619] ? pipe_to_sendpage+0x300/0x300 [ 2052.878040][ T4619] ? security_file_permission+0x128/0x300 [ 2052.883757][ T4619] do_splice_direct+0x279/0x3d0 [ 2052.888600][ T4619] ? splice_direct_to_actor+0xb00/0xb00 [ 2052.894135][ T4619] ? security_file_permission+0x128/0x300 [ 2052.899843][ T4619] do_sendfile+0x89d/0x1110 [ 2052.904338][ T4619] ? compat_writev+0x390/0x390 [ 2052.909091][ T4619] ? security_file_permission+0x128/0x300 [ 2052.914798][ T4619] ? vfs_write+0x427/0x4f0 [ 2052.919199][ T4619] ? fput_many+0x42/0x1a0 [ 2052.923518][ T4619] __x64_sys_sendfile64+0x1ae/0x220 [ 2052.928706][ T4619] ? __ia32_sys_sendfile+0x240/0x240 [ 2052.933981][ T4619] do_syscall_64+0xcb/0x150 [ 2052.938475][ T4619] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2052.944349][ T4619] RIP: 0033:0x45de59 [ 2052.948226][ T4619] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2052.967815][ T4619] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2052.976227][ T4619] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 02:18:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2052.984192][ T4619] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2052.992154][ T4619] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2053.000116][ T4619] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000024 [ 2053.008080][ T4619] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:45 executing program 2 (fault-call:10 fault-nth:37): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2053.115365][ T4637] input: syz0 as /devices/virtual/input/input1410 [ 2053.154059][ T4642] FAULT_INJECTION: forcing a failure. 02:18:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2053.154059][ T4642] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.183334][ T4642] CPU: 1 PID: 4642 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2053.193404][ T4642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2053.203448][ T4642] Call Trace: [ 2053.206729][ T4642] dump_stack+0x1b0/0x21e [ 2053.211058][ T4642] ? devkmsg_release+0x11c/0x11c [ 2053.215985][ T4642] ? show_regs_print_info+0x12/0x12 [ 2053.221172][ T4642] ? kmem_cache_alloc+0x1d5/0x250 [ 2053.226180][ T4642] ? workingset_activation+0x150/0x150 [ 2053.226190][ T4642] should_fail+0x6fb/0x860 [ 2053.226202][ T4642] ? setup_fault_attr+0x2b0/0x2b0 [ 2053.237472][ T4650] input: syz0 as /devices/virtual/input/input1414 [ 2053.241034][ T4642] ? __alloc_skb+0x88/0x4d0 [ 2053.241047][ T4642] should_failslab+0x5/0x20 [ 2053.256396][ T4642] kmem_cache_alloc+0x36/0x250 [ 2053.261152][ T4642] __alloc_skb+0x88/0x4d0 02:18:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2053.265468][ T4642] ? __check_object_size+0x2e5/0x3b0 [ 2053.270741][ T4642] tipc_msg_build+0xcf5/0x1b20 [ 2053.275495][ T4642] tipc_sendmcast+0x92a/0xeb0 [ 2053.280164][ T4642] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2053.285790][ T4642] ? memset+0x1f/0x40 [ 2053.289760][ T4642] ? unwind_next_frame+0x1c07/0x22b0 [ 2053.289769][ T4642] ? wait_woken+0x250/0x250 [ 2053.289782][ T4642] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2053.305058][ T4642] __tipc_sendmsg+0x120d/0x2d30 [ 2053.309901][ T4642] ? local_bh_enable+0x20/0x20 [ 2053.314650][ T4642] ? blk_flush_plug_list+0x4b7/0x500 [ 2053.319921][ T4642] ? prep_new_page+0x11a/0x380 [ 2053.324671][ T4642] ? _raw_spin_lock_bh+0xa4/0x180 [ 2053.329685][ T4642] ? _local_bh_enable+0x30/0x30 [ 2053.334524][ T4642] ? memset+0x1f/0x40 [ 2053.338492][ T4642] ? selinux_socket_sendmsg+0x10b/0x320 [ 2053.344025][ T4642] ? lock_sock_nested+0x25a/0x320 [ 2053.349038][ T4642] ? xas_load+0x468/0x4c0 [ 2053.353359][ T4642] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2053.359063][ T4642] ? tipc_recvmsg+0x17c0/0x17c0 [ 2053.363906][ T4642] tipc_sendmsg+0x51/0x70 [ 2053.368225][ T4642] kernel_sendmsg+0xe2/0x120 [ 2053.372800][ T4642] sock_no_sendpage+0x13f/0x1b0 [ 2053.377638][ T4642] ? __receive_sock+0xb0/0xb0 [ 2053.382306][ T4642] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2053.388012][ T4642] ? __receive_sock+0xb0/0xb0 [ 2053.392676][ T4642] sock_sendpage+0xd0/0x120 [ 2053.397171][ T4642] pipe_to_sendpage+0x23b/0x300 [ 2053.402012][ T4642] ? sock_fasync+0xf0/0xf0 [ 2053.406417][ T4642] ? generic_splice_sendpage+0x200/0x200 [ 2053.412037][ T4642] ? atime_needs_update+0x2cf/0x570 [ 2053.417230][ T4642] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2053.423200][ T4642] __splice_from_pipe+0x2d3/0x870 [ 2053.428212][ T4642] ? generic_splice_sendpage+0x200/0x200 [ 2053.433827][ T4642] generic_splice_sendpage+0x172/0x200 [ 2053.439274][ T4642] ? iter_file_splice_write+0xf20/0xf20 [ 2053.444803][ T4642] ? direct_splice_actor+0x25/0x120 [ 2053.449985][ T4642] splice_direct_to_actor+0x496/0xb00 [ 2053.455346][ T4642] ? do_splice_direct+0x3d0/0x3d0 [ 2053.460358][ T4642] ? pipe_to_sendpage+0x300/0x300 [ 2053.465373][ T4642] ? security_file_permission+0x128/0x300 [ 2053.471080][ T4642] do_splice_direct+0x279/0x3d0 [ 2053.475921][ T4642] ? splice_direct_to_actor+0xb00/0xb00 [ 2053.481459][ T4642] ? security_file_permission+0x128/0x300 [ 2053.487165][ T4642] do_sendfile+0x89d/0x1110 [ 2053.491662][ T4642] ? compat_writev+0x390/0x390 [ 2053.496413][ T4642] ? security_file_permission+0x128/0x300 [ 2053.502120][ T4642] ? vfs_write+0x427/0x4f0 [ 2053.506603][ T4642] ? fput_many+0x42/0x1a0 [ 2053.510921][ T4642] __x64_sys_sendfile64+0x1ae/0x220 [ 2053.516107][ T4642] ? __ia32_sys_sendfile+0x240/0x240 [ 2053.521377][ T4642] do_syscall_64+0xcb/0x150 [ 2053.525868][ T4642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2053.531746][ T4642] RIP: 0033:0x45de59 [ 2053.535627][ T4642] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2053.555218][ T4642] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:18:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x3b, 0xaa4) 02:18:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:18:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0xce}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0xe, 0x80) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@void, @val={0x1, 0x80, 0x5, 0xc361, 0x0, 0x7}, @ipv4=@tcp={{0x23, 0x4, 0x1, 0x2c, 0x1100, 0x64, 0x0, 0x7, 0x6, 0x0, @empty, @loopback, {[@timestamp_addr={0x44, 0x24, 0xa3, 0x1, 0xe, [{@broadcast, 0x1ee00000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@multicast2, 0x4}, {@loopback, 0x400}]}, @noop, @ssrr={0x89, 0x1f, 0x5e, [@private=0xa010100, @local, @local, @remote, @broadcast, @empty, @empty]}, @rr={0x7, 0x13, 0xd3, [@multicast2, @loopback, @multicast2, @multicast1]}, @rr={0x7, 0x1f, 0x66, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @multicast1, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}, {{0x4e23, 0x4e20, r3, 0x41424344, 0x1, 0x0, 0x1d, 0xc2, 0x6, 0x0, 0x3, {[@fastopen={0x22, 0x4, "a0bb"}, @sack={0x5, 0x12, [0x4, 0x5, 0x100, 0x0]}, @sack={0x5, 0x16, [0x8, 0x3, 0xbf3, 0xffff7fff, 0xfc]}, @mptcp=@syn={0x1e, 0xc, 0x1, 0x1, 0xff, 0x6, 0x9}, @window={0x3, 0x3}, @sack={0x5, 0x22, [0x7ff, 0x10001, 0x1, 0x0, 0x6, 0x8001, 0x4, 0x80]}]}}, {"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"}}}}, 0x110a) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2053.563621][ T4642] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2053.571585][ T4642] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2053.579555][ T4642] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2053.587522][ T4642] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000025 [ 2053.595485][ T4642] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:45 executing program 2 (fault-call:10 fault-nth:38): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) [ 2053.636389][ T4666] input: syz0 as /devices/virtual/input/input1416 [ 2053.647701][ T4669] input: syz0 as /devices/virtual/input/input1417 [ 2053.661781][ T4671] FAULT_INJECTION: forcing a failure. [ 2053.661781][ T4671] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.674492][ T4671] CPU: 0 PID: 4671 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2053.684530][ T4671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2053.694566][ T4671] Call Trace: [ 2053.697832][ T4671] dump_stack+0x1b0/0x21e [ 2053.702131][ T4671] ? devkmsg_release+0x11c/0x11c [ 2053.707043][ T4671] ? show_regs_print_info+0x12/0x12 [ 2053.712233][ T4671] ? kmem_cache_alloc+0x1d5/0x250 [ 2053.717370][ T4671] ? __rcu_read_lock+0x50/0x50 [ 2053.722101][ T4671] ? workingset_update_node+0xe7/0x150 [ 2053.727532][ T4671] should_fail+0x6fb/0x860 [ 2053.731927][ T4671] ? setup_fault_attr+0x2b0/0x2b0 [ 2053.736927][ T4671] ? setup_fault_attr+0x2b0/0x2b0 [ 2053.741952][ T4671] ? tipc_msg_build+0xcf5/0x1b20 [ 2053.746909][ T4671] should_failslab+0x5/0x20 [ 2053.751469][ T4671] __kmalloc_track_caller+0x5d/0x2b0 [ 2053.756817][ T4671] ? kmem_cache_alloc+0x1d5/0x250 [ 2053.761815][ T4671] ? tipc_msg_build+0xcf5/0x1b20 [ 2053.766780][ T4671] __alloc_skb+0xd1/0x4d0 [ 2053.771092][ T4671] tipc_msg_build+0xcf5/0x1b20 [ 2053.775946][ T4671] tipc_sendmcast+0x92a/0xeb0 [ 2053.780693][ T4671] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2053.786316][ T4671] ? memset+0x1f/0x40 [ 2053.790272][ T4671] ? unwind_next_frame+0x1c07/0x22b0 [ 2053.795531][ T4671] ? wait_woken+0x250/0x250 [ 2053.800010][ T4671] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2053.805525][ T4671] __tipc_sendmsg+0x120d/0x2d30 [ 2053.810365][ T4671] ? local_bh_enable+0x20/0x20 [ 2053.815109][ T4671] ? blk_flush_plug_list+0x4b7/0x500 [ 2053.820363][ T4671] ? prep_new_page+0x11a/0x380 [ 2053.825116][ T4671] ? _raw_spin_lock_bh+0xa4/0x180 [ 2053.830113][ T4671] ? _local_bh_enable+0x30/0x30 [ 2053.834950][ T4671] ? memset+0x1f/0x40 [ 2053.838900][ T4671] ? selinux_socket_sendmsg+0x10b/0x320 [ 2053.844414][ T4671] ? lock_sock_nested+0x25a/0x320 [ 2053.849408][ T4671] ? xas_load+0x468/0x4c0 [ 2053.853717][ T4671] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2053.859497][ T4671] ? tipc_recvmsg+0x17c0/0x17c0 [ 2053.864315][ T4671] tipc_sendmsg+0x51/0x70 [ 2053.868618][ T4671] kernel_sendmsg+0xe2/0x120 [ 2053.873193][ T4671] sock_no_sendpage+0x13f/0x1b0 [ 2053.878010][ T4671] ? __receive_sock+0xb0/0xb0 [ 2053.882670][ T4671] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2053.888364][ T4671] ? __receive_sock+0xb0/0xb0 [ 2053.893018][ T4671] sock_sendpage+0xd0/0x120 [ 2053.897488][ T4671] pipe_to_sendpage+0x23b/0x300 [ 2053.902307][ T4671] ? sock_fasync+0xf0/0xf0 [ 2053.906695][ T4671] ? generic_splice_sendpage+0x200/0x200 [ 2053.912296][ T4671] ? atime_needs_update+0x2cf/0x570 [ 2053.917470][ T4671] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2053.923445][ T4671] __splice_from_pipe+0x2d3/0x870 [ 2053.928440][ T4671] ? generic_splice_sendpage+0x200/0x200 [ 2053.934036][ T4671] generic_splice_sendpage+0x172/0x200 [ 2053.939489][ T4671] ? iter_file_splice_write+0xf20/0xf20 [ 2053.945000][ T4671] ? direct_splice_actor+0x25/0x120 [ 2053.950165][ T4671] splice_direct_to_actor+0x496/0xb00 [ 2053.955514][ T4671] ? do_splice_direct+0x3d0/0x3d0 [ 2053.960513][ T4671] ? pipe_to_sendpage+0x300/0x300 [ 2053.965511][ T4671] ? security_file_permission+0x128/0x300 [ 2053.971204][ T4671] do_splice_direct+0x279/0x3d0 [ 2053.976035][ T4671] ? splice_direct_to_actor+0xb00/0xb00 [ 2053.981565][ T4671] ? security_file_permission+0x128/0x300 [ 2053.987254][ T4671] do_sendfile+0x89d/0x1110 [ 2053.991726][ T4671] ? compat_writev+0x390/0x390 [ 2053.996475][ T4671] ? security_file_permission+0x128/0x300 [ 2054.002163][ T4671] ? vfs_write+0x427/0x4f0 [ 2054.006546][ T4671] ? fput_many+0x42/0x1a0 [ 2054.010844][ T4671] __x64_sys_sendfile64+0x1ae/0x220 [ 2054.016020][ T4671] ? __ia32_sys_sendfile+0x240/0x240 [ 2054.021287][ T4671] do_syscall_64+0xcb/0x150 [ 2054.025773][ T4671] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2054.031637][ T4671] RIP: 0033:0x45de59 [ 2054.035504][ T4671] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2054.055362][ T4671] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2054.063849][ T4671] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2054.071790][ T4671] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2054.079748][ T4671] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 02:18:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2054.087689][ T4671] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000026 [ 2054.095629][ T4671] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c 02:18:46 executing program 2 (fault-call:10 fault-nth:39): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='L', 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 02:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2054.132142][ T4677] input: syz0 as /devices/virtual/input/input1418 [ 2054.205012][ T4687] FAULT_INJECTION: forcing a failure. [ 2054.205012][ T4687] name failslab, interval 1, probability 0, space 0, times 0 [ 2054.218851][ T4687] CPU: 0 PID: 4687 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2054.228906][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2054.238942][ T4687] Call Trace: [ 2054.242206][ T4687] dump_stack+0x1b0/0x21e [ 2054.246537][ T4687] ? devkmsg_release+0x11c/0x11c [ 2054.250727][ T4688] input: syz0 as /devices/virtual/input/input1419 [ 2054.251456][ T4687] ? show_regs_print_info+0x12/0x12 [ 2054.251465][ T4687] ? group_sched_in+0x42e/0x780 [ 2054.251479][ T4687] should_fail+0x6fb/0x860 [ 2054.272237][ T4687] ? setup_fault_attr+0x2b0/0x2b0 [ 2054.277254][ T4687] ? visit_groups_merge+0x515/0x560 [ 2054.282433][ T4687] ? perf_trace_buf_alloc+0x1a0/0x1a0 [ 2054.287773][ T4687] ? __alloc_skb+0x88/0x4d0 [ 2054.292247][ T4687] should_failslab+0x5/0x20 [ 2054.296734][ T4687] kmem_cache_alloc+0x36/0x250 [ 2054.301478][ T4687] __alloc_skb+0x88/0x4d0 [ 2054.305783][ T4687] skb_copy+0xe3/0x740 [ 2054.309824][ T4687] ? memcpy+0x38/0x50 [ 2054.313790][ T4687] tipc_buf_append+0x461/0xad0 [ 2054.318531][ T4687] ? tipc_msg_create+0x3a0/0x3a0 [ 2054.323445][ T4687] ? skb_clone+0x1f4/0x370 [ 2054.327832][ T4687] tipc_msg_reassemble+0x331/0x590 [ 2054.333063][ T4687] ? tipc_msg_lookup_dest+0x980/0x980 [ 2054.338407][ T4687] ? _raw_spin_unlock_irq+0x5/0x20 [ 2054.343492][ T4687] ? finish_task_switch+0x235/0x4c0 [ 2054.348663][ T4687] tipc_mcast_xmit+0x223/0x16c0 [ 2054.353501][ T4687] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 2054.359635][ T4687] ? trace_event_raw_event_tipc_sk_class+0x4b0/0x4b0 [ 2054.366279][ T4687] ? preempt_schedule+0x110/0x110 [ 2054.371281][ T4687] ? tipc_sendmcast+0xbd6/0xeb0 [ 2054.376103][ T4687] ? trace_event_raw_event_tipc_sk_class+0x4b0/0x4b0 [ 2054.382751][ T4687] tipc_sendmcast+0xc00/0xeb0 [ 2054.387398][ T4687] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2054.393048][ T4687] ? memset+0x1f/0x40 [ 2054.397001][ T4687] ? unwind_next_frame+0x1c07/0x22b0 [ 2054.402259][ T4687] ? wait_woken+0x250/0x250 [ 2054.406731][ T4687] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2054.412339][ T4687] __tipc_sendmsg+0x120d/0x2d30 [ 2054.417197][ T4687] ? local_bh_enable+0x20/0x20 [ 2054.421929][ T4687] ? blk_flush_plug_list+0x4b7/0x500 [ 2054.427184][ T4687] ? prep_new_page+0x11a/0x380 [ 2054.431917][ T4687] ? _raw_spin_lock_bh+0xa4/0x180 [ 2054.436915][ T4687] ? _local_bh_enable+0x30/0x30 [ 2054.441733][ T4687] ? memset+0x1f/0x40 [ 2054.445692][ T4687] ? selinux_socket_sendmsg+0x10b/0x320 [ 2054.451207][ T4687] ? lock_sock_nested+0x25a/0x320 [ 2054.456216][ T4687] ? xas_load+0x468/0x4c0 [ 2054.460515][ T4687] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2054.466204][ T4687] ? tipc_recvmsg+0x17c0/0x17c0 [ 2054.471033][ T4687] tipc_sendmsg+0x51/0x70 [ 2054.475354][ T4687] kernel_sendmsg+0xe2/0x120 [ 2054.479912][ T4687] sock_no_sendpage+0x13f/0x1b0 [ 2054.484741][ T4687] ? __receive_sock+0xb0/0xb0 [ 2054.489431][ T4687] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2054.495120][ T4687] ? __receive_sock+0xb0/0xb0 [ 2054.499779][ T4687] sock_sendpage+0xd0/0x120 [ 2054.504248][ T4687] pipe_to_sendpage+0x23b/0x300 [ 2054.509066][ T4687] ? sock_fasync+0xf0/0xf0 [ 2054.513454][ T4687] ? generic_splice_sendpage+0x200/0x200 [ 2054.519054][ T4687] ? atime_needs_update+0x2cf/0x570 [ 2054.524218][ T4687] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2054.530165][ T4687] __splice_from_pipe+0x2d3/0x870 [ 2054.535155][ T4687] ? generic_splice_sendpage+0x200/0x200 [ 2054.540754][ T4687] generic_splice_sendpage+0x172/0x200 [ 2054.546178][ T4687] ? iter_file_splice_write+0xf20/0xf20 [ 2054.551704][ T4687] ? direct_splice_actor+0x25/0x120 [ 2054.556876][ T4687] splice_direct_to_actor+0x496/0xb00 [ 2054.562222][ T4687] ? do_splice_direct+0x3d0/0x3d0 [ 2054.567214][ T4687] ? pipe_to_sendpage+0x300/0x300 [ 2054.572215][ T4687] ? security_file_permission+0x128/0x300 [ 2054.577933][ T4687] do_splice_direct+0x279/0x3d0 [ 2054.582752][ T4687] ? splice_direct_to_actor+0xb00/0xb00 [ 2054.588265][ T4687] ? security_file_permission+0x128/0x300 [ 2054.593948][ T4687] do_sendfile+0x89d/0x1110 [ 2054.598420][ T4687] ? compat_writev+0x390/0x390 [ 2054.603152][ T4687] ? security_file_permission+0x128/0x300 [ 2054.608839][ T4687] ? vfs_write+0x427/0x4f0 [ 2054.613223][ T4687] ? fput_many+0x42/0x1a0 [ 2054.617520][ T4687] __x64_sys_sendfile64+0x1ae/0x220 [ 2054.622685][ T4687] ? __ia32_sys_sendfile+0x240/0x240 [ 2054.627935][ T4687] do_syscall_64+0xcb/0x150 [ 2054.632404][ T4687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2054.638277][ T4687] RIP: 0033:0x45de59 [ 2054.642138][ T4687] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2054.661718][ T4687] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2054.670112][ T4687] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2054.678052][ T4687] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2054.685992][ T4687] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2054.693934][ T4687] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 02:18:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x3c, 0xaa4) [ 2054.701876][ T4687] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2054.715233][ T4687] tipc: Failed do clone local mcast rcv buffer [ 2054.722777][ T4687] ================================================================== [ 2054.730848][ T4687] BUG: KASAN: use-after-free in tipc_mcast_xmit+0x1026/0x16c0 [ 2054.738411][ T4687] Read of size 8 at addr ffff8881c7237b80 by task syz-executor.2/4687 [ 2054.746534][ T4687] [ 2054.748853][ T4687] CPU: 0 PID: 4687 Comm: syz-executor.2 Not tainted 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2054.758875][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2054.768908][ T4687] Call Trace: [ 2054.772183][ T4687] dump_stack+0x1b0/0x21e [ 2054.776480][ T4687] ? show_regs_print_info+0x12/0x12 [ 2054.781645][ T4687] ? printk+0xc0/0x104 [ 2054.785681][ T4687] ? printk+0xc0/0x104 [ 2054.789730][ T4687] print_address_description+0x96/0x5d0 [ 2054.795241][ T4687] ? devkmsg_release+0x11c/0x11c [ 2054.800145][ T4687] ? skb_clone+0x1f4/0x370 [ 2054.804529][ T4687] ? kfree_skb+0x1b6/0x220 [ 2054.808912][ T4687] ? tipc_msg_reassemble+0x3e2/0x590 [ 2054.814175][ T4687] __kasan_report+0x14b/0x1c0 [ 2054.818821][ T4687] ? _raw_spin_lock_bh+0x160/0x180 [ 2054.823929][ T4687] ? tipc_mcast_xmit+0x1026/0x16c0 [ 2054.829014][ T4687] kasan_report+0x27/0x50 [ 2054.833323][ T4687] tipc_mcast_xmit+0x1026/0x16c0 [ 2054.838233][ T4687] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 2054.844353][ T4687] ? trace_event_raw_event_tipc_sk_class+0x4b0/0x4b0 [ 2054.850994][ T4687] ? preempt_schedule+0x110/0x110 [ 2054.855988][ T4687] ? tipc_sendmcast+0xbd6/0xeb0 [ 2054.860832][ T4687] ? trace_event_raw_event_tipc_sk_class+0x4b0/0x4b0 [ 2054.867474][ T4687] tipc_sendmcast+0xc00/0xeb0 [ 2054.872126][ T4687] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2054.877727][ T4687] ? memset+0x1f/0x40 [ 2054.881684][ T4687] ? unwind_next_frame+0x1c07/0x22b0 [ 2054.886944][ T4687] ? wait_woken+0x250/0x250 [ 2054.891414][ T4687] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2054.896938][ T4687] __tipc_sendmsg+0x120d/0x2d30 [ 2054.901755][ T4687] ? local_bh_enable+0x20/0x20 [ 2054.906489][ T4687] ? blk_flush_plug_list+0x4b7/0x500 [ 2054.911745][ T4687] ? prep_new_page+0x11a/0x380 [ 2054.916475][ T4687] ? _raw_spin_lock_bh+0xa4/0x180 [ 2054.921475][ T4687] ? _local_bh_enable+0x30/0x30 [ 2054.926304][ T4687] ? memset+0x1f/0x40 [ 2054.930268][ T4687] ? selinux_socket_sendmsg+0x10b/0x320 [ 2054.935793][ T4687] ? lock_sock_nested+0x25a/0x320 [ 2054.940812][ T4687] ? xas_load+0x468/0x4c0 [ 2054.945122][ T4687] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2054.950813][ T4687] ? tipc_recvmsg+0x17c0/0x17c0 [ 2054.955639][ T4687] tipc_sendmsg+0x51/0x70 [ 2054.959940][ T4687] kernel_sendmsg+0xe2/0x120 [ 2054.964499][ T4687] sock_no_sendpage+0x13f/0x1b0 [ 2054.969328][ T4687] ? __receive_sock+0xb0/0xb0 [ 2054.974005][ T4687] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2054.979711][ T4687] ? __receive_sock+0xb0/0xb0 [ 2054.984355][ T4687] sock_sendpage+0xd0/0x120 [ 2054.988827][ T4687] pipe_to_sendpage+0x23b/0x300 [ 2054.993643][ T4687] ? sock_fasync+0xf0/0xf0 [ 2054.998026][ T4687] ? generic_splice_sendpage+0x200/0x200 [ 2055.003671][ T4687] ? atime_needs_update+0x2cf/0x570 02:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2055.008859][ T4687] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2055.014827][ T4687] __splice_from_pipe+0x2d3/0x870 [ 2055.019845][ T4687] ? generic_splice_sendpage+0x200/0x200 [ 2055.025458][ T4687] generic_splice_sendpage+0x172/0x200 [ 2055.030895][ T4687] ? iter_file_splice_write+0xf20/0xf20 [ 2055.036416][ T4687] ? direct_splice_actor+0x25/0x120 [ 2055.037660][ T4701] input: syz0 as /devices/virtual/input/input1420 [ 2055.041592][ T4687] splice_direct_to_actor+0x496/0xb00 [ 2055.041603][ T4687] ? do_splice_direct+0x3d0/0x3d0 [ 2055.041609][ T4687] ? pipe_to_sendpage+0x300/0x300 [ 2055.041623][ T4687] ? security_file_permission+0x128/0x300 [ 2055.069223][ T4687] do_splice_direct+0x279/0x3d0 [ 2055.074054][ T4687] ? splice_direct_to_actor+0xb00/0xb00 [ 2055.079581][ T4687] ? security_file_permission+0x128/0x300 [ 2055.085281][ T4687] do_sendfile+0x89d/0x1110 [ 2055.089753][ T4687] ? compat_writev+0x390/0x390 [ 2055.094484][ T4687] ? security_file_permission+0x128/0x300 [ 2055.100172][ T4687] ? vfs_write+0x427/0x4f0 [ 2055.104557][ T4687] ? fput_many+0x42/0x1a0 [ 2055.108872][ T4687] __x64_sys_sendfile64+0x1ae/0x220 [ 2055.114049][ T4687] ? __ia32_sys_sendfile+0x240/0x240 [ 2055.119302][ T4687] do_syscall_64+0xcb/0x150 [ 2055.123860][ T4687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2055.129729][ T4687] RIP: 0033:0x45de59 [ 2055.133591][ T4687] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2055.153308][ T4687] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2055.161688][ T4687] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2055.169629][ T4687] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2055.177574][ T4687] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2055.185516][ T4687] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 2055.193461][ T4687] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2055.201475][ T4687] [ 2055.203820][ T4687] Allocated by task 4687: [ 2055.208125][ T4687] __kasan_kmalloc+0x117/0x1b0 [ 2055.212862][ T4687] kmem_cache_alloc+0x1d5/0x250 [ 2055.217691][ T4687] __alloc_skb+0x88/0x4d0 [ 2055.222002][ T4687] tipc_msg_build+0x74a/0x1b20 [ 2055.226738][ T4687] tipc_sendmcast+0x92a/0xeb0 [ 2055.231387][ T4687] __tipc_sendmsg+0x120d/0x2d30 [ 2055.236207][ T4687] tipc_sendmsg+0x51/0x70 [ 2055.240516][ T4687] kernel_sendmsg+0xe2/0x120 [ 2055.245078][ T4687] sock_no_sendpage+0x13f/0x1b0 [ 2055.249911][ T4687] sock_sendpage+0xd0/0x120 [ 2055.254380][ T4687] pipe_to_sendpage+0x23b/0x300 [ 2055.259198][ T4687] __splice_from_pipe+0x2d3/0x870 [ 2055.264187][ T4687] generic_splice_sendpage+0x172/0x200 [ 2055.269618][ T4687] splice_direct_to_actor+0x496/0xb00 [ 2055.274963][ T4687] do_splice_direct+0x279/0x3d0 [ 2055.279792][ T4687] do_sendfile+0x89d/0x1110 [ 2055.284270][ T4687] __x64_sys_sendfile64+0x1ae/0x220 [ 2055.289443][ T4687] do_syscall_64+0xcb/0x150 [ 2055.293937][ T4687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2055.299790][ T4687] [ 2055.302098][ T4687] Freed by task 4687: [ 2055.306066][ T4687] __kasan_slab_free+0x168/0x220 [ 2055.310978][ T4687] slab_free_freelist_hook+0xd0/0x150 [ 2055.316343][ T4687] kmem_cache_free+0xac/0x5c0 [ 2055.320986][ T4687] tipc_buf_append+0x2d1/0xad0 [ 2055.325722][ T4687] tipc_msg_reassemble+0x331/0x590 [ 2055.330810][ T4687] tipc_mcast_xmit+0x223/0x16c0 [ 2055.335633][ T4687] tipc_sendmcast+0xc00/0xeb0 [ 2055.340277][ T4687] __tipc_sendmsg+0x120d/0x2d30 [ 2055.345095][ T4687] tipc_sendmsg+0x51/0x70 [ 2055.349394][ T4687] kernel_sendmsg+0xe2/0x120 [ 2055.354042][ T4687] sock_no_sendpage+0x13f/0x1b0 [ 2055.358863][ T4687] sock_sendpage+0xd0/0x120 [ 2055.363333][ T4687] pipe_to_sendpage+0x23b/0x300 [ 2055.368150][ T4687] __splice_from_pipe+0x2d3/0x870 [ 2055.373140][ T4687] generic_splice_sendpage+0x172/0x200 [ 2055.378569][ T4687] splice_direct_to_actor+0x496/0xb00 [ 2055.383962][ T4687] do_splice_direct+0x279/0x3d0 [ 2055.388780][ T4687] do_sendfile+0x89d/0x1110 [ 2055.393317][ T4687] __x64_sys_sendfile64+0x1ae/0x220 [ 2055.398509][ T4687] do_syscall_64+0xcb/0x150 [ 2055.403005][ T4687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2055.408868][ T4687] [ 2055.411180][ T4687] The buggy address belongs to the object at ffff8881c7237b80 [ 2055.411180][ T4687] which belongs to the cache skbuff_fclone_cache of size 488 [ 2055.425897][ T4687] The buggy address is located 0 bytes inside of [ 2055.425897][ T4687] 488-byte region [ffff8881c7237b80, ffff8881c7237d68) [ 2055.438982][ T4687] The buggy address belongs to the page: [ 2055.444584][ T4687] page:ffffea00071c8d80 refcount:1 mapcount:0 mapping:ffff8881daa93b80 index:0x0 compound_mapcount: 0 [ 2055.455483][ T4687] flags: 0x8000000000010200(slab|head) [ 2055.460962][ T4687] raw: 8000000000010200 ffffea0007281500 0000000400000004 ffff8881daa93b80 [ 2055.469519][ T4687] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 2055.478103][ T4687] page dumped because: kasan: bad access detected [ 2055.484481][ T4687] [ 2055.486793][ T4687] Memory state around the buggy address: [ 2055.492487][ T4687] ffff8881c7237a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 2055.500516][ T4687] ffff8881c7237b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 02:18:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2055.508548][ T4687] >ffff8881c7237b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2055.516588][ T4687] ^ [ 2055.520641][ T4687] ffff8881c7237c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2055.528679][ T4687] ffff8881c7237c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2055.536712][ T4687] ================================================================== [ 2055.544752][ T4687] Disabling lock debugging due to kernel taint [ 2055.555709][ T4687] ================================================================== [ 2055.563784][ T4687] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 2055.572084][ T4687] [ 2055.574387][ T4687] CPU: 0 PID: 4687 Comm: syz-executor.2 Tainted: G B 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2055.581590][ T4704] input: syz0 as /devices/virtual/input/input1421 [ 2055.585803][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2055.585806][ T4687] Call Trace: [ 2055.585823][ T4687] dump_stack+0x1b0/0x21e [ 2055.585832][ T4687] ? show_regs_print_info+0x12/0x12 [ 2055.585838][ T4687] ? _raw_spin_lock+0xa1/0x170 [ 2055.585845][ T4687] ? printk+0xc0/0x104 [ 2055.585857][ T4687] ? kmem_cache_free+0xac/0x5c0 [ 2055.628558][ T4687] ? kmem_cache_free+0xac/0x5c0 [ 2055.633379][ T4687] print_address_description+0x96/0x5d0 [ 2055.638892][ T4687] ? devkmsg_release+0x11c/0x11c [ 2055.643800][ T4687] ? __perf_event_task_sched_in+0x4ed/0x550 [ 2055.649782][ T4687] ? kmem_cache_free+0xac/0x5c0 [ 2055.654601][ T4687] ? kmem_cache_free+0xac/0x5c0 [ 2055.659417][ T4687] kasan_report_invalid_free+0x54/0xc0 [ 2055.664843][ T4687] __kasan_slab_free+0x102/0x220 [ 2055.669760][ T4687] ? cmp_ex_search+0x6d/0x90 [ 2055.674327][ T4687] ? __start___ex_table+0x717c/0xa620 [ 2055.679687][ T4687] ? bsearch+0x9b/0xc0 [ 2055.683999][ T4687] ? search_extable+0xf0/0xf0 [ 2055.688646][ T4687] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 2055.694592][ T4687] ? __stop_notes+0xc/0xc [ 2055.698888][ T4687] ? search_extable+0xaf/0xf0 [ 2055.703530][ T4687] ? __rcu_read_lock+0x50/0x50 [ 2055.708274][ T4687] ? trim_init_extable+0x3e0/0x3e0 [ 2055.713354][ T4687] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 2055.719313][ T4687] ? __start___ex_table+0x717c/0xa620 [ 2055.724668][ T4687] ? __start___ex_table+0x717c/0xa620 [ 2055.730008][ T4687] ? kasan_report+0x27/0x50 [ 2055.734481][ T4687] ? ex_handler_refcount+0x130/0x170 [ 2055.739734][ T4687] ? ex_handler_fault+0xa0/0xa0 [ 2055.744566][ T4687] ? __start___ex_table+0x7184/0xa620 [ 2055.749906][ T4687] ? fixup_exception+0x92/0xd0 [ 2055.754641][ T4687] ? do_trap+0x148/0x340 [ 2055.758866][ T4687] ? notify_die+0x1e1/0x2a0 [ 2055.763341][ T4687] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 2055.769288][ T4687] ? kasan_report+0x27/0x50 [ 2055.773760][ T4687] slab_free_freelist_hook+0xd0/0x150 [ 2055.779100][ T4687] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 2055.784177][ T4687] kmem_cache_free+0xac/0x5c0 [ 2055.788824][ T4687] ? kasan_report+0x27/0x50 [ 2055.793310][ T4687] tipc_mcast_xmit+0x10a8/0x16c0 [ 2055.798215][ T4687] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 2055.804335][ T4687] ? trace_event_raw_event_tipc_sk_class+0x4b0/0x4b0 02:18:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2055.810975][ T4687] ? preempt_schedule+0x110/0x110 [ 2055.815993][ T4687] ? tipc_sendmcast+0xbd6/0xeb0 [ 2055.820827][ T4687] ? trace_event_raw_event_tipc_sk_class+0x4b0/0x4b0 [ 2055.827476][ T4687] tipc_sendmcast+0xc00/0xeb0 [ 2055.832132][ T4687] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2055.837760][ T4687] ? memset+0x1f/0x40 [ 2055.841732][ T4687] ? unwind_next_frame+0x1c07/0x22b0 [ 2055.847011][ T4687] ? wait_woken+0x250/0x250 [ 2055.849057][ T4710] input: syz0 as /devices/virtual/input/input1422 [ 2055.851499][ T4687] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2055.851509][ T4687] __tipc_sendmsg+0x120d/0x2d30 [ 2055.851521][ T4687] ? local_bh_enable+0x20/0x20 [ 2055.873001][ T4687] ? blk_flush_plug_list+0x4b7/0x500 [ 2055.878261][ T4687] ? prep_new_page+0x11a/0x380 [ 2055.882993][ T4687] ? _raw_spin_lock_bh+0xa4/0x180 [ 2055.887983][ T4687] ? _local_bh_enable+0x30/0x30 [ 2055.892801][ T4687] ? memset+0x1f/0x40 [ 2055.896753][ T4687] ? selinux_socket_sendmsg+0x10b/0x320 [ 2055.902265][ T4687] ? lock_sock_nested+0x25a/0x320 [ 2055.907260][ T4687] ? xas_load+0x468/0x4c0 [ 2055.911566][ T4687] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2055.917272][ T4687] ? tipc_recvmsg+0x17c0/0x17c0 [ 2055.922101][ T4687] tipc_sendmsg+0x51/0x70 [ 2055.926399][ T4687] kernel_sendmsg+0xe2/0x120 [ 2055.930961][ T4687] sock_no_sendpage+0x13f/0x1b0 [ 2055.935778][ T4687] ? __receive_sock+0xb0/0xb0 [ 2055.940426][ T4687] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2055.946125][ T4687] ? __receive_sock+0xb0/0xb0 [ 2055.950786][ T4687] sock_sendpage+0xd0/0x120 [ 2055.955258][ T4687] pipe_to_sendpage+0x23b/0x300 [ 2055.960084][ T4687] ? sock_fasync+0xf0/0xf0 [ 2055.964483][ T4687] ? generic_splice_sendpage+0x200/0x200 [ 2055.970096][ T4687] ? atime_needs_update+0x2cf/0x570 [ 2055.975277][ T4687] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2055.981229][ T4687] __splice_from_pipe+0x2d3/0x870 [ 2055.986231][ T4687] ? generic_splice_sendpage+0x200/0x200 [ 2055.991851][ T4687] generic_splice_sendpage+0x172/0x200 [ 2055.997278][ T4687] ? iter_file_splice_write+0xf20/0xf20 [ 2056.002793][ T4687] ? direct_splice_actor+0x25/0x120 [ 2056.007961][ T4687] splice_direct_to_actor+0x496/0xb00 [ 2056.013318][ T4687] ? do_splice_direct+0x3d0/0x3d0 [ 2056.018340][ T4687] ? pipe_to_sendpage+0x300/0x300 [ 2056.023357][ T4687] ? security_file_permission+0x128/0x300 [ 2056.029071][ T4687] do_splice_direct+0x279/0x3d0 [ 2056.033894][ T4687] ? splice_direct_to_actor+0xb00/0xb00 [ 2056.039413][ T4687] ? security_file_permission+0x128/0x300 [ 2056.045104][ T4687] do_sendfile+0x89d/0x1110 [ 2056.049591][ T4687] ? compat_writev+0x390/0x390 [ 2056.054352][ T4687] ? security_file_permission+0x128/0x300 [ 2056.060040][ T4687] ? vfs_write+0x427/0x4f0 [ 2056.064423][ T4687] ? fput_many+0x42/0x1a0 [ 2056.068735][ T4687] __x64_sys_sendfile64+0x1ae/0x220 [ 2056.073991][ T4687] ? __ia32_sys_sendfile+0x240/0x240 [ 2056.079245][ T4687] do_syscall_64+0xcb/0x150 [ 2056.083722][ T4687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2056.089591][ T4687] RIP: 0033:0x45de59 [ 2056.093453][ T4687] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2056.113031][ T4687] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2056.121521][ T4687] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2056.129525][ T4687] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2056.137470][ T4687] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2056.145417][ T4687] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 2056.153368][ T4687] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2056.161308][ T4687] [ 2056.163613][ T4687] Allocated by task 330: [ 2056.167827][ T4687] __kasan_kmalloc+0x117/0x1b0 [ 2056.172567][ T4687] kmem_cache_alloc+0x1d5/0x250 [ 2056.177399][ T4687] __alloc_skb+0x88/0x4d0 [ 2056.181700][ T4687] sk_stream_alloc_skb+0x418/0xa60 [ 2056.186790][ T4687] tcp_sendmsg_locked+0xe5b/0x3de0 [ 2056.191917][ T4687] tcp_sendmsg+0x2c/0x40 [ 2056.196170][ T4687] sock_write_iter+0x352/0x4a0 [ 2056.200902][ T4687] __vfs_write+0x579/0x700 [ 2056.205285][ T4687] vfs_write+0x217/0x4f0 [ 2056.209505][ T4687] ksys_write+0x168/0x2a0 [ 2056.213846][ T4687] do_syscall_64+0xcb/0x150 [ 2056.218341][ T4687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2056.224213][ T4687] [ 2056.226535][ T4687] Freed by task 4687: [ 2056.230500][ T4687] __kasan_slab_free+0x168/0x220 [ 2056.235440][ T4687] slab_free_freelist_hook+0xd0/0x150 [ 2056.240779][ T4687] kmem_cache_free+0xac/0x5c0 [ 2056.245426][ T4687] tcp_ack+0x2140/0x6730 [ 2056.249641][ T4687] tcp_rcv_established+0xe5b/0x21d0 [ 2056.255595][ T4687] tcp_v4_do_rcv+0x398/0x750 [ 2056.260153][ T4687] tcp_v4_rcv+0x342c/0x4620 [ 2056.264619][ T4687] ip_protocol_deliver_rcu+0x2bd/0x620 [ 2056.270043][ T4687] ip_local_deliver+0x44e/0x5e0 [ 2056.274861][ T4687] ip_sublist_rcv+0x6e6/0x750 [ 2056.279503][ T4687] ip_list_rcv+0x4a4/0x4f0 [ 2056.283898][ T4687] __netif_receive_skb_list_core+0x6f7/0x920 [ 2056.289848][ T4687] __netif_receive_skb_list+0x50c/0x5e0 [ 2056.295384][ T4687] netif_receive_skb_list_internal+0x465/0x720 [ 2056.301522][ T4687] napi_complete_done+0x21f/0x6c0 [ 2056.306534][ T4687] virtqueue_napi_complete+0x28/0x90 [ 2056.311797][ T4687] virtnet_poll+0xab2/0xe30 [ 2056.316268][ T4687] napi_poll+0x183/0x640 [ 2056.320580][ T4687] net_rx_action+0x367/0x980 [ 2056.325220][ T4687] __do_softirq+0x22e/0x569 [ 2056.329691][ T4687] [ 2056.331993][ T4687] The buggy address belongs to the object at ffff88817db2cf00 [ 2056.331993][ T4687] which belongs to the cache skbuff_fclone_cache of size 488 [ 2056.346758][ T4687] The buggy address is located 0 bytes inside of [ 2056.346758][ T4687] 488-byte region [ffff88817db2cf00, ffff88817db2d0e8) 02:18:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2056.359845][ T4687] The buggy address belongs to the page: [ 2056.365450][ T4687] page:ffffea0005f6cb00 refcount:1 mapcount:0 mapping:ffff8881daa93b80 index:0x0 compound_mapcount: 0 [ 2056.376345][ T4687] flags: 0x8000000000010200(slab|head) [ 2056.381784][ T4687] raw: 8000000000010200 ffffea00073fc900 0000000700000007 ffff8881daa93b80 [ 2056.390360][ T4687] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 2056.398922][ T4687] page dumped because: kasan: bad access detected [ 2056.405308][ T4687] [ 2056.407629][ T4687] Memory state around the buggy address: [ 2056.408009][ T4714] input: syz0 as /devices/virtual/input/input1423 [ 2056.413244][ T4687] ffff88817db2ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 2056.413249][ T4687] ffff88817db2ce80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2056.413255][ T4687] >ffff88817db2cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2056.413258][ T4687] ^ [ 2056.413264][ T4687] ffff88817db2cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 02:18:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x50004fe) signalfd4(r2, &(0x7f00000000c0)={[0xaec]}, 0x8, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r4, r4, &(0x7f0000000200)=0x3d, 0xaa4) [ 2056.413269][ T4687] ffff88817db2d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2056.413278][ T4687] ================================================================== [ 2056.480823][ T4687] ================================================================== [ 2056.488901][ T4687] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 2056.497204][ T4687] [ 2056.499519][ T4687] CPU: 0 PID: 4687 Comm: syz-executor.2 Tainted: G B 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2056.510934][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2056.520960][ T4687] Call Trace: [ 2056.524240][ T4687] dump_stack+0x1b0/0x21e [ 2056.528557][ T4687] ? show_regs_print_info+0x12/0x12 [ 2056.533723][ T4687] ? printk+0xc0/0x104 [ 2056.537765][ T4687] ? kmem_cache_free+0xac/0x5c0 [ 2056.542584][ T4687] ? kmem_cache_free+0xac/0x5c0 [ 2056.547409][ T4687] print_address_description+0x96/0x5d0 [ 2056.552931][ T4687] ? devkmsg_release+0x11c/0x11c [ 2056.557836][ T4687] ? kmem_cache_free+0xac/0x5c0 [ 2056.562656][ T4687] ? ___preempt_schedule+0x16/0x20 [ 2056.567736][ T4687] ? kmem_cache_free+0xac/0x5c0 [ 2056.572552][ T4687] ? kmem_cache_free+0xac/0x5c0 [ 2056.577368][ T4687] kasan_report_invalid_free+0x54/0xc0 [ 2056.582800][ T4687] __kasan_slab_free+0x102/0x220 [ 2056.587728][ T4687] ? cmp_ex_search+0x6d/0x90 [ 2056.592301][ T4687] ? __start___ex_table+0x717c/0xa620 [ 2056.597264][ T4716] BUG: Bad page state in process syz-executor.5 pfn:17d485 [ 2056.597646][ T4687] ? bsearch+0x9b/0xc0 [ 2056.604912][ T4716] page:ffffea0005f52140 refcount:-1 mapcount:0 mapping:0000000000000000 index:0x0 [ 2056.608949][ T4687] ? search_extable+0xf0/0xf0 [ 2056.618110][ T4716] flags: 0x8000000000000000() [ 2056.622771][ T4687] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 2056.627420][ T4716] raw: 8000000000000000 0000000000000000 ffffea0005f52108 0000000000000000 [ 2056.633368][ T4687] ? __stop_notes+0xc/0xc [ 2056.641911][ T4716] raw: 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 2056.646207][ T4687] ? search_extable+0xaf/0xf0 [ 2056.654752][ T4716] page dumped because: nonzero _refcount [ 2056.659409][ T4687] ? __rcu_read_lock+0x50/0x50 [ 2056.666126][ T4716] Modules linked in: [ 2056.670859][ T4687] ? trim_init_extable+0x3e0/0x3e0 [ 2056.679793][ T4687] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 2056.685739][ T4687] ? __start___ex_table+0x717c/0xa620 [ 2056.691089][ T4687] ? __start___ex_table+0x717c/0xa620 [ 2056.696427][ T4687] ? kasan_report+0x27/0x50 [ 2056.700898][ T4687] ? ex_handler_refcount+0x130/0x170 [ 2056.706152][ T4687] ? ex_handler_fault+0xa0/0xa0 [ 2056.710971][ T4687] ? __start___ex_table+0x7184/0xa620 [ 2056.716308][ T4687] ? fixup_exception+0x92/0xd0 [ 2056.721038][ T4687] ? do_trap+0x148/0x340 [ 2056.725250][ T4687] ? notify_die+0x1e1/0x2a0 [ 2056.729724][ T4687] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 2056.735672][ T4687] slab_free_freelist_hook+0xd0/0x150 [ 2056.741015][ T4687] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 2056.746110][ T4687] kmem_cache_free+0xac/0x5c0 [ 2056.750766][ T4687] ? kasan_report+0x27/0x50 [ 2056.755238][ T4687] tipc_mcast_xmit+0x10a8/0x16c0 [ 2056.760145][ T4687] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 2056.766266][ T4687] ? trace_event_raw_event_tipc_sk_class+0x4b0/0x4b0 [ 2056.772906][ T4687] ? preempt_schedule+0x110/0x110 [ 2056.777908][ T4687] ? tipc_sendmcast+0xbd6/0xeb0 [ 2056.782728][ T4687] ? trace_event_raw_event_tipc_sk_class+0x4b0/0x4b0 [ 2056.789369][ T4687] tipc_sendmcast+0xc00/0xeb0 [ 2056.794014][ T4687] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2056.799613][ T4687] ? memset+0x1f/0x40 [ 2056.803576][ T4687] ? unwind_next_frame+0x1c07/0x22b0 [ 2056.808837][ T4687] ? wait_woken+0x250/0x250 [ 2056.813502][ T4687] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2056.819015][ T4687] __tipc_sendmsg+0x120d/0x2d30 [ 2056.823842][ T4687] ? local_bh_enable+0x20/0x20 [ 2056.828572][ T4687] ? blk_flush_plug_list+0x4b7/0x500 [ 2056.833824][ T4687] ? prep_new_page+0x11a/0x380 [ 2056.838554][ T4687] ? _raw_spin_lock_bh+0xa4/0x180 [ 2056.843545][ T4687] ? _local_bh_enable+0x30/0x30 [ 2056.848461][ T4687] ? memset+0x1f/0x40 [ 2056.852409][ T4687] ? selinux_socket_sendmsg+0x10b/0x320 [ 2056.857921][ T4687] ? lock_sock_nested+0x25a/0x320 [ 2056.862915][ T4687] ? xas_load+0x468/0x4c0 [ 2056.867214][ T4687] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2056.872901][ T4687] ? tipc_recvmsg+0x17c0/0x17c0 [ 2056.877718][ T4687] tipc_sendmsg+0x51/0x70 [ 2056.882014][ T4687] kernel_sendmsg+0xe2/0x120 [ 2056.886584][ T4687] sock_no_sendpage+0x13f/0x1b0 [ 2056.891419][ T4687] ? __receive_sock+0xb0/0xb0 [ 2056.896078][ T4687] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2056.901779][ T4687] ? __receive_sock+0xb0/0xb0 [ 2056.906426][ T4687] sock_sendpage+0xd0/0x120 [ 2056.910898][ T4687] pipe_to_sendpage+0x23b/0x300 [ 2056.915717][ T4687] ? sock_fasync+0xf0/0xf0 [ 2056.920100][ T4687] ? generic_splice_sendpage+0x200/0x200 [ 2056.925698][ T4687] ? atime_needs_update+0x2cf/0x570 [ 2056.930868][ T4687] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2056.936816][ T4687] __splice_from_pipe+0x2d3/0x870 [ 2056.941810][ T4687] ? generic_splice_sendpage+0x200/0x200 [ 2056.947410][ T4687] generic_splice_sendpage+0x172/0x200 [ 2056.952836][ T4687] ? iter_file_splice_write+0xf20/0xf20 [ 2056.958353][ T4687] ? direct_splice_actor+0x25/0x120 [ 2056.963520][ T4687] splice_direct_to_actor+0x496/0xb00 [ 2056.968863][ T4687] ? do_splice_direct+0x3d0/0x3d0 [ 2056.974115][ T4687] ? pipe_to_sendpage+0x300/0x300 [ 2056.979128][ T4687] ? security_file_permission+0x128/0x300 [ 2056.984815][ T4687] do_splice_direct+0x279/0x3d0 [ 2056.989632][ T4687] ? splice_direct_to_actor+0xb00/0xb00 [ 2056.995144][ T4687] ? security_file_permission+0x128/0x300 [ 2057.000828][ T4687] do_sendfile+0x89d/0x1110 [ 2057.005300][ T4687] ? compat_writev+0x390/0x390 [ 2057.010033][ T4687] ? security_file_permission+0x128/0x300 [ 2057.015722][ T4687] ? vfs_write+0x427/0x4f0 [ 2057.020107][ T4687] ? fput_many+0x42/0x1a0 [ 2057.024406][ T4687] __x64_sys_sendfile64+0x1ae/0x220 [ 2057.029573][ T4687] ? __ia32_sys_sendfile+0x240/0x240 [ 2057.034828][ T4687] do_syscall_64+0xcb/0x150 [ 2057.039300][ T4687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2057.045159][ T4687] RIP: 0033:0x45de59 [ 2057.049024][ T4687] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2057.068597][ T4687] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2057.076973][ T4687] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2057.084913][ T4687] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2057.092858][ T4687] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2057.100797][ T4687] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 2057.108737][ T4687] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2057.116678][ T4687] [ 2057.116691][ T4716] CPU: 1 PID: 4716 Comm: syz-executor.5 Tainted: G B 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2057.118983][ T4687] Allocated by task 4687: [ 2057.130402][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2057.134714][ T4687] __kasan_kmalloc+0x117/0x1b0 [ 2057.144729][ T4716] Call Trace: [ 2057.149461][ T4687] kmem_cache_alloc+0x1d5/0x250 [ 2057.152713][ T4716] dump_stack+0x1b0/0x21e [ 2057.157526][ T4687] __napi_alloc_skb+0xd6/0x520 [ 2057.161820][ T4716] ? is_module_text_address+0x130/0x130 [ 2057.166557][ T4687] page_to_skb+0x3e/0x820 [ 2057.172064][ T4716] ? show_regs_print_info+0x12/0x12 [ 2057.176359][ T4687] receive_mergeable+0x871/0x2820 [ 2057.181520][ T4716] ? __dump_page+0x58a/0x640 [ 2057.186513][ T4687] receive_buf+0x151/0x15c0 [ 2057.191067][ T4716] bad_page+0x262/0x290 [ 2057.195536][ T4687] virtnet_poll+0x57b/0xe30 [ 2057.199659][ T4716] ? _raw_spin_lock+0x170/0x170 [ 2057.204124][ T4687] napi_poll+0x183/0x640 [ 2057.208939][ T4716] ? is_free_buddy_page+0x180/0x180 [ 2057.213154][ T4687] net_rx_action+0x367/0x980 [ 2057.218317][ T4716] ? unwind_get_return_address+0x48/0x90 [ 2057.222867][ T4687] __do_softirq+0x22e/0x569 [ 2057.228474][ T4716] ? arch_stack_walk+0x98/0xe0 [ 2057.232933][ T4687] [ 2057.237665][ T4716] rmqueue+0x1fc5/0x2230 [ 2057.239964][ T4687] Freed by task 4687: [ 2057.244188][ T4716] ? should_fail_alloc_page+0x50/0x50 [ 2057.248143][ T4687] __kasan_slab_free+0x168/0x220 [ 2057.253479][ T4716] ? _do_fork+0x180/0x8f0 [ 2057.258379][ T4687] slab_free_freelist_hook+0xd0/0x150 [ 2057.262684][ T4716] ? __x64_sys_clone+0x246/0x2b0 [ 2057.268036][ T4687] kmem_cache_free+0xac/0x5c0 [ 2057.272939][ T4716] ? do_syscall_64+0xcb/0x150 [ 2057.277582][ T4687] tcp_rcv_established+0xe63/0x21d0 [ 2057.282228][ T4716] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2057.287404][ T4687] tcp_v4_do_rcv+0x398/0x750 [ 2057.293444][ T4716] ? rmqueue+0x409/0x2230 [ 2057.298027][ T4687] tcp_v4_rcv+0x342c/0x4620 [ 2057.302326][ T4716] ? __zone_watermark_ok+0x91/0x280 [ 2057.306794][ T4687] ip_protocol_deliver_rcu+0x2bd/0x620 [ 2057.311956][ T4716] get_page_from_freelist+0x30d/0x7c0 [ 2057.317385][ T4687] ip_local_deliver+0x44e/0x5e0 [ 2057.322750][ T4716] __alloc_pages_nodemask+0x374/0x7c0 [ 2057.327565][ T4687] ip_sublist_rcv+0x6e6/0x750 [ 2057.332899][ T4716] ? __x64_sys_mprotect+0x7c/0x90 [ 2057.337539][ T4687] ip_list_rcv+0x4a4/0x4f0 [ 2057.342529][ T4716] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2057.346909][ T4687] __netif_receive_skb_list_core+0x6f7/0x920 [ 2057.352416][ T4716] ? copy_process+0x5c9/0x52f0 [ 2057.358365][ T4687] __netif_receive_skb_list+0x50c/0x5e0 [ 2057.363091][ T4716] ? copy_process+0x5c9/0x52f0 [ 2057.368611][ T4687] netif_receive_skb_list_internal+0x465/0x720 [ 2057.373354][ T4716] ? kmem_cache_alloc+0x1d5/0x250 [ 2057.379454][ T4687] napi_complete_done+0x21f/0x6c0 [ 2057.384446][ T4716] copy_process+0x612/0x52f0 [ 2057.389437][ T4687] virtqueue_napi_complete+0x28/0x90 [ 2057.393989][ T4716] ? __memcg_kmem_charge_memcg+0x130/0x130 [ 2057.399238][ T4687] virtnet_poll+0xab2/0xe30 [ 2057.405006][ T4716] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 2057.409484][ T4687] napi_poll+0x183/0x640 [ 2057.414994][ T4716] ? mem_cgroup_commit_charge+0x198/0x240 [ 2057.419210][ T4687] net_rx_action+0x367/0x980 [ 2057.424895][ T4716] ? _raw_spin_lock+0xa1/0x170 [ 2057.429460][ T4687] __do_softirq+0x22e/0x569 [ 2057.434187][ T4716] ? mem_cgroup_try_charge_delay+0x10/0x10 [ 2057.438651][ T4687] [ 2057.444424][ T4716] ? fork_idle+0x290/0x290 [ 2057.446720][ T4687] The buggy address belongs to the object at ffff8881cb823640 [ 2057.446720][ T4687] which belongs to the cache skbuff_head_cache of size 240 [ 2057.451114][ T4716] ? __lru_cache_add+0x1a1/0x1f0 [ 2057.465666][ T4687] The buggy address is located 0 bytes inside of [ 2057.465666][ T4687] 240-byte region [ffff8881cb823640, ffff8881cb823730) [ 2057.470571][ T4716] ? _raw_spin_unlock+0x5/0x20 [ 2057.483624][ T4687] The buggy address belongs to the page: [ 2057.488372][ T4716] ? handle_mm_fault+0x916/0x4140 [ 2057.493965][ T4687] page:ffffea00072e08c0 refcount:1 mapcount:0 mapping:ffff8881daa93180 index:0x0 [ 2057.499394][ T4716] _do_fork+0x180/0x8f0 [ 2057.508472][ T4687] flags: 0x8000000000000200(slab) [ 2057.512605][ T4716] ? finish_fault+0x230/0x230 [ 2057.517590][ T4687] raw: 8000000000000200 ffffea0005fdfec0 0000000400000004 ffff8881daa93180 [ 2057.522233][ T4716] ? up_write+0xa1/0x190 [ 2057.530777][ T4687] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 2057.534986][ T4716] ? dup_mm+0x300/0x300 [ 2057.543541][ T4687] page dumped because: kasan: bad access detected [ 2057.547672][ T4716] __x64_sys_clone+0x246/0x2b0 [ 2057.554041][ T4687] [ 2057.558784][ T4716] ? __ia32_sys_vfork+0x110/0x110 [ 2057.561080][ T4687] Memory state around the buggy address: [ 2057.566079][ T4716] ? do_user_addr_fault+0x55c/0x9f0 [ 2057.571677][ T4687] ffff8881cb823500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2057.576844][ T4716] do_syscall_64+0xcb/0x150 [ 2057.584869][ T4687] ffff8881cb823580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 2057.589345][ T4716] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2057.597367][ T4687] >ffff8881cb823600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 2057.603228][ T4716] RIP: 0033:0x460829 [ 2057.611251][ T4687] ^ [ 2057.615126][ T4716] Code: ff 48 85 f6 0f 84 37 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c 0e 8a fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2057.621238][ T4687] ffff8881cb823680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2057.640983][ T4716] RSP: 002b:00007ffe97c36af8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2057.649009][ T4687] ffff8881cb823700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc 02:18:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2057.657468][ T4716] RAX: ffffffffffffffda RBX: 00007f7d56a5b700 RCX: 0000000000460829 [ 2057.665492][ T4687] ================================================================== [ 2057.673431][ T4716] RDX: 00007f7d56a5b9d0 RSI: 00007f7d56a5adb0 RDI: 00000000003d0f00 [ 2057.682855][ T4687] kasan: CONFIG_KASAN_INLINE enabled [ 2057.689393][ T4716] RBP: 00007ffe97c36d10 R08: 00007f7d56a5b700 R09: 00007f7d56a5b700 [ 2057.689397][ T4716] R10: 00007f7d56a5b9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2057.689400][ T4716] R13: 00007ffe97c36baf R14: 00007f7d56a5b9c0 R15: 000000000118c07c [ 2057.689455][ C1] sched: RT throttling activated [ 2057.727345][T23757] BUG: unable to handle page fault for address: ffff8880cef31cc0 [ 2057.735054][T23757] #PF: supervisor read access in kernel mode [ 2057.741036][T23757] #PF: error_code(0x0000) - not-present page [ 2057.746993][T23757] PGD 6001067 P4D 6001067 PUD 0 [ 2057.751923][T23757] Oops: 0000 [#1] PREEMPT SMP KASAN [ 2057.757097][T23757] CPU: 0 PID: 23757 Comm: syz-executor.0 Tainted: G B 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2057.762298][ T4687] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2057.768597][T23757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2057.768611][T23757] RIP: 0010:kmem_cache_alloc+0x133/0x250 [ 2057.768618][T23757] Code: 50 08 49 8b 07 65 48 03 05 9a 23 93 7e 48 3b 50 08 75 e7 4c 8b 28 4d 85 ed 0f 84 e4 00 00 00 41 8b 47 20 49 8b 8f b0 01 00 00 <49> 33 4c 05 00 49 8d 5c 05 00 48 0f cb 48 31 cb 48 89 d1 48 83 c1 [ 2057.768621][T23757] RSP: 0018:ffff8881a1427bb0 EFLAGS: 00010286 [ 2057.768627][T23757] RAX: 0000000000000000 RBX: 0000000000000dc0 RCX: 80c84128432aa4f4 [ 2057.768631][T23757] RDX: 0000000000302a48 RSI: 0000000000000000 RDI: 0000000000000000 [ 2057.768635][T23757] RBP: ffff8881da8eca00 R08: ffffffff820fbda9 R09: ffffed10393472c1 [ 2057.768638][T23757] R10: ffffed10393472c1 R11: 0000000000000000 R12: 0000000000000dc0 [ 2057.768652][T23757] R13: ffff8880cef31cc0 R14: ffffffff81d835f2 R15: ffff8881da8eca00 [ 2057.857754][T23757] FS: 0000000002228940(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 2057.866645][T23757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2057.873192][T23757] CR2: ffff8880cef31cc0 CR3: 0000000199d20002 CR4: 00000000001606f0 [ 2057.881146][T23757] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2057.889082][T23757] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2057.897016][T23757] Call Trace: [ 2057.900279][T23757] security_file_alloc+0x32/0x200 [ 2057.905270][T23757] __alloc_file+0xc6/0x390 [ 2057.909665][T23757] alloc_empty_file+0xa9/0x1b0 [ 2057.914392][T23757] alloc_file+0x58/0x4b0 [ 2057.918598][T23757] alloc_file_pseudo+0x25b/0x310 [ 2057.923509][T23757] ? alloc_empty_file_noaccount+0x70/0x70 [ 2057.929212][T23757] ? tcp_v6_init_sock+0x11/0x50 [ 2057.934025][T23757] ? find_next_zero_bit+0xfb/0x120 [ 2057.939118][T23757] ? _raw_spin_unlock+0x5/0x20 [ 2057.943851][T23757] ? __alloc_fd+0x4e8/0x590 [ 2057.948317][T23757] sock_alloc_file+0xb4/0x230 [ 2057.953007][T23757] __sys_socket+0x17c/0x350 [ 2057.957473][T23757] ? sock_create_kern+0x40/0x40 [ 2057.962288][T23757] ? unlock_page_memcg+0xf0/0xf0 [ 2057.967187][T23757] __x64_sys_socket+0x76/0x80 [ 2057.971839][T23757] do_syscall_64+0xcb/0x150 [ 2057.976319][T23757] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2057.982176][T23757] RIP: 0033:0x4609a7 [ 2057.986035][T23757] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 aa 88 fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d 88 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2058.005613][T23757] RSP: 002b:00007fff4c93ba48 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2058.013998][T23757] RAX: ffffffffffffffda RBX: 0000000000749ae0 RCX: 00000000004609a7 [ 2058.021931][T23757] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 2058.029866][T23757] RBP: 00000000000014e5 R08: 0000000000006000 R09: 0000000000004000 [ 2058.037800][T23757] R10: 00007fff4c93bad0 R11: 0000000000000246 R12: 0000000000000000 [ 2058.045748][T23757] R13: 00007fff4c93c170 R14: 00000000001f60d5 R15: 0000000000000029 [ 2058.053682][T23757] Modules linked in: [ 2058.057555][T23757] CR2: ffff8880cef31cc0 [ 2058.061693][T23757] ---[ end trace 37bce5d830c265ef ]--- [ 2058.061719][ T4687] general protection fault: 0000 [#2] PREEMPT SMP KASAN [ 2058.067129][T23757] RIP: 0010:kmem_cache_alloc+0x133/0x250 [ 2058.074040][ T4687] CPU: 1 PID: 4687 Comm: syz-executor.2 Tainted: G B D 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 2058.079637][T23757] Code: 50 08 49 8b 07 65 48 03 05 9a 23 93 7e 48 3b 50 08 75 e7 4c 8b 28 4d 85 ed 0f 84 e4 00 00 00 41 8b 47 20 49 8b 8f b0 01 00 00 <49> 33 4c 05 00 49 8d 5c 05 00 48 0f cb 48 31 cb 48 89 d1 48 83 c1 [ 2058.091064][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.110649][T23757] RSP: 0018:ffff8881a1427bb0 EFLAGS: 00010286 [ 2058.120693][ T4687] RIP: 0010:dst_release+0x24/0xe0 [ 2058.126714][T23757] RAX: 0000000000000000 RBX: 0000000000000dc0 RCX: 80c84128432aa4f4 [ 2058.131715][ T4687] Code: ff ff 0f 1f 40 00 55 41 56 53 49 89 fe e8 c4 9e 15 fe 4d 85 f6 74 3b 49 8d 7e 40 be 04 00 00 00 e8 d1 2e 43 fe bb ff ff ff ff 41 0f c1 5e 40 8d 73 ff 31 ff e8 3c a2 15 fe ff cb 78 1e 31 ff [ 2058.139653][T23757] RDX: 0000000000302a48 RSI: 0000000000000000 RDI: 0000000000000000 [ 2058.159223][ T4687] RSP: 0018:ffff88819cb56e80 EFLAGS: 00010246 [ 2058.167183][T23757] RBP: ffff8881da8eca00 R08: ffffffff820fbda9 R09: ffffed10393472c1 [ 2058.173212][ T4687] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffffffff832bc94f [ 2058.181151][T23757] R10: ffffed10393472c1 R11: 0000000000000000 R12: 0000000000000dc0 [ 2058.189091][ T4687] RDX: 0000000000000001 RSI: 0000000000000004 RDI: c3c000c5000001a8 [ 2058.197029][T23757] R13: ffff8880cef31cc0 R14: ffffffff81d835f2 R15: ffff8881da8eca00 [ 2058.204967][ T4687] RBP: ffff88819cb570d0 R08: ffffffff83215607 R09: ffffed1039de621d [ 2058.212907][T23757] FS: 0000000002228940(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 2058.220854][ T4687] R10: ffffed1039de621d R11: 0000000000000000 R12: dffffc0000000000 [ 2058.229748][T23757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2058.237688][ T4687] R13: 1ffff11039de620b R14: c3c000c500000168 R15: ffff8881cef31058 [ 2058.244237][T23757] CR2: ffff8880cef31cc0 CR3: 0000000199d20002 CR4: 00000000001606f0 [ 2058.252190][ T4687] FS: 00007f4c642b1700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 2058.260127][T23757] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2058.269029][ T4687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2058.276965][T23757] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2058.283513][ T4687] CR2: 00007f0e768bb008 CR3: 000000019d3f7002 CR4: 00000000001606e0 [ 2058.291452][T23757] Kernel panic - not syncing: Fatal exception [ 2058.299518][ T4687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2058.313491][ T4687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2058.321431][ T4687] Call Trace: [ 2058.324696][ T4687] skb_release_head_state+0x71/0x210 [ 2058.329953][ T4687] __kfree_skb+0x21/0x180 [ 2058.334252][ T4687] tipc_mcast_xmit+0x10a8/0x16c0 [ 2058.339162][ T4687] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 2058.345289][ T4687] ? trace_event_raw_event_tipc_sk_class+0x4b0/0x4b0 [ 2058.351942][ T4687] ? preempt_schedule+0x110/0x110 [ 2058.356934][ T4687] ? tipc_sendmcast+0xbd6/0xeb0 [ 2058.361755][ T4687] ? trace_event_raw_event_tipc_sk_class+0x4b0/0x4b0 [ 2058.368396][ T4687] tipc_sendmcast+0xc00/0xeb0 [ 2058.373041][ T4687] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 2058.378653][ T4687] ? memset+0x1f/0x40 [ 2058.382606][ T4687] ? unwind_next_frame+0x1c07/0x22b0 [ 2058.387858][ T4687] ? wait_woken+0x250/0x250 [ 2058.392332][ T4687] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 2058.397845][ T4687] __tipc_sendmsg+0x120d/0x2d30 [ 2058.402682][ T4687] ? local_bh_enable+0x20/0x20 [ 2058.407415][ T4687] ? blk_flush_plug_list+0x4b7/0x500 [ 2058.412669][ T4687] ? prep_new_page+0x11a/0x380 [ 2058.417404][ T4687] ? _raw_spin_lock_bh+0xa4/0x180 [ 2058.422394][ T4687] ? _local_bh_enable+0x30/0x30 [ 2058.427213][ T4687] ? memset+0x1f/0x40 [ 2058.431162][ T4687] ? selinux_socket_sendmsg+0x10b/0x320 [ 2058.436680][ T4687] ? lock_sock_nested+0x25a/0x320 [ 2058.441674][ T4687] ? xas_load+0x468/0x4c0 [ 2058.446062][ T4687] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2058.451769][ T4687] ? tipc_recvmsg+0x17c0/0x17c0 [ 2058.456596][ T4687] tipc_sendmsg+0x51/0x70 [ 2058.460902][ T4687] kernel_sendmsg+0xe2/0x120 [ 2058.465472][ T4687] sock_no_sendpage+0x13f/0x1b0 [ 2058.470296][ T4687] ? __receive_sock+0xb0/0xb0 [ 2058.474946][ T4687] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 2058.480634][ T4687] ? __receive_sock+0xb0/0xb0 [ 2058.485278][ T4687] sock_sendpage+0xd0/0x120 [ 2058.489768][ T4687] pipe_to_sendpage+0x23b/0x300 [ 2058.494588][ T4687] ? sock_fasync+0xf0/0xf0 [ 2058.498991][ T4687] ? generic_splice_sendpage+0x200/0x200 [ 2058.504592][ T4687] ? atime_needs_update+0x2cf/0x570 [ 2058.509761][ T4687] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 2058.515709][ T4687] __splice_from_pipe+0x2d3/0x870 [ 2058.520701][ T4687] ? generic_splice_sendpage+0x200/0x200 [ 2058.526302][ T4687] generic_splice_sendpage+0x172/0x200 [ 2058.531729][ T4687] ? iter_file_splice_write+0xf20/0xf20 [ 2058.537247][ T4687] ? direct_splice_actor+0x25/0x120 [ 2058.542413][ T4687] splice_direct_to_actor+0x496/0xb00 [ 2058.547763][ T4687] ? do_splice_direct+0x3d0/0x3d0 [ 2058.552762][ T4687] ? pipe_to_sendpage+0x300/0x300 [ 2058.557756][ T4687] ? security_file_permission+0x128/0x300 [ 2058.563441][ T4687] do_splice_direct+0x279/0x3d0 [ 2058.568262][ T4687] ? splice_direct_to_actor+0xb00/0xb00 [ 2058.573777][ T4687] ? security_file_permission+0x128/0x300 [ 2058.579463][ T4687] do_sendfile+0x89d/0x1110 [ 2058.583937][ T4687] ? compat_writev+0x390/0x390 [ 2058.588670][ T4687] ? security_file_permission+0x128/0x300 [ 2058.594367][ T4687] ? vfs_write+0x427/0x4f0 [ 2058.598751][ T4687] ? fput_many+0x42/0x1a0 [ 2058.603048][ T4687] __x64_sys_sendfile64+0x1ae/0x220 [ 2058.608214][ T4687] ? __ia32_sys_sendfile+0x240/0x240 [ 2058.613472][ T4687] do_syscall_64+0xcb/0x150 [ 2058.617947][ T4687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2058.623805][ T4687] RIP: 0033:0x45de59 [ 2058.627670][ T4687] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2058.647246][ T4687] RSP: 002b:00007f4c642b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2058.655623][ T4687] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 2058.663565][ T4687] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2058.671504][ T4687] RBP: 00007f4c642b0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2058.679445][ T4687] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 2058.687387][ T4687] R13: 00007ffdfc27e09f R14: 00007f4c642b19c0 R15: 000000000118bf2c [ 2058.695337][ T4687] Modules linked in: [ 2058.699705][T23757] Kernel Offset: disabled [ 2058.704018][T23757] Rebooting in 86400 seconds..