00200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 24) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:48:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5ea, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:48:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045440, 0x0) 19:48:31 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) (fail_nth: 1) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:48:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, 0x0) [ 1825.702810] FAULT_INJECTION: forcing a failure. [ 1825.702810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1825.704230] CPU: 0 PID: 10020 Comm: syz-executor.7 Not tainted 5.10.230 #1 [ 1825.705015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1825.705965] Call Trace: [ 1825.706270] dump_stack+0x107/0x167 [ 1825.706684] should_fail.cold+0x5/0xa [ 1825.707116] _copy_to_user+0x2e/0x180 [ 1825.707553] simple_read_from_buffer+0xcc/0x160 [ 1825.708096] proc_fail_nth_read+0x198/0x230 [ 1825.708589] ? proc_sessionid_read+0x230/0x230 [ 1825.709108] ? security_file_permission+0xb1/0xe0 [ 1825.709667] ? proc_sessionid_read+0x230/0x230 [ 1825.710196] vfs_read+0x228/0x620 [ 1825.710592] ksys_read+0x12d/0x260 [ 1825.710993] ? vfs_write+0xb10/0xb10 [ 1825.711420] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1825.712023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1825.712611] do_syscall_64+0x33/0x40 [ 1825.713033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1825.713615] RIP: 0033:0x7f9a6c42e69c [ 1825.714041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1825.716149] RSP: 002b:00007f9a699f1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1825.717011] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9a6c42e69c [ 1825.717825] RDX: 000000000000000f RSI: 00007f9a699f11e0 RDI: 0000000000000005 [ 1825.718629] RBP: 00007f9a699f11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1825.719436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1825.720252] R13: 00007fffe245025f R14: 00007f9a699f1300 R15: 0000000000022000 [ 1825.794112] FAULT_INJECTION: forcing a failure. [ 1825.794112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1825.795593] CPU: 0 PID: 10025 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1825.796382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1825.797337] Call Trace: [ 1825.797641] dump_stack+0x107/0x167 [ 1825.798053] should_fail.cold+0x5/0xa [ 1825.798484] __alloc_pages_nodemask+0x182/0x600 [ 1825.799011] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1825.799687] ? lock_downgrade+0x6d0/0x6d0 [ 1825.800158] ? lock_acquire+0x197/0x470 [ 1825.800615] alloc_pages_vma+0xbb/0x410 [ 1825.801067] shmem_alloc_page+0x10f/0x1e0 [ 1825.801535] ? shmem_init_inode+0x20/0x20 [ 1825.802018] ? percpu_counter_add_batch+0x8b/0x140 [ 1825.802572] ? __vm_enough_memory+0x184/0x360 [ 1825.803082] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1825.803697] ? shmem_unuse_inode+0xf60/0xf60 [ 1825.804208] shmem_file_read_iter+0x2a6/0xbb0 [ 1825.804727] ? shmem_get_link+0x440/0x440 [ 1825.805196] ? inode_has_perm+0x171/0x1d0 [ 1825.805667] ? iov_iter_pipe+0xf1/0x2a0 [ 1825.806117] generic_file_splice_read+0x455/0x6d0 [ 1825.806661] ? pipe_to_user+0x170/0x170 [ 1825.807116] ? fsnotify_perm.part.0+0x22d/0x620 [ 1825.807644] ? security_file_permission+0xb1/0xe0 [ 1825.808196] ? pipe_to_user+0x170/0x170 [ 1825.808647] do_splice_to+0x10e/0x160 [ 1825.809085] splice_direct_to_actor+0x2fe/0x980 [ 1825.809624] ? pipe_to_sendpage+0x380/0x380 [ 1825.810113] ? do_splice_to+0x160/0x160 [ 1825.810558] ? security_file_permission+0xb1/0xe0 [ 1825.811110] do_splice_direct+0x1c4/0x290 [ 1825.811578] ? splice_direct_to_actor+0x980/0x980 [ 1825.812129] ? security_file_permission+0xb1/0xe0 [ 1825.812680] vfs_copy_file_range+0x4f8/0x13c0 [ 1825.813199] ? generic_file_rw_checks+0x240/0x240 [ 1825.813756] __do_sys_copy_file_range+0x193/0x420 [ 1825.814301] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1825.814837] ? ksys_write+0x1a9/0x260 [ 1825.815267] ? __ia32_sys_read+0xb0/0xb0 [ 1825.815726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1825.816326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1825.816913] do_syscall_64+0x33/0x40 [ 1825.817337] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1825.817917] RIP: 0033:0x7f1d53837b19 [ 1825.818342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1825.820430] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1825.821286] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1825.822099] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1825.822904] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1825.823711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1825.824523] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:48:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40086602, 0x0) 19:48:46 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 25) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:48:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5ef, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:48:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, 0x0) 19:48:46 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:48:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80086601, 0x0) 19:48:46 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:48:46 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x3, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 1841.071229] FAULT_INJECTION: forcing a failure. [ 1841.071229] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1841.074863] CPU: 1 PID: 10046 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1841.076607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1841.078664] Call Trace: [ 1841.079326] dump_stack+0x107/0x167 [ 1841.080235] should_fail.cold+0x5/0xa [ 1841.081134] __alloc_pages_nodemask+0x182/0x600 [ 1841.082182] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1841.082217] ? lock_downgrade+0x6d0/0x6d0 [ 1841.082234] ? lock_acquire+0x197/0x470 [ 1841.082269] alloc_pages_vma+0xbb/0x410 [ 1841.082294] shmem_alloc_page+0x10f/0x1e0 [ 1841.082312] ? shmem_init_inode+0x20/0x20 [ 1841.082354] ? percpu_counter_add_batch+0x8b/0x140 [ 1841.082376] ? __vm_enough_memory+0x184/0x360 [ 1841.082400] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1841.082436] ? shmem_unuse_inode+0xf60/0xf60 [ 1841.082457] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1841.082470] ? rwlock_bug.part.0+0x90/0x90 [ 1841.082496] shmem_write_begin+0xf7/0x1d0 [ 1841.082519] generic_perform_write+0x20a/0x4f0 [ 1841.082549] ? __mnt_drop_write_file+0x9/0x70 [ 1841.082565] ? page_cache_prev_miss+0x310/0x310 [ 1841.082581] ? evict_inodes+0x470/0x470 [ 1841.082600] ? generic_write_checks+0x2ad/0x390 [ 1841.082634] __generic_file_write_iter+0x39d/0x5d0 [ 1841.100413] generic_file_write_iter+0xdb/0x230 [ 1841.101390] do_iter_readv_writev+0x476/0x750 [ 1841.102341] ? new_sync_write+0x660/0x660 [ 1841.103218] ? selinux_file_permission+0x92/0x520 [ 1841.104234] ? security_file_permission+0xb1/0xe0 [ 1841.105267] do_iter_write+0x191/0x700 [ 1841.106093] ? trace_hardirqs_on+0x5b/0x180 [ 1841.107012] vfs_iter_write+0x70/0xa0 [ 1841.107816] iter_file_splice_write+0x726/0xc90 [ 1841.108809] ? generic_splice_sendpage+0x140/0x140 [ 1841.109859] ? security_file_permission+0xb1/0xe0 [ 1841.110884] ? generic_splice_sendpage+0x140/0x140 [ 1841.111909] direct_splice_actor+0x10f/0x170 [ 1841.112833] splice_direct_to_actor+0x387/0x980 [ 1841.113810] ? pipe_to_sendpage+0x380/0x380 [ 1841.114725] ? do_splice_to+0x160/0x160 [ 1841.115555] ? security_file_permission+0xb1/0xe0 [ 1841.116573] do_splice_direct+0x1c4/0x290 [ 1841.117439] ? splice_direct_to_actor+0x980/0x980 [ 1841.118458] ? security_file_permission+0xb1/0xe0 [ 1841.119468] vfs_copy_file_range+0x4f8/0x13c0 [ 1841.120421] ? generic_file_rw_checks+0x240/0x240 [ 1841.121447] __do_sys_copy_file_range+0x193/0x420 [ 1841.122454] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1841.123439] ? ksys_write+0x1a9/0x260 [ 1841.124229] ? __ia32_sys_read+0xb0/0xb0 [ 1841.125092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1841.126186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1841.127264] do_syscall_64+0x33/0x40 [ 1841.128047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1841.129133] RIP: 0033:0x7f1d53837b19 [ 1841.129907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1841.133755] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1841.135346] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1841.136848] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1841.138340] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1841.139828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1841.141324] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:48:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0189436, 0x0) 19:48:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40087602, 0x0) 19:48:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80087601, 0x0) 19:48:47 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x4, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:48:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc020660b, 0x0) 19:48:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5f5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:48:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, 0x0) 19:48:59 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:48:59 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x2, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:49:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4006040}, 0x80040) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0xbf, @local, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000140)) listen(r3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[r2, r0, r3]}, 0x3) fchmod(r3, 0x72) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:49:00 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 26) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:49:00 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:49:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4020940d, 0x0) [ 1854.234950] FAULT_INJECTION: forcing a failure. [ 1854.234950] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.237427] CPU: 0 PID: 10086 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1854.238782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1854.240407] Call Trace: [ 1854.240940] dump_stack+0x107/0x167 [ 1854.241660] should_fail.cold+0x5/0xa [ 1854.242409] ? create_object.isra.0+0x3a/0xa20 [ 1854.243319] should_failslab+0x5/0x20 [ 1854.244069] kmem_cache_alloc+0x5b/0x310 [ 1854.244870] ? igrab+0xc0/0xc0 [ 1854.245504] create_object.isra.0+0x3a/0xa20 [ 1854.246365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1854.247370] __kmalloc+0x16e/0x390 [ 1854.248081] iter_file_splice_write+0x165/0xc90 [ 1854.248998] ? shmem_get_link+0x440/0x440 [ 1854.249824] ? generic_splice_sendpage+0x140/0x140 [ 1854.250792] ? pipe_to_user+0x170/0x170 [ 1854.251587] ? security_file_permission+0xb1/0xe0 [ 1854.252544] ? generic_splice_sendpage+0x140/0x140 [ 1854.253521] direct_splice_actor+0x10f/0x170 [ 1854.254384] splice_direct_to_actor+0x387/0x980 [ 1854.255302] ? pipe_to_sendpage+0x380/0x380 [ 1854.256156] ? do_splice_to+0x160/0x160 [ 1854.256952] ? security_file_permission+0xb1/0xe0 [ 1854.257911] do_splice_direct+0x1c4/0x290 [ 1854.258725] ? splice_direct_to_actor+0x980/0x980 [ 1854.259685] ? security_file_permission+0xb1/0xe0 [ 1854.260640] vfs_copy_file_range+0x4f8/0x13c0 [ 1854.261541] ? generic_file_rw_checks+0x240/0x240 [ 1854.262511] __do_sys_copy_file_range+0x193/0x420 [ 1854.263459] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1854.264381] ? ksys_write+0x1a9/0x260 [ 1854.265141] ? __ia32_sys_read+0xb0/0xb0 [ 1854.265947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1854.266980] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1854.267992] do_syscall_64+0x33/0x40 [ 1854.268771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1854.269784] RIP: 0033:0x7f1d53837b19 [ 1854.270516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1854.274117] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1854.275606] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1854.277007] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1854.278411] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1854.279803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1854.281202] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:49:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, 0x0) 19:49:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045432, 0x0) 19:49:00 executing program 0: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x4, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000040)={0x8, 0x100, 0x2, 0x7, 0x0, [0x7ff, 0x0, 0x6, 0x3]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/62, 0x3e, 0x2020, &(0x7f00000000c0)={0xa, 0x4e24, 0xce78, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000100)={0x1, 0x0, 0x1f}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:49:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0189436, 0x0) 19:49:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5fd, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:49:00 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:49:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x8}) 19:49:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045440, 0x0) 19:49:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc020660b, 0x0) 19:49:00 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:49:13 executing program 4: process_vm_readv(0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/202, 0xca}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000000280)=""/206, 0xce}], 0x5, 0x0) process_vm_readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/64, 0x40}, {&(0x7f0000000700)=""/177, 0xb1}], 0x2, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/253, 0xfd}, {&(0x7f0000000900)=""/87, 0x57}, {&(0x7f0000000980)=""/52, 0x34}, {&(0x7f00000009c0)=""/229, 0xe5}, {&(0x7f0000000ac0)=""/88, 0x58}], 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x13, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r4, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000bc0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x8000, 0x0, 0x1, {0x0, r6}}, 0xff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082abd7000ffdbdf25070000000c009900040000007800001e05005300010000000a0018000341b3000301ff000400cc000400cc000500530000000000080005000800000008000500000000000400cc00"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x4040001) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x4b68, 0x0) 19:49:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:49:13 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:49:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:49:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80086601, 0x0) 19:49:13 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b0a, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:49:13 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x618, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:49:13 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 27) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 1868.139281] FAULT_INJECTION: forcing a failure. [ 1868.139281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1868.140892] CPU: 1 PID: 10137 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1868.141727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.142716] Call Trace: [ 1868.143038] dump_stack+0x107/0x167 [ 1868.143474] should_fail.cold+0x5/0xa [ 1868.143931] __alloc_pages_nodemask+0x182/0x600 [ 1868.144488] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1868.145213] ? lock_downgrade+0x6d0/0x6d0 [ 1868.145707] ? lock_acquire+0x197/0x470 [ 1868.146194] alloc_pages_vma+0xbb/0x410 [ 1868.146679] shmem_alloc_page+0x10f/0x1e0 [ 1868.147176] ? shmem_init_inode+0x20/0x20 [ 1868.147683] ? percpu_counter_add_batch+0x8b/0x140 [ 1868.148272] ? __vm_enough_memory+0x184/0x360 [ 1868.148805] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1868.149458] ? shmem_unuse_inode+0xf60/0xf60 [ 1868.149990] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1868.150591] ? rwlock_bug.part.0+0x90/0x90 [ 1868.151099] shmem_write_begin+0xf7/0x1d0 [ 1868.151598] generic_perform_write+0x20a/0x4f0 [ 1868.152152] ? __mnt_drop_write_file+0x9/0x70 [ 1868.152690] ? page_cache_prev_miss+0x310/0x310 [ 1868.153256] ? evict_inodes+0x470/0x470 [ 1868.153735] ? generic_write_checks+0x2ad/0x390 [ 1868.154292] __generic_file_write_iter+0x39d/0x5d0 [ 1868.154880] generic_file_write_iter+0xdb/0x230 [ 1868.155432] do_iter_readv_writev+0x476/0x750 [ 1868.155966] ? new_sync_write+0x660/0x660 [ 1868.156456] ? selinux_file_permission+0x92/0x520 [ 1868.157030] ? security_file_permission+0xb1/0xe0 [ 1868.157612] do_iter_write+0x191/0x700 [ 1868.158071] ? trace_hardirqs_on+0x5b/0x180 [ 1868.158586] vfs_iter_write+0x70/0xa0 [ 1868.159043] iter_file_splice_write+0x726/0xc90 [ 1868.159599] ? generic_splice_sendpage+0x140/0x140 [ 1868.160191] ? security_file_permission+0xb1/0xe0 [ 1868.160765] ? generic_splice_sendpage+0x140/0x140 [ 1868.161355] direct_splice_actor+0x10f/0x170 [ 1868.161886] splice_direct_to_actor+0x387/0x980 [ 1868.162439] ? pipe_to_sendpage+0x380/0x380 [ 1868.162954] ? do_splice_to+0x160/0x160 [ 1868.163422] ? security_file_permission+0xb1/0xe0 [ 1868.163995] do_splice_direct+0x1c4/0x290 [ 1868.164485] ? splice_direct_to_actor+0x980/0x980 [ 1868.165059] ? security_file_permission+0xb1/0xe0 [ 1868.165638] vfs_copy_file_range+0x4f8/0x13c0 [ 1868.166172] ? generic_file_rw_checks+0x240/0x240 [ 1868.166752] __do_sys_copy_file_range+0x193/0x420 [ 1868.167321] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1868.167879] ? ksys_write+0x1a9/0x260 [ 1868.168327] ? __ia32_sys_read+0xb0/0xb0 [ 1868.168811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1868.169439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.170051] do_syscall_64+0x33/0x40 [ 1868.170490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1868.171093] RIP: 0033:0x7f1d53837b19 [ 1868.171534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.173722] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1868.174631] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1868.175467] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1868.176302] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1868.177136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1868.177991] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:49:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x7, 0xfff, 0x9}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r4, 0x0) r5 = fcntl$dupfd(r4, 0x406, r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) dup2(r2, r3) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:49:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80087601, 0x0) 19:49:14 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:49:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, 0x0) 19:49:14 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 28) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:49:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 1868.354178] FAULT_INJECTION: forcing a failure. [ 1868.354178] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.355632] CPU: 1 PID: 10168 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1868.356406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.357359] Call Trace: [ 1868.357664] dump_stack+0x107/0x167 [ 1868.358083] should_fail.cold+0x5/0xa [ 1868.358516] ? create_object.isra.0+0x3a/0xa20 [ 1868.359039] should_failslab+0x5/0x20 [ 1868.359473] kmem_cache_alloc+0x5b/0x310 [ 1868.359930] create_object.isra.0+0x3a/0xa20 [ 1868.360425] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1868.361002] kmem_cache_alloc+0x159/0x310 [ 1868.361480] ? trace_hardirqs_on+0x5b/0x180 [ 1868.361970] xas_alloc+0x336/0x440 [ 1868.362376] xas_create+0x60f/0x10d0 [ 1868.362804] xas_create_range+0x189/0x620 [ 1868.363285] shmem_add_to_page_cache+0x760/0x1130 [ 1868.363838] ? shmem_getattr+0x1a0/0x1a0 [ 1868.364315] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 1868.364932] ? shmem_unuse_inode+0xf60/0xf60 [ 1868.365444] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1868.366048] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1868.366623] shmem_write_begin+0xf7/0x1d0 [ 1868.367097] generic_perform_write+0x20a/0x4f0 [ 1868.367620] ? __mnt_drop_write_file+0x9/0x70 [ 1868.368132] ? page_cache_prev_miss+0x310/0x310 [ 1868.368654] ? evict_inodes+0x470/0x470 [ 1868.369107] ? generic_write_checks+0x2ad/0x390 [ 1868.369648] __generic_file_write_iter+0x39d/0x5d0 [ 1868.370208] generic_file_write_iter+0xdb/0x230 [ 1868.370739] do_iter_readv_writev+0x476/0x750 [ 1868.371251] ? new_sync_write+0x660/0x660 [ 1868.371722] ? selinux_file_permission+0x92/0x520 [ 1868.372269] ? security_file_permission+0xb1/0xe0 [ 1868.372817] do_iter_write+0x191/0x700 [ 1868.373267] ? trace_hardirqs_on+0x5b/0x180 [ 1868.373758] vfs_iter_write+0x70/0xa0 [ 1868.374196] iter_file_splice_write+0x726/0xc90 [ 1868.374730] ? generic_splice_sendpage+0x140/0x140 [ 1868.375294] ? security_file_permission+0xb1/0xe0 [ 1868.375842] ? generic_splice_sendpage+0x140/0x140 [ 1868.376395] direct_splice_actor+0x10f/0x170 [ 1868.376895] splice_direct_to_actor+0x387/0x980 [ 1868.377440] ? pipe_to_sendpage+0x380/0x380 [ 1868.377927] ? do_splice_to+0x160/0x160 [ 1868.378375] ? security_file_permission+0xb1/0xe0 [ 1868.378925] do_splice_direct+0x1c4/0x290 [ 1868.379391] ? splice_direct_to_actor+0x980/0x980 [ 1868.379940] ? security_file_permission+0xb1/0xe0 [ 1868.380489] vfs_copy_file_range+0x4f8/0x13c0 [ 1868.381002] ? generic_file_rw_checks+0x240/0x240 [ 1868.381569] __do_sys_copy_file_range+0x193/0x420 [ 1868.382114] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1868.382646] ? ksys_write+0x1a9/0x260 [ 1868.383078] ? __ia32_sys_read+0xb0/0xb0 [ 1868.383540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1868.384139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.384724] do_syscall_64+0x33/0x40 [ 1868.385144] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1868.385732] RIP: 0033:0x7f1d53837b19 [ 1868.386153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.388243] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1868.389100] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1868.389907] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1868.390714] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1868.391523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1868.392328] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:49:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, 0x0) 19:49:26 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:49:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:49:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x622, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:49:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r1 = timerfd_create(0x2, 0x100000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$VT_RESIZEX(r3, 0x4b68, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x20, 0x2100) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000080)=""/119) 19:49:26 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b2f, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:49:26 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 29) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:49:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c1613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae300000"], 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xb5, 0x20, 0x1ff, 0x18, @dev={0xfe, 0x80, '\x00', 0x24}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x20, 0x4, 0x4}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000f8bb1cef0e89c2918f1ee18630afb66cfce63191b3eee00e3bd3a2b785738821b916886a8667eaaf748e91bc1f7dcb2bd5f38ae00abf2cfc1d9223bf99ba23ef663cafecdd0bedc718e2331dd312e192c3ce45dec307d05f1f05604cd14afec2a7f84fbb7654596b2e4fd1c66b5671fd79775d59b30fc2f077710ec64370bac5e3ac522235dc739b27f", @ANYRES16=r1, @ANYBLOB="00012cbd7000fddbdf2502000000240001800800060002000000060001000000000008000700", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB="08000200030000000800020000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r6, 0x4b68, 0x0) [ 1880.363887] FAULT_INJECTION: forcing a failure. [ 1880.363887] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1880.366861] CPU: 0 PID: 10201 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1880.368412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.370284] Call Trace: [ 1880.370876] dump_stack+0x107/0x167 [ 1880.371689] should_fail.cold+0x5/0xa [ 1880.372546] __alloc_pages_nodemask+0x182/0x600 [ 1880.373602] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1880.374941] ? lock_downgrade+0x6d0/0x6d0 [ 1880.375868] ? lock_acquire+0x197/0x470 [ 1880.376773] alloc_pages_vma+0xbb/0x410 [ 1880.377680] shmem_alloc_page+0x10f/0x1e0 [ 1880.378609] ? shmem_init_inode+0x20/0x20 [ 1880.379560] ? percpu_counter_add_batch+0x8b/0x140 [ 1880.380667] ? __vm_enough_memory+0x184/0x360 [ 1880.381743] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1880.382955] ? shmem_unuse_inode+0xf60/0xf60 [ 1880.383941] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1880.385131] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1880.386297] shmem_write_begin+0xf7/0x1d0 [ 1880.387227] generic_perform_write+0x20a/0x4f0 [ 1880.388263] ? __mnt_drop_write_file+0x9/0x70 [ 1880.389266] ? page_cache_prev_miss+0x310/0x310 [ 1880.390308] ? evict_inodes+0x470/0x470 [ 1880.391196] ? generic_write_checks+0x2ad/0x390 [ 1880.392244] __generic_file_write_iter+0x39d/0x5d0 [ 1880.393345] generic_file_write_iter+0xdb/0x230 [ 1880.394394] do_iter_readv_writev+0x476/0x750 [ 1880.395403] ? new_sync_write+0x660/0x660 [ 1880.396330] ? selinux_file_permission+0x92/0x520 [ 1880.397409] ? security_file_permission+0xb1/0xe0 [ 1880.398503] do_iter_write+0x191/0x700 [ 1880.399378] ? trace_hardirqs_on+0x5b/0x180 [ 1880.400352] vfs_iter_write+0x70/0xa0 [ 1880.401204] iter_file_splice_write+0x726/0xc90 [ 1880.402264] ? generic_splice_sendpage+0x140/0x140 [ 1880.403375] ? security_file_permission+0xb1/0xe0 [ 1880.404456] ? generic_splice_sendpage+0x140/0x140 [ 1880.405561] direct_splice_actor+0x10f/0x170 [ 1880.406552] splice_direct_to_actor+0x387/0x980 [ 1880.407597] ? pipe_to_sendpage+0x380/0x380 [ 1880.408565] ? do_splice_to+0x160/0x160 [ 1880.409451] ? security_file_permission+0xb1/0xe0 [ 1880.410556] do_splice_direct+0x1c4/0x290 [ 1880.411487] ? splice_direct_to_actor+0x980/0x980 [ 1880.412577] ? security_file_permission+0xb1/0xe0 [ 1880.413672] vfs_copy_file_range+0x4f8/0x13c0 [ 1880.414680] ? generic_file_rw_checks+0x240/0x240 [ 1880.415776] __do_sys_copy_file_range+0x193/0x420 [ 1880.416852] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1880.417926] ? ksys_write+0x1a9/0x260 [ 1880.418780] ? __ia32_sys_read+0xb0/0xb0 [ 1880.419691] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.420861] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.422018] do_syscall_64+0x33/0x40 [ 1880.422850] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1880.423998] RIP: 0033:0x7f1d53837b19 [ 1880.424827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.428962] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1880.430666] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1880.432261] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1880.433863] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1880.435457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.437059] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:49:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0189436, 0x0) 19:49:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc020660b, 0x0) 19:49:26 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b30, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:49:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) 19:49:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:49:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x628, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:49:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0xf, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:49:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) read(r1, &(0x7f0000000080)=""/150, 0x96) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000040)) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:49:40 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b31, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:49:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x62e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:49:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:49:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:49:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 30) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:49:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x1, "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"}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) 19:49:40 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:49:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="b3294105967a97c3de96e53281d89cf41fbb8442c9df4a541fb8b954e320754152ae8bacca3804b816477ffa50a485689d4e7631de31d3bd27bb34e29d2b5895824fca22744599261febb273e49265c9f0b7cf7213268be8d70e9a7724dace410180fbe17e57bc9bc891c9da965397fbca87c51831b7a2132d49d4610b5070c7255812c8c410e43db612ff5c497ac17a9018772995fd95f056808c1fc9b943b57b872b") ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 1894.338951] FAULT_INJECTION: forcing a failure. [ 1894.338951] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.341289] CPU: 1 PID: 10254 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1894.342881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1894.342924] Call Trace: [ 1894.342948] dump_stack+0x107/0x167 [ 1894.342967] should_fail.cold+0x5/0xa [ 1894.342987] ? create_object.isra.0+0x3a/0xa20 [ 1894.343008] should_failslab+0x5/0x20 [ 1894.343025] kmem_cache_alloc+0x5b/0x310 [ 1894.343049] create_object.isra.0+0x3a/0xa20 [ 1894.343064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1894.343087] kmem_cache_alloc+0x159/0x310 19:49:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$KDSETLED(r1, 0x4b32, 0x0) [ 1894.343102] ? trace_hardirqs_on+0x5b/0x180 [ 1894.343125] xas_alloc+0x336/0x440 19:49:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 1894.343145] xas_create+0x60f/0x10d0 [ 1894.343179] xas_create_range+0x189/0x620 [ 1894.343214] shmem_add_to_page_cache+0x760/0x1130 [ 1894.343244] ? shmem_getattr+0x1a0/0x1a0 [ 1894.343286] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 1894.343323] ? shmem_unuse_inode+0xf60/0xf60 [ 1894.343344] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1894.343360] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1894.343387] shmem_write_begin+0xf7/0x1d0 [ 1894.343410] generic_perform_write+0x20a/0x4f0 [ 1894.343439] ? __mnt_drop_write_file+0x9/0x70 [ 1894.343456] ? page_cache_prev_miss+0x310/0x310 [ 1894.343472] ? evict_inodes+0x470/0x470 [ 1894.343490] ? generic_write_checks+0x2ad/0x390 [ 1894.343515] __generic_file_write_iter+0x39d/0x5d0 [ 1894.343539] generic_file_write_iter+0xdb/0x230 19:49:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x637, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 1894.343563] do_iter_readv_writev+0x476/0x750 [ 1894.343585] ? new_sync_write+0x660/0x660 [ 1894.343603] ? selinux_file_permission+0x92/0x520 [ 1894.343625] ? security_file_permission+0xb1/0xe0 19:49:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x51d, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 1894.343653] do_iter_write+0x191/0x700 [ 1894.343672] ? trace_hardirqs_on+0x5b/0x180 [ 1894.343699] vfs_iter_write+0x70/0xa0 [ 1894.343719] iter_file_splice_write+0x726/0xc90 [ 1894.343753] ? generic_splice_sendpage+0x140/0x140 [ 1894.343789] ? security_file_permission+0xb1/0xe0 [ 1894.343810] ? generic_splice_sendpage+0x140/0x140 [ 1894.343830] direct_splice_actor+0x10f/0x170 [ 1894.343852] splice_direct_to_actor+0x387/0x980 [ 1894.343875] ? pipe_to_sendpage+0x380/0x380 [ 1894.343897] ? do_splice_to+0x160/0x160 19:49:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 31) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 1894.343913] ? security_file_permission+0xb1/0xe0 [ 1894.343940] do_splice_direct+0x1c4/0x290 [ 1894.343958] ? splice_direct_to_actor+0x980/0x980 [ 1894.343982] ? security_file_permission+0xb1/0xe0 [ 1894.344007] vfs_copy_file_range+0x4f8/0x13c0 [ 1894.344031] ? generic_file_rw_checks+0x240/0x240 [ 1894.344073] __do_sys_copy_file_range+0x193/0x420 19:49:40 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b32, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 1894.344093] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1894.344108] ? ksys_write+0x1a9/0x260 [ 1894.344127] ? __ia32_sys_read+0xb0/0xb0 [ 1894.344151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1894.344169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1894.344190] do_syscall_64+0x33/0x40 [ 1894.344208] entry_SYSCALL_64_after_hwframe+0x67/0xd1 19:49:40 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca94"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) [ 1894.344219] RIP: 0033:0x7f1d53837b19 [ 1894.344235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1894.344245] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1894.344265] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1894.344274] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1894.344284] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1894.344293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1894.344303] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 1894.605926] FAULT_INJECTION: forcing a failure. [ 1894.605926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1894.605946] CPU: 1 PID: 10286 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1894.605955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1894.605961] Call Trace: [ 1894.605985] dump_stack+0x107/0x167 [ 1894.606021] should_fail.cold+0x5/0xa [ 1894.606045] __alloc_pages_nodemask+0x182/0x600 [ 1894.606067] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1894.606084] ? lock_downgrade+0x6d0/0x6d0 19:49:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x63c, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 1894.606101] ? lock_acquire+0x197/0x470 [ 1894.606135] alloc_pages_vma+0xbb/0x410 [ 1894.606159] shmem_alloc_page+0x10f/0x1e0 [ 1894.606182] ? shmem_init_inode+0x20/0x20 [ 1894.606224] ? percpu_counter_add_batch+0x8b/0x140 19:49:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x540, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 1894.606246] ? __vm_enough_memory+0x184/0x360 [ 1894.606270] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1894.606306] ? shmem_unuse_inode+0xf60/0xf60 [ 1894.606327] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1894.606342] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1894.606368] shmem_write_begin+0xf7/0x1d0 [ 1894.606391] generic_perform_write+0x20a/0x4f0 [ 1894.606420] ? __mnt_drop_write_file+0x9/0x70 [ 1894.606436] ? page_cache_prev_miss+0x310/0x310 [ 1894.606453] ? evict_inodes+0x470/0x470 [ 1894.606471] ? generic_write_checks+0x2ad/0x390 [ 1894.606496] __generic_file_write_iter+0x39d/0x5d0 [ 1894.606519] generic_file_write_iter+0xdb/0x230 [ 1894.606543] do_iter_readv_writev+0x476/0x750 [ 1894.606565] ? new_sync_write+0x660/0x660 [ 1894.606582] ? selinux_file_permission+0x92/0x520 [ 1894.606604] ? security_file_permission+0xb1/0xe0 [ 1894.606631] do_iter_write+0x191/0x700 [ 1894.606651] ? trace_hardirqs_on+0x5b/0x180 [ 1894.606677] vfs_iter_write+0x70/0xa0 [ 1894.606698] iter_file_splice_write+0x726/0xc90 [ 1894.606730] ? generic_splice_sendpage+0x140/0x140 [ 1894.606766] ? security_file_permission+0xb1/0xe0 [ 1894.606786] ? generic_splice_sendpage+0x140/0x140 19:49:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 32) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 1894.606806] direct_splice_actor+0x10f/0x170 [ 1894.606827] splice_direct_to_actor+0x387/0x980 [ 1894.606850] ? pipe_to_sendpage+0x380/0x380 [ 1894.606871] ? do_splice_to+0x160/0x160 [ 1894.606887] ? security_file_permission+0xb1/0xe0 [ 1894.606913] do_splice_direct+0x1c4/0x290 [ 1894.606930] ? splice_direct_to_actor+0x980/0x980 [ 1894.606954] ? security_file_permission+0xb1/0xe0 [ 1894.606979] vfs_copy_file_range+0x4f8/0x13c0 [ 1894.607003] ? generic_file_rw_checks+0x240/0x240 [ 1894.607043] __do_sys_copy_file_range+0x193/0x420 [ 1894.607063] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1894.607078] ? ksys_write+0x1a9/0x260 [ 1894.607096] ? __ia32_sys_read+0xb0/0xb0 [ 1894.607119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1894.607137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1894.607157] do_syscall_64+0x33/0x40 [ 1894.607175] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1894.607186] RIP: 0033:0x7f1d53837b19 [ 1894.607202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1894.607211] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1894.607231] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 19:49:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x642, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 1894.607240] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1894.607250] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1894.607259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1894.607269] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 1894.888056] FAULT_INJECTION: forcing a failure. [ 1894.888056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1894.888076] CPU: 1 PID: 10308 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1894.888085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1894.888090] Call Trace: [ 1894.888114] dump_stack+0x107/0x167 [ 1894.888135] should_fail.cold+0x5/0xa [ 1894.888158] __alloc_pages_nodemask+0x182/0x600 [ 1894.888180] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1894.888198] ? lock_downgrade+0x6d0/0x6d0 [ 1894.888214] ? lock_acquire+0x197/0x470 [ 1894.888249] alloc_pages_vma+0xbb/0x410 [ 1894.888273] shmem_alloc_page+0x10f/0x1e0 [ 1894.888290] ? shmem_init_inode+0x20/0x20 [ 1894.888332] ? percpu_counter_add_batch+0x8b/0x140 [ 1894.888353] ? __vm_enough_memory+0x184/0x360 [ 1894.888377] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1894.888413] ? shmem_unuse_inode+0xf60/0xf60 [ 1894.888434] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1894.888449] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1894.888476] shmem_write_begin+0xf7/0x1d0 [ 1894.888504] generic_perform_write+0x20a/0x4f0 [ 1894.888534] ? __mnt_drop_write_file+0x9/0x70 [ 1894.888550] ? page_cache_prev_miss+0x310/0x310 [ 1894.888566] ? evict_inodes+0x470/0x470 [ 1894.888585] ? generic_write_checks+0x2ad/0x390 [ 1894.888610] __generic_file_write_iter+0x39d/0x5d0 [ 1894.888633] generic_file_write_iter+0xdb/0x230 [ 1894.888657] do_iter_readv_writev+0x476/0x750 [ 1894.888679] ? new_sync_write+0x660/0x660 [ 1894.888696] ? selinux_file_permission+0x92/0x520 [ 1894.888717] ? security_file_permission+0xb1/0xe0 [ 1894.888745] do_iter_write+0x191/0x700 [ 1894.888765] ? trace_hardirqs_on+0x5b/0x180 [ 1894.888791] vfs_iter_write+0x70/0xa0 [ 1894.888811] iter_file_splice_write+0x726/0xc90 [ 1894.888844] ? generic_splice_sendpage+0x140/0x140 [ 1894.888879] ? security_file_permission+0xb1/0xe0 [ 1894.888900] ? generic_splice_sendpage+0x140/0x140 [ 1894.888920] direct_splice_actor+0x10f/0x170 [ 1894.888941] splice_direct_to_actor+0x387/0x980 [ 1894.888963] ? pipe_to_sendpage+0x380/0x380 [ 1894.888985] ? do_splice_to+0x160/0x160 [ 1894.889001] ? security_file_permission+0xb1/0xe0 [ 1894.889026] do_splice_direct+0x1c4/0x290 [ 1894.889044] ? splice_direct_to_actor+0x980/0x980 [ 1894.889068] ? security_file_permission+0xb1/0xe0 [ 1894.889093] vfs_copy_file_range+0x4f8/0x13c0 [ 1894.889116] ? generic_file_rw_checks+0x240/0x240 [ 1894.889156] __do_sys_copy_file_range+0x193/0x420 [ 1894.889176] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1894.889192] ? ksys_write+0x1a9/0x260 [ 1894.889210] ? __ia32_sys_read+0xb0/0xb0 [ 1894.889232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1894.889250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1894.889270] do_syscall_64+0x33/0x40 [ 1894.889288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1894.889300] RIP: 0033:0x7f1d53837b19 [ 1894.889316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1894.889325] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1894.889344] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1894.889354] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1894.889363] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1894.889373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1894.889383] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:49:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x10000, 0xfff, 0x6, 0x8, 0x80, "53718889ca0fec601eb8cbdc10fa14477eceff", 0x3, 0x10000}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:49:52 executing program 1: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250a150000100002800400040008000200bc4f3ab96a218c3b43000000000000000000"], 0x24}}, 0x4000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 19:49:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000480)=0x1c, 0x800) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x90, 0x0, 0x1, 0x70bd26, 0x1ff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x400}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x63, 0x5b, "bddfcc629eee3b85af4ae3048306872273f1cf3f1504db823b2e14709bf7db4101ea7112f96fbb51c8d86f49c96bf7d841ff4ef5cba76b47a2436169baf40bc92f5f389de4b39f3979da8f8ba121fe2d44284f981c9eb094d164e0540456b3"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x0, 0x5, 0x147, &(0x7f0000000000)="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"}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="14060000", @ANYRES16=r4, @ANYBLOB="000429bd7000fedbdf2582000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x10014000) listen(0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000680)=0x9, 0x40) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000009c0)={0x60, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x700, {0xfff, 0x100, 0x400, 0xf800}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc, {0x7775, 0x7, 0x8, 0x8}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xf543d131baf6145e, 0x3, 0x1, 0x0, {0x6, 0x20, 0x0, 0x23, 0x0, 0x1, 0x1}, 0x6, 0x5, 0x81}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) [ 1906.984785] FAULT_INJECTION: forcing a failure. [ 1906.984785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1906.986441] CPU: 1 PID: 10325 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1906.987283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1906.988300] Call Trace: [ 1906.988632] dump_stack+0x107/0x167 [ 1906.989077] should_fail.cold+0x5/0xa [ 1906.989538] __alloc_pages_nodemask+0x182/0x600 [ 1906.990101] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1906.990826] ? lock_downgrade+0x6d0/0x6d0 [ 1906.991326] ? lock_acquire+0x197/0x470 [ 1906.991815] alloc_pages_vma+0xbb/0x410 [ 1906.992296] shmem_alloc_page+0x10f/0x1e0 [ 1906.992794] ? shmem_init_inode+0x20/0x20 [ 1906.993309] ? percpu_counter_add_batch+0x8b/0x140 [ 1906.993903] ? __vm_enough_memory+0x184/0x360 19:49:52 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 33) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:49:52 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x54a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:49:52 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x64a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:49:52 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca94"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:49:52 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b33, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 1906.994457] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1906.994479] ? shmem_unuse_inode+0xf60/0xf60 [ 1906.994492] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1906.994502] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1906.994517] shmem_write_begin+0xf7/0x1d0 [ 1906.994531] generic_perform_write+0x20a/0x4f0 [ 1906.994549] ? __mnt_drop_write_file+0x9/0x70 [ 1906.994559] ? page_cache_prev_miss+0x310/0x310 [ 1906.994570] ? evict_inodes+0x470/0x470 [ 1906.994581] ? generic_write_checks+0x2ad/0x390 [ 1906.994596] __generic_file_write_iter+0x39d/0x5d0 19:49:52 executing program 1: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="dc0000000a0a0104000000000000000005000008b400098008000140000000091c0002800c00018008000140000000810c00018008000140000000098400028054000180080001400000000608000140f0ffffbc08000140000058700800014000007fff0800014000000001080001400000000308000140000000000800014080000001080001400000c56c08000140000000092c000180080001400001000008000140000100000800014000000002080001408000000108000140000000050800014000000aaf08000740000000380900020073797a3200000000"], 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5602, &(0x7f00000000c0)={0x9}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) [ 1906.994610] generic_file_write_iter+0xdb/0x230 [ 1906.994625] do_iter_readv_writev+0x476/0x750 [ 1906.994638] ? new_sync_write+0x660/0x660 19:49:52 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 34) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 1906.994650] ? selinux_file_permission+0x92/0x520 [ 1906.994663] ? security_file_permission+0xb1/0xe0 19:49:52 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x65b, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 1906.994679] do_iter_write+0x191/0x700 [ 1906.994692] ? trace_hardirqs_on+0x5b/0x180 [ 1906.994708] vfs_iter_write+0x70/0xa0 [ 1906.994720] iter_file_splice_write+0x726/0xc90 [ 1906.994740] ? generic_splice_sendpage+0x140/0x140 [ 1906.994761] ? security_file_permission+0xb1/0xe0 [ 1906.994774] ? generic_splice_sendpage+0x140/0x140 [ 1906.994786] direct_splice_actor+0x10f/0x170 [ 1906.994798] splice_direct_to_actor+0x387/0x980 19:49:52 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b34, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:49:52 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 35) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 1906.994812] ? pipe_to_sendpage+0x380/0x380 [ 1906.994825] ? do_splice_to+0x160/0x160 [ 1906.994835] ? security_file_permission+0xb1/0xe0 19:49:53 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x550, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 1906.994850] do_splice_direct+0x1c4/0x290 [ 1906.994861] ? splice_direct_to_actor+0x980/0x980 [ 1906.994876] ? security_file_permission+0xb1/0xe0 [ 1906.994891] vfs_copy_file_range+0x4f8/0x13c0 [ 1906.994905] ? generic_file_rw_checks+0x240/0x240 [ 1906.994929] __do_sys_copy_file_range+0x193/0x420 [ 1906.994941] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1906.994951] ? ksys_write+0x1a9/0x260 [ 1906.994962] ? __ia32_sys_read+0xb0/0xb0 [ 1906.994975] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1906.994987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1906.995000] do_syscall_64+0x33/0x40 [ 1906.995010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1906.995018] RIP: 0033:0x7f1d53837b19 [ 1906.995028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1906.995033] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1906.995045] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1906.995051] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1906.995057] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1906.995062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1906.995069] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 1907.123844] FAULT_INJECTION: forcing a failure. [ 1907.123844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1907.123856] CPU: 1 PID: 10350 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1907.123862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.123865] Call Trace: [ 1907.123881] dump_stack+0x107/0x167 [ 1907.123892] should_fail.cold+0x5/0xa [ 1907.123906] __alloc_pages_nodemask+0x182/0x600 [ 1907.123918] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1907.123933] ? lock_downgrade+0x6d0/0x6d0 [ 1907.123942] ? lock_acquire+0x197/0x470 [ 1907.123962] alloc_pages_vma+0xbb/0x410 [ 1907.123975] shmem_alloc_page+0x10f/0x1e0 [ 1907.123985] ? shmem_init_inode+0x20/0x20 [ 1907.124009] ? percpu_counter_add_batch+0x8b/0x140 [ 1907.124021] ? __vm_enough_memory+0x184/0x360 [ 1907.124034] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1907.124054] ? shmem_unuse_inode+0xf60/0xf60 [ 1907.124066] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1907.124075] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1907.124089] shmem_write_begin+0xf7/0x1d0 [ 1907.124101] generic_perform_write+0x20a/0x4f0 [ 1907.124118] ? __mnt_drop_write_file+0x9/0x70 [ 1907.124127] ? page_cache_prev_miss+0x310/0x310 [ 1907.124136] ? evict_inodes+0x470/0x470 [ 1907.124146] ? generic_write_checks+0x2ad/0x390 [ 1907.124160] __generic_file_write_iter+0x39d/0x5d0 [ 1907.124173] generic_file_write_iter+0xdb/0x230 [ 1907.124186] do_iter_readv_writev+0x476/0x750 [ 1907.124198] ? new_sync_write+0x660/0x660 [ 1907.124208] ? selinux_file_permission+0x92/0x520 [ 1907.124220] ? security_file_permission+0xb1/0xe0 [ 1907.124235] do_iter_write+0x191/0x700 [ 1907.124247] ? trace_hardirqs_on+0x5b/0x180 [ 1907.124261] vfs_iter_write+0x70/0xa0 [ 1907.124272] iter_file_splice_write+0x726/0xc90 [ 1907.124290] ? generic_splice_sendpage+0x140/0x140 [ 1907.124310] ? security_file_permission+0xb1/0xe0 [ 1907.124321] ? generic_splice_sendpage+0x140/0x140 [ 1907.124332] direct_splice_actor+0x10f/0x170 [ 1907.124343] splice_direct_to_actor+0x387/0x980 [ 1907.124356] ? pipe_to_sendpage+0x380/0x380 [ 1907.124367] ? do_splice_to+0x160/0x160 [ 1907.124376] ? security_file_permission+0xb1/0xe0 [ 1907.124390] do_splice_direct+0x1c4/0x290 [ 1907.124400] ? splice_direct_to_actor+0x980/0x980 [ 1907.124413] ? security_file_permission+0xb1/0xe0 [ 1907.124427] vfs_copy_file_range+0x4f8/0x13c0 [ 1907.124440] ? generic_file_rw_checks+0x240/0x240 [ 1907.124462] __do_sys_copy_file_range+0x193/0x420 [ 1907.124473] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1907.124481] ? ksys_write+0x1a9/0x260 [ 1907.124491] ? __ia32_sys_read+0xb0/0xb0 [ 1907.124504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.124514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.124525] do_syscall_64+0x33/0x40 [ 1907.124535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.124542] RIP: 0033:0x7f1d53837b19 [ 1907.124551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.124556] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1907.124567] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1907.124572] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1907.124578] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1907.124583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1907.124588] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 1907.206984] FAULT_INJECTION: forcing a failure. [ 1907.206984] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1907.206997] CPU: 1 PID: 10359 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1907.207003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.207006] Call Trace: [ 1907.207024] dump_stack+0x107/0x167 [ 1907.207036] should_fail.cold+0x5/0xa [ 1907.207051] __alloc_pages_nodemask+0x182/0x600 [ 1907.207063] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1907.207073] ? lock_downgrade+0x6d0/0x6d0 [ 1907.207082] ? lock_acquire+0x197/0x470 [ 1907.207101] alloc_pages_vma+0xbb/0x410 [ 1907.207115] shmem_alloc_page+0x10f/0x1e0 [ 1907.207124] ? shmem_init_inode+0x20/0x20 [ 1907.207147] ? percpu_counter_add_batch+0x8b/0x140 [ 1907.207159] ? __vm_enough_memory+0x184/0x360 [ 1907.207172] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1907.207191] ? shmem_unuse_inode+0xf60/0xf60 [ 1907.207203] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1907.207212] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1907.207226] shmem_write_begin+0xf7/0x1d0 [ 1907.207238] generic_perform_write+0x20a/0x4f0 [ 1907.207254] ? __mnt_drop_write_file+0x9/0x70 [ 1907.207262] ? page_cache_prev_miss+0x310/0x310 [ 1907.207271] ? evict_inodes+0x470/0x470 [ 1907.207282] ? generic_write_checks+0x2ad/0x390 [ 1907.207295] __generic_file_write_iter+0x39d/0x5d0 [ 1907.207308] generic_file_write_iter+0xdb/0x230 [ 1907.207321] do_iter_readv_writev+0x476/0x750 [ 1907.207333] ? new_sync_write+0x660/0x660 [ 1907.207342] ? selinux_file_permission+0x92/0x520 [ 1907.207355] ? security_file_permission+0xb1/0xe0 [ 1907.207369] do_iter_write+0x191/0x700 [ 1907.207381] ? trace_hardirqs_on+0x5b/0x180 [ 1907.207394] vfs_iter_write+0x70/0xa0 [ 1907.207406] iter_file_splice_write+0x726/0xc90 [ 1907.207423] ? generic_splice_sendpage+0x140/0x140 [ 1907.207442] ? security_file_permission+0xb1/0xe0 [ 1907.207453] ? generic_splice_sendpage+0x140/0x140 [ 1907.207463] direct_splice_actor+0x10f/0x170 [ 1907.207474] splice_direct_to_actor+0x387/0x980 [ 1907.207492] ? pipe_to_sendpage+0x380/0x380 [ 1907.207503] ? do_splice_to+0x160/0x160 [ 1907.207512] ? security_file_permission+0xb1/0xe0 [ 1907.207525] do_splice_direct+0x1c4/0x290 [ 1907.207535] ? splice_direct_to_actor+0x980/0x980 [ 1907.207549] ? security_file_permission+0xb1/0xe0 [ 1907.207562] vfs_copy_file_range+0x4f8/0x13c0 [ 1907.207575] ? generic_file_rw_checks+0x240/0x240 [ 1907.207596] __do_sys_copy_file_range+0x193/0x420 [ 1907.207606] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1907.207615] ? ksys_write+0x1a9/0x260 [ 1907.207625] ? __ia32_sys_read+0xb0/0xb0 [ 1907.207637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.207647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.207658] do_syscall_64+0x33/0x40 [ 1907.207667] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.207674] RIP: 0033:0x7f1d53837b19 [ 1907.207683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.207688] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1907.207698] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1907.207704] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1907.207709] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1907.207714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1907.207719] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:50:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:50:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x665, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:50:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) fcntl$dupfd(r0, 0x406, r0) syz_open_dev$tty20(0xc, 0x4, 0x1) 19:50:07 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b35, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:50:07 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 36) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:50:07 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x556, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:50:07 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca94"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:50:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0xede1, 0x0, 0x3, 0x0, 0x13, "cde2c774d5ec8c75"}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x72e, 0x8, 0x88, 0x6, 0x2, "8bd1dda56248741c"}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000000c0)=0x1) [ 1922.077970] FAULT_INJECTION: forcing a failure. [ 1922.077970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1922.081009] CPU: 1 PID: 10385 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1922.081019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1922.081025] Call Trace: [ 1922.081050] dump_stack+0x107/0x167 [ 1922.081071] should_fail.cold+0x5/0xa [ 1922.081096] __alloc_pages_nodemask+0x182/0x600 [ 1922.081120] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1922.081139] ? lock_downgrade+0x6d0/0x6d0 [ 1922.081157] ? lock_acquire+0x197/0x470 [ 1922.081194] alloc_pages_vma+0xbb/0x410 [ 1922.081220] shmem_alloc_page+0x10f/0x1e0 [ 1922.081240] ? shmem_init_inode+0x20/0x20 [ 1922.081284] ? percpu_counter_add_batch+0x8b/0x140 [ 1922.081308] ? __vm_enough_memory+0x184/0x360 [ 1922.081334] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1922.081373] ? shmem_unuse_inode+0xf60/0xf60 [ 1922.081396] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1922.081414] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1922.081442] shmem_write_begin+0xf7/0x1d0 [ 1922.081466] generic_perform_write+0x20a/0x4f0 [ 1922.081504] ? __mnt_drop_write_file+0x9/0x70 [ 1922.081521] ? page_cache_prev_miss+0x310/0x310 [ 1922.081539] ? evict_inodes+0x470/0x470 [ 1922.081561] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1922.081589] __generic_file_write_iter+0x39d/0x5d0 [ 1922.108227] generic_file_write_iter+0xdb/0x230 [ 1922.109277] do_iter_readv_writev+0x476/0x750 [ 1922.110309] ? new_sync_write+0x660/0x660 [ 1922.111268] ? selinux_file_permission+0x92/0x520 [ 1922.112365] ? security_file_permission+0xb1/0xe0 [ 1922.113479] do_iter_write+0x191/0x700 [ 1922.114372] ? trace_hardirqs_on+0x5b/0x180 [ 1922.115378] vfs_iter_write+0x70/0xa0 [ 1922.116254] iter_file_splice_write+0x726/0xc90 [ 1922.117321] ? generic_splice_sendpage+0x140/0x140 [ 1922.118440] ? security_file_permission+0xb1/0xe0 [ 1922.119541] ? generic_splice_sendpage+0x140/0x140 [ 1922.120643] direct_splice_actor+0x10f/0x170 [ 1922.121647] splice_direct_to_actor+0x387/0x980 [ 1922.122695] ? pipe_to_sendpage+0x380/0x380 [ 1922.123677] ? do_splice_to+0x160/0x160 [ 1922.124577] ? security_file_permission+0xb1/0xe0 [ 1922.125666] do_splice_direct+0x1c4/0x290 [ 1922.126596] ? splice_direct_to_actor+0x980/0x980 [ 1922.127692] ? security_file_permission+0xb1/0xe0 [ 1922.128780] vfs_copy_file_range+0x4f8/0x13c0 [ 1922.129791] ? generic_file_rw_checks+0x240/0x240 [ 1922.130917] __do_sys_copy_file_range+0x193/0x420 [ 1922.132004] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1922.133068] ? ksys_write+0x1a9/0x260 [ 1922.133922] ? __ia32_sys_read+0xb0/0xb0 [ 1922.134837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1922.136024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1922.137170] do_syscall_64+0x33/0x40 [ 1922.137996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1922.139146] RIP: 0033:0x7f1d53837b19 [ 1922.139972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1922.144082] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1922.145780] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1922.147369] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1922.148951] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1922.150532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1922.152132] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:50:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 19:50:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x66b, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:50:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/247) 19:50:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCCONS(r0, 0x541d) 19:50:08 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:50:08 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b36, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:50:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x55f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:50:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x671, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:50:08 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca3579047522"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:50:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) sendfile(r2, r0, &(0x7f00000000c0)=0x8, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000180)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x6, 0x20, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) 19:50:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000010000006ad2ffda18000000", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TCXONC(r1, 0x540a, 0x1) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) copy_file_range(r2, &(0x7f00000000c0)=0x837c, r0, &(0x7f0000000100)=0xff, 0x7, 0x0) sendfile(r0, r2, &(0x7f0000000140)=0x4, 0x9) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:50:22 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca3579047522"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:50:22 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b37, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:50:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x564, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:50:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x67a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:50:22 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 37) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:50:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) [ 1936.395427] FAULT_INJECTION: forcing a failure. [ 1936.395427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1936.397075] CPU: 1 PID: 10448 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1936.397937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1936.398927] Call Trace: [ 1936.399260] dump_stack+0x107/0x167 [ 1936.399722] should_fail.cold+0x5/0xa [ 1936.400197] __alloc_pages_nodemask+0x182/0x600 [ 1936.400762] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1936.401510] ? lock_downgrade+0x6d0/0x6d0 [ 1936.402029] ? lock_acquire+0x197/0x470 [ 1936.402532] alloc_pages_vma+0xbb/0x410 [ 1936.403032] shmem_alloc_page+0x10f/0x1e0 [ 1936.403556] ? shmem_init_inode+0x20/0x20 [ 1936.404085] ? percpu_counter_add_batch+0x8b/0x140 [ 1936.404693] ? __vm_enough_memory+0x184/0x360 [ 1936.405262] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1936.405940] ? shmem_unuse_inode+0xf60/0xf60 [ 1936.406502] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1936.406513] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1936.406528] shmem_write_begin+0xf7/0x1d0 [ 1936.406542] generic_perform_write+0x20a/0x4f0 [ 1936.406560] ? __mnt_drop_write_file+0x9/0x70 19:50:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x67f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 1936.406570] ? page_cache_prev_miss+0x310/0x310 [ 1936.406580] ? evict_inodes+0x470/0x470 [ 1936.406591] ? generic_write_checks+0x2ad/0x390 [ 1936.406606] __generic_file_write_iter+0x39d/0x5d0 [ 1936.406620] generic_file_write_iter+0xdb/0x230 19:50:22 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 38) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 1936.406634] do_iter_readv_writev+0x476/0x750 [ 1936.406648] ? new_sync_write+0x660/0x660 [ 1936.406659] ? selinux_file_permission+0x92/0x520 [ 1936.406672] ? security_file_permission+0xb1/0xe0 19:50:22 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b3a, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 1936.406688] do_iter_write+0x191/0x700 19:50:22 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 39) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 1936.406701] ? trace_hardirqs_on+0x5b/0x180 [ 1936.406716] vfs_iter_write+0x70/0xa0 [ 1936.406729] iter_file_splice_write+0x726/0xc90 [ 1936.406748] ? generic_splice_sendpage+0x140/0x140 [ 1936.406769] ? security_file_permission+0xb1/0xe0 [ 1936.406782] ? generic_splice_sendpage+0x140/0x140 [ 1936.406794] direct_splice_actor+0x10f/0x170 [ 1936.406806] splice_direct_to_actor+0x387/0x980 [ 1936.406820] ? pipe_to_sendpage+0x380/0x380 [ 1936.406833] ? do_splice_to+0x160/0x160 [ 1936.406842] ? security_file_permission+0xb1/0xe0 [ 1936.406858] do_splice_direct+0x1c4/0x290 [ 1936.406869] ? splice_direct_to_actor+0x980/0x980 [ 1936.406883] ? security_file_permission+0xb1/0xe0 [ 1936.406898] vfs_copy_file_range+0x4f8/0x13c0 [ 1936.406912] ? generic_file_rw_checks+0x240/0x240 [ 1936.406936] __do_sys_copy_file_range+0x193/0x420 [ 1936.406947] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1936.406957] ? ksys_write+0x1a9/0x260 [ 1936.406968] ? __ia32_sys_read+0xb0/0xb0 [ 1936.406981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1936.406993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1936.407005] do_syscall_64+0x33/0x40 [ 1936.407016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1936.407023] RIP: 0033:0x7f1d53837b19 [ 1936.407033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1936.407039] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1936.407051] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1936.407057] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1936.407063] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1936.407068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1936.407074] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 1936.447143] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1936.447172] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1936.447207] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1936.447233] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1936.447266] print_req_error: 367 callbacks suppressed [ 1936.447276] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 1936.447534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1936.447564] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1936.447596] buffer_io_error: 366 callbacks suppressed [ 1936.447602] Buffer I/O error on dev sr0, logical block 0, async page read [ 1936.447684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1936.447702] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1936.447708] Buffer I/O error on dev sr0, logical block 1, async page read [ 1936.447770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1936.447787] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1936.447794] Buffer I/O error on dev sr0, logical block 2, async page read [ 1936.447853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1936.447871] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1936.447877] Buffer I/O error on dev sr0, logical block 3, async page read [ 1936.447940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1936.447957] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1936.447963] Buffer I/O error on dev sr0, logical block 4, async page read [ 1936.448024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1936.448041] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1936.448048] Buffer I/O error on dev sr0, logical block 5, async page read [ 1936.448106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1936.448141] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1936.448148] Buffer I/O error on dev sr0, logical block 6, async page read [ 1936.448236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1936.448254] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1936.448260] Buffer I/O error on dev sr0, logical block 7, async page read [ 1936.500963] FAULT_INJECTION: forcing a failure. [ 1936.500963] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1936.500978] CPU: 1 PID: 10469 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1936.500983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1936.500987] Call Trace: [ 1936.501004] dump_stack+0x107/0x167 [ 1936.501016] should_fail.cold+0x5/0xa [ 1936.501030] __alloc_pages_nodemask+0x182/0x600 [ 1936.501043] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1936.501054] ? lock_downgrade+0x6d0/0x6d0 [ 1936.501064] ? lock_acquire+0x197/0x470 [ 1936.501083] alloc_pages_vma+0xbb/0x410 [ 1936.501098] shmem_alloc_page+0x10f/0x1e0 [ 1936.501112] ? shmem_init_inode+0x20/0x20 [ 1936.501136] ? percpu_counter_add_batch+0x8b/0x140 [ 1936.501149] ? __vm_enough_memory+0x184/0x360 [ 1936.501163] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1936.501183] ? shmem_unuse_inode+0xf60/0xf60 [ 1936.501195] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1936.501205] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1936.501219] shmem_write_begin+0xf7/0x1d0 [ 1936.501233] generic_perform_write+0x20a/0x4f0 [ 1936.501250] ? __mnt_drop_write_file+0x9/0x70 [ 1936.501259] ? page_cache_prev_miss+0x310/0x310 [ 1936.501268] ? evict_inodes+0x470/0x470 [ 1936.501279] ? generic_write_checks+0x2ad/0x390 [ 1936.501293] __generic_file_write_iter+0x39d/0x5d0 [ 1936.501307] generic_file_write_iter+0xdb/0x230 [ 1936.501321] do_iter_readv_writev+0x476/0x750 [ 1936.501333] ? new_sync_write+0x660/0x660 [ 1936.501344] ? selinux_file_permission+0x92/0x520 [ 1936.501357] ? security_file_permission+0xb1/0xe0 [ 1936.501372] do_iter_write+0x191/0x700 [ 1936.501384] ? trace_hardirqs_on+0x5b/0x180 [ 1936.501399] vfs_iter_write+0x70/0xa0 [ 1936.501411] iter_file_splice_write+0x726/0xc90 [ 1936.501430] ? generic_splice_sendpage+0x140/0x140 [ 1936.501450] ? security_file_permission+0xb1/0xe0 [ 1936.501462] ? generic_splice_sendpage+0x140/0x140 [ 1936.501473] direct_splice_actor+0x10f/0x170 [ 1936.501485] splice_direct_to_actor+0x387/0x980 [ 1936.501498] ? pipe_to_sendpage+0x380/0x380 [ 1936.501511] ? do_splice_to+0x160/0x160 [ 1936.501520] ? security_file_permission+0xb1/0xe0 [ 1936.501538] do_splice_direct+0x1c4/0x290 [ 1936.501548] ? splice_direct_to_actor+0x980/0x980 [ 1936.501562] ? security_file_permission+0xb1/0xe0 [ 1936.501576] vfs_copy_file_range+0x4f8/0x13c0 [ 1936.501590] ? generic_file_rw_checks+0x240/0x240 [ 1936.501612] __do_sys_copy_file_range+0x193/0x420 [ 1936.501624] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1936.501633] ? ksys_write+0x1a9/0x260 [ 1936.501643] ? __ia32_sys_read+0xb0/0xb0 [ 1936.501656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1936.501667] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1936.501678] do_syscall_64+0x33/0x40 [ 1936.501688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1936.501696] RIP: 0033:0x7f1d53837b19 [ 1936.501705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1936.501710] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1936.501722] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1936.501728] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1936.501733] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1936.501739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1936.501744] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 1936.559418] FAULT_INJECTION: forcing a failure. [ 1936.559418] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1936.559456] CPU: 1 PID: 10475 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1936.559461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1936.559464] Call Trace: [ 1936.559480] dump_stack+0x107/0x167 [ 1936.559490] should_fail.cold+0x5/0xa [ 1936.559504] __alloc_pages_nodemask+0x182/0x600 [ 1936.559517] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1936.559527] ? lock_downgrade+0x6d0/0x6d0 [ 1936.559536] ? lock_acquire+0x197/0x470 [ 1936.559554] alloc_pages_vma+0xbb/0x410 [ 1936.559568] shmem_alloc_page+0x10f/0x1e0 [ 1936.559578] ? shmem_init_inode+0x20/0x20 [ 1936.559602] ? percpu_counter_add_batch+0x8b/0x140 [ 1936.559614] ? __vm_enough_memory+0x184/0x360 [ 1936.559627] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1936.559646] ? shmem_unuse_inode+0xf60/0xf60 [ 1936.559657] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1936.559671] shmem_write_begin+0xf7/0x1d0 [ 1936.559684] generic_perform_write+0x20a/0x4f0 [ 1936.559700] ? __mnt_drop_write_file+0x9/0x70 [ 1936.559709] ? page_cache_prev_miss+0x310/0x310 [ 1936.559718] ? evict_inodes+0x470/0x470 [ 1936.559728] ? generic_write_checks+0x2ad/0x390 [ 1936.559741] __generic_file_write_iter+0x39d/0x5d0 [ 1936.559754] generic_file_write_iter+0xdb/0x230 [ 1936.559767] do_iter_readv_writev+0x476/0x750 [ 1936.559779] ? new_sync_write+0x660/0x660 [ 1936.559789] ? selinux_file_permission+0x92/0x520 [ 1936.559800] ? security_file_permission+0xb1/0xe0 [ 1936.559815] do_iter_write+0x191/0x700 [ 1936.559826] ? trace_hardirqs_on+0x5b/0x180 [ 1936.559840] vfs_iter_write+0x70/0xa0 [ 1936.559852] iter_file_splice_write+0x726/0xc90 [ 1936.559869] ? generic_splice_sendpage+0x140/0x140 [ 1936.559888] ? security_file_permission+0xb1/0xe0 [ 1936.559900] ? generic_splice_sendpage+0x140/0x140 [ 1936.559910] direct_splice_actor+0x10f/0x170 [ 1936.559922] splice_direct_to_actor+0x387/0x980 [ 1936.559934] ? pipe_to_sendpage+0x380/0x380 [ 1936.559946] ? do_splice_to+0x160/0x160 [ 1936.559954] ? security_file_permission+0xb1/0xe0 [ 1936.559969] do_splice_direct+0x1c4/0x290 [ 1936.559978] ? splice_direct_to_actor+0x980/0x980 [ 1936.559991] ? security_file_permission+0xb1/0xe0 [ 1936.560005] vfs_copy_file_range+0x4f8/0x13c0 [ 1936.560017] ? generic_file_rw_checks+0x240/0x240 [ 1936.560039] __do_sys_copy_file_range+0x193/0x420 [ 1936.560049] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1936.560058] ? ksys_write+0x1a9/0x260 [ 1936.560068] ? __ia32_sys_read+0xb0/0xb0 [ 1936.560080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1936.560090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1936.560101] do_syscall_64+0x33/0x40 [ 1936.560110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1936.560117] RIP: 0033:0x7f1d53837b19 [ 1936.560127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1936.560132] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1936.560143] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1936.560148] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1936.560153] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1936.560158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1936.560163] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:50:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 40) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:50:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x685, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:50:40 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca3579047522"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:50:40 executing program 0: pwrite64(0xffffffffffffffff, &(0x7f0000000000)="e4f7e609b5d9bb2ea6791258be65ee9873904f17cdab3987ed8c605462d865fa70eb2d9f5419a90a5be6b343225fd73e7e51e814820c6b7fdef91b9a701648e8b80f528f6cc205f2c77128eadf30702ae3871a712482d98a7b326036a140cddda4f8e400abe8f4bfd04579b8dbcf67dad6497e0194eada779b5510d7b6780dbad998bbc96fd7fa5aaeb509158906eb9a986bde32160a", 0x96, 0xe000000000000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:50:40 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b3b, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:50:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getflags(r0, 0x40e) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250a00000010000280040004001802020007000000"], 0x24}}, 0x4000) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) 19:50:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:50:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x56a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 1954.572460] FAULT_INJECTION: forcing a failure. [ 1954.572460] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1954.575723] CPU: 1 PID: 10502 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1954.577416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1954.579432] Call Trace: [ 1954.580099] dump_stack+0x107/0x167 [ 1954.580987] should_fail.cold+0x5/0xa [ 1954.581919] __alloc_pages_nodemask+0x182/0x600 [ 1954.583063] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1954.584529] ? lock_downgrade+0x6d0/0x6d0 [ 1954.585536] ? lock_acquire+0x197/0x470 [ 1954.586522] alloc_pages_vma+0xbb/0x410 [ 1954.587506] shmem_alloc_page+0x10f/0x1e0 [ 1954.588532] ? shmem_init_inode+0x20/0x20 [ 1954.589561] ? percpu_counter_add_batch+0x8b/0x140 [ 1954.590768] ? __vm_enough_memory+0x184/0x360 [ 1954.591855] shmem_getpage_gfp.constprop.0+0x512/0x1920 19:50:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) [ 1954.593168] ? shmem_unuse_inode+0xf60/0xf60 [ 1954.594427] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1954.595728] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1954.596990] shmem_write_begin+0xf7/0x1d0 [ 1954.598075] generic_perform_write+0x20a/0x4f0 [ 1954.599214] ? __mnt_drop_write_file+0x9/0x70 [ 1954.600308] ? page_cache_prev_miss+0x310/0x310 [ 1954.601431] ? evict_inodes+0x470/0x470 [ 1954.602393] ? generic_write_checks+0x2ad/0x390 [ 1954.603518] __generic_file_write_iter+0x39d/0x5d0 [ 1954.604720] generic_file_write_iter+0xdb/0x230 [ 1954.605858] do_iter_readv_writev+0x476/0x750 [ 1954.606936] ? new_sync_write+0x660/0x660 [ 1954.607936] ? selinux_file_permission+0x92/0x520 [ 1954.609109] ? security_file_permission+0xb1/0xe0 [ 1954.610265] do_iter_write+0x191/0x700 [ 1954.611206] ? trace_hardirqs_on+0x5b/0x180 [ 1954.612257] vfs_iter_write+0x70/0xa0 [ 1954.613165] iter_file_splice_write+0x726/0xc90 [ 1954.614284] ? generic_splice_sendpage+0x140/0x140 [ 1954.615466] ? security_file_permission+0xb1/0xe0 [ 1954.616651] ? generic_splice_sendpage+0x140/0x140 [ 1954.617826] direct_splice_actor+0x10f/0x170 [ 1954.618876] splice_direct_to_actor+0x387/0x980 [ 1954.619996] ? pipe_to_sendpage+0x380/0x380 [ 1954.621036] ? do_splice_to+0x160/0x160 [ 1954.621978] ? security_file_permission+0xb1/0xe0 [ 1954.623127] do_splice_direct+0x1c4/0x290 [ 1954.624128] ? splice_direct_to_actor+0x980/0x980 [ 1954.625257] ? security_file_permission+0xb1/0xe0 [ 1954.626396] vfs_copy_file_range+0x4f8/0x13c0 [ 1954.627459] ? generic_file_rw_checks+0x240/0x240 [ 1954.628650] __do_sys_copy_file_range+0x193/0x420 [ 1954.629845] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1954.630986] ? ksys_write+0x1a9/0x260 [ 1954.631914] ? __ia32_sys_read+0xb0/0xb0 [ 1954.632907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1954.634173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1954.635408] do_syscall_64+0x33/0x40 [ 1954.636318] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1954.637552] RIP: 0033:0x7f1d53837b19 [ 1954.638445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1954.642900] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1954.644763] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1954.646469] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1954.648207] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1954.649926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1954.651639] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:50:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000100)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/161) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000140)=""/15) 19:50:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x572, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:50:40 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b3c, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:50:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x68d, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:50:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000280)={{r0}, r1, 0x1c, @inherit={0x80, &(0x7f0000000200)={0x1, 0x7, 0xffffffff7fffffff, 0x10000, {0x5, 0x3, 0x5303325f, 0x6, 0x8}, [0x8, 0x8, 0x800, 0xcc8d, 0x1000, 0xffffffffffff5bf7, 0x80]}}, @subvolid=0x800}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:50:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x588, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:50:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:50:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={0x0, 0x9, 0x1, [0x5c, 0x10000, 0x8, 0x52, 0x18], [0xfd27, 0xfffffffffffffc00, 0x0, 0xdaea, 0x81, 0x2, 0x80000001, 0x2, 0x0, 0x2, 0x10000, 0x3ff, 0x7, 0x8000, 0x9, 0x100000000, 0xa08, 0x100, 0x86, 0x1, 0x9, 0x3, 0x16648de8, 0x1, 0xff83, 0x9, 0x1, 0x350, 0xa33f, 0x3, 0x4, 0x7fd3000d, 0x1, 0x4, 0x1, 0x631, 0x1, 0x3, 0x401, 0x200, 0xfff, 0x1509beb2, 0x8001, 0xad, 0x4, 0x100000001, 0x0, 0x7f, 0x7, 0x7, 0x1d0f608e, 0x5, 0x9, 0x5ae8a8b, 0x7, 0xfffffffffffffff8, 0x6, 0x8, 0x101, 0x5, 0x4, 0x100000000, 0xffffffffffffffe0, 0x8, 0x100000000, 0x8001, 0x0, 0x6de5, 0xc11, 0x7, 0xc6, 0x8001, 0x0, 0x9, 0x1c5b21d3, 0x800, 0x4, 0x9, 0x1400, 0xf0, 0x20, 0xffffffff, 0x0, 0x5, 0x1, 0xc305, 0x7, 0xffff, 0xb76, 0x200, 0x7, 0x0, 0x8, 0x200, 0x3, 0x0, 0x4, 0x3ff, 0x5, 0x20, 0x8, 0x1, 0x76, 0x3, 0xe8, 0x6, 0xc7a, 0x10000, 0xb6, 0x8, 0x1, 0x40, 0x6522, 0x0, 0x9, 0xfff, 0x4, 0x1, 0x80000000, 0x8, 0x8]}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:50:56 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x592, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:50:56 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b3d, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:50:56 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:50:56 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000001500), 0x4b1887bffa19f952, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000012c0)=0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000001300)=0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000007600000008000300", @ANYRES32=0x0, @ANYRES32], 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="a5acad3c5914d8231e9ca4b5f9468ee0fda97082fc6d97483e6431", @ANYRES16=r7, @ANYBLOB="010000000016000000002000000008000300", @ANYRES32=r8, @ANYBLOB="344a47a5c030293e0c1e1854e6396ef259c4eb3ab53401bfef361fad2169b989e3408e4cb375fbbf1c5136ed348e7e5bd740bb37d20040c212f4a2b9c1f23fed4d9e36cdfb77b7a4864c7d239acfdb64a61e920befce"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x5e}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0xc880) poll(&(0x7f0000000000)=[{r3, 0x5100}, {r2, 0x4c0}, {0xffffffffffffffff, 0x2}], 0x3, 0x2) clone3(&(0x7f0000001380)={0x202102000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), {0x19}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f0000000200)=""/56, &(0x7f0000001340)=[0x0, r4, r5], 0x3, {r1}}, 0x58) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$VT_RESIZEX(r3, 0x4b68, 0x0) 19:50:56 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6a8, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:50:56 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 41) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:50:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b56030947eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2da067ac304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae3008ebb49331d7c08915d71dae298b8a6dac6e673b07d2ba89049942be4865dd081b4dee023b6d1a9a90a0cdcd6eb21deec09ac60efc0a1fe145f9a8316670b487cdd590ce7e2ad3d4666ca0810d532f616cbf3017d8aa62ebe9ac63780abbbb69046d53b453a93194c13b0037a57e7a83df24917054fd271614d8cc51dbff3bf24406cca13d4fcaa2ca0b1d9331865b10989664b3640c5d6f999728b1b60200b647e19ae2ffbe6357ce141ebfa320df312d987062b859c9c96dbb24763bbf86edd692c25bf84e5e12c44ab0e56da8624f745412d6dff3df92cd2731ebdcc55534198796e06c9770ff39cd51568447b21cdb300e3d7a5e0e11dd5baddcaa7702e042a8a75200"/476], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x4, 0x1, 0x5, 0x10001, 0x7a, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x10, 0x20, 0xfff, 0x8}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xec, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x62}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4041}, 0x80c8) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r9, &(0x7f0000000240)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3ff}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x101}]}, 0xbc}}, 0x1) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r12, 0x4b68, 0x0) [ 1970.594473] FAULT_INJECTION: forcing a failure. [ 1970.594473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1970.596425] CPU: 1 PID: 10551 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1970.597419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1970.598584] Call Trace: [ 1970.598957] dump_stack+0x107/0x167 [ 1970.599469] should_fail.cold+0x5/0xa [ 1970.600001] __alloc_pages_nodemask+0x182/0x600 [ 1970.600669] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1970.601519] ? lock_downgrade+0x6d0/0x6d0 [ 1970.602120] ? lock_acquire+0x197/0x470 [ 1970.602689] alloc_pages_vma+0xbb/0x410 [ 1970.602707] shmem_alloc_page+0x10f/0x1e0 [ 1970.602719] ? shmem_init_inode+0x20/0x20 [ 1970.602747] ? percpu_counter_add_batch+0x8b/0x140 [ 1970.602761] ? __vm_enough_memory+0x184/0x360 [ 1970.602777] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1970.602801] ? shmem_unuse_inode+0xf60/0xf60 [ 1970.602816] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1970.602826] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1970.602844] shmem_write_begin+0xf7/0x1d0 [ 1970.602859] generic_perform_write+0x20a/0x4f0 19:50:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) fcntl$dupfd(r1, 0x0, r0) [ 1970.602879] ? __mnt_drop_write_file+0x9/0x70 [ 1970.602890] ? page_cache_prev_miss+0x310/0x310 [ 1970.602901] ? evict_inodes+0x470/0x470 [ 1970.602913] ? generic_write_checks+0x2ad/0x390 [ 1970.602930] __generic_file_write_iter+0x39d/0x5d0 [ 1970.602946] generic_file_write_iter+0xdb/0x230 [ 1970.602962] do_iter_readv_writev+0x476/0x750 [ 1970.602976] ? new_sync_write+0x660/0x660 [ 1970.602988] ? selinux_file_permission+0x92/0x520 [ 1970.603003] ? security_file_permission+0xb1/0xe0 [ 1970.603021] do_iter_write+0x191/0x700 [ 1970.603035] ? trace_hardirqs_on+0x5b/0x180 [ 1970.603053] vfs_iter_write+0x70/0xa0 [ 1970.603067] iter_file_splice_write+0x726/0xc90 [ 1970.603088] ? generic_splice_sendpage+0x140/0x140 [ 1970.603112] ? security_file_permission+0xb1/0xe0 [ 1970.603126] ? generic_splice_sendpage+0x140/0x140 [ 1970.603139] direct_splice_actor+0x10f/0x170 [ 1970.603152] splice_direct_to_actor+0x387/0x980 19:50:56 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 42) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 1970.603168] ? pipe_to_sendpage+0x380/0x380 [ 1970.603182] ? do_splice_to+0x160/0x160 [ 1970.603193] ? security_file_permission+0xb1/0xe0 [ 1970.603210] do_splice_direct+0x1c4/0x290 [ 1970.603222] ? splice_direct_to_actor+0x980/0x980 [ 1970.603237] ? security_file_permission+0xb1/0xe0 [ 1970.603254] vfs_copy_file_range+0x4f8/0x13c0 [ 1970.603270] ? generic_file_rw_checks+0x240/0x240 [ 1970.603297] __do_sys_copy_file_range+0x193/0x420 [ 1970.603309] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1970.603320] ? ksys_write+0x1a9/0x260 [ 1970.603332] ? __ia32_sys_read+0xb0/0xb0 [ 1970.603347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1970.603360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1970.603373] do_syscall_64+0x33/0x40 [ 1970.603385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 19:50:56 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6b2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 1970.603393] RIP: 0033:0x7f1d53837b19 [ 1970.603404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:50:56 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x598, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 1970.603410] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1970.603424] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 19:50:56 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b40, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 1970.603430] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1970.603436] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1970.603443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1970.603449] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 1970.763138] FAULT_INJECTION: forcing a failure. [ 1970.763138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1970.763152] CPU: 1 PID: 10578 Comm: syz-executor.5 Not tainted 5.10.230 #1 19:50:56 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 43) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 1970.763157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1970.763161] Call Trace: [ 1970.763178] dump_stack+0x107/0x167 [ 1970.763191] should_fail.cold+0x5/0xa [ 1970.763207] __alloc_pages_nodemask+0x182/0x600 [ 1970.763222] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1970.763233] ? lock_downgrade+0x6d0/0x6d0 [ 1970.763244] ? lock_acquire+0x197/0x470 19:50:56 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x59e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 1970.763266] alloc_pages_vma+0xbb/0x410 [ 1970.763282] shmem_alloc_page+0x10f/0x1e0 [ 1970.763293] ? shmem_init_inode+0x20/0x20 [ 1970.763319] ? percpu_counter_add_batch+0x8b/0x140 19:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000001040)=0xffffffff) ioctl$TCGETS2(r2, 0x541a, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r4, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="7e4d15abf5c1d6e2b67e4d4197799eade7b54e908129d08b0998fc86266fa6e5bd2a983760637a93d44742068693434a0f77019d2e33ac709f099681298c3572b5d95d360d661c8d32ba6236da0ab9af42e2409d75ac0761ff884204ac29a99975437f307333ca6734bfc75396af8df468f6f786b56dd3d183bfc904b1a81f5cc8bcd75cbd7a079368db87c43ae4e3affb874a55d0a723b0e6a99604dd1bece72e6143f752eeb9391e7a944d1fb23c1d6afba17d5f226168326f523334e593b664c5ab1c87d359452b96caca9cede806cde222d62744bd220cd609cbf9ae7b0134eb9f42378a", 0xe6}], 0x1, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}}], 0x48, 0x8810}, 0x10) [ 1970.763333] ? __vm_enough_memory+0x184/0x360 [ 1970.763349] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1970.763374] ? shmem_unuse_inode+0xf60/0xf60 [ 1970.763390] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1970.763400] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1970.763416] shmem_write_begin+0xf7/0x1d0 19:50:56 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6b8, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 1970.763431] generic_perform_write+0x20a/0x4f0 [ 1970.763450] ? __mnt_drop_write_file+0x9/0x70 [ 1970.763460] ? page_cache_prev_miss+0x310/0x310 [ 1970.763475] ? evict_inodes+0x470/0x470 19:50:56 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 44) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 1970.763487] ? generic_write_checks+0x2ad/0x390 [ 1970.763503] __generic_file_write_iter+0x39d/0x5d0 [ 1970.763518] generic_file_write_iter+0xdb/0x230 [ 1970.763533] do_iter_readv_writev+0x476/0x750 [ 1970.763547] ? new_sync_write+0x660/0x660 [ 1970.763558] ? selinux_file_permission+0x92/0x520 [ 1970.763572] ? security_file_permission+0xb1/0xe0 [ 1970.763590] do_iter_write+0x191/0x700 [ 1970.763603] ? trace_hardirqs_on+0x5b/0x180 [ 1970.763619] vfs_iter_write+0x70/0xa0 [ 1970.763633] iter_file_splice_write+0x726/0xc90 [ 1970.763653] ? generic_splice_sendpage+0x140/0x140 [ 1970.763676] ? security_file_permission+0xb1/0xe0 [ 1970.763689] ? generic_splice_sendpage+0x140/0x140 [ 1970.763701] direct_splice_actor+0x10f/0x170 [ 1970.763714] splice_direct_to_actor+0x387/0x980 [ 1970.763728] ? pipe_to_sendpage+0x380/0x380 [ 1970.763742] ? do_splice_to+0x160/0x160 [ 1970.763752] ? security_file_permission+0xb1/0xe0 [ 1970.763768] do_splice_direct+0x1c4/0x290 [ 1970.763780] ? splice_direct_to_actor+0x980/0x980 [ 1970.763794] ? security_file_permission+0xb1/0xe0 [ 1970.763810] vfs_copy_file_range+0x4f8/0x13c0 [ 1970.763825] ? generic_file_rw_checks+0x240/0x240 [ 1970.763850] __do_sys_copy_file_range+0x193/0x420 19:50:56 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5a7, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 1970.763862] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1970.763872] ? ksys_write+0x1a9/0x260 [ 1970.763884] ? __ia32_sys_read+0xb0/0xb0 [ 1970.763898] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1970.763909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1970.763922] do_syscall_64+0x33/0x40 [ 1970.763933] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1970.763941] RIP: 0033:0x7f1d53837b19 [ 1970.763951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1970.763957] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1970.763970] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1970.763975] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1970.763981] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1970.763987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1970.763993] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 1970.922233] FAULT_INJECTION: forcing a failure. [ 1970.922233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1970.922246] CPU: 1 PID: 10592 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1970.922251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1970.922255] Call Trace: [ 1970.922271] dump_stack+0x107/0x167 [ 1970.922283] should_fail.cold+0x5/0xa [ 1970.922298] __alloc_pages_nodemask+0x182/0x600 [ 1970.922311] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1970.922322] ? lock_downgrade+0x6d0/0x6d0 [ 1970.922331] ? lock_acquire+0x197/0x470 [ 1970.922351] alloc_pages_vma+0xbb/0x410 [ 1970.922365] shmem_alloc_page+0x10f/0x1e0 [ 1970.922376] ? shmem_init_inode+0x20/0x20 [ 1970.922400] ? percpu_counter_add_batch+0x8b/0x140 [ 1970.922413] ? __vm_enough_memory+0x184/0x360 [ 1970.922427] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1970.922445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1970.922457] ? shmem_unuse_inode+0xf60/0xf60 [ 1970.922475] ? avc_has_perm+0xc5/0x1b0 [ 1970.922489] shmem_file_read_iter+0x2a6/0xbb0 [ 1970.922500] ? kfree+0xd7/0x340 [ 1970.922519] ? shmem_get_link+0x440/0x440 [ 1970.922528] ? inode_has_perm+0x171/0x1d0 [ 1970.922540] ? iov_iter_pipe+0xf1/0x2a0 [ 1970.922554] generic_file_splice_read+0x455/0x6d0 [ 1970.922565] ? pipe_to_user+0x170/0x170 [ 1970.922581] ? fsnotify_perm.part.0+0x22d/0x620 [ 1970.922593] ? security_file_permission+0xb1/0xe0 [ 1970.922604] ? pipe_to_user+0x170/0x170 [ 1970.922614] do_splice_to+0x10e/0x160 [ 1970.922626] splice_direct_to_actor+0x2fe/0x980 [ 1970.922640] ? pipe_to_sendpage+0x380/0x380 [ 1970.922652] ? do_splice_to+0x160/0x160 [ 1970.922661] ? security_file_permission+0xb1/0xe0 [ 1970.922676] do_splice_direct+0x1c4/0x290 [ 1970.922686] ? splice_direct_to_actor+0x980/0x980 [ 1970.922699] ? security_file_permission+0xb1/0xe0 [ 1970.922715] vfs_copy_file_range+0x4f8/0x13c0 [ 1970.922728] ? generic_file_rw_checks+0x240/0x240 [ 1970.922751] __do_sys_copy_file_range+0x193/0x420 [ 1970.922762] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1970.922772] ? ksys_write+0x1a9/0x260 [ 1970.922782] ? __ia32_sys_read+0xb0/0xb0 [ 1970.922795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1970.922806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1970.922817] do_syscall_64+0x33/0x40 [ 1970.922828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1970.922835] RIP: 0033:0x7f1d53837b19 [ 1970.922844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1970.922850] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1970.922861] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1970.922867] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1970.922873] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1970.922878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1970.922884] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 1971.010278] FAULT_INJECTION: forcing a failure. [ 1971.010278] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1971.010290] CPU: 1 PID: 10603 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1971.010295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1971.010299] Call Trace: [ 1971.010315] dump_stack+0x107/0x167 [ 1971.010331] should_fail.cold+0x5/0xa [ 1971.010345] __alloc_pages_nodemask+0x182/0x600 [ 1971.010358] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1971.010368] ? lock_downgrade+0x6d0/0x6d0 [ 1971.010377] ? lock_acquire+0x197/0x470 [ 1971.010396] alloc_pages_vma+0xbb/0x410 [ 1971.010411] shmem_alloc_page+0x10f/0x1e0 [ 1971.010421] ? shmem_init_inode+0x20/0x20 [ 1971.010445] ? percpu_counter_add_batch+0x8b/0x140 [ 1971.010457] ? __vm_enough_memory+0x184/0x360 [ 1971.010470] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1971.010490] ? shmem_unuse_inode+0xf60/0xf60 [ 1971.010502] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 1971.010511] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1971.010525] shmem_write_begin+0xf7/0x1d0 [ 1971.010538] generic_perform_write+0x20a/0x4f0 [ 1971.010554] ? __mnt_drop_write_file+0x9/0x70 [ 1971.010563] ? page_cache_prev_miss+0x310/0x310 [ 1971.010573] ? evict_inodes+0x470/0x470 [ 1971.010583] ? generic_write_checks+0x2ad/0x390 [ 1971.010597] __generic_file_write_iter+0x39d/0x5d0 [ 1971.010610] generic_file_write_iter+0xdb/0x230 [ 1971.010623] do_iter_readv_writev+0x476/0x750 [ 1971.010635] ? new_sync_write+0x660/0x660 [ 1971.010645] ? selinux_file_permission+0x92/0x520 [ 1971.010657] ? security_file_permission+0xb1/0xe0 [ 1971.010672] do_iter_write+0x191/0x700 [ 1971.010684] ? trace_hardirqs_on+0x5b/0x180 [ 1971.010698] vfs_iter_write+0x70/0xa0 [ 1971.010710] iter_file_splice_write+0x726/0xc90 [ 1971.010728] ? generic_splice_sendpage+0x140/0x140 [ 1971.010747] ? security_file_permission+0xb1/0xe0 [ 1971.010759] ? generic_splice_sendpage+0x140/0x140 [ 1971.010771] direct_splice_actor+0x10f/0x170 [ 1971.010784] splice_direct_to_actor+0x387/0x980 [ 1971.010799] ? pipe_to_sendpage+0x380/0x380 [ 1971.010811] ? do_splice_to+0x160/0x160 [ 1971.010820] ? security_file_permission+0xb1/0xe0 [ 1971.010834] do_splice_direct+0x1c4/0x290 [ 1971.010844] ? splice_direct_to_actor+0x980/0x980 [ 1971.010857] ? security_file_permission+0xb1/0xe0 [ 1971.010871] vfs_copy_file_range+0x4f8/0x13c0 [ 1971.010884] ? generic_file_rw_checks+0x240/0x240 [ 1971.010906] __do_sys_copy_file_range+0x193/0x420 [ 1971.010917] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1971.010925] ? ksys_write+0x1a9/0x260 [ 1971.010935] ? __ia32_sys_read+0xb0/0xb0 [ 1971.010947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1971.010958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1971.010969] do_syscall_64+0x33/0x40 [ 1971.010979] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1971.010986] RIP: 0033:0x7f1d53837b19 [ 1971.010995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1971.011000] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1971.011012] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1971.011017] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1971.011022] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1971.011027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1971.011033] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:51:12 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="febdb8f2", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250a00000010000280040004000800020007000000"], 0x24}}, 0x4000) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:51:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:51:12 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:51:12 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 45) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:51:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6be, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:51:12 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5ac, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:51:12 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b41, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:51:12 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10c, 0x1, 0x2, 0x2, 0x200, 0x88}, 0x20) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xafc, 0x1806, 0x0, 0x0, 0x81, "3b46ae82dbe25ac6ee75af1e449168df49d067", 0xfd, 0xfffffff7}) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:51:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 1986.572885] FAULT_INJECTION: forcing a failure. [ 1986.572885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1986.575794] CPU: 0 PID: 10628 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1986.575804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1986.575810] Call Trace: [ 1986.575835] dump_stack+0x107/0x167 [ 1986.575856] should_fail.cold+0x5/0xa [ 1986.575880] __alloc_pages_nodemask+0x182/0x600 [ 1986.575904] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1986.575923] ? lock_downgrade+0x6d0/0x6d0 [ 1986.575940] ? lock_acquire+0x197/0x470 [ 1986.575976] alloc_pages_vma+0xbb/0x410 [ 1986.576002] shmem_alloc_page+0x10f/0x1e0 [ 1986.576021] ? shmem_init_inode+0x20/0x20 [ 1986.576064] ? percpu_counter_add_batch+0x8b/0x140 [ 1986.576087] ? __vm_enough_memory+0x184/0x360 [ 1986.576112] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1986.576143] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1986.576168] ? shmem_unuse_inode+0xf60/0xf60 [ 1986.576201] shmem_file_read_iter+0x2a6/0xbb0 [ 1986.576225] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1986.576254] ? shmem_get_link+0x440/0x440 [ 1986.576276] ? iov_iter_pipe+0xf1/0x2a0 [ 1986.576300] generic_file_splice_read+0x455/0x6d0 [ 1986.576320] ? pipe_to_user+0x170/0x170 [ 1986.576335] ? inode_security+0x6a/0x140 [ 1986.576363] ? fsnotify_perm.part.0+0x22d/0x620 [ 1986.576385] ? security_file_permission+0xb1/0xe0 [ 1986.576406] ? pipe_to_user+0x170/0x170 [ 1986.576425] do_splice_to+0x10e/0x160 [ 1986.576447] splice_direct_to_actor+0x2fe/0x980 [ 1986.576478] ? pipe_to_sendpage+0x380/0x380 [ 1986.576502] ? do_splice_to+0x160/0x160 [ 1986.576518] ? security_file_permission+0xb1/0xe0 [ 1986.576545] do_splice_direct+0x1c4/0x290 [ 1986.576565] ? splice_direct_to_actor+0x980/0x980 [ 1986.576589] ? security_file_permission+0xb1/0xe0 [ 1986.576616] vfs_copy_file_range+0x4f8/0x13c0 [ 1986.576641] ? generic_file_rw_checks+0x240/0x240 [ 1986.576684] __do_sys_copy_file_range+0x193/0x420 [ 1986.576705] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1986.576722] ? ksys_write+0x1a9/0x260 [ 1986.576741] ? __ia32_sys_read+0xb0/0xb0 19:51:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x81, 0xb8e, 0x8, 0x101, 0x4, 0x4}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 1986.576765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1986.576783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1986.576807] do_syscall_64+0x33/0x40 [ 1986.620646] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1986.621840] RIP: 0033:0x7f1d53837b19 [ 1986.622677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1986.626795] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1986.628486] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1986.630078] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1986.631657] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1986.633242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1986.634808] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:51:12 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b44, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:51:12 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) sendmsg$nl_generic(r1, &(0x7f0000001d40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000440)={0x1894, 0x1a, 0x300, 0x70bd2d, 0x25dfdbfd, {0x20}, [@nested={0x8, 0x4e, 0x0, 0x1, [@typed={0x4, 0x5b}]}, @generic="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", @nested={0xc2, 0x23, 0x0, 0x1, [@generic="1bbe96be9fef5f8fdba209ddc8a0c6b358961f7c21133ada8838c3f50cde668c40fee6b1eb177076a4ea94043c67ac394d021bb14ebc9015ef7f738ec8520f1a02eb6d68ad0c83f03444e93a68921c51a1bc5c806fdc35c6cacf423241f4ce3086ec777faed4bbd9a99c64693c550a0452f87576640ae368e04410e5090b66b3bbfdefa5cea4d5af0422fecb5ddb7d8fcce03ae2ce494221305ce742274db398174e02e76a2fe2a0ecdb10c3ed28434237e2bf498006369e087488629a6c"]}, @nested={0x26d, 0xd, 0x0, 0x1, [@generic="aca9d2973fa5f96bb1548a642bfdd3761be12a1fda00b22e85ee6ed6e3af7f2f761df3eb2012679af15f135a95e09732e3a1139927b2a29f66d51fe7fbff47fc32c8a01a05f0151608df0a328e054b4a95e31a2e1cfb463d6da7b1ea2cf70fb1de06f0e13e8b5fb445c34503df5bbd1be40d79f1a4dd83a444f8970b2dd8e6a534bf1912e46ce8f9f814c891ac44d62c2f8a29286df3d98756d572db40e008f8dc38853d7b139e2ea4737468af9a61b6f5615670", @generic="d779ab4c88d126ff987fa1fe656175de616ac1ec4fee1351e74105f66cb8d966c839c117fb94d04e0748993a3aac06b793097809d15f8e951077ea718d25a856b6fe9790740b7da954d5108679a7965a722b7e33fa3b0374c5c712a24a392faedb577208fe68b6f4823662e535179e59c7e56c67c1c2f783356419e190bf6c09e86c841d88e6da5675f61813d41e822a5cb4cbaef24e06e7bf52ce8e7615bf5b827b4f5a175e0db42c04ade37e35cdc6cd5e5af87d0f51014f89e9963cb225213734b4679e27ee4b4c099c9459fcb370b46742145cfb9edf", @typed={0xb, 0x7b, 0x0, 0x0, @str='TIPCv2\x00'}, @typed={0x6, 0x43, 0x0, 0x0, @str='&\x00'}, @typed={0x8, 0xb, 0x0, 0x0, @fd=r2}, @generic="c7ea8ebc0151cede8b6eeeb22193d84dba7a5d569729145ad5a56e87e2cbd6038ffb16c9c02623866568c551b36ec4f7d16582efc4859b1ebbc0e20071b81b63b2603bc44277973b2816012e371c3aced2a144a26e2b73127d249a94385a4ff91bcfeafbfc831a86c3f6c70d549cd2ba705da85c18737eb589eea32326fc6f3df1e1fca639ad81575f991ed9f4633dba94682466ce1b0e2b0dd605b385153183d00d2fccbd7ee8fc4bbccc31db2d8e80776c7dd5b6", @typed={0x8, 0x63, 0x0, 0x0, @u32=0x7}, @typed={0x4, 0x5}]}, @nested={0x189, 0x66, 0x0, 0x1, [@generic="5a7c06cadda14c7bdcf122b4b51bc62503519b160b4d8c18c874105f83ab97933e81f678e1", @typed={0x8, 0x6c, 0x0, 0x0, @uid=0xee00}, @generic="047d45a386c48a029cb0ab184ac7c3d4cee0c8805444d4c5522ad9dc2d014dcf7aed33bcf2a7b05e7298660c6ad198b7b4e3545fa126b755f9a6ea02511d4a6e2110d797b15a48913c4b3e3c962809a85641b40a24a7033aae903c00986ce232e2325acf3582c0ca34b4", @typed={0x8, 0x59, 0x0, 0x0, @ipv4=@multicast1}, @generic="1815f7d80281a60b6f9ffdcaea827fdf041c3c0ab3ba32f364e45cd8afe1b8238df3d3b0c4e5904d0e942358012d97b5d0f6d7d534174701f1533e36fb07a2387978154402ede1e72be34281690d83c20be8405eac056465655a2842d4293899ca8a2df3723e9eb203d72872d34ac0b52a40b7c05d691f3ff090f2f2aae0233387118df37efe9c0339721c99c2b12e45dbb4148709d27383244551fafc37405b125dcb99e9a5238c4690a6994f993fc2f58045ec6d978fcd60657b4d8505a2274873164d7f9f721160f3f495", @typed={0xc, 0x6c, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x73, 0x0, 0x0, @pid}, @generic="30da0348b44a"]}, @nested={0x10a, 0x71, 0x0, 0x1, [@typed={0x7, 0x62, 0x0, 0x0, @str='@-\x00'}, @generic="130f470e1c13175e6b362583a42df0e7fee29ba6a9c6772ac68d20218dec668113d9e2f0d0bbdbcd6515c71613ee3a9fd5959595257c2cdcb5d0d86a1247b547f16d8e40133648211ac42eba343023e442258e90f56975f719ad6adebb736852f1e9856a93cfb2a900d8ef4a8754fafc2f45c933664d43e3542805d7b36a865f59aecd2aa4b8788534153e8bb998dea14b1cd89e84bb370480804e", @typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="f32ea530b8165c61003705a313b2ce2dbc6c829e15fb894ffa156d3ef4f2badc0b5312fa048de136ceed00d3adc29f101db479f3838f00d6aac83705a7f1441a8f78ec0201f48988feeaac84efed6142dfb21b0dd5294ea370d681"]}, @typed={0x4, 0x31}, @nested={0x2a6, 0x8a, 0x0, 0x1, [@typed={0xed, 0x17, 0x0, 0x0, @binary="7f732a27c97e893d0aa8ca1873623e9124b5b8517f7581e6b311dbf00e1f1752852bce7f61ae98147fbcf10647b3825d48a7dd93fa2cc9088cabf3161d1f63c58a7e34f0374b79a838322a4d6c6ce0c559285616e6bede4dc9e1c3bb50edafa1b8e3e11aa2f11ff206e31f4510374e4665f7f2beedb76e20b80aff0764535098422aee0e8f581fb3fed405d351d8b7c9a350e0ffd409dd86cf67f06d9ac779c9101158cc88f1623943b4d943946d0d62597b1f73118c193d683860b7f43ce904d4ec44425704650c6c919f951b144a740ad7079d5cbde5e2e2f7234647b831ba1fe6cb0b44af6b5012"}, @generic="143c2e3f15d05858149f7ec3c3c9655948633460f174c6857e8c06d23d242761b93486cb4f759128762315d9d49c806673e0ea5f5d17c8f01df9c359ea0c213775bebb5151248e9e8013625798b00d2bad23d5c8ff20e7934b1b668ee3e7d8fa302b9f464b04258618", @generic="c072e999bd7b2900c1282e74253f376f04ce8736d1bb7d129c4ed31403352c72af3b7aad465f1261d17a6120c112a290699a3406fa981b193995e4521be2449e393a9f1c9b1ecc56b7b23e903de07d351b12533ffefd264fe38521cf0385608d77c750a511e3d9ca25df5a1cb16a25ddfedd4cc75396795c5d717a10476860c044c5d32aa7d60b0f0d417070b3109e63a5e55cb4bb0919fc394a38a1252d1dbaa62d1ada4a4a0a1c3fe87d1bf725bd323db64cf55a1f0efc97f71bb7c9991b7fbf3f261beb413271", @generic="7e8ab803c7f5e271aab51651c1e1988d6bb349491fe034bf5e597d81332bdeed6392a3c0d52f3ef2408509cc9544f0e456ba9862f49353d0c279a356c710c98d6290c148e63b22b07abd72347a7f37aa1428371b277d24e5d9bbfc89fc734ae7e894bf2733", @typed={0xb, 0x73, 0x0, 0x0, @str='TIPCv2\x00'}, @typed={0x8, 0x4a, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x46, 0x0, 0x0, @fd}]}]}, 0x1894}, 0x1, 0x0, 0x0, 0x30040040}, 0x40) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34020000", @ANYRES16=r0, @ANYBLOB="000428bd7000fbdbdf2510000000240003800800030005920000080001000200000008000200223000000800020003000000000104802400078008000400ffffff7f0800040002000000080004001e0000000800030004000000340007800800030005000000080003001f00000008000100120000000800030040000000080003000700000008000200080000002400078008000200000400000800010011000000080001001500000008000300000000002c00078008000400ffffffff080004000400000008000400050000000800010008000000080001001400000034000780080001002000000008000100080000000800020004000000080001000a0000000800040002000000080003000000000014000780080002001f00000008000200008000000900010073797a31000000002400098008000100e6010000080002001f00000008000100090000000800020001000100480007800c00040008000000000000000c00030009000000000000000c0004000000000000000020080001000a0000000c00030000040000000000000c0003006c000000000000004c0002802400038008000100060000000800010000800000080001009cb70000080001000500000024000380080001007f000000080001000200000008000200c6ffffff08000100f7000000440001802c0004001400010002004e20e0000001000000000000000014000000000008000300020000000c000280080001000900"/558], 0x234}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c020) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000340)) ioctl$VT_RESIZEX(r3, 0x4b68, 0x0) 19:51:12 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x100, 0x0, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)=0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x30, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x10, 0xffffffffffffffff, 0x8000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007a00)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000024c0)=[{&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/10, 0xa}], 0x6, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000002680), 0x6e, &(0x7f0000003900)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/211, 0xd3}, {&(0x7f0000003800)=""/198, 0xc6}], 0x3, &(0x7f0000003940)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000003a00)=@abs, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003a80)=""/100, 0x64}, {&(0x7f0000003b00)}], 0x2, &(0x7f0000003b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000003c00)=@abs, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/107, 0x6b}, {&(0x7f0000004d00)=""/71, 0x47}, {&(0x7f0000004d80)=""/155, 0x9b}, {&(0x7f0000004e40)=""/116, 0x74}, {&(0x7f0000004ec0)=""/61, 0x3d}], 0x6, &(0x7f0000004f80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004fc0), 0x6e, &(0x7f00000053c0)=[{&(0x7f0000005040)=""/168, 0xa8}, {&(0x7f0000005100)=""/187, 0xbb}, {&(0x7f00000051c0)=""/148, 0x94}, {&(0x7f0000005280)=""/48, 0x30}, {&(0x7f00000052c0)=""/227, 0xe3}], 0x5, &(0x7f0000005440)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000054c0)=@abs, 0x6e, &(0x7f0000007880)=[{&(0x7f0000005540)=""/2, 0x2}, {&(0x7f0000005580)=""/70, 0x46}, {&(0x7f0000005600)=""/28, 0x1c}, {&(0x7f0000005640)}, {&(0x7f0000005680)=""/109, 0x6d}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/111, 0x6f}, {&(0x7f0000007780)=""/216, 0xd8}], 0x9, &(0x7f0000007940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x6, 0x40000040, &(0x7f0000007b80)={0x0, 0x989680}) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) 19:51:12 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5b2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:51:12 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:51:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x1210c2, 0xe2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) sendfile(r3, r0, &(0x7f0000000180)=0x401, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66649a0066646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=//:,{,subj_role=/@/&-,obj_user=,\x00']) 19:51:12 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 46) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:51:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6c7, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 1986.815235] FAULT_INJECTION: forcing a failure. [ 1986.815235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1986.816751] CPU: 1 PID: 10673 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1986.817554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1986.818470] Call Trace: [ 1986.818761] dump_stack+0x107/0x167 [ 1986.819178] should_fail.cold+0x5/0xa [ 1986.819616] __alloc_pages_nodemask+0x182/0x600 [ 1986.820134] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1986.820819] ? lock_downgrade+0x6d0/0x6d0 [ 1986.821282] ? lock_acquire+0x197/0x470 [ 1986.821778] alloc_pages_vma+0xbb/0x410 [ 1986.822263] shmem_alloc_page+0x10f/0x1e0 [ 1986.822274] ? shmem_init_inode+0x20/0x20 [ 1986.822296] ? percpu_counter_add_batch+0x8b/0x140 [ 1986.822309] ? __vm_enough_memory+0x184/0x360 [ 1986.822322] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1986.822341] ? shmem_unuse_inode+0xf60/0xf60 [ 1986.822358] shmem_file_read_iter+0x2a6/0xbb0 [ 1986.822376] ? shmem_get_link+0x440/0x440 [ 1986.822386] ? inode_has_perm+0x171/0x1d0 [ 1986.822397] ? iov_iter_pipe+0xf1/0x2a0 [ 1986.822410] generic_file_splice_read+0x455/0x6d0 [ 1986.822420] ? pipe_to_user+0x170/0x170 [ 1986.822447] ? fsnotify_perm.part.0+0x22d/0x620 [ 1986.829691] ? security_file_permission+0xb1/0xe0 [ 1986.830272] ? pipe_to_user+0x170/0x170 [ 1986.830755] do_splice_to+0x10e/0x160 [ 1986.831205] splice_direct_to_actor+0x2fe/0x980 [ 1986.831772] ? pipe_to_sendpage+0x380/0x380 [ 1986.832290] ? do_splice_to+0x160/0x160 [ 1986.832755] ? security_file_permission+0xb1/0xe0 [ 1986.833339] do_splice_direct+0x1c4/0x290 [ 1986.833843] ? splice_direct_to_actor+0x980/0x980 [ 1986.834432] ? security_file_permission+0xb1/0xe0 [ 1986.835009] vfs_copy_file_range+0x4f8/0x13c0 [ 1986.835558] ? generic_file_rw_checks+0x240/0x240 [ 1986.836149] __do_sys_copy_file_range+0x193/0x420 [ 1986.836720] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1986.837280] ? ksys_write+0x1a9/0x260 [ 1986.837722] ? __ia32_sys_read+0xb0/0xb0 [ 1986.838184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1986.838817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1986.839442] do_syscall_64+0x33/0x40 [ 1986.839905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1986.840505] RIP: 0033:0x7f1d53837b19 [ 1986.840937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1986.843130] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1986.843951] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 1986.844772] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1986.845592] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1986.846402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1986.847217] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:51:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0xc00, 0x6, 0x20}) 19:51:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x7}, {0x101, 0x1}]}) 19:51:26 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b45, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:51:26 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa5435"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:51:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5ba, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:51:26 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 47) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:51:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6cc, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2001.115258] FAULT_INJECTION: forcing a failure. [ 2001.115258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2001.116881] CPU: 1 PID: 10706 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2001.117734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2001.118756] Call Trace: [ 2001.119081] dump_stack+0x107/0x167 [ 2001.119522] should_fail.cold+0x5/0xa [ 2001.119987] __alloc_pages_nodemask+0x182/0x600 [ 2001.120557] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2001.121315] ? lock_downgrade+0x6d0/0x6d0 [ 2001.121822] ? lock_acquire+0x197/0x470 [ 2001.122320] alloc_pages_vma+0xbb/0x410 [ 2001.122807] shmem_alloc_page+0x10f/0x1e0 [ 2001.123313] ? shmem_init_inode+0x20/0x20 [ 2001.123834] ? percpu_counter_add_batch+0x8b/0x140 [ 2001.124428] ? __vm_enough_memory+0x184/0x360 [ 2001.124981] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2001.125642] ? shmem_unuse_inode+0xf60/0xf60 [ 2001.126200] shmem_file_read_iter+0x2a6/0xbb0 [ 2001.126749] ? shmem_get_link+0x440/0x440 [ 2001.127272] ? inode_has_perm+0x171/0x1d0 [ 2001.127790] ? iov_iter_pipe+0xf1/0x2a0 [ 2001.128293] generic_file_splice_read+0x455/0x6d0 [ 2001.128899] ? pipe_to_user+0x170/0x170 [ 2001.129403] ? fsnotify_perm.part.0+0x22d/0x620 [ 2001.129993] ? security_file_permission+0xb1/0xe0 [ 2001.130597] ? pipe_to_user+0x170/0x170 [ 2001.131102] do_splice_to+0x10e/0x160 [ 2001.131585] splice_direct_to_actor+0x2fe/0x980 [ 2001.132177] ? pipe_to_sendpage+0x380/0x380 [ 2001.132723] ? do_splice_to+0x160/0x160 [ 2001.133198] ? security_file_permission+0xb1/0xe0 [ 2001.133815] do_splice_direct+0x1c4/0x290 [ 2001.134336] ? splice_direct_to_actor+0x980/0x980 19:51:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) [ 2001.134952] ? security_file_permission+0xb1/0xe0 19:51:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x5) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) dup3(r1, r2, 0x0) [ 2001.134968] vfs_copy_file_range+0x4f8/0x13c0 [ 2001.134982] ? generic_file_rw_checks+0x240/0x240 [ 2001.135006] __do_sys_copy_file_range+0x193/0x420 [ 2001.135018] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2001.135028] ? ksys_write+0x1a9/0x260 [ 2001.135039] ? __ia32_sys_read+0xb0/0xb0 19:51:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2001.135053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 19:51:27 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 48) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2001.135065] ? syscall_enter_from_user_mode+0x1d/0x50 19:51:27 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5cb, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2001.135077] do_syscall_64+0x33/0x40 [ 2001.135088] entry_SYSCALL_64_after_hwframe+0x67/0xd1 19:51:27 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6d2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2001.135095] RIP: 0033:0x7f1d53837b19 [ 2001.135106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2001.135112] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2001.135124] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2001.135130] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2001.135136] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2001.135142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 19:51:27 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b46, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 2001.135148] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:51:27 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5d5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:51:27 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6da, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2001.289306] FAULT_INJECTION: forcing a failure. [ 2001.289306] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2001.289327] CPU: 0 PID: 10728 Comm: syz-executor.5 Not tainted 5.10.230 #1 19:51:27 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5db, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2001.289337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2001.289351] Call Trace: [ 2001.289376] dump_stack+0x107/0x167 [ 2001.289397] should_fail.cold+0x5/0xa [ 2001.289422] __alloc_pages_nodemask+0x182/0x600 [ 2001.289446] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2001.289476] ? lock_downgrade+0x6d0/0x6d0 [ 2001.289494] ? lock_acquire+0x197/0x470 [ 2001.289531] alloc_pages_vma+0xbb/0x410 [ 2001.289556] shmem_alloc_page+0x10f/0x1e0 [ 2001.289576] ? shmem_init_inode+0x20/0x20 [ 2001.289619] ? percpu_counter_add_batch+0x8b/0x140 [ 2001.289642] ? __vm_enough_memory+0x184/0x360 [ 2001.289668] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2001.289706] ? shmem_unuse_inode+0xf60/0xf60 [ 2001.289739] shmem_file_read_iter+0x2a6/0xbb0 [ 2001.289775] ? shmem_get_link+0x440/0x440 [ 2001.289792] ? inode_has_perm+0x171/0x1d0 [ 2001.289814] ? iov_iter_pipe+0xf1/0x2a0 [ 2001.289839] generic_file_splice_read+0x455/0x6d0 [ 2001.289859] ? pipe_to_user+0x170/0x170 [ 2001.289888] ? fsnotify_perm.part.0+0x22d/0x620 [ 2001.289910] ? security_file_permission+0xb1/0xe0 [ 2001.289931] ? pipe_to_user+0x170/0x170 [ 2001.289951] do_splice_to+0x10e/0x160 [ 2001.289973] splice_direct_to_actor+0x2fe/0x980 [ 2001.289998] ? pipe_to_sendpage+0x380/0x380 [ 2001.290022] ? do_splice_to+0x160/0x160 [ 2001.290039] ? security_file_permission+0xb1/0xe0 [ 2001.290066] do_splice_direct+0x1c4/0x290 [ 2001.290086] ? splice_direct_to_actor+0x980/0x980 [ 2001.290111] ? security_file_permission+0xb1/0xe0 [ 2001.290138] vfs_copy_file_range+0x4f8/0x13c0 [ 2001.290163] ? generic_file_rw_checks+0x240/0x240 [ 2001.290206] __do_sys_copy_file_range+0x193/0x420 [ 2001.290227] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2001.290245] ? ksys_write+0x1a9/0x260 [ 2001.290264] ? __ia32_sys_read+0xb0/0xb0 [ 2001.290288] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2001.290309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2001.290330] do_syscall_64+0x33/0x40 [ 2001.290349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2001.290362] RIP: 0033:0x7f1d53837b19 [ 2001.290380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2001.290391] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2001.290412] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2001.290422] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2001.290433] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2001.290444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2001.290455] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:51:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6f5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:51:40 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa5435"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:51:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x3ff, 0xffff, 0x200}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="170000001ee599c6dae02edf12c0ab3b0441f8060ecfe7ceac0d84b32c8d2d69e271b96fdd3184223cb52faa1c9c4aff26597fe43333bd667b202cb9334a8c31830f36e0b8c00982b697d60278bdb8be25a926ddac9b75c798168fd7f3bf976e7059f16ab04042b1d200"/122, @ANYRES16=0x0, @ANYBLOB="000427bd7000fedb02800400"/22], 0x24}}, 0x4000) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x6, 0x9, 0xf5, &(0x7f0000000040)}) 19:51:40 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b47, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:51:40 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x420d80, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) 19:51:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250a00000010000280040004000800020005000000"], 0x24}}, 0x4000) ioctl$TIOCEXCL(r2, 0x540c) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000180)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth0_to_team\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) ioctl$sock_proto_private(r3, 0x89ec, &(0x7f0000000080)="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") 19:51:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5e1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:51:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 49) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:51:40 executing program 0: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) 19:51:40 executing program 4: fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2014.996352] FAULT_INJECTION: forcing a failure. [ 2014.996352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2014.999302] CPU: 1 PID: 10775 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2015.000866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2015.002736] Call Trace: [ 2015.003333] dump_stack+0x107/0x167 [ 2015.004156] should_fail.cold+0x5/0xa [ 2015.005017] __alloc_pages_nodemask+0x182/0x600 [ 2015.006070] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2015.007420] ? lock_downgrade+0x6d0/0x6d0 [ 2015.008351] ? lock_acquire+0x197/0x470 [ 2015.009258] alloc_pages_vma+0xbb/0x410 [ 2015.010169] shmem_alloc_page+0x10f/0x1e0 [ 2015.011098] ? shmem_init_inode+0x20/0x20 [ 2015.012053] ? percpu_counter_add_batch+0x8b/0x140 [ 2015.013160] ? __vm_enough_memory+0x184/0x360 [ 2015.014180] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2015.015393] ? shmem_unuse_inode+0xf60/0xf60 [ 2015.016398] shmem_file_read_iter+0x2a6/0xbb0 [ 2015.017422] ? shmem_get_link+0x440/0x440 [ 2015.018355] ? inode_has_perm+0x171/0x1d0 [ 2015.019287] ? iov_iter_pipe+0xf1/0x2a0 [ 2015.020184] generic_file_splice_read+0x455/0x6d0 [ 2015.021262] ? pipe_to_user+0x170/0x170 [ 2015.022201] ? fsnotify_perm.part.0+0x22d/0x620 [ 2015.023251] ? security_file_permission+0xb1/0xe0 [ 2015.024332] ? pipe_to_user+0x170/0x170 [ 2015.025228] do_splice_to+0x10e/0x160 [ 2015.026095] splice_direct_to_actor+0x2fe/0x980 [ 2015.027139] ? pipe_to_sendpage+0x380/0x380 [ 2015.028108] ? do_splice_to+0x160/0x160 [ 2015.028999] ? security_file_permission+0xb1/0xe0 [ 2015.030096] do_splice_direct+0x1c4/0x290 [ 2015.031025] ? splice_direct_to_actor+0x980/0x980 [ 2015.032111] ? security_file_permission+0xb1/0xe0 [ 2015.033197] vfs_copy_file_range+0x4f8/0x13c0 [ 2015.034211] ? generic_file_rw_checks+0x240/0x240 [ 2015.035309] __do_sys_copy_file_range+0x193/0x420 [ 2015.036383] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2015.037464] ? ksys_write+0x1a9/0x260 [ 2015.038324] ? __ia32_sys_read+0xb0/0xb0 [ 2015.039231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2015.040402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2015.041556] do_syscall_64+0x33/0x40 [ 2015.042395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2015.043540] RIP: 0033:0x7f1d53837b19 [ 2015.044371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2015.048479] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2015.050201] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2015.050212] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2015.050223] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2015.050234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2015.050246] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:51:40 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa5435"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:51:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$VT_RESIZEX(r5, 0x4b68, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/204) 19:51:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5ea, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:51:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x5, "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"}) r1 = eventfd(0x80000001) fcntl$setsig(r1, 0xa, 0x37) dup2(r0, r0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000240)=0x5, 0x4) 19:51:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6ff, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:51:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="eafb756b34ddd6b155f0bc97b7c0fab3b7b7a9559e78abcd4d90b11bbdc28f52d366dd738526d514505720b5721c79dec6aff19d04b09a1d9cd3f7e4b3a6c4bde3237304d86136acf6446506922ee49fb7d942894711dc1ec75574a6353c3135d062c23341c6142bc178f73c2f67a883caa0ea0ebbf24ae4dcaa1efe3911b4bf2e4b86c9b1c48c525c0874d4e8550df91c698db5c2687ff032bc00b4d90f23f8b6252f23d1bce75550ab57ec6aac1a43e09d7b1699c47075ff462da0961c066a0e104198589a4e2f531a572f5c6ed7955cbfecbb3e46426ae8410a3f70f5ea44d76f1843232b795d789eda36cc35") r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x40, 0x3, 0xff, 0x20, 0x9}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x30000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/softnet_stat\x00') sendmsg$nl_generic(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2d0, 0x35, 0x20, 0x70bd2d, 0x25dfdbff, {0x11}, [@typed={0xe6, 0x92, 0x0, 0x0, @binary="dc59f5fc29d2b0b67a37819f273f0beda70bab722d460c5de2b193949fcfa9d9a99c2244c1394df8a99eec1a001f5d76c906a1428c54631172cc5b63954e7c2aaa1f8575eab16478920bc6fdafd911124e820570a7af06ff715c19d7e225e0c394e48a7ad6a7c7f7972db82cd6f1803585729462f0623d54d3720a7524476f4b50550b390005325a41884d2781997d8d51a04630738ad4832421ea0efb07716efb09b3c081361dcb5c06320764aa2a457acd1d213e9094cdd31d3b0dd5d34a36e848bdd61854829ed9f2c62eb3b642cd5d4b616f5cea9dea39d10ed7ac1ac7b3eca5"}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="a0d2eb1d040d97ca526e28b4f948643cb02b1406ccd902c66e77a293e99442780a613f0be552afeb12aa993582026261cc42dc0604bc8041f637e93dea8f21593a1f2cfb556f14537d6e3353b5755890c71be17ad56017017746da79e06cc1c0f63fe2eb2bfe2fce1d70a39157ccb3b02d52a52a393cb90c29db9fed6a321cd1d5b4a5328f91dca7", @generic="e2ec15d13777cce337ec5df60f50dc2f1f6aa64ff82f81868bd616e23bf0f45fa357fdf6a4ff3a6a54dafc31d9a85268eafc3aa88877197a323a4a0ded9fe9fa58c20a2f84fe3b231654a32e48b4d54a337dfdc1e6f0c2", @generic="aa3581b3f11d0e5b1064c813", @generic="dc380cdd8e0ae5e97bdf35117654d74bc67dfa16590a10cf916cbceaafaa5263030ea6a095af48e18becb31f7cb36155aef9081783a3fa9a13fea6d57df095ff1e008f2542f11d88885733e9f957ca41d88b3ef7055ae5421493137283fea59843332a74b484b3f0a886fadd76db089e94b83c71f7736fad2a96e7f941956721f718a53b79909dea9eb5af6444c1f175d312e6552e6d9cd83a62dcbbbdefb5c58f065be348b398ab45fe879d93db6131b417071594c5c7e083e3395abf2d315f9ce9646540", @generic="aa566f52bdd61d8f349d91166323"]}, 0x2d0}}, 0x2000c080) 19:51:53 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:51:53 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5ef, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:51:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000000)={0x2, "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"}) 19:51:53 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 50) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:51:53 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b48, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:51:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/4096) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2027.786708] FAULT_INJECTION: forcing a failure. [ 2027.786708] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2027.788153] CPU: 1 PID: 10813 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2027.788941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.789907] Call Trace: [ 2027.789923] dump_stack+0x107/0x167 [ 2027.789934] should_fail.cold+0x5/0xa [ 2027.789948] __alloc_pages_nodemask+0x182/0x600 [ 2027.789961] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2027.789972] ? lock_downgrade+0x6d0/0x6d0 19:51:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x705, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2027.789981] ? lock_acquire+0x197/0x470 [ 2027.790000] alloc_pages_vma+0xbb/0x410 [ 2027.790014] shmem_alloc_page+0x10f/0x1e0 [ 2027.790024] ? shmem_init_inode+0x20/0x20 [ 2027.790047] ? percpu_counter_add_batch+0x8b/0x140 [ 2027.790059] ? __vm_enough_memory+0x184/0x360 [ 2027.790072] shmem_getpage_gfp.constprop.0+0x512/0x1920 19:51:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) r2 = getegid() setgid(r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, r2}}, './file0\x00'}) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000040)={0x14c, 0x8, 0x8000}) 19:51:53 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5f5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2027.790092] ? shmem_unuse_inode+0xf60/0xf60 [ 2027.790108] shmem_file_read_iter+0x2a6/0xbb0 [ 2027.790126] ? shmem_get_link+0x440/0x440 [ 2027.790136] ? inode_has_perm+0x171/0x1d0 [ 2027.790148] ? iov_iter_pipe+0xf1/0x2a0 [ 2027.790163] generic_file_splice_read+0x455/0x6d0 [ 2027.790173] ? pipe_to_user+0x170/0x170 [ 2027.790188] ? fsnotify_perm.part.0+0x22d/0x620 19:51:53 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:51:53 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 51) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2027.790199] ? security_file_permission+0xb1/0xe0 [ 2027.790209] ? pipe_to_user+0x170/0x170 19:51:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x70b, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2027.790219] do_splice_to+0x10e/0x160 [ 2027.790231] splice_direct_to_actor+0x2fe/0x980 [ 2027.790244] ? pipe_to_sendpage+0x380/0x380 [ 2027.790255] ? do_splice_to+0x160/0x160 [ 2027.790264] ? security_file_permission+0xb1/0xe0 [ 2027.790277] do_splice_direct+0x1c4/0x290 [ 2027.790287] ? splice_direct_to_actor+0x980/0x980 [ 2027.790300] ? security_file_permission+0xb1/0xe0 [ 2027.790314] vfs_copy_file_range+0x4f8/0x13c0 [ 2027.790335] ? generic_file_rw_checks+0x240/0x240 [ 2027.790357] __do_sys_copy_file_range+0x193/0x420 [ 2027.790367] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2027.790377] ? ksys_write+0x1a9/0x260 [ 2027.790387] ? __ia32_sys_read+0xb0/0xb0 [ 2027.790399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2027.790410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2027.790421] do_syscall_64+0x33/0x40 [ 2027.790432] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2027.790438] RIP: 0033:0x7f1d53837b19 [ 2027.790448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2027.790453] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2027.790464] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2027.790470] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2027.790475] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2027.790481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2027.790486] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 2027.949188] FAULT_INJECTION: forcing a failure. [ 2027.949188] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2027.966614] CPU: 1 PID: 10841 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2027.966620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.966624] Call Trace: [ 2027.966640] dump_stack+0x107/0x167 [ 2027.966651] should_fail.cold+0x5/0xa [ 2027.966665] __alloc_pages_nodemask+0x182/0x600 [ 2027.966677] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 19:51:53 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x5fd, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2027.966688] ? lock_downgrade+0x6d0/0x6d0 [ 2027.966697] ? lock_acquire+0x197/0x470 [ 2027.966716] alloc_pages_vma+0xbb/0x410 [ 2027.966730] shmem_alloc_page+0x10f/0x1e0 [ 2027.966740] ? shmem_init_inode+0x20/0x20 19:51:53 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 52) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2027.966763] ? percpu_counter_add_batch+0x8b/0x140 [ 2027.966775] ? __vm_enough_memory+0x184/0x360 [ 2027.966788] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2027.966807] ? shmem_unuse_inode+0xf60/0xf60 [ 2027.966824] shmem_file_read_iter+0x2a6/0xbb0 [ 2027.966842] ? shmem_get_link+0x440/0x440 [ 2027.966852] ? inode_has_perm+0x171/0x1d0 [ 2027.966864] ? iov_iter_pipe+0xf1/0x2a0 [ 2027.966877] generic_file_splice_read+0x455/0x6d0 19:51:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x714, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2027.966888] ? pipe_to_user+0x170/0x170 [ 2027.966903] ? fsnotify_perm.part.0+0x22d/0x620 [ 2027.966914] ? security_file_permission+0xb1/0xe0 [ 2027.966925] ? pipe_to_user+0x170/0x170 [ 2027.966935] do_splice_to+0x10e/0x160 [ 2027.966946] splice_direct_to_actor+0x2fe/0x980 [ 2027.966959] ? pipe_to_sendpage+0x380/0x380 [ 2027.966970] ? do_splice_to+0x160/0x160 [ 2027.966979] ? security_file_permission+0xb1/0xe0 [ 2027.966993] do_splice_direct+0x1c4/0x290 [ 2027.967003] ? splice_direct_to_actor+0x980/0x980 [ 2027.967015] ? security_file_permission+0xb1/0xe0 [ 2027.967029] vfs_copy_file_range+0x4f8/0x13c0 [ 2027.967042] ? generic_file_rw_checks+0x240/0x240 [ 2027.967063] __do_sys_copy_file_range+0x193/0x420 [ 2027.967074] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2027.967083] ? ksys_write+0x1a9/0x260 [ 2027.967093] ? __ia32_sys_read+0xb0/0xb0 [ 2027.967105] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2027.967116] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2027.967127] do_syscall_64+0x33/0x40 [ 2027.967137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2027.967144] RIP: 0033:0x7f1d53837b19 [ 2027.967154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2027.967159] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2027.967170] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2027.967175] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2027.967181] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2027.967187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2027.967192] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 2028.061937] FAULT_INJECTION: forcing a failure. [ 2028.061937] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2028.061950] CPU: 1 PID: 10853 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2028.061956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2028.061959] Call Trace: [ 2028.061976] dump_stack+0x107/0x167 [ 2028.061987] should_fail.cold+0x5/0xa [ 2028.062003] __alloc_pages_nodemask+0x182/0x600 [ 2028.062016] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2028.062031] ? lock_downgrade+0x6d0/0x6d0 [ 2028.062040] ? lock_acquire+0x197/0x470 [ 2028.062060] alloc_pages_vma+0xbb/0x410 [ 2028.062074] shmem_alloc_page+0x10f/0x1e0 [ 2028.062084] ? shmem_init_inode+0x20/0x20 [ 2028.062108] ? percpu_counter_add_batch+0x8b/0x140 [ 2028.062121] ? __vm_enough_memory+0x184/0x360 [ 2028.062134] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2028.062158] ? shmem_unuse_inode+0xf60/0xf60 [ 2028.062175] shmem_file_read_iter+0x2a6/0xbb0 [ 2028.062194] ? shmem_get_link+0x440/0x440 [ 2028.062204] ? inode_has_perm+0x171/0x1d0 [ 2028.062217] ? iov_iter_pipe+0xf1/0x2a0 [ 2028.062232] generic_file_splice_read+0x455/0x6d0 [ 2028.062243] ? pipe_to_user+0x170/0x170 [ 2028.062259] ? fsnotify_perm.part.0+0x22d/0x620 [ 2028.062279] ? security_file_permission+0xb1/0xe0 [ 2028.062290] ? pipe_to_user+0x170/0x170 [ 2028.062300] do_splice_to+0x10e/0x160 [ 2028.062312] splice_direct_to_actor+0x2fe/0x980 [ 2028.062326] ? pipe_to_sendpage+0x380/0x380 [ 2028.062346] ? do_splice_to+0x160/0x160 [ 2028.062355] ? security_file_permission+0xb1/0xe0 [ 2028.062369] do_splice_direct+0x1c4/0x290 [ 2028.062379] ? splice_direct_to_actor+0x980/0x980 [ 2028.062393] ? security_file_permission+0xb1/0xe0 [ 2028.062408] vfs_copy_file_range+0x4f8/0x13c0 [ 2028.062421] ? generic_file_rw_checks+0x240/0x240 [ 2028.062443] __do_sys_copy_file_range+0x193/0x420 [ 2028.062454] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2028.062464] ? ksys_write+0x1a9/0x260 [ 2028.062474] ? __ia32_sys_read+0xb0/0xb0 [ 2028.062487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2028.062498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.062510] do_syscall_64+0x33/0x40 [ 2028.062520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2028.062527] RIP: 0033:0x7f1d53837b19 [ 2028.062538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.062544] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2028.062556] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2028.062562] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2028.062567] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2028.062573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2028.062579] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:52:05 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b49, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:52:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:05 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:52:05 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 53) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:52:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x719, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:52:05 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x618, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:05 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:52:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0xdf, 0x3, 0x20, 0x2, 0x1}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000200)={0x4, 0xfff8, 0x4}) ioctl$KDSETLED(r0, 0x4b32, 0xffffffff) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000140)=""/179) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/199) [ 2039.950174] FAULT_INJECTION: forcing a failure. [ 2039.950174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2039.953158] CPU: 1 PID: 10883 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2039.954779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2039.956685] Call Trace: [ 2039.957283] dump_stack+0x107/0x167 [ 2039.958122] should_fail.cold+0x5/0xa [ 2039.959010] __alloc_pages_nodemask+0x182/0x600 [ 2039.960080] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 19:52:05 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x622, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2039.961459] ? lock_downgrade+0x6d0/0x6d0 [ 2039.962610] ? lock_acquire+0x197/0x470 19:52:05 executing program 0: read(0xffffffffffffffff, &(0x7f0000000000)=""/16, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000800000001e2f66696c65b000"]) fallocate(r0, 0x2, 0xffffffff, 0xbb) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) [ 2039.963565] alloc_pages_vma+0xbb/0x410 [ 2039.964585] shmem_alloc_page+0x10f/0x1e0 [ 2039.965537] ? shmem_init_inode+0x20/0x20 [ 2039.966524] ? percpu_counter_add_batch+0x8b/0x140 [ 2039.967680] ? __vm_enough_memory+0x184/0x360 [ 2039.968714] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2039.969962] ? shmem_unuse_inode+0xf60/0xf60 [ 2039.970995] shmem_file_read_iter+0x2a6/0xbb0 [ 2039.972046] ? shmem_get_link+0x440/0x440 [ 2039.973002] ? inode_has_perm+0x171/0x1d0 [ 2039.973958] ? iov_iter_pipe+0xf1/0x2a0 [ 2039.974890] generic_file_splice_read+0x455/0x6d0 [ 2039.975994] ? pipe_to_user+0x170/0x170 [ 2039.976922] ? fsnotify_perm.part.0+0x22d/0x620 [ 2039.977992] ? security_file_permission+0xb1/0xe0 [ 2039.979115] ? pipe_to_user+0x170/0x170 [ 2039.980038] do_splice_to+0x10e/0x160 [ 2039.980919] splice_direct_to_actor+0x2fe/0x980 [ 2039.981980] ? pipe_to_sendpage+0x380/0x380 [ 2039.982996] ? do_splice_to+0x160/0x160 [ 2039.983919] ? security_file_permission+0xb1/0xe0 [ 2039.985030] do_splice_direct+0x1c4/0x290 [ 2039.985988] ? splice_direct_to_actor+0x980/0x980 [ 2039.987117] ? security_file_permission+0xb1/0xe0 [ 2039.988238] vfs_copy_file_range+0x4f8/0x13c0 [ 2039.989266] ? generic_file_rw_checks+0x240/0x240 [ 2039.990394] __do_sys_copy_file_range+0x193/0x420 [ 2039.991527] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2039.992615] ? ksys_write+0x1a9/0x260 [ 2039.993489] ? __ia32_sys_read+0xb0/0xb0 [ 2039.994410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2039.995639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2039.996815] do_syscall_64+0x33/0x40 [ 2039.997662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2039.998842] RIP: 0033:0x7f1d53837b19 [ 2039.999700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2040.003951] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2040.003973] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2040.003983] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2040.003994] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2040.004005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2040.004023] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:52:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x71f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:52:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b37) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) r3 = signalfd(r0, &(0x7f0000000000)={[0x1]}, 0x8) read(r3, &(0x7f0000000040)=""/179, 0xb3) pipe2(&(0x7f0000000100), 0x84000) 19:52:05 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x628, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 19:52:05 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x62e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:05 executing program 0: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x5) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = fork() r3 = socket$inet6(0xa, 0x1, 0xb7) kcmp(r1, r2, 0x0, r0, r3) 19:52:05 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:52:18 executing program 0: r0 = syz_io_uring_setup(0x5816, &(0x7f0000000000)={0x0, 0xa6bd, 0x10, 0x2, 0x26d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) signalfd(r0, &(0x7f0000000100)={[0x7fffffff]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:52:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x727, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:52:18 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b4a, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:52:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x21) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffff7ffffffd) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0x2, 0x3a4, 0x7, 0x0, 0x1f, 0x7fff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) 19:52:18 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x637, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:18 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:52:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 19:52:18 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 54) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2053.046117] FAULT_INJECTION: forcing a failure. [ 2053.046117] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2053.048822] CPU: 1 PID: 10955 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2053.050279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.052017] Call Trace: [ 2053.052578] dump_stack+0x107/0x167 [ 2053.053340] should_fail.cold+0x5/0xa [ 2053.054144] __alloc_pages_nodemask+0x182/0x600 [ 2053.055121] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2053.056377] ? lock_downgrade+0x6d0/0x6d0 [ 2053.057241] ? lock_acquire+0x197/0x470 [ 2053.058093] alloc_pages_vma+0xbb/0x410 [ 2053.058929] shmem_alloc_page+0x10f/0x1e0 [ 2053.059807] ? shmem_init_inode+0x20/0x20 [ 2053.060681] ? percpu_counter_add_batch+0x8b/0x140 [ 2053.061711] ? __vm_enough_memory+0x184/0x360 [ 2053.062652] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2053.063787] ? shmem_unuse_inode+0xf60/0xf60 [ 2053.064724] shmem_file_read_iter+0x2a6/0xbb0 [ 2053.065670] ? shmem_get_link+0x440/0x440 [ 2053.066543] ? inode_has_perm+0x171/0x1d0 [ 2053.067421] ? iov_iter_pipe+0xf1/0x2a0 [ 2053.068253] generic_file_splice_read+0x455/0x6d0 [ 2053.069254] ? pipe_to_user+0x170/0x170 [ 2053.070078] ? fsnotify_perm.part.0+0x22d/0x620 [ 2053.071062] ? security_file_permission+0xb1/0xe0 [ 2053.072073] ? pipe_to_user+0x170/0x170 [ 2053.072901] do_splice_to+0x10e/0x160 [ 2053.073696] splice_direct_to_actor+0x2fe/0x980 [ 2053.074663] ? pipe_to_sendpage+0x380/0x380 [ 2053.075580] ? do_splice_to+0x160/0x160 [ 2053.076400] ? security_file_permission+0xb1/0xe0 [ 2053.077409] do_splice_direct+0x1c4/0x290 [ 2053.078269] ? splice_direct_to_actor+0x980/0x980 [ 2053.079276] ? security_file_permission+0xb1/0xe0 [ 2053.080262] vfs_copy_file_range+0x4f8/0x13c0 [ 2053.081201] ? generic_file_rw_checks+0x240/0x240 [ 2053.082213] __do_sys_copy_file_range+0x193/0x420 [ 2053.083213] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2053.084185] ? ksys_write+0x1a9/0x260 [ 2053.084971] ? __ia32_sys_read+0xb0/0xb0 [ 2053.085818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.086933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.088017] do_syscall_64+0x33/0x40 [ 2053.088808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.089895] RIP: 0033:0x7f1d53837b19 [ 2053.090682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.094597] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2053.096215] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2053.097725] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2053.099237] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2053.100757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2053.102281] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:52:18 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x63c, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:18 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:52:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x738, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:52:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000073440100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c65300096436836ef54f2f3212ba60ad018dff1b3066c9e39d1cc2db0fdee3f657bb03fc348b8222446a7b04cfe0414f883e7af8beb2d"]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x10000, 0x9330c0) openat(r5, &(0x7f0000000100)='./file0\x00', 0x5f3c02, 0x21) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000000)) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) 19:52:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000000)={0x0, "ce854ddcfeff4ae6ed95db051e0ea5d3"}) 19:52:33 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:52:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x742, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:52:33 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 55) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:52:33 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x642, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup2(r0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r4, 0x0) listen(0xffffffffffffffff, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r5}}, './file0\x00'}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:33 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b4b, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:52:33 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) sendfile(r2, r3, 0x0, 0x0) [ 2067.275939] FAULT_INJECTION: forcing a failure. [ 2067.275939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2067.278900] CPU: 0 PID: 10996 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2067.280475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2067.282337] Call Trace: [ 2067.282934] dump_stack+0x107/0x167 [ 2067.283764] should_fail.cold+0x5/0xa [ 2067.284626] __alloc_pages_nodemask+0x182/0x600 [ 2067.285673] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2067.287015] ? lock_downgrade+0x6d0/0x6d0 [ 2067.287934] ? lock_acquire+0x197/0x470 [ 2067.288816] alloc_pages_vma+0xbb/0x410 [ 2067.289700] shmem_alloc_page+0x10f/0x1e0 [ 2067.290628] ? shmem_init_inode+0x20/0x20 [ 2067.291569] ? percpu_counter_add_batch+0x8b/0x140 [ 2067.292650] ? __vm_enough_memory+0x184/0x360 [ 2067.293632] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2067.294816] ? shmem_unuse_inode+0xf60/0xf60 [ 2067.295808] shmem_file_read_iter+0x2a6/0xbb0 [ 2067.296834] ? shmem_get_link+0x440/0x440 [ 2067.297759] ? inode_has_perm+0x171/0x1d0 [ 2067.298696] ? iov_iter_pipe+0xf1/0x2a0 [ 2067.299591] generic_file_splice_read+0x455/0x6d0 [ 2067.300672] ? pipe_to_user+0x170/0x170 [ 2067.301570] ? fsnotify_perm.part.0+0x22d/0x620 [ 2067.302617] ? security_file_permission+0xb1/0xe0 [ 2067.303708] ? pipe_to_user+0x170/0x170 [ 2067.304606] do_splice_to+0x10e/0x160 [ 2067.305467] splice_direct_to_actor+0x2fe/0x980 [ 2067.306513] ? pipe_to_sendpage+0x380/0x380 [ 2067.307485] ? do_splice_to+0x160/0x160 [ 2067.308383] ? security_file_permission+0xb1/0xe0 [ 2067.309477] do_splice_direct+0x1c4/0x290 [ 2067.310403] ? splice_direct_to_actor+0x980/0x980 [ 2067.311501] ? security_file_permission+0xb1/0xe0 [ 2067.312600] vfs_copy_file_range+0x4f8/0x13c0 [ 2067.313617] ? generic_file_rw_checks+0x240/0x240 [ 2067.314730] __do_sys_copy_file_range+0x193/0x420 [ 2067.315825] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2067.316880] ? ksys_write+0x1a9/0x260 [ 2067.317731] ? __ia32_sys_read+0xb0/0xb0 [ 2067.318653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2067.319847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2067.320997] do_syscall_64+0x33/0x40 [ 2067.321812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2067.322938] RIP: 0033:0x7f1d53837b19 [ 2067.323772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2067.327863] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2067.329561] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2067.331155] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2067.332757] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2067.334359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2067.335957] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:52:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bda620c1d95ae5ab8bdfa50a000000120082800400040008000200"], 0x24}}, 0x4000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x4, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) r4 = accept4(r1, &(0x7f0000001b00)=@rc={0x1f, @none}, &(0x7f0000001b80)=0x80, 0x80000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r5, 0x0) r6 = openat$cgroup_freezer_state(r1, &(0x7f0000003680), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003780)={&(0x7f00000014c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001540)="25d98406e35722d00787f9206c8ae7df2a6dfdce0d03b1a9e07696d3e1070bf8ee8483960ad88445b5b870dc5bccccb6cda131656799262dd8e23bb615ddd4243c48e45ed085a2212e2c5b2f4da3c959f92aa701", 0x54}, {&(0x7f00000015c0)="0566c2df6b6c6ba016d91234cf9b4c43826dfc455958eabf2f8d4a4c1ef48bbe1986cb9cb13396583a1898eb1df6649f1f34c549dba545c7af448a26c672c3478c5a4a786a0c93015089a304d9f4a65b38f4a24aed17fe1bcbd4fbc2e1d479ea8063dbd338576b69d2e01750a2013dd5e48c70b02b4aedc415ef916d63ba64dc45f2b7608ee6d8343f886739dca6d1268433671be5069ffef0334ec0562324119425805b5ca3d54872921c545b0e11b24e3a2ae21557c26db0de9eabaaf810c66e2f285ac175b0", 0xc7}, {&(0x7f00000016c0)="6048de60a0efa9e71abcc1f9d2e8063b352ec66d43de7bdc633cd8e1197c0cf278f207cf8475c3df683851bb2dca85c10a4ee6439823f93876b89ba37943124e7559f6a17dad4d5f0d0c7db47b13e5b63384544c22619ebe418321965e4d92cb42dee9c3acb9ceef51b49c481dc43c8a03b8c142a49910e2c8a5b827e25283a6360d045f28a6ea55a93cc13005a8b5d062bfe1a7b9f3bad13e665792240fd0af5643031dce8321103c60fe23760e98a8027a0f992cbd34", 0xb7}, {&(0x7f0000001780)="4be2572320d6e663d1d19bc6e01b325d4d511a0a6fb523c6d14d9b5135af8f9c42eb240945", 0x25}, {&(0x7f00000017c0)="c44c35401e52a82bf78437a6ef9353f59643388aaaeb5b1bb6ee37eb32fff8e0c3bfe3694a45dcb2fa48d5c91509dd71193592", 0x33}, {&(0x7f0000001800)="0dd1566ad7f267db6df381783df1c6d8224533ab3dd4159835cfc0ed27524497b701548b4e81ef5e4511313e65692a81329625258a596d7f4b4367f952268ec3f5e0ed84bf74016939c98e2cd16716572e1edeed63141b33fda74683e9da91b02a08c97a1d4200856e628946e4c5c83c3ef7f35bf03b4bae4d377aae272d0cad3514a92cd01b82c705315a2eea3b60b61698be4151539d1bfc75378edce809edacee94957cb12731931f7173384bf2fafc8dcb91a90667abfdadd6951828202a949c6ae0536a9313b9fcba77a8d345d8f97cb44007ef", 0xd6}, {&(0x7f0000001900)="5c073d36b5a4fa26e18362ed098707e4f6f6d3181c171a9b8665a4b34ddbc46c5b9b289b295b02a56b98d37c15517c43ba18eb5b160503f1f3d8f669c826b59bc317a68ad21647347fe909f4b06732ec91", 0x51}], 0x7, &(0x7f00000036c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r4]}}, @rights={{0x1c, 0x1, 0x1, [r5, r6, r0]}}], 0xa8}, 0x8800) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:33 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b4c, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:52:33 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x64a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:33 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10100, 0x10d) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:33 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) syz_io_uring_setup(0x2fe7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1cd}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7f) dup2(r1, r0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x2) 19:52:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000fcff7500000000000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040040}, 0x24000010) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4b68, 0x0) 19:52:33 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:52:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x748, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:52:33 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 56) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2067.473709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2067.481709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2067.508305] FAULT_INJECTION: forcing a failure. [ 2067.508305] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2067.509972] CPU: 1 PID: 11032 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2067.510835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2067.511848] Call Trace: [ 2067.512185] dump_stack+0x107/0x167 [ 2067.512645] should_fail.cold+0x5/0xa [ 2067.513121] __alloc_pages_nodemask+0x182/0x600 [ 2067.513711] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2067.514462] ? lock_downgrade+0x6d0/0x6d0 [ 2067.514973] ? lock_acquire+0x197/0x470 [ 2067.515478] alloc_pages_vma+0xbb/0x410 [ 2067.516010] shmem_alloc_page+0x10f/0x1e0 [ 2067.516522] ? shmem_init_inode+0x20/0x20 [ 2067.517051] ? percpu_counter_add_batch+0x8b/0x140 [ 2067.517662] ? __vm_enough_memory+0x184/0x360 [ 2067.518228] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2067.518899] ? shmem_unuse_inode+0xf60/0xf60 [ 2067.519450] shmem_file_read_iter+0x2a6/0xbb0 [ 2067.520023] ? shmem_get_link+0x440/0x440 [ 2067.520539] ? inode_has_perm+0x171/0x1d0 [ 2067.521055] ? iov_iter_pipe+0xf1/0x2a0 [ 2067.521550] generic_file_splice_read+0x455/0x6d0 [ 2067.522150] ? pipe_to_user+0x170/0x170 [ 2067.522658] ? fsnotify_perm.part.0+0x22d/0x620 [ 2067.523234] ? security_file_permission+0xb1/0xe0 [ 2067.523832] ? pipe_to_user+0x170/0x170 [ 2067.524321] do_splice_to+0x10e/0x160 [ 2067.524783] splice_direct_to_actor+0x2fe/0x980 [ 2067.525367] ? pipe_to_sendpage+0x380/0x380 [ 2067.525897] ? do_splice_to+0x160/0x160 [ 2067.526386] ? security_file_permission+0xb1/0xe0 [ 2067.526981] do_splice_direct+0x1c4/0x290 [ 2067.527478] ? splice_direct_to_actor+0x980/0x980 [ 2067.528065] ? security_file_permission+0xb1/0xe0 [ 2067.528645] vfs_copy_file_range+0x4f8/0x13c0 [ 2067.529183] ? generic_file_rw_checks+0x240/0x240 [ 2067.529774] __do_sys_copy_file_range+0x193/0x420 [ 2067.530348] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2067.530917] ? ksys_write+0x1a9/0x260 [ 2067.531332] process 'syz-executor.4' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 2067.531373] ? __ia32_sys_read+0xb0/0xb0 [ 2067.531394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2067.534630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2067.535268] do_syscall_64+0x33/0x40 [ 2067.535734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2067.536352] RIP: 0033:0x7f1d53837b19 [ 2067.536794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2067.538981] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2067.539889] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2067.540737] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2067.541592] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2067.542443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2067.543287] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:52:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x6bcc, 0x7, 0xbedb, 0xff8, 0xe7, "a9513a2e2072dc9ddc6197b60fb975aaa7f345", 0x2, 0x8}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) listen(r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@remote, 0x0, r8}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:47 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x65b, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:47 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:52:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x1, 0x25, 0xff, 0x200, 0x2, 0x6, 0x8, 0x2e1, 0x40, 0x3dc, 0x9, 0x3, 0x38, 0x2, 0x8000, 0xffe0, 0xd2ef}, [], "63fefdde5980d311715721585e766a6c32ce51ce054ab2663e37106a1c47f51b1fc7188aafee5ab2230773f127e9c5c1a787d918c99f03a79144c8dadf62856be243b7d634336b9f9e3d933e73c3c3a7e042b6424c04c535bd585b401fa0a9d3b6e85b81caeff5071e81", ['\x00', '\x00', '\x00', '\x00']}, 0x4aa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000004c0)={0x1, 0x200}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:47 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 57) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:52:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r2 = dup2(r1, r0) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) 19:52:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x74e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:52:47 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b4d, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:52:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x4f39) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2081.397410] FAULT_INJECTION: forcing a failure. [ 2081.397410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2081.399727] CPU: 1 PID: 11060 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2081.400963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2081.402424] Call Trace: [ 2081.402894] dump_stack+0x107/0x167 [ 2081.402911] should_fail.cold+0x5/0xa [ 2081.402930] __alloc_pages_nodemask+0x182/0x600 [ 2081.402948] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2081.402963] ? lock_downgrade+0x6d0/0x6d0 [ 2081.402976] ? lock_acquire+0x197/0x470 [ 2081.403004] alloc_pages_vma+0xbb/0x410 [ 2081.403023] shmem_alloc_page+0x10f/0x1e0 [ 2081.403038] ? shmem_init_inode+0x20/0x20 [ 2081.403070] ? percpu_counter_add_batch+0x8b/0x140 [ 2081.403088] ? __vm_enough_memory+0x184/0x360 [ 2081.403108] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2081.403136] ? shmem_unuse_inode+0xf60/0xf60 [ 2081.403161] shmem_file_read_iter+0x2a6/0xbb0 [ 2081.403188] ? shmem_get_link+0x440/0x440 [ 2081.403201] ? inode_has_perm+0x171/0x1d0 [ 2081.403217] ? iov_iter_pipe+0xf1/0x2a0 [ 2081.403236] generic_file_splice_read+0x455/0x6d0 [ 2081.403251] ? pipe_to_user+0x170/0x170 [ 2081.403273] ? fsnotify_perm.part.0+0x22d/0x620 [ 2081.403290] ? security_file_permission+0xb1/0xe0 [ 2081.403306] ? pipe_to_user+0x170/0x170 [ 2081.403320] do_splice_to+0x10e/0x160 [ 2081.403337] splice_direct_to_actor+0x2fe/0x980 [ 2081.403356] ? pipe_to_sendpage+0x380/0x380 [ 2081.403373] ? do_splice_to+0x160/0x160 [ 2081.403386] ? security_file_permission+0xb1/0xe0 [ 2081.403407] do_splice_direct+0x1c4/0x290 [ 2081.403421] ? splice_direct_to_actor+0x980/0x980 [ 2081.403440] ? security_file_permission+0xb1/0xe0 [ 2081.403461] vfs_copy_file_range+0x4f8/0x13c0 [ 2081.403483] ? generic_file_rw_checks+0x240/0x240 [ 2081.403516] __do_sys_copy_file_range+0x193/0x420 [ 2081.403532] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2081.403546] ? ksys_write+0x1a9/0x260 [ 2081.403561] ? __ia32_sys_read+0xb0/0xb0 [ 2081.403578] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2081.403594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.403611] do_syscall_64+0x33/0x40 [ 2081.403625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2081.403635] RIP: 0033:0x7f1d53837b19 [ 2081.403648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2081.403656] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2081.403672] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2081.403680] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2081.403688] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2081.403696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2081.403704] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:52:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x757, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:52:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) dup2(r2, r0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250a00000010000280040004000800020007000000"], 0x24}}, 0x4000) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) r6 = fork() sendmsg$nl_generic(r3, &(0x7f00000006c0)={&(0x7f0000000080), 0xc, &(0x7f0000000680)={&(0x7f0000000180)={0x4e0, 0x39, 0x4, 0x70bd29, 0x25dfdbfb, {0x1a}, [@typed={0x8, 0x47, 0x0, 0x0, @uid}, @typed={0x8, 0x4c, 0x0, 0x0, @pid}, @generic="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", @nested={0x2d6, 0x7c, 0x0, 0x1, [@typed={0x8, 0x28, 0x0, 0x0, @pid=r4}, @generic="02a3a28b4afdba1857ea0219e28089e984a104ef75c950a0719ee93b1a7baa11ec1c02f64411c10c72d6eb14285b5f40d606e2da93687ee143e50e56ea867ad3300beace", @generic="1dd413432f68a740a4a4d40f6dcc2709680092a9950a4bcf15c8e168317b3d305e293927f2cd39ff045bb0f9188ffe8fb0069ec4f3abf08eb1b7e65faf3fb41ab0ab9df21ee0c22a9c7d15b98adc7d9e39f98d16844651a3c958b478cfe024a2b6e9926d7afb7c7fd2d07b3d9f87652f7e4c15613329dc56f1fd4f4aa25a6de86de52044830a8fad8840ad84bc585ce756cfcdee88caf7ea55d4e007392c38052b33fadb4f5908deddf7c130f0c9f01e767cfd6a7b1bd887b8159f46fa3e35d1d288ec62b7da92300565fb53095f4ef151300a7360f0d4cb48171f17158f92a417dd8fc3e7f79766d7a640a29891d3f811", @typed={0x9, 0x82, 0x0, 0x0, @str='*\x17[,\x00'}, @generic="689e67e4fccc84c5c7ce852eae2b5d95e95b04c3ce2d831b733ddb43a5e99b5b20e837253115227767d0207d8be0bfc1cb51c097689b2e180adef92f7cedb4169e1cdf53b791b847303f8f9902754005da5793f0ec94eb5e94440310fefd43dad65f751ad7dd9499bfec4a5ddc56754e107c720101e4178f7155f0eb99abfec59629ca0bcd3022f0e3b74f3b02de31b4fb2462d549cdd10aa997ed8ed40aa3d3663115d659db83917fafa7968a4f1f84c0219f89d294aa5829adb6c081a504e6f6", @generic="5e572ec68facdbfb9f18422c400a46e1174ff059dbfc950e626746e60c5feabef1194e977dbc19fa", @typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@private0}, @typed={0x8b, 0x8a, 0x0, 0x0, @binary="2abe22b6bfcffee5664550b80acfb31ad25e3afb7562b7699d971d4ec760a8dfdf6ce2f5a9fb1c2a4ad2c610f7846ebb53294a32037d77f2199e85b1293a66bca6c19039b467fac021ee70e3346d12e30c2de3c094829529f6aa6459ccf1672fbf1807be9f53fecf61d3bef0a60ed66f044da02c78a0c5d8c37f0007a7d2f95b3e79b1da76a9c0"}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid=r5}, @nested={0xd4, 0x74, 0x0, 0x1, [@generic="efa7e9f0a0eb9f33c8d335809eb410cb475f53de47b349a2da38553c351ba824d59b89276116ae05d7ba51c65269ef69a1721f128a1db8cd68a89f5b9910bb049e0b092e43bb699e9d0725fef604100cc86e69e7050c40fe67fd77cd6d254e6307e778b074e7c9425fd63b1199cf29e6c9aa650352d905269f6035fdf4f508034171b365f4f0774a5570b2572503146f7fdc6bdaba0f59f9205995eff10d261a27244429743680ebc087ef749f925fcba8cd6832a78ec106b19c3385a8ffb58dc34fa74f2cefb475", @typed={0x8, 0x10, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r6}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x40408f1}, 0x20000040) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x3, 0xff, 0x3f}) 19:52:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:59 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:52:59 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x665, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:59 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 58) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:52:59 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b4e, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:52:59 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xb8900, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xd39, 0x88, 0xd3d8, 0xd16b, 0xdf, "fc932e10137278843cbe404f7c79ea8e065a7a", 0xfffffff8, 0x2}) [ 2093.702340] FAULT_INJECTION: forcing a failure. [ 2093.702340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2093.705138] CPU: 1 PID: 11108 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2093.706598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2093.708332] Call Trace: [ 2093.708897] dump_stack+0x107/0x167 [ 2093.709653] should_fail.cold+0x5/0xa [ 2093.710450] __alloc_pages_nodemask+0x182/0x600 [ 2093.711418] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2093.712709] ? lock_downgrade+0x6d0/0x6d0 [ 2093.713570] ? lock_acquire+0x197/0x470 [ 2093.714414] alloc_pages_vma+0xbb/0x410 [ 2093.715245] shmem_alloc_page+0x10f/0x1e0 [ 2093.716112] ? shmem_init_inode+0x20/0x20 [ 2093.717016] ? percpu_counter_add_batch+0x8b/0x140 [ 2093.718037] ? __vm_enough_memory+0x184/0x360 [ 2093.718991] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2093.720136] ? shmem_unuse_inode+0xf60/0xf60 [ 2093.721081] shmem_file_read_iter+0x2a6/0xbb0 [ 2093.722040] ? shmem_get_link+0x440/0x440 [ 2093.722911] ? inode_has_perm+0x171/0x1d0 [ 2093.723798] ? iov_iter_pipe+0xf1/0x2a0 [ 2093.724666] generic_file_splice_read+0x455/0x6d0 [ 2093.725739] ? pipe_to_user+0x170/0x170 [ 2093.726602] ? fsnotify_perm.part.0+0x22d/0x620 [ 2093.727602] ? security_file_permission+0xb1/0xe0 [ 2093.728647] ? pipe_to_user+0x170/0x170 [ 2093.729505] do_splice_to+0x10e/0x160 [ 2093.730324] splice_direct_to_actor+0x2fe/0x980 [ 2093.731326] ? pipe_to_sendpage+0x380/0x380 [ 2093.732259] ? do_splice_to+0x160/0x160 [ 2093.733119] ? security_file_permission+0xb1/0xe0 [ 2093.734169] do_splice_direct+0x1c4/0x290 [ 2093.735083] ? splice_direct_to_actor+0x980/0x980 [ 2093.736126] ? security_file_permission+0xb1/0xe0 [ 2093.737181] vfs_copy_file_range+0x4f8/0x13c0 [ 2093.738151] ? generic_file_rw_checks+0x240/0x240 [ 2093.739212] __do_sys_copy_file_range+0x193/0x420 [ 2093.740246] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2093.741273] ? ksys_write+0x1a9/0x260 [ 2093.742091] ? __ia32_sys_read+0xb0/0xb0 [ 2093.742968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2093.744094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2093.745221] do_syscall_64+0x33/0x40 [ 2093.746017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2093.747120] RIP: 0033:0x7f1d53837b19 [ 2093.747917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2093.751871] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2093.753513] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2093.755044] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2093.756585] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2093.758120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2093.759648] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:52:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xffffffffff7ffffd) read(r0, &(0x7f0000000040)=""/150, 0x96) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c004) 19:52:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:52:59 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x66b, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x75c, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:52:59 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0xa8, 0x90, 0x1, 0x20, 0xbd0f, 0x2, 0x3e, 0x2, 0x3be, 0x40, 0x133, 0x4, 0x400, 0x38, 0x2, 0x9, 0xfffb, 0x6}, [{0x6, 0x400, 0xff, 0x1, 0x0, 0x81, 0xfffffffffffffff7, 0x80000001}, {0x7, 0x77, 0x4024, 0x5, 0x2, 0x1, 0x2, 0x8}], "11b50c05e87b6753a369e9522dd18a940d6c8cc783f5ef25771568269eef2726590ddf1944684ab72c50c7724540b8a10d75bdac5e33d45cfe6b353f8c649f50d49266a87a423a30cd3e31bc4c0a8f639594d5326e46cc4373c8f363e70b6a1d485f0a35996dcfb48496744e1735108b3451aa4fbb6ce6d9c004ed4e83724fce94574818e82c4752", ['\x00', '\x00']}, 0x338) 19:52:59 executing program 4: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) 19:52:59 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:52:59 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b52, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:52:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x762, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:52:59 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x671, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:52:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) 19:52:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x100) sendfile(r0, r1, &(0x7f0000000040)=0x7, 0x7) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:53:00 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 59) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:53:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x76a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:53:00 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x67a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2094.308746] FAULT_INJECTION: forcing a failure. [ 2094.308746] name failslab, interval 1, probability 0, space 0, times 0 19:53:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) dup3(r0, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) [ 2094.311704] CPU: 0 PID: 11159 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2094.313154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2094.314876] Call Trace: [ 2094.315428] dump_stack+0x107/0x167 [ 2094.316181] should_fail.cold+0x5/0xa [ 2094.316975] ? iter_file_splice_write+0x165/0xc90 [ 2094.317968] should_failslab+0x5/0x20 [ 2094.318763] __kmalloc+0x72/0x390 [ 2094.319485] iter_file_splice_write+0x165/0xc90 [ 2094.320440] ? shmem_get_link+0x440/0x440 [ 2094.321321] ? generic_splice_sendpage+0x140/0x140 [ 2094.322327] ? pipe_to_user+0x170/0x170 [ 2094.323163] ? security_file_permission+0xb1/0xe0 [ 2094.324158] ? generic_splice_sendpage+0x140/0x140 [ 2094.325186] direct_splice_actor+0x10f/0x170 [ 2094.326098] splice_direct_to_actor+0x387/0x980 [ 2094.327063] ? pipe_to_sendpage+0x380/0x380 [ 2094.327953] ? do_splice_to+0x160/0x160 [ 2094.328780] ? security_file_permission+0xb1/0xe0 [ 2094.329779] do_splice_direct+0x1c4/0x290 [ 2094.330639] ? splice_direct_to_actor+0x980/0x980 [ 2094.331630] ? security_file_permission+0xb1/0xe0 [ 2094.332622] vfs_copy_file_range+0x4f8/0x13c0 [ 2094.333551] ? generic_file_rw_checks+0x240/0x240 [ 2094.334561] __do_sys_copy_file_range+0x193/0x420 [ 2094.335540] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2094.336546] ? ksys_write+0x1a9/0x260 [ 2094.337325] ? __ia32_sys_read+0xb0/0xb0 [ 2094.338158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2094.339225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2094.340291] do_syscall_64+0x33/0x40 [ 2094.341062] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2094.342106] RIP: 0033:0x7f1d53837b19 [ 2094.342860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2094.346612] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2094.348152] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2094.349609] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2094.351061] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2094.352527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2094.353986] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:53:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:53:15 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b62, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:53:15 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 60) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:53:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x67f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:53:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x788, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:53:15 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:53:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000200)=""/223, 0xdf}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/147, 0x93}], 0x4, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000006c0)=""/73, 0x49}], 0x2, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/102, 0x66}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0x3, 0x0, &(0x7f0000002a80)={0x0, 0x989680}) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000002ac0)) syz_io_uring_setup(0x4ebb, &(0x7f0000001780), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0xffffffffffffffff, 0x0}, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r7, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r9, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r11}}, 0x81) syz_io_uring_submit(r4, 0x0, &(0x7f0000002b00)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r2, 0x81, 0x0, 0x3f, 0x6, 0x0, {0x0, r11}}, 0x9) fcntl$getown(r1, 0x9) 19:53:15 executing program 0: link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2109.311204] FAULT_INJECTION: forcing a failure. [ 2109.311204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2109.314274] CPU: 0 PID: 11192 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2109.314284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2109.314290] Call Trace: [ 2109.314313] dump_stack+0x107/0x167 [ 2109.314333] should_fail.cold+0x5/0xa [ 2109.314357] __alloc_pages_nodemask+0x182/0x600 [ 2109.314378] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2109.314396] ? lock_downgrade+0x6d0/0x6d0 [ 2109.314412] ? lock_acquire+0x197/0x470 [ 2109.314452] alloc_pages_vma+0xbb/0x410 [ 2109.314476] shmem_alloc_page+0x10f/0x1e0 [ 2109.314494] ? shmem_init_inode+0x20/0x20 [ 2109.314535] ? percpu_counter_add_batch+0x8b/0x140 [ 2109.314557] ? __vm_enough_memory+0x184/0x360 [ 2109.314581] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2109.314617] ? shmem_unuse_inode+0xf60/0xf60 [ 2109.314647] shmem_file_read_iter+0x2a6/0xbb0 [ 2109.314681] ? shmem_get_link+0x440/0x440 [ 2109.314697] ? inode_has_perm+0x171/0x1d0 [ 2109.314716] ? iov_iter_pipe+0xf1/0x2a0 [ 2109.314739] generic_file_splice_read+0x455/0x6d0 [ 2109.314758] ? pipe_to_user+0x170/0x170 [ 2109.314785] ? fsnotify_perm.part.0+0x22d/0x620 [ 2109.314805] ? security_file_permission+0xb1/0xe0 [ 2109.314825] ? pipe_to_user+0x170/0x170 [ 2109.314844] do_splice_to+0x10e/0x160 [ 2109.314864] splice_direct_to_actor+0x2fe/0x980 [ 2109.314887] ? pipe_to_sendpage+0x380/0x380 [ 2109.314909] ? do_splice_to+0x160/0x160 [ 2109.314924] ? security_file_permission+0xb1/0xe0 [ 2109.314950] do_splice_direct+0x1c4/0x290 [ 2109.314968] ? splice_direct_to_actor+0x980/0x980 [ 2109.314991] ? security_file_permission+0xb1/0xe0 [ 2109.315017] vfs_copy_file_range+0x4f8/0x13c0 [ 2109.315041] ? generic_file_rw_checks+0x240/0x240 [ 2109.315080] __do_sys_copy_file_range+0x193/0x420 [ 2109.315100] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2109.315116] ? ksys_write+0x1a9/0x260 [ 2109.315134] ? __ia32_sys_read+0xb0/0xb0 [ 2109.315157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.315175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2109.315195] do_syscall_64+0x33/0x40 [ 2109.315213] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2109.315225] RIP: 0033:0x7f1d53837b19 [ 2109.315243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2109.315252] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2109.315272] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2109.315282] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2109.315293] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2109.315302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2109.315313] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:53:30 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x685, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:53:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000100)={&(0x7f0000000000)=""/193, 0xc1, 0xfffffff8, 0x6}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:53:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/pata_amd', 0x20000, 0x109) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000100)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:53:30 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat2(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200000, 0x1a3, 0x2}, 0x18) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) 19:53:30 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 61) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:53:30 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b63, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:53:30 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:53:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x792, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2124.824024] FAULT_INJECTION: forcing a failure. [ 2124.824024] name failslab, interval 1, probability 0, space 0, times 0 [ 2124.826688] CPU: 1 PID: 11238 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2124.828141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2124.829897] Call Trace: [ 2124.830455] dump_stack+0x107/0x167 [ 2124.831219] should_fail.cold+0x5/0xa [ 2124.832025] ? iter_file_splice_write+0x165/0xc90 [ 2124.833040] should_failslab+0x5/0x20 [ 2124.833856] __kmalloc+0x72/0x390 [ 2124.834588] iter_file_splice_write+0x165/0xc90 [ 2124.835560] ? shmem_get_link+0x440/0x440 [ 2124.836454] ? generic_splice_sendpage+0x140/0x140 [ 2124.837489] ? pipe_to_user+0x170/0x170 [ 2124.838342] ? security_file_permission+0xb1/0xe0 [ 2124.839355] ? generic_splice_sendpage+0x140/0x140 [ 2124.840398] direct_splice_actor+0x10f/0x170 [ 2124.841323] splice_direct_to_actor+0x387/0x980 [ 2124.842310] ? pipe_to_sendpage+0x380/0x380 [ 2124.843218] ? do_splice_to+0x160/0x160 [ 2124.844048] ? security_file_permission+0xb1/0xe0 [ 2124.845072] do_splice_direct+0x1c4/0x290 [ 2124.845944] ? splice_direct_to_actor+0x980/0x980 [ 2124.846966] ? security_file_permission+0xb1/0xe0 [ 2124.847985] vfs_copy_file_range+0x4f8/0x13c0 [ 2124.848936] ? generic_file_rw_checks+0x240/0x240 [ 2124.849974] __do_sys_copy_file_range+0x193/0x420 [ 2124.850993] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2124.851987] ? ksys_write+0x1a9/0x260 [ 2124.852788] ? __ia32_sys_read+0xb0/0xb0 [ 2124.853663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2124.854777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2124.855868] do_syscall_64+0x33/0x40 [ 2124.856656] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2124.857744] RIP: 0033:0x7f1d53837b19 [ 2124.858538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2124.862402] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2124.864007] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2124.865497] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2124.867012] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2124.868500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2124.870007] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:53:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000080)) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x1, 0xfff, 0x17, 0x80, 0x7, "00550000000000ff"}) 19:53:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400f900", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250a00000010000280040004000800020007000000"], 0x24}}, 0x4000) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x404000, 0x100) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) 19:53:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x798, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:53:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x81, 0x7, 0xfe, 0x5, 0x2, 0x3e, 0x1, 0x3d9, 0x40, 0x2f2, 0x101, 0x0, 0x38, 0x1, 0x1f, 0x9, 0x1}, [], "b74430d26cc1e930d8a604f7205111107fc1d8292ad2592cc333d863cccad9e5f27ac93d0c0a2b21b7b244d8ba9035d765bf88c6788778e14ec80c06beaa879cdfcc914daaa47b2291d01d777dd531ce407c180cddbd7d8f2f646ddfd92d11566f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7a1) ioctl$TCSETAF(r0, 0x5408, &(0x7f000000afc0)={0x0, 0x38c3, 0xfffb, 0x3, 0x14, "35a10ceae768213e"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000006000)={'ip6_vti0\x00', &(0x7f0000005f80)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xea, 0x80000000, 0x16, @mcast1, @empty, 0x7800, 0x700, 0x400, 0xfffffffa}}) recvmmsg(0xffffffffffffffff, &(0x7f000000ac00)=[{{&(0x7f0000008d00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f000000a000)=[{&(0x7f0000008d80)=""/250, 0xfa}, {&(0x7f0000008e80)=""/63, 0x3f}, {&(0x7f0000008ec0)=""/117, 0x75}, {&(0x7f0000008f40)=""/95, 0x5f}, {&(0x7f0000008fc0)=""/7, 0x7}, {&(0x7f0000009000)=""/4096, 0x1000}], 0x6, &(0x7f000000a080)=""/119, 0x77}, 0x3f}, {{&(0x7f000000a100)=@nfc_llcp, 0x80, &(0x7f000000a2c0)=[{&(0x7f000000a180)=""/212, 0xd4}, {&(0x7f000000a280)=""/37, 0x25}], 0x2, &(0x7f000000a300)=""/205, 0xcd}, 0x26}, {{&(0x7f000000a400)=@can={0x1d, 0x0}, 0x80, &(0x7f000000a600)=[{&(0x7f000000a480)=""/243, 0xf3}, {&(0x7f000000a580)=""/111, 0x6f}], 0x2, &(0x7f000000a640)=""/182, 0xb6}, 0x2}, {{&(0x7f000000a700)=@phonet, 0x80, &(0x7f000000ab00)=[{&(0x7f000000a780)=""/11, 0xb}, {&(0x7f000000a7c0)=""/156, 0x9c}, {&(0x7f000000a880)=""/102, 0x66}, {&(0x7f000000a900)=""/57, 0x39}, {&(0x7f000000a940)=""/140, 0x8c}, {&(0x7f000000aa00)=""/227, 0xe3}], 0x6, &(0x7f000000ab80)=""/72, 0x48}, 0x15a}], 0x4, 0x40000020, 0x0) sendmmsg$inet6(r2, &(0x7f000000ad40)=[{{&(0x7f0000000840)={0xa, 0x4e24, 0x1f, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000000880)="035bb0131f42951ab8d1fa3974ef3a0e7894fa8fc8bc96bb2eefd554dc3368f289e2300afd82ae058c7b2fa85e16c7336d8ee147619e637b7c63533383c8a1a6f627a80ba17121044dcdc77405e7f1e64b62b41a4d8ab7a722a50cd18342ab375db042c62bd30437491dcba3a8655a81681cb1b7133d45907c3bdb41143d3afc7b0963065f549b02160e358ed2ba2d3e583aa94c441fac6d015d3ddd65829f8189ae5fe8d819b9100e2e97e2e3db8e27229a1b9b825400680d8c2323ee7c3b3d13cf80b83c23e2a7551167aeb0e4a45698e379d113aa324fe30da69fa144d1c2b70df6b41553f43588d2168bf4144941962ca13e1d8a", 0xf6}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="ced473795bd5d2ae8ec0343feae67c257ed99bf02a4b3bf4277b9083dfe37285173f8d273e21bb20acc87d0bad016309df6ddd4c3ebeef21f630a4b7746ba18ae72e8294fa519cec061c2753bd657daa8b230dea6f8f94cee5ff608047b0416c265fcefd37002097c52f225d12308879ee60fb8cb898490ec19b70d3d6ce393b1ab11299cca3c20ad4cdd8c177deefd09ad11502d919bc412385907164302d6ed075f29ba4f350c95d8876d0a90c731bcda265fa3bd394c1aa1c7c62325a92130a317f86f1f91ccec40148178b55", 0xce}, {&(0x7f0000001a80)="97d5b27335b2483863f2dd0a4c4c81ed5f7c6ea1a5ca31039ecd283fc50be4bc30a0dc80bf96747fe355260f7826fa240dc8138bdbf4c609497e56190a0b410d49e51502bc0a4e09bdb605d6056dd01711d78343d4d03475e446d721a0", 0x5d}], 0x4, &(0x7f0000001b40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hopopts_2292={{0x1070, 0x29, 0x36, {0x5e, 0x20b, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}, @padn, @pad1, @generic={0x3, 0x1000, "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"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x81, [0x100000001, 0x100000000, 0x4524, 0x3]}}]}}}, @hopopts={{0x140, 0x29, 0x36, {0x3c, 0x24, '\x00', [@enc_lim={0x4, 0x1, 0x20}, @pad1, @jumbo={0xc2, 0x4, 0x7fff}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x2, 0x1, [0xde, 0x8, 0x10000, 0xca, 0x2]}}, @jumbo={0xc2, 0x4, 0x1d}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0xcf, "76d34e5bbd8bc3f1deee8dfd9c549438960aaa242b96e9b78cdaba83cbd9d11b7f1c4779c5459c7d948b3020d53f407ab54b30ca1b08789a930cc80a7782eb7632c01b0907e8cf78b5f43d65b089567e04a5302387134fd336666dbbb72a4dadeb94bdf2e276f1f658c7d5bbbb1b69cd8cc3efaade708e27bfe7929a17850c82968ef747cb08d667d369291ed3dc27eb42b9710a856a879e8585d5238de628a8a37c4e8685d51eb5eb802bb3aa54a05b77f6b7afba99da853c706fcfbc02fd31c06f7c9886817260d84b2603798a06"}, @ra={0x5, 0x2, 0xfd}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x130, 0x29, 0x37, {0x2f, 0x22, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x1000}, @hao={0xc9, 0x10, @remote}, @generic={0x6, 0xde, "9fe538ea898997902e94007d83198d1f26f6b8719999877f6bfc6d309963abda3183256d7bc643da6079a89778f1b20696d4cb80b8f7259381f62c1e49182842609cfe8aa6c02e1a596687304ad1ac744257bb981c8a0f15b1c988d7387b63198daf6845a87edb56dd94cae0d99a780551013f5479b01358845b26c57a05e16d7da6f8e1404783ae1c83c4d169414e9d6c327a875b7c83bc68b33b9f8e7bcfb8ba2e23fbd9b0769a893093295fa9c46af24097bbe4f97e722f477d5f43bf48f396156b4f028224c292f144424b32aef80691c802c9e480a1619615a3cbf3"}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}], 0x1318}}, {{&(0x7f0000002e80)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f0000003fc0)=[{&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="2895249b65e38c3414ed6199f5ccdcf94f0ab54c9bd01c1cef94cfabd952a81e356f5db2a3ad5f494e231489fdbaeb024fbcbddab790fe963ae21710a0bc4d728e56ff37bc3b3205274eb2131d51d8cc2ee35db5c636cf53655d963b0b8d", 0x5e}, {&(0x7f0000003f40)="46ffc396d5ed2388cb177b77cb7fda6bf7f871eb6788ffc4a95b16bf5fe4f7b65c6240e26600430142e103b1cd296c6eed19527bed578c4b486597a6bf17b77a59484d25e33814732eb805401adfa298f0b06787b92f24c7b096bb748433039455eede37abea7fd5cee654f264f6ed08eb98d5f09f", 0x75}], 0x3}}, {{&(0x7f0000004000)={0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000004540)=[{&(0x7f0000004040)="b8ddcca7a72b67c55686518f3896c2bd1fe8f34ef62e1b00083666bdcec687f0fd054ebad926241f37ced2c8b8806da55de784b4c0d3b82ad23f5a654dd2ac492b716fc533e280234ebfe25e1e72f48cb1be93ac2a6898be792fa5e75fd56b28724cd37a73bffe375c22d475fe45f9b9a385a9f468b003d049855fa2fa69940df6baeb80ee68c3ec21c8e2e944baea1c035ba3d952734ce2ba285ffb301222dc4d206d769219b80a36ec8a90b35f32cb92a287cf7ea8c23fdb7f6b", 0xbb}, {&(0x7f0000004100)="be276ce7f31b23c0eceab88a4fc836a5a038dae0467c6fcdc82ffc75d116442497962fcfc3a6caf84e393314e630404298da6683bca89d59ab2c581e94822101c69ebf33be262748cd00e76642e15ef25cd2b8580df6d767960802870fe76a07e20747414d29b2a80c0fdf8dd6f7273af7b1e15aa8280648212b0f20d8317b665df9a36929be20e3693e45f454c17321d206", 0x92}, {&(0x7f00000041c0)="5f0a11b0c95a329004f8975ca18a9032b64288654a18a01f554bb33393bd97e838", 0x21}, {&(0x7f0000004200)="1224bdbcc942da3e48c458d245c485cdf264193138f4a287ca7c536c8e2d4eb111103651e0a32fbc3ad8c1355b69500a86c5d238ffb87e85b0324c5829b2c51ee058e9ffa8e28b2b60aef0584e054dfb279c71ba7607dc94336e6baa89f011e474b6d005c693b67f0c2fd25231e4f7cd8cd9588c9176291b4ef29210a60ccb3c507b141797fd6aae07c77fd53896f5e5f675bdb53a4139b840f80880e409605d412ea06b82fb3d95f5c369c095af068b5db89943836b9e0b775d362084d59c27e1ddc6e1c85c1e27ff9c793098c7738f7a19cb2b04ca0b79dd22ad6d194b0244dd85514bc1d681dd8ae44a80c98a72d6074fabc1", 0xf4}, {&(0x7f0000004300)="557b897ddf29e55e896d807e5ded1bd3a331980c51c15e831f2be1f6867549af809c30490d92187caf9f31bf7e7e0ba1ebb23ceb19a071ad7100d1f394705298bb6ef86b6e60c4010f83b56bb997d424a6f8fc05c7cbe9b0fc7a032c5ffeeddb45cfe658e4c0ff081d44adfc13b4e09ce98aee59ec98f1b4fe053d99b94a807ed28367d3aca5a530da87b43854bca49805686e5f09a2bfc5d5733c06a4caf6303541a94f4e53e05834c175e13759cdff612428eb24a4a4f64b16", 0xba}, {&(0x7f00000043c0)="a1279c756fd509e62f63783688d38ab088a802343a4721dceb7d23d65af5c4f7220bf5f88e825922cdf1729fe798ad4d4c0691a93810e1d4956219022c43c732aab3335396e2f1405730207bd98e5f922cd17ec29cbcd6a791d1f16d68fb577585281284858b4034", 0x68}, {&(0x7f0000004440)="ae2e4cba2801dba6a9240659072d7682bbf5948681f2a0dda76a8b5d4a24b12277cb3262f88c08ae3945fe2b22b1e8294c2723d5c0054b08b7648fe43e25caddc32038bff5a1d92c240928b89da945ccfb825ede350857686765de5be81ae6a3c60e3b8f795d7a3db8aa449d2f15f5afb79f59ed370c3a294937b5c688bb67dd", 0x80}, {&(0x7f00000044c0)="3cae86562291e331019e54a1db80d13230583f356133cf90d27515b5896b01e6d145fc57a7a9a542283aca2730050fe05f1b27b1c35126cc57c8e9b6b973516f0c5bf58cbafdc00d5891b8c3d76915a54de78f86bfd2a14190c5ddf5", 0x5c}], 0x8, &(0x7f00000045c0)=[@dstopts_2292={{0x48, 0x29, 0x4, {0x5, 0x5, '\x00', [@ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x8000}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x3f}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x2c, 0x10, '\x00', [@generic={0x47, 0x73, "73532fba5f4146e04757737d678cb50b27d5978829c676f42b93475d2ac3c3dd54070f7197cda681c2dbd8ee395070e0a69da9e909a417be343f515ac85452354bb625f56c2d41dd5d40a9431aa451f8fb59c857a39801d0ffccf536abb116b3fef31605326c0a13850c30e121453d7c91726b"}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x33, 0x8, 0x0, 0x3, 0x0, [@remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x21, 0x10, 0x2, 0x1, 0x0, [@mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x1d8}}, {{&(0x7f00000047c0)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c, &(0x7f00000049c0)=[{&(0x7f0000004800)="0454c71026ff2bc79cde957a218aca6e6a80937548c4c584b58d94ada608d56c32e7a309788afb8ac7134a7ef66357f61262b8260820fc1209fae6996a6f26f87dda92241c06ebee5c74c591a438b01e5718555e3fc010e6fb7ecfae5a63c138e1eb00b3c2cffd1d51aea6029c1cac7b3f23d6faf95d087b2f7caadc3864e61d632d5642cb18d014e845b1297ca25b502f849068505c14c986a5192fdabe0869", 0xa0}, {&(0x7f00000048c0)="0d024e3ca04484ca7d1097520990c2ca3715fc960333d470aea703c38fb2a212a77f4157e909eee1850e91626554ba89ec079a2e74b6a52ca8adb04d4d91c9ca0f4f1cdc15c3b674cd017aeaf33f42bcf7f532a71a7303fb265bb0fb1a6da325b0d84a0b4e5125e49409977e921456c3d46b1b8ce5c45ceced0bd94da1d780", 0x7f}, {&(0x7f0000004940)="d74b845757ce247284fd95c763b45153a67244b3de12ed04e7c1137545d58a0906ead80829ccc3f4e79d20cac8096f45eeaa3b007e73816aa00349182012cd1d33cc656ac7504221ad927c982232e0fa1a437a85de63b22971b435a506", 0x5d}], 0x3}}, {{&(0x7f0000004a00)={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000005b00)=[{&(0x7f0000004a40)="4e9c8fae6e92daf84f7a90e4fdd585825c6a43f87fbbe8d5c2786a60aaad28c49b37e1f1ccafe5ea23ac9b1ac8c21fad252c8b72380b4e2c5d1781fdc6bdfc144426a4fcca652ee2426b4b0d0c6ec09611f487f9fb01e5dff23968449e82e8de5b12bbacd145847be9f43bacfdd227eb5acd980ac27b11aaba8e91460abfc4aed7abbd404ee16b6c48997dea4539b67703871167326852e43459dd58", 0x9c}, {&(0x7f0000004b00)="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", 0x1000}], 0x2, &(0x7f0000005b40)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts={{0xe0, 0x29, 0x37, {0x5e, 0x18, '\x00', [@generic={0x3, 0x8f, "12d0af51d4a7f12960277a21a06b243dd1b3fcec84b7efe4ab069f7c2fe0bb8a86e7678c74bdaab701996634ea582fd4f37fb4fbeb06fd2550466e30ce54c17c7de47a696795d9342f23aecc80a39c1376b0319928c8ec0b709b9dc45e78b97dee080001e5c8eff7cc6ddb2e849b877bc05c0be81b14f828d5a106019a9e6c1065bc3e742a296a1b4b83274347a959"}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0xf235}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x7, [0x401, 0x3, 0x7, 0x6]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffc}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdr={{0xa8, 0x29, 0x39, {0x2b, 0x12, 0x1, 0x81, 0x0, [@local, @mcast1, @private2, @mcast2, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x228}}, {{&(0x7f0000005d80)={0xa, 0x4e20, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000005f40)=[{&(0x7f0000005dc0)="bbe2d10e38da36be17e6a11820b211087360878a4551a361e50dcb884951f3e3a24b7d4c53682b110191f4cf7eeef38e1da3654e814558e1da3b9ad0d2e0198898cb7e3f3903e1989eb8", 0x4a}, {&(0x7f0000005e40)="e5472a6c5e", 0x5}, {&(0x7f0000005e80)="63775724f0df077aa9b4d7eb092ee5a73732e9d54f019cba26f4922182f1713af659c7c3364b69d3ea8fc7ca9a8a825ae75afe037ec45373ba6854d444cc25a5a23e4500b4c18286a618349d220b44e287b24abb16f74d28ca7f990072962567c6d323f8c8004dc56e1d54c5393453b54fca77aed85a02628dd35a1c4070f1b02aeb79047399f9", 0x87}], 0x3, &(0x7f0000006040)=[@dstopts={{0xb0, 0x29, 0x37, {0xed, 0x12, '\x00', [@generic={0x95, 0x88, "f8bf986d3cfa61b83430b8278ec0cff2d8713a67752343ed6a488fc63876c011db7230ee8227f6698e7415e1fa504039369ee941c7ad2d0ff2b2f9691e698d29a6f52783d74fa7b01a4c618f3785d7cf056acf06fc4d94fb7f5f7c1921e64cde1a774d1b2ac23e2476ed07558a08cf67b5257388ce8d5e60b421f2d551e765aa1dc000fdb0760cc2"}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x8001}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7ff}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x87, 0xc, 0x83db7dfbe99dc836, 0x78, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast1, @remote, @remote, @private0]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts={{0x108, 0x29, 0x36, {0x2f, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffc}, @generic={0x4, 0x36, "6ddc5a83a4eb2828cb3f6893f463d75f095afff555eb202e888ef50d11328dde2a1b0e09ebf8d1e27f387be38119c14ca0153427caba"}, @enc_lim, @generic={0x8, 0xa6, "6f13e1855bfbd3ded459c34a5770f1d421f58972b5b2e6a5d0d559393b63654c31bb65a44c55be9ef1479854ab30e710d628025e967839f9f8d4c408431219970f764656423c8bbc0b6e40ff028b208c73156c270b8933941f969a767323b9a3688012490f72989315d6fcdd9eeca3ca8bdbb28a1d3e31d9ca9160aa7fbeaacc6c5c8a7ee3f96b1ce933b0c1fdcb6f38f574ba03b810031dc18ced8569106c8bc23542fb2bb8"}]}}}], 0x2a0}}, {{&(0x7f0000006300)={0xa, 0x5, 0x5d, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c, &(0x7f00000065c0)=[{&(0x7f0000006340)="9d63bf64ea4e4b1504faaaee4df672026f87b6ec6ac7d36e4a7d05d0cafb1a257cc63e1cb0f9713f086ebbf35428c2c459219213495d7e94f25374d1177b5bfc9cd9a1569b3df5231e0d90623399389f0231e83b6c1fd14f32f97b4e60bf3ab4f3e1d5b105dc8c4475c14d0223b22d34a5d1a762dbaf992046d7ef3c565f3cdbd534ed345e97c6938c72", 0x8a}, {&(0x7f0000006400)="8a5aaeead3c98d19e1da1af9cab45b7671d42faf2bf22c6dde92ff11e1e961456f88c7eb51d372465f322056a86814837b46be9c6b7bd62a988a30a8114a32b3a3964d7133aaf335b07574c3a4de8e4d9b3ef54543827e4954fa6c4c2db8ff731663f832956ce56533dd781d2ac52c8e3a1913", 0x73}, {&(0x7f0000006480)="040f632c36182fd57bdd004a10925661b971bae70d83f06348c3b350e27148baa76afc1848fe4f87fe9f524e1d80fdc6ea63d46bfe1f5ee4cddbf2effc9845e6e723d0fd6f30bd", 0x47}, {&(0x7f0000006500)="8458b58040c4ca", 0x7}, {&(0x7f0000006540)="5db7127168c13df33895571c0969f4adc65d442b092d8bda48beded9a79384150727f7da0f4ec4c8615c6f8c3ea9f9e2dcb9a5be7c152b05acefb7b9482f31759aed4fbd7ad6655f7ca373467f400086abf05303efbedbbd05ea15cf3f812b7d8346a93694922d805ef0eeb069ea80592af41ab1ab269c135535e2c2", 0x7c}], 0x5}}, {{&(0x7f0000006640)={0xa, 0x4e23, 0x0, @mcast1, 0x7}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000006680)="52b2063ea775588c92f1e1e71042480a56eb16e0eed3e41f8924960ca70a7ed445ea39068670662f2afd7b801669c8f0d2464d393f844c5a1aca75d7a89a7076cc582f3f1217b443e55feadc302cacaa5730a22d566fa5f6747004fb4018d30e761f3381676158aaafb0cd51a0e50237420a2b0ef6193fa5af18ca7c81586200be5e343f63bf4c4387d03d63f7446214f60447b1560ffcfb8aa005c41d76e3ea2f3810882183ee82d69c278ed42f2d76d5f87027a185910e5586255594a87db1f0130f0462ad8cafb29e1150b9a46ba163aff990b0e7c0c6d41b0d6ff24494ab5947bf61253097508c1984a0a002e457070a6378e88922172055d948e008c24e84d718811add2c6b749657833e5ebfb990c38636eed26784f97083e1f9f12caa50c674decc40a75666e956b76350729257c131f8a3f1eb3c59c388ac2827b3fba376dd9aaa732e3f90ca3fe99b4c79ffc3679625845699338d3a5a56285de4ab1d6e939a60ebdc8a5ca84d7d186ade009db039475d17a85dba13dc036acfba7d1543553ba14d7af9166affd8ff71bbaac472ae16b1ab7af3ad84e9856147cb61b44853653154d5e75e5f0b03e37b5ab1c521280d206669d6a6a79a97be9265017e595125a8e24a5b8cbb02830da719e5732d07479ab9c99619a74cd7adfdd075ceef89424f8fc1675a59301597ea1fa3fa1d0f21bd95bdd6fa85fb605946c0606c320f1068a0436b4752cb743630c53c25e93794258e23acab741d02739261af786c818b2003a1a60525ed0728a228c13c7d47d3cebaf01040e64381ab7e021eb9f4d4862e85b3a94f0e171e4b113800b977a6e7fd88cde4bcf90fd3f4fa66cbb1caa63e9adce32c256e216a9971683b97334e826e440b65aff3b5f587963f24ead7b7bfb7c347d35b3593f26c33c08dc4627c94bfeda795c38b42a87270e88802f4b1c12e66ef5f5297601ab20ef123915676a9d5d64a4a57635a4c1bb789d1d1f9a38f6e7911188673f93a7cc1caa80ca968473fe888fa74573783db6fa8d743a76d6a06e6fc5166570a431b1011c77a16a0df524b8a4b075f1d4d8b7ad44edb0ba630a4ac1893732213cf8f87bd9559dd5ab196f9ae99f16ca8601cb3e1b65034ee9a41b23ed64bbcc5d6a6df33c55e72fd3172e1ca76c21395e04cbc4e8108fbdf6d04660b7c29c486e4838fd509281d6dbd10519dd4ff2957f8260d60bdd8d1f8c0c429f4427b137d4e32b3b3f78f380094110261dd9ca9501a5cc51bb9020c111bc2159b724f05aa1846fa2997e51bcf5bb1a3ffa196e3e1bb1a1f2e6303a1fc2708ee2d385f0375def4eb70abef99193618c79a7c99adee897796ba0e9124f1d695b161a6f2a5e173b7f9b726820a4000a717d6cc2b63776309363edfeb61e40a94b9e29e65742f36f497196c49f2bd1e1580d9aad550dc6c8ae771c50fcd7cd1342733e9ab136301c8e62c9a700318c7970d82be3b0db9d162f5893befaa030394e1543a54f4f0b507359954e4577b89530b48577d979472d3775501b4e7b54cc0334825d0f2292ccb6b60489f181d9d03c23c05022424df2a44f0423c382ed55d54bce426cb9e8d29ec4a85a710651e4ee8d69fb79815f1e094632c6410c42198b3a966028ab078bd8486583649e0dfd6b326db58928656964819e38cbaa2fde1644c4fb0ae012dcd5320e7daa988f9b0d6d2ea326fd669d85bb7217696d7b413fbf4bfebbb1787fbe0d15241e0a65f1aa117109aa79a690af61da1fd3ac9f7c3eeea3102bf56e397c9c4024167f6a4f83c4fa62aa71ca2a7dd1f1b61fbb4ec8405e02c42356a8e7b7c0a021c867751a77e718b4d065f7eb852b7fd9313938740a9260932344735922c9d96e558f242ec1cdcc9928c77cc24af0cddfc51c1826f505caeae88dbaf82e53ecf1854c707984b7f5085ee40b4a79fba3b544549c1491b56b02716f4b467e7da4a1f96eac5ce0bedae51ce2bba410aa39aba96aaa7d08cbf215c7c6ebcd01459c29e6242370262296b7a976bfc350b068f5415b7e546e13050a0de760ae56b514101f977b34e7e394c7907a7283a2d10f8b9d36a4c23a4184dfdafbe091d8c53475a762ae9b774d991683bd6734c1699d45e53fb6975b513661544bfe063348e03bdcd957a9ac3908115e47b7003c52dc7a33d8ffe922674afa99f86118e17880fb57b31cdb31e827ad931bee225358a9b270d5c0d03092564302e7916786f793907d3133a9f1776526da998516cd10c88f8ca6286fccebb413dc1c36c633d1c56d0ba70d70349fb32ff8bf56697f3aa4e9d9426fb2fcb352b63e8ef099bd3392a3f6d0ce0cfccda91bde1e857aaf023c9f5229a7ea6234642a2418332f0db5f87f1351ffdb318e43db9f0ef413426160ea954af036a4b88fa5ea3c436689554a5a771b3baa783e73274c4bea14ed6ae8d7a30cfd5080b6260171795d01584b2b8081ff2b935f943d0e513a09f9d80b8b8581e98c39c61dbdb1b19b494f8d36fcf1d3f33d11c9b916cf99c9a56287c181abe60ca76dfe712402f161148c323ac08712c373fd46510a71e80095e6c4639ffa58d2f45c9a7de6d36f1b8b9c2f787cc7cce6d77af1a19bf0bca97840d96117773d0cbd72989497811c38d2f1b30d44df0ee6e5bc24b74e6e95a636a4983597d5185a6f5dde4753e676a1a70e2a2f6c7d414e5ce7aa1568331c366a85b52d0cc3ed3f44d8af5d60cc605177b8447860922e765869b82ecd8ce1a0da8e2fcb95bd9b3b88e4e10c793c594a0712672f52e63715b484eea9b0de89e586bd623d1a8ebf033fcd5fd330f49697925892821ce2464f59de1f6bab32e42d2d7dbb81e6c4eb2c6c246f41ba04c54cf71b3f642571b9a559b25c6cd55738715e99ffe62c3e5d42479b34ceb314a70a780c17abe1a14351419f418338c47d63e4b75d41b66dcdc795be3edb20d56dd8926eabf8d9376d076e7b9a23847a90c6504d05bcbe61f7737e22dc3812e04cbabfbb89b99cf44084b669ab90a5e5c8c3490f448f8788b7fed018137fa1d856f6bf181d2920ef883525a145f5e4f6f264c40a66d3e1dd53022e9d7a00587b2abdadf17d48bd7a0520d9364004843b65e56834d90d07ed3856e615457c42a9a918671e5fe538916498bbcd84942c61fbbfa3765d1c192c2896d8b148416fff5d8a7f33e104d1016f8d102c8af8ef0f131c12316acf217f0bee39cc128385df5b275c2b23a4010a26db079da2b31d5903b960397c904ecabca9dc0e6adc02bf838be7e7ef4a40a35998fcbfc9b7f60f60912f5577008394ae30b1c2557784ba3dda754cf288c2485ce95ae5527bd9821f77c26a7a378e6b10e931248957e54605da05dd8402be9265249547ebe2f7bcb9e21d478d0b658300f7f2a4dadf93a746ed5f8b3a1516aa4c3bfc26691de199d8eced737bbd1379b28c81c02f2cc954027e00f372e39baec42a8d103f06011524a2fe875294bffa86b29371dae795907438e71b421ddc16d42e031acc83dad85fdfcd0f43f7ba50fbc3f68a04d87a9303a2bddd95c9995a7a857e82c6b0747c25c8003450fdc8ce30b465bf79fbc55f508ad456b9db515ff55457f1eae000777035a57bf6b9619c45bfcfe89a2bef76930adbc768df7675e0712ecab81bba9ca50a395a1509d90fa689564c92fabc9ca702f9b1e783e2c9e3f81ec13df0ba78e75b5820cee95dbd64b90dba371c709edf0682f1deafb938007a9b9d816eaf2dc7647405b3a0411be4accfca169f07aec721ee34e37eaca8d4429734381394111b3b94acccf072d461e1ea2b0199f35f626b5b997c54e4808110f82be3b3976a1a62cb16a031459312425d594851f64dcfe45e8830ff99008f3d1c3f1280cd6e63bd382baac9a69405b436169a6e6c21df0ef7ea2864d7429611653c8ff9df7cf7d7ad24a177a6ec6c9912f8832f2b9f39d3c98d8d1e67ddef19eaa5c3fe273b34c8bfad63c1c899b6db699d6e2d99b99fe74405612f5ac635017d448cb69deb26468128e3720baf1cb932670c181b1817144e2a5ef60b388cb6a5e1458209cfb8b944547118f2feb81dc42144b3c005a033867bd4dff384987c56b06d546584583f400f921d7a75e1ec790679941e32a9bf4c635004539aa4d16c89821cae683fe687553577035ad98614ecbbccddd1fb807897359f38cfbdbcc73ca6db1c02c734d5c5c10ab00579b2458183d909ad3420304f196ed3aac7b79a393c300ea03fdd2beb93967299f871e1f70ea638144bb3487240b163f2cff1ea9f348bf8351ebc8273974bee99cf27e18469494de1eb08cb20084d166b06e9a951fe94344032285b2c124d18ee80728bc59d699eab641be401cb4fd8acb7b9f636213905e9995ce6980d2b70469a2b8b822d0759a18de42426f27cdc76349b3bf917809430e017589f1827b44bece2762fdd1ad16a4a8d1ffe3fd268f853100fbf11553b404b55bf7d35466c49346854f0dc5cdb088f23f6b8df18935ae700b721222420c34cd309616d3903fa240b2e0f843ea9457b29986ee92840e752e85742dd6645b53d43b14780935cad88cb770e492779fb195a36a4758a32c080154fd6e032f6c101b835f3ff5a8ab8578781a0d833dec5d21e121f6a304f56dc8fb62a1aa2c7435fe0601572c395c5d4aa2cec3927db6aa06a460ec88bcc6fbac743c547f0b36844b61f7b614dd038ad5432f1a3f4e2042490a08c1bab4d982bacb19e565ac80258ac479ecb71d3ee50fdd080a48d5ad4f881471efcd46e06680f580b8bfc7451792b08c59e9959391f4783cf28431fce04a994d5bd8ff5a365d7984a2e044616230a2a73bff87c1fc3ccad7ddcab0ecb278f6b209c900ca14ab1acd1b77a38015f105cea3adab7b0141977c3493d4c37d78b0d5857786190b0d9ec63818e0e520ebf8e0977ec17090517199c06ad7bf5f8b3cf86178417e519ef7bd462beabd22a5959c8c1eff014bcf91bb97b0e6590804e1b960842f53f89c41103cd76ac1ebc597357866d9b18ecf17c61f6e874b2d3d887a5a4bb934382abe6d3b7552aa29f7630170988914621f058d79e41adf79884f528da34f897e0378d7f31b29511e1508c34229e35461a1da3b0448e7f13c5a12e98503f6493e03b9d150c9cc279817b04ee6aeb7e2d2e4993b154c9ee6f5a345b1112b4f46012c8a982535c9351f66fc5b712c67e8615e1ad25a3ccafaa22070be5b398a533d9c9f2dea6e29498281e27684c1cd6a6dcd643d9d9011bc5f573374f670750ec4b50129f43dd6e2c5f302a15801bb45e8336f9c98e52e848ef1ebdcdebe0d46a1914c62af131edb74bb820f4cc83cd5c4d7ed058313db73af6210238d1654ad725642a3ded9bc1b27389af88cf0c4d193ab7c3a54276cc273844b86c7fc754ee01344449d83c9db1f68510083901592c0ef9ba3ffb314033fcc61aa5914c59115b61d7490a9512afafde78f48364ed502f61e865b31088673ff36fe67471e511d5c037be630bd1def435b6915be605494e1d27c63ce80762d3d779cd6a375b28e4721edbb21832231569bfbc5ee2fda1c455ba5d774560b7e2a6fbe162506e9a32d78ff3807bcf08567995d7678776f621ba4a976c01b78d296f3d244caa234ea634e1cfd65d6284e10e48d5e8b0307033cf1f3ae2639b72d5f405e79575bf1a361b8127cdc4691b4309927dc65800a826c682a2d5f00d1546a6d8cd94d935080dfa5087c2794f064b530b4d1399155ef0ad27636b29d3a94d70e206f1309d0de3271b453340c8cad6c65e304886c05", 0x1000}, {&(0x7f0000007680)="04ae744229675b60b378c50e6730b8ade1cee97036a9d569edc859161061a672b4247702592fdcb647147789477243075a5dc5f2f34c0b34af6541f8ad21342322e96e7cea5a77bdb6b4cff2997f524e0df1b679aa6d913fe83560b7d7d293d59ad1d500fcaa81a9299e1578aede941c4fc001c5742186eeb2e7fa79678a7d697d4820f8f94a97501e606cc2b5731cecf57342e7b48f82e5d980fbac7519839f63689b4bcbcc94c1f5b9add205", 0xad}, {&(0x7f0000007740)="1729775b581e29bab18ae040bd50be34134e47d7e9b224eff46066b8bea62199529856a8825236e1f14ea7b7001de41c43998ee3f348982a26244648550af134c6b30d94632d967966222b59f2034ece0a9a81b89a7e984844a212ce0e97ebb45c18cd50b7e4ea6bad7cb49ad23f1ebe30f5aa5d1f98baf8f6031c078967a34a508ee1922a92c9d44338d8491df2ee7d5b81ca8766789791fbacda8fd9c16578c0a6b3499b52ac774146ca61b3881af54dc005b9b976cf3b99fdfaf1cc8eef0865442200faf99210f15fedeb7aa5fc1b7780c98839", 0xd5}, {&(0x7f0000007840)="56f9064c97c48ef84fae053de73ca50066ddc1c15697459850c4f3b915f1071fbb7cf6ae3bbd3a705a85ecbe7c22678f87e4e888ee4b8f33ac8b7f82da828de8d0d691cae3eac9be6d1a0b375c514b82656dd8d61bd94bcb1012b4ce7b19460825bbf0dba2636b001aa86fb632032d2588b2284d4c92fce4e2ecedc5c1c26ef4f2be7d1dfd", 0x85}, {&(0x7f0000007900)="4be6e1136dcb17bf24a9221c517aff16e1bc199ea422517644fa0f051bb2e4263b588a9bc1d5c86ec92f9472f693391a80032c1c2601a0ea445642a8274f64a3d08f8e5635d2dd7b968419e02f2a6f6a2735e9dcb0f7b360f0065432926c36fcc437313b638edfbd04f2130a527301a42cdc467b2fd7b0da2469e8345dbeac57783d72bcd444a807ea97f1b46dcbe8b1e2bd2aef985ffa5bb536d05a40a9e5538a063d9d27a631f0541b34ce80cf92d5423085e868fdcc902e9c5c97668367def3ae51f4a360713fcfcb50f855605447068d130482f3a16ae3d2308e4a37c6413e53fa685dfdfe1f89216866f42502cf69b5f33b83c6c422de36842d81da67140e594846e3eb7d1f7fd3fe3b6dbb88cfaf92bdcbc592bb0c208b62e1c3721452ae37659bf1db0342c4ebb20f22ffcf28c0c93b7ee35affef921078ea7de8c800cd8e988f4abd7a070c6fb034ac751e6e3d524829d5ce1b211da85227771bdecb83f485a0c09a6260dca5a02771b02b67f26e9551d41d87d6c121f99c71f5bd52320e6e710df9abf312fcb205274b3c08d942c5d8356cd5a4b3c426cb75d343a9579507c64244d73ba17f9883e35b9f331490c0f614f6e1caed4f0d005d70d7f71964317fe2fb0ebdf01b88d63c639edf5ebc368a68fbe5c738d617e7bde358a3f50bcbfb4127f40847a49387258fd01606320c0f5a651cba9c7fcfa4242e965d545574705eeb554c06c7bf7279100d14a08edc22c970d34ef6109de1263779f5e9baca191c11142079f8617dbb0f3d24646205e0b537e328feb5c754738e00e9d030806d81107f88a1ba5ec47c79cdaaedbb535952b8b16dc58a8cad8868d669541f66b6f5ec8d40cb3fc5a3a17731c0889c932ac21211a75aebaabbd956d766bf7d0957269c8c50065593f030ab0f3e555e2b9572aee3ef4a55a5d9558bef0d986899faab12e76b28cca555f5e43e6bdf4072b8bef6a4c742f6b22af01a58646a45cb2385f4b4e6bc00595f735e1404d460e0605693d53326d950e595e9bb171cd1790bce1002d05e2a8a85b3a6943b6020fb635a3b83aa3e17ffd4300ae35a1d43d034b58b5571d6d04e4f73b604d88ed93edc6e2a7c83e9635e25f6e0ef01c2f1827f833aafa3194709f2417a7e7f83fdbf4c0dbd7bf7f3a986abb581507c775fcb63ddb4576d49661cbc79755d6a9fc46b033346335ebf26e8e09ee38ddb0435013745cfd83140c3c6fa68103785fc12ea2b48b0f9aecb2e218816b6c9dff7ed388505c554d6930cfbcdbba97e9730fafbecb1268b1e617e4010d8f9acddcceeee7652edb5f05ffa89514f73fa2c5fe1926ec8c73404147bf31c70d4b0c26064e132522056816de21e24da1c814ad200969f410cca7507b69dcb5531b1461343d1ee590286e830d8df7731d1f19559e1a9ae77a4b5b59485f50058f64fecd068e63ea83276252ad69be330d03df8eadd3ae42b975643c0e3d0abbf4bae1d3dbf5921d87ce76c9f713a9b8994bf4dbef97cea7b6901e87a302fc7d69a1e738b4ff8007302c6c39c8730ab3b859856ae846e26c9fa6ef3ed180a40eb0fd3b2c01334c9ee89923a257e9862f0acf72d69e058caa7181ece41dea4ed31e1062140c62c063c5cd172a62cabdc9754da2e42fdcdedbce9ee538c5b616e5bbc924fc8b0687cfd30af2dd9c042bc8aa5a399982047402e045b7a7beba711ba26dc4f4cc697875b56070044d91f9594a294385ef48fa44564c8b16c189ef77ab28241c7db57bd3ccd5dd1cb9ba6ce77656f07a53ed8439d3df2d13dd5b2340320de8afdf3dc55c15e0fdd8239daebe497622e2d4220a4344dfab81bdc008cfd8834a83db601c0d9df7d13441a42440ad44f827d1d20b0b4adaf0e45ef57cf8445abdc1e38044bfa7e395f1204b5e26d6bd57f9387b3533bf7ac04db9b5c61b61ee0b59a7fb824b21f6b44c33b687ef7efe8618cfff0a2f36a0c7c9d84a48e42e0adba1feb60db0457bc37164bd0e668af61891eff123ac4b854c51c2dd8615de8d1528d0e61aba1145638b9a817dae4b927321333b49bc3318e6e53c2a0e1a01880a8cf9a578d0f07359c3e41e51022f1abd96136f1df385504d22e6562364b5d828c26977994699a3a5cbe68e55aa1f94ab33cc2c808e4c8ecbf4f0bac7ec723433cf593b42b31522e51cbc62702a7fd4d3e6b8f62a51cf663245876564bbf9559c3930e7573c58bce679b3900dba87fd207a8d45642cca35485c9e2e69876bb1a63c64e0c79b33b95dfe7246688a076da05bec8e77cefaf33cde407040ed9bd57a6e77ac65b85b21cd6da767f8c32f317cb93d564e3bc08622b2794e628c9a50c2521e620c81fdbd7abedd8202d23022d6cb39cd5db44053f36684512a7818623edd917ff863c8a7bf04c4dd913e6f63f80d6fc342aa510074351c4e903eab76ce74648fda224566bb4ecec24918e9845ea882764ffa62dd6777ae32e17f22812eb9f8e3d2e3c09c8abffda41f98a268bc48af484367e58edc7b71fd6411634491263a43fc63893f5c57f92c836236bbddb5c3dd3e32f8ccda93d73d8e128844d9a040217befb24f6a7fd780bebee54ceb8b723b3bad78e3c3b7f3a317b8d2bc09ae2ff92930f2a741f206fb05dfde5c3c0a29e92a9b7a50cd3b59a596aa97e01d8f89a1ea8dbff8db607bff3e9a63bec85e8071ffaa97f6b38b2db037c14679c548194953dc2391ba6466ad8f0fc19288a434196d576cfea1c9b44a7a573cedf4ca4b8e7d05a7d65523b1e2780125705b7758c6a3b7ee88f568ca8af8f32c7acdaff8e20e7491155ca7eb943e0f3d219f8e636ebf00d31d20938907b67713b5265d6e80269576265ecc24bca96c753b231ebb2c802e690cfe4d9d83b9fe25b7819d3eb9f264ad590a770cffabbfb3d665c45173f03f7c70149881f74694ea4138c76b4cae3eb64290cea2284fad2d45eafd0f5e14f1300f7240c5fae574870e1f44f30b81c5412eafaa46494d274d7defc5dab08765bfbe9c42bcced77814022b85357cac3fce5f7d89adc9d0168f7bd6c675b3f3a9e3e23e62c5e0bb37efffe80945e7ae58578e60772b3b7abfce76e4529d8d662e117bfe5892c034fac177deed84fbb49100caed14101cd481b4ed39d158b34d6808d4b4a5a402d003e69fdec323be8f0ee9bbf6acd0b34e28349923faf6372dcefac3c7d5e65e20c86fff83bde07ff0acce4ddc0e259be9e6a9fa70601acc4476f9799cd32d5f24b1deb418b49ea39058d62811b32b2ec229521dc4e15081545375118e26b59d3e4736725aca542ba645a637bed35adb00201948f9bb4dab47111c1dca3ef193a7623e5c0fe3d0e241e59dbabf6fe4e59387dd4356be8d467367541daa21a7aa6ab07bde942a09d72410951c16857f30211e33e1c7ff6273bf950ca8e344c72bdc686b591c16f7f193b5e94e6205e3749f9084cb7b5a347185273c2b46641a42e45d6bc815045bb6be68c5637df54398900356fd71f8d6af972ef1ddf636c9b6b77c71d26cc3833340fd60d44530a4d2ad33c2aeee6f45135917059d47246d0884849209e13d445a135160b5382e83756de26ae8a3b7c75dd76d9b601780489fe316c49eb4cbee97d1ec5d5e9d4ec595604a322a2b618b426b8ee1cb80dc4e2421ee941fcdbdd35ef5e568c1c979bae3ac6b78c600ce39033c7952d6db47eb014213e54fa6584b7440bd377ae9eeeb9b001cad617abb106100aae28c085cf39ed3c94f5ed085688fbb10b06e84a721436a1e96d1a2f59e0a16a080b9a4a87cb5c51b6f6cb9233c10b265e79d67957d06d909ae46462b750ce2c3c55b9f2800c8f926ae94107e65b636d655ebc58cbd677a31db5b9dffc4d32c6e2751a62ac42b10b4157282b76572ef558e6f67940099cd46f84898e27786ed24ef9f470b21500a8d23baa82456e36bb0a57614625fd7c8430b765c8ebaba7824cd5f0dcafeb8602f5a39d628b37bfed8288884279d2d21a7f40e601d7f2bffdac111f4315195a946ea10fd4f100a41453ad878619f9c4c6687b81ab3f4f12df0b93097afd7dbbc0c6afc73f13e39b00ac72ed4f0d3c4e7ec0e65afb1149feb3a26d44e074e105cdec0b616096eb0b9e6c3044f337bb5c825d704302106ccd320324e854a445f8a9090e1ac0721444fbcd84f8d0f737cd5ee545927f6de8321ce83a1dc593914690765be2a270db6f2708e84cb741d9450c669f5529db4e91d9ae3f00d6d371827e6107f75a7d6f8e3b18a4dd7256af5494495ed61e53b1517fc0e71a43ecfecf23890045f80d40b3cd67341a52a8fc0f08f58af14eca5dc1a97dbebda3eb53425341b208aa84579133d984b5451539ebbb72cdc22bcd84aaae0b61ecf4dee54a9937a60c1e350b02960bf06529903fec97be5d8803262791146e271fcd56a1420de6078f55f1e08428ea5e16f2b2535ce26f50ea44b4f05974b7adeaf2d90c6ebbc8ac3218e48e68c4888c41313acae6a8f08fc27914bda3f9bb253d08d57ada46c45a4c213800cb23bf1fbb8403de0bb036691afe50a6dcda283b3977810c590bb2dfaa1737b2f4069396d90c7f439310678d0794a881e51e50c86d1cf12e15d90154a7acb2d6ff9ddf978972ea09136bec7b36513a1ed99646b3ee653db2000a8a15f00adf5ed7aff996607113598e6a07ee63fc49db6def2321279a5e378e79f23791d7a92ecb26073a16887a63f65f08fa9104f7b61e74a8f4e66188c6442d129bf83983fc7a029502db2cfd7bbab91ec0343497a4de508fff61173f91e8bfd269e0cd725ce39b6bcf6e44cbd22672c44bcf7b009863d1fedb3ac5dd385552850db3757c74dedcfd3ff064c5ab26eefcaead0a0ba48c15d5a8cf574a955e54490063b479b9d1f7a642ab57029a4042c146058b704adfd6b7c99ab802bf9fd15ffea92ee2eba6884c168b47b3cf8b19f10cdbbc6036659773d8774ded84117f1cc8ee9e7fb420524e94bba4d74eb1734a4557b8187f0903c1c7ec2eb7e3b21c7a073ba9657e1aa71b3f84e69c0b10e64f1c955ef2127bbfe9165cf4035aea04c5ea91d4d7b80375d770d86874a343f51947616d253b0779650811e9fafce1576600540f7386f2361886663c10dc5b8e8be9ba4cead47b3ae9af45c72acd9e43b963b941744a714685aa5109134f99dd4ac3b7aa2b3406615929735a980d256724ccf653d292cc3c55b3204ffec8f4c81f483980fa2623ea3ee934ce4a0f455d9408cde3160d3a98063bd16096372c1db2d1038adc0bcd401fc61002f944a72649519bf76cf573c934cdbb4d0c5ea10f214a425e1f3c605d3637086453228b53c62425c04bc9faee23b50ab118d42c020fdf42025b22addb778c9d911eb19476cd976690b8e3a3c8237d4cef0cc293e98694058c4f425942e254b705f3f617c3c5fa33cc10e6180f56c322db38966b5192cd7e3a56bdd6533d458cca968a7d454ac1f3134325d9e611ef7bfcf20e67ced39d518f2d4d1d39ea07eba3ef11e6e5a37cf399aac28375d14a215821b837a6321d60031de23a9567ac45b040a2c98b15dc9b61d8f65a0e9b70b2edbd8f6d2e62b6d1ee0af10675303c15a81642f607631882bc7d7429b8ec1915314904c8631ec83d6487f45eca97675211f17ef7ff86929f76e6bfa739108e0bdbd51fb66c7219cd9c90cfc671a56f92988662b0261dd4c0bed2fe185d9d269ccd1079108702742e3064d7ded096f30c5447772876027393bcbb2d1a541d23e39f2b5ff356bcd323d7db98ba5a91be364eaeac94f3e72fc3e8", 0x1000}], 0x5, &(0x7f0000008980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x30}}, {{&(0x7f00000089c0)={0xa, 0x4e23, 0x2, @mcast2, 0x7f}, 0x1c, &(0x7f0000008a80)=[{&(0x7f0000008a00)="fec88ba17a0c924d299aaefe1d32dfa52ae1d50f46b70e47f438786eed88ae00f7360238dae6ac25826d8b2d3f24b30bbdfc90c3f138bb215712054014ba548498e2d37649c19ddf", 0x48}], 0x1, &(0x7f0000008ac0)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x1, 0x40, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x81}}, @dstopts={{0x128, 0x29, 0x37, {0x8, 0x21, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x40}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x5, 0xe9, "fb87da39686da02e5c0c1c25c6be90617a2ad06f5655bae5f5e85646d1f5e7dc56d7a490cf57443e9f6fe40b6854a28c7394db4806fd6fc7896d391a2d25dce3d3853da758cb8fcc4e61ee274d0b42ac50bcb53d298de224d85401dd61d2ef8c60d1d62df461015dfd64a140f27f29e48c4c25675c82c6209c5187b1858a0915adbecc5ff23233f036154d17fbed2af5738eb176db9c96f9678ad78d2f73e07ec5c3bd303605ebcdc435d930ae0977bb1e5d4fca0ffe47f692759557910baa44d2c9e2a3c7898de776c681af91a94cba516ebb718046f29291351126e63a68376b5774fde4b70f2f15"}, @hao={0xc9, 0x10, @private1}, @generic={0x74}]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x11, 0x6, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x8, 0xd3, [0x6, 0x7]}}, @ra={0x5, 0x2, 0x2c85}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x2}]}}}], 0x1c8}}, {{0x0, 0x0, &(0x7f0000008cc0), 0x0, &(0x7f000000ad00)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r5}}}], 0x40}}], 0xa, 0x81) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000800)={0x0, r6, 0x100000001, 0x5, 0x5, 0x6a2}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000008cc0)={'nr0\x00'}) 19:53:30 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x68d, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:53:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000000)={0x8d, 0x1, 0x2, 0x0, 0x0, [{{r0}, 0x87}, {{r0}, 0x8001}]}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000100)="98d4d152feaa3e6d8793e8cdb9d36581c8963da9a15d52f23b6420d37946b02459899962c9b58c8004ad2a37dd215d15125a84074ca5bf0b4d8141a872c0369caf667d1de702fd80a2ab739825bb1a7405aa5cd4934ff4b79c9dd144b023150309ad34594a5b6603995caa18692c92265e052a4f59a2296465a7748c24202ac5abd0a23ee2ccfba1c311573276aa320610b7b9278def857aa0f0fb8b20445c1d758a61f714734f05e43beec75cc427e2e420fdc60ce88ad25788f102eb00628a90d71e63f30dc60e10c743197bc2", 0xce) 19:53:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/246) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000100)={0x3f, 0x2, 0x6, 0x0, 0x1}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 19:53:30 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b64, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:53:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:53:30 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:53:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x79e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:53:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="7325076f6f115cab2729"]) ioctl$VT_ACTIVATE(r1, 0x5606, 0xffffffff) 19:53:31 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 62) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:53:31 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204201, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/spurious', 0x20001, 0x10) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:53:31 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6a8, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:53:31 executing program 4: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @remote}, {0x1, @random="4a470cce2de6"}, 0x4, {0x2, 0x4e22, @remote}, 'virt_wifi0\x00'}) [ 2125.348361] FAULT_INJECTION: forcing a failure. [ 2125.348361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2125.351093] CPU: 0 PID: 11290 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2125.352558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.354281] Call Trace: [ 2125.354844] dump_stack+0x107/0x167 [ 2125.355592] should_fail.cold+0x5/0xa [ 2125.356380] __alloc_pages_nodemask+0x182/0x600 [ 2125.357329] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2125.358582] ? lock_downgrade+0x6d0/0x6d0 [ 2125.359431] ? lock_acquire+0x197/0x470 [ 2125.360244] alloc_pages_vma+0xbb/0x410 [ 2125.361093] shmem_alloc_page+0x10f/0x1e0 [ 2125.362003] ? shmem_init_inode+0x20/0x20 [ 2125.362910] ? percpu_counter_add_batch+0x8b/0x140 [ 2125.363936] ? __vm_enough_memory+0x184/0x360 [ 2125.364908] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2125.366061] ? shmem_unuse_inode+0xf60/0xf60 [ 2125.367019] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2125.368232] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2125.369347] shmem_write_begin+0xf7/0x1d0 [ 2125.370422] generic_perform_write+0x20a/0x4f0 [ 2125.371403] ? page_cache_prev_miss+0x310/0x310 [ 2125.372392] ? evict_inodes+0x470/0x470 [ 2125.373242] ? generic_write_checks+0x2ad/0x390 [ 2125.374255] __generic_file_write_iter+0x39d/0x5d0 [ 2125.375307] generic_file_write_iter+0xdb/0x230 [ 2125.376307] do_iter_readv_writev+0x476/0x750 [ 2125.377297] ? new_sync_write+0x660/0x660 [ 2125.378202] ? selinux_file_permission+0x92/0x520 [ 2125.379223] ? security_file_permission+0xb1/0xe0 [ 2125.380251] do_iter_write+0x191/0x700 [ 2125.381096] ? trace_hardirqs_on+0x5b/0x180 [ 2125.382019] vfs_iter_write+0x70/0xa0 [ 2125.382812] iter_file_splice_write+0x726/0xc90 [ 2125.383812] ? generic_splice_sendpage+0x140/0x140 [ 2125.384855] ? security_file_permission+0xb1/0xe0 [ 2125.385892] ? generic_splice_sendpage+0x140/0x140 [ 2125.386934] direct_splice_actor+0x10f/0x170 [ 2125.387868] splice_direct_to_actor+0x387/0x980 [ 2125.388861] ? pipe_to_sendpage+0x380/0x380 [ 2125.389811] ? do_splice_to+0x160/0x160 [ 2125.390640] ? security_file_permission+0xb1/0xe0 [ 2125.391649] do_splice_direct+0x1c4/0x290 [ 2125.392524] ? splice_direct_to_actor+0x980/0x980 [ 2125.393555] ? security_file_permission+0xb1/0xe0 [ 2125.394584] vfs_copy_file_range+0x4f8/0x13c0 [ 2125.395523] ? generic_file_rw_checks+0x240/0x240 [ 2125.396540] __do_sys_copy_file_range+0x193/0x420 [ 2125.397565] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2125.398585] ? ksys_write+0x1a9/0x260 [ 2125.399386] ? __ia32_sys_read+0xb0/0xb0 [ 2125.400235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.401347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.402452] do_syscall_64+0x33/0x40 [ 2125.403215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2125.404290] RIP: 0033:0x7f1d53837b19 [ 2125.405070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.408926] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2125.410589] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2125.412071] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2125.413590] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2125.415054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2125.416566] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:53:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$TIOCCBRK(r1, 0x5428) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:53:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x3f, 0x9, 0x9}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:53:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x90041, 0xc4, 0x1}, 0x18) open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x81900) 19:53:45 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 63) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:53:45 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b65, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:53:45 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:53:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7a7, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:53:45 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6b2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:53:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xffff, 0x101, 0xba38, 0x4, 0x7fff, 0xf106}) 19:53:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) read(r3, &(0x7f0000000100)=""/142, 0x8e) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 19:53:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x5, 0x1f, 0x0, 0x80, 0x0, 0xab3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc16, 0x0, @perf_config_ext={0x4, 0x3}, 0x4, 0xe01, 0x0, 0x2, 0x6, 0x1, 0xa66, 0x0, 0x5, 0x0, 0x29af}, 0xffffffffffffffff, 0x8, r1, 0x12) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) [ 2139.458653] FAULT_INJECTION: forcing a failure. [ 2139.458653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2139.461110] CPU: 0 PID: 11326 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2139.462424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.463985] Call Trace: [ 2139.464485] dump_stack+0x107/0x167 [ 2139.465173] should_fail.cold+0x5/0xa [ 2139.465898] __alloc_pages_nodemask+0x182/0x600 [ 2139.466790] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2139.467913] ? lock_downgrade+0x6d0/0x6d0 [ 2139.468679] ? lock_acquire+0x197/0x470 [ 2139.469438] alloc_pages_vma+0xbb/0x410 [ 2139.470205] shmem_alloc_page+0x10f/0x1e0 [ 2139.470984] ? shmem_init_inode+0x20/0x20 [ 2139.471787] ? percpu_counter_add_batch+0x8b/0x140 [ 2139.472717] ? __vm_enough_memory+0x184/0x360 [ 2139.473558] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2139.474592] ? shmem_unuse_inode+0xf60/0xf60 [ 2139.475419] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2139.476415] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2139.477379] shmem_write_begin+0xf7/0x1d0 [ 2139.478175] generic_perform_write+0x20a/0x4f0 [ 2139.479046] ? __mnt_drop_write_file+0x9/0x70 [ 2139.479888] ? page_cache_prev_miss+0x310/0x310 [ 2139.480758] ? evict_inodes+0x470/0x470 [ 2139.481504] ? generic_write_checks+0x2ad/0x390 [ 2139.482385] __generic_file_write_iter+0x39d/0x5d0 [ 2139.483289] generic_file_write_iter+0xdb/0x230 [ 2139.484160] do_iter_readv_writev+0x476/0x750 [ 2139.484999] ? new_sync_write+0x660/0x660 [ 2139.485775] ? selinux_file_permission+0x92/0x520 [ 2139.486675] ? security_file_permission+0xb1/0xe0 [ 2139.487568] do_iter_write+0x191/0x700 [ 2139.488292] ? trace_hardirqs_on+0x5b/0x180 [ 2139.489096] vfs_iter_write+0x70/0xa0 [ 2139.489806] iter_file_splice_write+0x726/0xc90 [ 2139.490696] ? generic_splice_sendpage+0x140/0x140 [ 2139.491613] ? security_file_permission+0xb1/0xe0 [ 2139.492509] ? generic_splice_sendpage+0x140/0x140 [ 2139.493407] direct_splice_actor+0x10f/0x170 [ 2139.494228] splice_direct_to_actor+0x387/0x980 [ 2139.495102] ? pipe_to_sendpage+0x380/0x380 [ 2139.495899] ? do_splice_to+0x160/0x160 [ 2139.496634] ? security_file_permission+0xb1/0xe0 [ 2139.497527] do_splice_direct+0x1c4/0x290 [ 2139.498307] ? splice_direct_to_actor+0x980/0x980 [ 2139.499218] ? security_file_permission+0xb1/0xe0 [ 2139.500111] vfs_copy_file_range+0x4f8/0x13c0 [ 2139.500952] ? generic_file_rw_checks+0x240/0x240 [ 2139.501859] __do_sys_copy_file_range+0x193/0x420 [ 2139.502754] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2139.503612] ? ksys_write+0x1a9/0x260 [ 2139.504304] ? __ia32_sys_read+0xb0/0xb0 [ 2139.505051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.506013] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.506960] do_syscall_64+0x33/0x40 [ 2139.507640] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2139.508591] RIP: 0033:0x7f1d53837b19 [ 2139.509275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.512628] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2139.514005] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2139.515318] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2139.516627] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2139.517931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.519248] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:53:45 executing program 1: dup(0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:53:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/nfsfs\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x200, 0x3c, 0x200, 0x70bd2a, 0x25dfdbfb, {0x9}, [@typed={0xc, 0x15, 0x0, 0x0, @u64=0x81}, @generic="9231860e4b1535b7d806f9d2e1fd3fd767be242a059f91d8336fc8c61eabf4745910b0c35c1e64731c9d6fc00566314adea0333c0215c378e1dcba0196f3fff4f1b3c914234c094cef053fe109e5c845cc21d30df34545122e40e2578f8dc2944d204ee0610d6696cb1228023e9553c994035e68a3431d90741f41069cf1c4f8fda2c7881b48a1b58ae9cd355b7acc82914366b9f66e7db0cf18e78cab3045aa02aefb07064239613bfd06ce50b35026ff5a6bc9c1e965bf6ab06c07d811ef268e2dab1cc87858218a5e5e2bee36cb2100adfc", @generic="2653c4a7ed14db9c228b2a70013ad0d1f42629d14806c97fde0a6f82406ba85668a8d90ab6404e9a9a0fe766f1ff271e4731f83c452d9377686b408d031e730d0278a8f3218c792113a6c49cbec3adf3152df6cb76b2963fc32ce196353eefbef4e6c6bf60c83ad914310742ba5600e3b9d67ba50ef7daed1b2e36634704426846fe67a33c359dd9f3403ab7e3bae5ec194a78f8a5e98b1fe33d2448e45452135a4af046da1744a07a6b6afc6d71c2d233ac8793d88336da099782ff08", @typed={0x4, 0x92}, @nested={0x3a, 0x18, 0x0, 0x1, [@generic="316bdc6b9bfc550cceef97a863bac7c8ba8c3e078425c489f796adf880a184f94254f6decde8ca6fb799468a5b63", @typed={0x8, 0x81, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x27}}]}, @typed={0x8, 0x18, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000002c0)={0xaafc, 0x2, 0x7, 0xf770, 0x1ff, 0x1}) 19:53:45 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/73) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:53:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7ac, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:54:00 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 64) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:54:00 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6b8, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:54:00 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:54:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:54:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x101]}, 0x8, 0x80000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000100)={0x0, 0x8, 0x7f}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000080)=0x3) 19:54:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 19:54:00 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b66, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:54:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7b2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2154.885773] FAULT_INJECTION: forcing a failure. [ 2154.885773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2154.887213] CPU: 1 PID: 11361 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2154.888009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2154.888973] Call Trace: [ 2154.889298] dump_stack+0x107/0x167 [ 2154.889727] should_fail.cold+0x5/0xa [ 2154.890175] __alloc_pages_nodemask+0x182/0x600 [ 2154.890719] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2154.891411] ? lock_downgrade+0x6d0/0x6d0 [ 2154.891893] ? lock_acquire+0x197/0x470 [ 2154.892365] alloc_pages_vma+0xbb/0x410 [ 2154.892834] shmem_alloc_page+0x10f/0x1e0 [ 2154.893314] ? shmem_init_inode+0x20/0x20 [ 2154.893818] ? percpu_counter_add_batch+0x8b/0x140 [ 2154.894383] ? __vm_enough_memory+0x184/0x360 [ 2154.894912] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2154.895534] ? shmem_unuse_inode+0xf60/0xf60 [ 2154.896044] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2154.896661] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2154.897258] shmem_write_begin+0xf7/0x1d0 [ 2154.897272] generic_perform_write+0x20a/0x4f0 [ 2154.897288] ? __mnt_drop_write_file+0x9/0x70 [ 2154.897298] ? page_cache_prev_miss+0x310/0x310 [ 2154.897307] ? evict_inodes+0x470/0x470 [ 2154.897318] ? generic_write_checks+0x2ad/0x390 [ 2154.897332] __generic_file_write_iter+0x39d/0x5d0 [ 2154.897345] generic_file_write_iter+0xdb/0x230 [ 2154.897359] do_iter_readv_writev+0x476/0x750 [ 2154.897371] ? new_sync_write+0x660/0x660 [ 2154.897382] ? selinux_file_permission+0x92/0x520 [ 2154.897394] ? security_file_permission+0xb1/0xe0 [ 2154.897409] do_iter_write+0x191/0x700 [ 2154.897421] ? trace_hardirqs_on+0x5b/0x180 [ 2154.897436] vfs_iter_write+0x70/0xa0 [ 2154.897449] iter_file_splice_write+0x726/0xc90 [ 2154.897467] ? generic_splice_sendpage+0x140/0x140 [ 2154.897487] ? security_file_permission+0xb1/0xe0 [ 2154.897498] ? generic_splice_sendpage+0x140/0x140 [ 2154.897510] direct_splice_actor+0x10f/0x170 [ 2154.897521] splice_direct_to_actor+0x387/0x980 [ 2154.897534] ? pipe_to_sendpage+0x380/0x380 [ 2154.897546] ? do_splice_to+0x160/0x160 [ 2154.897555] ? security_file_permission+0xb1/0xe0 [ 2154.897569] do_splice_direct+0x1c4/0x290 [ 2154.897579] ? splice_direct_to_actor+0x980/0x980 [ 2154.897592] ? security_file_permission+0xb1/0xe0 [ 2154.897621] vfs_copy_file_range+0x4f8/0x13c0 [ 2154.912935] ? generic_file_rw_checks+0x240/0x240 [ 2154.912958] __do_sys_copy_file_range+0x193/0x420 [ 2154.912968] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2154.912977] ? ksys_write+0x1a9/0x260 [ 2154.912987] ? __ia32_sys_read+0xb0/0xb0 [ 2154.913000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2154.913026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2154.917513] do_syscall_64+0x33/0x40 [ 2154.917524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2154.917531] RIP: 0033:0x7f1d53837b19 [ 2154.917542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2154.917561] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2154.922585] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2154.923398] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2154.924210] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2154.925019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2154.925836] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:54:00 executing program 4: ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x2a, 0xe, 0xf, 0x3, 0x7, 0x0, 0xc1, 0x1}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8, 0x3, 0xff, 0x3, 0x0, 0xfbd4, 0x40005, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x88, 0x8000}, 0x4102, 0x100, 0xf912, 0x6, 0x66d7, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0x80000000000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) 19:54:00 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6be, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:54:15 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:54:15 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 65) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:54:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r2 = signalfd4(r1, &(0x7f0000000080)={[0x1]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001fad0e33d00000b", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0xfffffffffffffffe}, 0x40001) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:54:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6c7, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:54:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) socket$netlink(0x10, 0x3, 0x13) 19:54:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) 19:54:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7ba, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:54:15 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b67, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 2169.717765] FAULT_INJECTION: forcing a failure. [ 2169.717765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2169.722351] CPU: 0 PID: 11406 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2169.723916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2169.725760] Call Trace: [ 2169.726352] dump_stack+0x107/0x167 [ 2169.727190] should_fail.cold+0x5/0xa [ 2169.728066] __alloc_pages_nodemask+0x182/0x600 [ 2169.729127] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2169.730440] ? lock_downgrade+0x6d0/0x6d0 [ 2169.731396] ? lock_acquire+0x197/0x470 [ 2169.732303] alloc_pages_vma+0xbb/0x410 [ 2169.733193] shmem_alloc_page+0x10f/0x1e0 [ 2169.734122] ? shmem_init_inode+0x20/0x20 [ 2169.735086] ? percpu_counter_add_batch+0x8b/0x140 [ 2169.736211] ? __vm_enough_memory+0x184/0x360 [ 2169.737197] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2169.738441] ? shmem_unuse_inode+0xf60/0xf60 [ 2169.739459] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2169.740670] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2169.741794] shmem_write_begin+0xf7/0x1d0 [ 2169.742722] generic_perform_write+0x20a/0x4f0 [ 2169.743772] ? __mnt_drop_write_file+0x9/0x70 [ 2169.744796] ? page_cache_prev_miss+0x310/0x310 [ 2169.745853] ? evict_inodes+0x470/0x470 [ 2169.746743] ? generic_write_checks+0x2ad/0x390 [ 2169.747796] __generic_file_write_iter+0x39d/0x5d0 [ 2169.748896] generic_file_write_iter+0xdb/0x230 [ 2169.749936] do_iter_readv_writev+0x476/0x750 [ 2169.750935] ? new_sync_write+0x660/0x660 [ 2169.751853] ? selinux_file_permission+0x92/0x520 [ 2169.752929] ? security_file_permission+0xb1/0xe0 [ 2169.754029] do_iter_write+0x191/0x700 [ 2169.754889] ? trace_hardirqs_on+0x5b/0x180 [ 2169.755885] vfs_iter_write+0x70/0xa0 [ 2169.756759] iter_file_splice_write+0x726/0xc90 [ 2169.757834] ? generic_splice_sendpage+0x140/0x140 [ 2169.758936] ? security_file_permission+0xb1/0xe0 [ 2169.760018] ? generic_splice_sendpage+0x140/0x140 [ 2169.761135] direct_splice_actor+0x10f/0x170 [ 2169.762157] splice_direct_to_actor+0x387/0x980 [ 2169.762183] ? pipe_to_sendpage+0x380/0x380 [ 2169.762208] ? do_splice_to+0x160/0x160 [ 2169.762226] ? security_file_permission+0xb1/0xe0 [ 2169.762256] do_splice_direct+0x1c4/0x290 [ 2169.762276] ? splice_direct_to_actor+0x980/0x980 [ 2169.762303] ? security_file_permission+0xb1/0xe0 [ 2169.762332] vfs_copy_file_range+0x4f8/0x13c0 [ 2169.762359] ? generic_file_rw_checks+0x240/0x240 [ 2169.762404] __do_sys_copy_file_range+0x193/0x420 [ 2169.762426] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2169.762445] ? ksys_write+0x1a9/0x260 [ 2169.762466] ? __ia32_sys_read+0xb0/0xb0 [ 2169.762492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2169.762524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2169.777645] do_syscall_64+0x33/0x40 [ 2169.777674] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2169.779601] RIP: 0033:0x7f1d53837b19 [ 2169.780422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2169.784562] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2169.786264] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2169.787863] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2169.787875] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2169.787886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2169.787898] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:54:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:54:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) sendmmsg$inet(r1, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="d1c4c4", 0x3}], 0x2, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x70}}, {{&(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000540)="eb6ace143fcd1537fc5b753f3aa0f1e48782159b083bfa64f9d0c44759d83383de343404555ece5b47944fbdf9c1a4e8b24e1dc7eaa7e801c976c212a2fbffaa12bb1e5f67d007fcf37e663d653c4b9a0606af0bc2503199e7dddd9908b1c1", 0x5f}, {&(0x7f0000000640)="28474caab024ab671a24fe975ec7c77521fbd8c058aa1f309f6263436ce413f3ad6a0a39fd3d408ae1d85b3c117504d06de3860694cfa302b36b6820189439b57533aceebd95580ce541e780653f4e129a75495648d79bb9668fa168c89491381281214766a45fec70e2dd7b9c6666f32fdbd2b1ea800042b9e135f99c0a97294a5d6dc463b78cb4c47793e009ebc81d30ba41be717df9d4f6f79810f7f853fc8839c5c24a8cb8ef", 0xa8}, {&(0x7f00000008c0)="309456e2fe43e4f6eb5f5cceb0303364893f8335055d11ca1bbabcd336de242a160a8e69a00a13704c7da401f4760103ad333ce8f5c7ee4f26f2312f0f3097e0127a1049d42b03e233e51780cec652b5217dadbd052ddc95a2c9a8338bbcd19af278d07bdfe71e99a5f23001e464e4bbb8857dcd227a96c90bea682c45d985162c63094bff1093e8fe924084a5e4df177aa38d57ef11554c830142d37a5f1dc13fbca2e1bd256b121b22d3a1e29704c454c327aa56ca6ac3eb1cfc3ddc8dae134e6e33ecd1a4b4080aee44cba9b4ff05c79bcbfaf1ad8286dd53f4ef3a4a94730480e989b67aab35ffc8386755af0bec2c51f7aff7d3d0c0e178a09021fa6917677a9dad95b53a6576f787c669481b7ee744ebd81d8c1c718cfe9f30217627bd90a99cc0d4ff635bf8f2be1d049a0f4ca0f4d39ec37ed0dd65da9a87b319dfaa7273b807934f309ec79b2e33847abcb24872657a17e96ad0f86be173f60e01f2a6050430d3a035189007c379f7d315aacd765705afe33c7d67013ac551a25da55fa138cceaea643db20cb4deef587c8115d775c4695f7863f0fa86bfebe24a1b6314aa9407fbd4a67d1ce820b01367cf83c4cd4b0a047215c340cd3abc07959b221c8b9dcc52a22a1c963b2cdd3ef0f17f3382269a3baeee05482ecfac81103c163ca09b67d433881badf7f6a2a5b3b48b98ba9effea2799f29520454d97968c516b9f0a4a6c1c2709b91359f7b09bd1dffb0cd6c016d782cb1a5773374b25961b4dabdf07f95ece5b0dfee2e903ab20599b41c60b316d27bfaf7f72e17b2df0558cbcf0cf7ec08e4ee2d36e7eabb1efa16ac6b48fcc15f2e854531d7f48e1ed479f5464befcdf5630553a91a329738a32293b098ee46b51d24ddaf9571cfd2cb45ce0f80fc35389fa0c022e3b52a50bd99c892e94d9398b30e33cc40e86398efb252049f06d42ac48077a55863d986c9811d2b0c1e4907770265074dc82ae5a47533fad32299d1807f442b19ea0c34e219fe9ae17621cae1584c2810663551d54887e82372d24ac8046ccd4b48b998ae0a3948facbc21b68a5d817155c067f3712d7a78c46afd42bcc53703dc515beb507916f6d4b430084305f7f0e7a5c3ea4013e7de7a751fe17010e500273750ed32e6479c8c8a7f3c214ffc382c7d76afa14225f841b6666df0f717d522ed685a414d3cb3c39f3fa206ee72f569e7c3196a3f185c6aca328cea701abc659ac6c831327772f1da6d6c54d0855c07cae60434ceea1009f1406444916adf9467689e2087fba477dfa0b9639594b6471bfc177e91a31d7ec47700265e16c03fcb39820061a038325b3d3a182a7a716487303e729c41a550f7fc217e349f4748f22c7bd19f59ef916fa7051942ba9354fc4623ef5a6bd4987ca0cebbc962b2d982e46bf4c94de8e1af9114a60705b7b6fea7fd9e8b389b8a80639fd3737e3185bd8feab73e79847c3780c1838900f40b71ed7d07db17e34977df4c9f7f32d42fd796431dc33a811a2963242a9fdf928138736629d381af71bf139bea19459fdedf3201485ce124e268505902103d656cb879bac6e1578620e0c7485b1a4869a604b9a2147715d973414cfea642e352088b31e115dc127f6b4fa8c97953b26f5fb3eb409f7595f6417619ff14c3044c5ac157be2bdc78ca22376eef9b37041261f90b9d82454533ea93b76055797c950820b8802155c65f3512b16e9052bb1e9bd7126268ada6cf8abc48cf6e592df764461ee1d8b29868b2e4f8a2121b71f5e5f9081fbf7988ffaed107d0b1f78e71381310e09115133d55245bda1b215c8bf54e6a3f0e703bf97f1bf7d3c523e75bb43318d73ef6ecacae1a4f88b5c53b9f95cec00f1cf1892f456525f5d16200383784f4ebcb9c4571af3ed6e46af673931e1ac2540abd622d6c92759df96b8a9b6045d2a32fc2d4a68fe0aa0c1f391419b6c7a4c934ddd72c3b50e90a4d530b2f0f6aeef9b6fc56904e9223bd0e8c420b89587864c85d799e09eb8bca18768cdeedd5628c83c56dd6aca8e309f72b982639c31c990b67903c6a61da75de0d2c6df9241276dc9ba2affe1c1fa1d07036e230cfe8e9b399c7b739a37f063e16aec3e982dc463153beafc0ca208c60d838c25fcce53f68d3570f48529e5b37a6d1b811e21186b1639606c325d22e2fc8b7cd3c71951141324e4699935e73049693c013258ddddc4f168cf07b3c7607656b304de0afea7797e57d1b552068ca6f588f9bdbf1b06988c622abe533e0bf3414dabb1cf0e9b51985272140527deb6fae2992c61761df4259edaecf314910779c1059f0308ae2a84751dd0fa12e961f2d1f8ba444aca54bc020a31b9d88897f273a06a5ad0cbcf07d70bab1b64d5cee1fc443fdbfa237490cea5d1d8676e35e166abe1fd7abe864e9503efd01e61a349005dfb37de37a63eeb01c31aa35902677d272b2c727edf27415f14a1ac6e4b4c23f6d62b1fec6c5183306e26cf959f0850d76d4c27cbbc649ff26dac9355065259283b78b101be19e7946b74239933cb832b21c8093ccf697809a7b8627a7ab5ec0edf5f2b666089183594a01efc6c0b42e982588f68a821ea048384babcf355ccf776cc2879d0fff986214f732843b653e89a3fbb129f18874f3b3b6e4d74da54cedcbfc81fec857db4b7d1b6e9f47fba378fd0626d21a3bd909a6a3f76cf8d2514472c76e81ce54f56b2c9856f3d2bec2ed4cb3619d2f7a0686c9106eea8ab85fbffb9178a902622dae91952144cf813dde0551ca609a77787cd3ba7fe16efa76b091c3066dbc0b7930e90a21202e4d47cc837db1c1528f2901063cf7889b55863c61ac7d234383c2a81407295226bf4c98e6c6795b3f63221e92ac856fe5cf72e3d9604541299cf6a80ae3c060e88c5e56a0509778ac1d08db212c2047bfa9b257c5925d2f6fa6959db91d5797de8d8e8fd5dea6502ebfca26d8513f0574839eb0746cb94a4931df6b69c5ab8407f7bc9b5cab2b5af41e47eb00702fd855f476209a2aac15c0f84b9ac6e1e5ad8f1ae2be82dd3eb34c0ff06eaaf11f0432070fc906dae275e8a72c55461daa5cd7292032f35d3f06674c704a8c9562c64b625a9edffc1cea635126ebb9aacfa2fe65737cafe546922e29836e000e8090f2f91404f667310cb9882648ae1ccbf67e7e5466e01ba5afb40de889d217a0404e4ed8ec112f22fd817333459e8ec677b0d55c2cea6d696ea1b33d745f62641771ea02495788fec26829c13fa40890e485508d92ba8449aa2a79dbf4aaf0fef5f1ee6b12d384cbfa665c3a3a8656bd46bf921c651eec804fa38497dfb780010b5a1efbf040d3a56b6861c6ad93d2ab308a81fa7273f02880944858b9349e1511a99a7b73266cc70cf96e65fe2d39036c9188a792a02ef7a3ac4092c720ed89900b4f07d7b039434744d0683b7099b7e0b9619f3451fc65649489ef65a0f1ece0b9a6a08cf47bfa4e05ffae8442be199e2b89ebfe9991260e72d745d9a29e811d484b523f7830e30ee9097400896eaec78c9672110a1c394c489391cceba588c4c8cfc3c62e4e9d7403aa791521290a73ff113c249f73cd527888f9fd550c795130109458be62166bd0ce62ce0a80a63398afc9089a21e8993ae1a695fa23e9fedefc001f56c1f205b5a4aac4fecb102c4239bbef8f85451d8a905d40777edf589c46cf7d119c0fc3d3662dace7e0d227cba6b6e1b7ba2fe4cf8b7f585a184191fffd65d3d3b931511c8af1629df5fffe9d08f01cc3bde5732a0249862b4d81c31643e06c25fe5e664941dd4ce47885681e99dedcb6578971060ff6418caf9e2b63571114a10a47ae9673f4592a4c75f4d87542fc381fd6ee6d4deaaef472976f92a2aa862946a6e607bd710bba874b11372a09d51cb7e4301dda781ef2a973e0cf9b5f78ebec9221f375e9d8e9960260ede801b7236d5404c074f505ab84ef56d559af1c21bc5d31a49e73b3a725af77b6a38c443d04f54594543c62dd8a10992dadb3c06fcc2ea221602955b1c619687d3362e03bfb70a7139e2d7cdb9f0b5f7b1b25cc1fb283c790bed5fccf3ef5902ef972b9eb7b0ab07711db8c0f4bf74412ceef0d6ab67c970e90cb2361eafcc7e18d9020581c635ccaf77f9b539beaf1ec091ac4a08eb84cd0643cd0dde894405532a9fe58a54d01ebe12195cce584df86198a1fb05bc2f2d3ccbd8a1337e029ad5eca8405c98adbf7ef2d29f83f5d1f8e53e86969ff2bcf5cd24c17e8f7de28f839354bb520e95226998492f9431756603f01ba0f60fe29008615e8b8a9892d426fd0b175515126abe2da89c9d676bb078d75f5321dbc5a036ef938c4c4221be0c15749ad47cbcf09e97715512942f7c309e305742113df4e0955c5d18b529d309fbebedda8187736b32c15fa3a8ae23740f9912fd87074518db34ea5e6130a70b740c43fec04fb4f8abb2b09488f25a0c352311c01e6db7ed9e0e50cb67f90f4dbd68a2f534fb679b526c6474be9dbc3e1ace6e24a22190075bc7e6663c82d2aa7f8a94ae6ac43dd2ea5b44ebd41308625afbb9b68692168188e08769f0c4f853cfb42d9df40927e522517a254c9df2712319d3e371ba766e851ca1ef83dfb277f70ac274e7355d1a658786469baf56cd8a65a491387329304e6690b7eac35f03f1bb81199d20539f7c7a19856d4ed84548471bcbcffe899a03c04d63fca4e31498aad14080b29a8ed1dedaa5b34b5bd8a48818f532dd28d7af5329d9c3a7921ccdeffbd595230b9c627476f456c22389017aaaa6fca0bec1f8b16abfd9b77cb38f71dff84dc30e946935ed2943ce8641fd362819c1ea999c33d6250b8bf45c92d07903512477b30bb3cbd701c50ac3da89b46565df67117a30ad78c61b3670e26c2e8e252f136b82df1971d72c343485074185bcdad3d01b32b74f2434e6f2af9df9a36a618e13244a49d546ee31e1d754a65f856774e234a7687019f1caa6db8338abaa194e69fe583a46609e92a044144103adf9b44ba0e763661f8a9102716d7feff97157214b59ab34e8f5d324f7b5ecc13d48ca5d1f682dad97880824b4fd9893b4697f6d7c7c93544335f58a21ab3f3ad40d767fbf50406e589842deef2d6fea178a6546c110dee76b4f39ab82387ee5fbb8253b6ceafe0f0f872ae9209418cfbfc9576eec6a855ec21b9a205412d2a3bbbdfdf9fe27e5723f4af1caabc6981a94c6b279210d98e8c93b0824fac327bb248f1958485810e49c3ba804bfc6679ee6ed42c2443b804121743eaa708b7f1c052c742c36c7c967e317d33fb8915b30560c8fdc7bdde34bc8169ef327c2afc9c1d8197bb1229b053d3ffd8faf4ff79b9470df0044910bdd2ea7be08c199e15d4ddbb945b5b63ea082e3614d1fdeb8ef7e72378725fc2c4f3a3293036d7d1736768b87e8aa2bd11525adfe36e4abd38ab54660af8f70d242fa358a7947dec17c056eefdde2991e82d812e86d812c6da422196a90d546e6970a07ef106944c201128ab3a59537a186c22eae3d9d4db998731c1bb4b7e704736c5e6f603167bfd49fae42f162acb7f95b670eaeb8fee423246e488cdbdd029b358a96da7f33df9d5d71ff8a28843762bc60dd14f2eacefd50479aa5caccdf053b5e6f31063a611e8b979c14cb05a6402ad8f0f239f25b7769c82b08956cb4e2aba19e153cfeb9650230962c0051f2fed7cc7331c3a0d5f0ee398b253f7d09acda3803d80963a56d7afb924930e219d1e86518a064f018167c61374c24cf3815ccb727e644515465ca424", 0x1000}], 0x3, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000740)="29167208198049ebc22e40127f3679fc59b9b0b58e22a38a546e7e0ec44b4ec560c807a7b9543c8de362cdf8f117ac33c81c2301badd6550b8838bcf621ab1a607de934cb7279abfeff306c9a8ca54395e38a1ef", 0x54}, {&(0x7f00000018c0)="93b1cd584ac0b7483246dca0b744e0f1bcf7e05f0fb2f50f12059f839c820aaee07dd1c3b5b23786985f7df1df727b2b8c0aaf76b92b1e60c5f5d71c0bab575730780c8cbee9c56478fc52f0a20d7e306887f5064685bb4f945051ca6172557c229308aeef43dad7c49ebc5094e3bc4a9c729993acc29dff16e04eb6bfa7ff791d37d406195e8724cb39e60f29c5acdcde684c1233b46270f992be41c2d32f08d7e03fe271b2d9fe6e0879f91ba724a2ebe10ad29037723145d153120e259b1704fdecdf93e67e0e73f0583369fd9b13a7d3652c50f9", 0xd6}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="f49811cfe722b5ec46c961e0b9595cbf8d02e725a19eb9d03256343c8d53f073e941803807961edbe4f72d733f133e65bc23e4ee28e6911ad62f7428f08f5de7ec35c9d46543273f48f2706d8249955ed414218ee0e513f96cec1ebb135a95f96dde1800f0bfdd55f13652cd5c65209dd88842e8f0913cb6338509e4148c83212dff90549daacf754c05bb60e59538ba3df06ec8e31ddf77ff0ac5361d8ff18b81", 0xa1}, {&(0x7f00000007c0)="9af65b7cbaf53df247556c4341ae6cb844652069ac52f4ad3109a2249afb6a0cdb0d24e244c3074b796730cc78c16a98d48c6536", 0x34}, {&(0x7f0000000800)="6cc6921d03f0e7f4ffecd5e636be407a3520005c12d6ad11e161d1da530eb1cdcdfc154bb139ed56ae05f3bf01533c1f02f5a308f6d7368bb70f9d9cc4f1", 0x3e}], 0x6, &(0x7f0000002b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xb7, [@loopback, @loopback, @local, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}, @generic={0x82, 0xb, "b0207275671cb7c94a"}, @rr={0x7, 0x7, 0xbd, [@loopback]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xbf, [@loopback, @broadcast, @rand_addr=0x64010102, @remote, @private=0xa010102, @private=0xa010102, @rand_addr=0x64010102, @empty]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x66, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x8}, {@local, 0x1ff}]}]}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xed, 0x0, 0x9, [0x2, 0x5, 0x9, 0xe7a, 0x1, 0x5]}, @cipso={0x86, 0x58, 0x1, [{0x1, 0x3, 'H'}, {0x6, 0x6, "d1daf399"}, {0x5, 0xc, "ca511402c8f0d8557b0e"}, {0x6, 0xe, "01ade95269793b886e735ae1"}, {0x2, 0x7, "240b8a584b"}, {0x0, 0x2}, {0x6, 0x8, "64019626d07c"}, {0x1, 0xc, "d1b208981605d587fca1"}, {0x0, 0x8, "b8bf5e05e92c"}, {0x2, 0xa, "af973d5b4068591e"}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3194cedd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x56}}, @ip_retopts={{0xac, 0x0, 0x7, {[@generic={0x44, 0xb, "321d93c2167e9526de"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0x8a, 0x0, 0x7, [0x0, 0x3, 0x0, 0x6, 0x80000000, 0x498, 0x80000001, 0x0]}, @rr={0x7, 0x17, 0xd1, [@loopback, @empty, @rand_addr=0x64010101, @rand_addr=0x64010101, @remote]}, @ssrr={0x89, 0xf, 0x10, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x97, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}, {@local, 0xc6}, {@multicast1, 0xfff}, {@private=0xa010101, 0x9}, {@remote, 0x5}, {@broadcast, 0xed5c}]}, @timestamp={0x44, 0x4, 0xbe, 0x0, 0x7}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @empty}}}], 0x250}}], 0x3, 0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/123, 0x7b, 0x0, &(0x7f0000000180)=""/206, 0xce}, &(0x7f0000000280)=0x40) readv(0xffffffffffffffff, &(0x7f00000005c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="010000050000000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000cd3ee0b876005fa4a4d000e20000000000002000000000000000a69f"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) listen(r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x3ff, @loopback, 0x1}, 0x1c) 19:54:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x29}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008054) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 19:54:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6cc, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:54:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="653000000000000000007900f8942ddf32dc"]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'wlan0\x00'}) 19:54:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7d5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:54:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @max}}) 19:54:15 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:54:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') close_range(r1, r0, 0x0) 19:54:29 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 66) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:54:29 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:54:29 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b69, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:54:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="0025a3135165a01759ab4901199ed6d8018c3ed977099e32f34959ae26add8a4daec037a6a479047f9a8f8cddd7dfaa54692363fbe614c648cc66353fe76f0e6b98a", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250a00000010000280040004000800020007000000"], 0x24}}, 0x4000) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xffff0001, 0x7fff, 0x68, 0x4, 0x1, "14639b1cd54d5a80103d4bd0b0367bbada1423", 0x8001}) 19:54:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'btrfs.', '\\{\x00'}, &(0x7f0000000040)=""/122, 0x7a) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:54:29 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x1010, 0xffffffffffffffff, 0x8000000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x80000000000005e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdf8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x5, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0x80, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xfe, 0xfd, 0x3f, 0x8, 0x0, 0x483, 0x25940, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0xf011, 0x80000001}, 0x4001, 0x141, 0xffff, 0x0, 0x6, 0x5, 0x480, 0x0, 0xfffffffa, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r2, 0x10000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000a, 0x110, r2, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x5) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x4b68, 0x0) 19:54:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6d2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:54:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7df, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:54:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0xace, 0x6, 0x200, 0xfff, 0x1, 0x3370}) 19:54:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg$unix(r1, &(0x7f0000000840)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000440)=""/34, 0x22}, {&(0x7f0000000480)=""/137, 0x89}, {&(0x7f0000000540)=""/185, 0xb9}, {&(0x7f0000000600)=""/12, 0xc}, {&(0x7f0000000640)=""/161, 0xa1}], 0x5, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x1, 0x20, &(0x7f0000000880)={0x0, 0x3938700}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000900)={0x5, &(0x7f00000008c0)=[{0x80, 0x5}, {0x7f, 0x9}, {0xb1d, 0x2}, {0xecc, 0x8001}, {0x5}]}) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250a00000010000000000000000000000000000000c1030f3013a68413cc8cd4e6288de354a52a8d3d78c5079de4e52ecd0bcdff7f4764e44fc51970611e00000000000000006fb53c5bf5d4b90ace6828e9f72b8f9c56a1152ea9f50abb4f0f6ec0fe35a49584f41a9960276e76"], 0x24}}, 0x4000) syz_io_uring_setup(0x4cc4, &(0x7f0000000180)={0x0, 0x1909, 0x1, 0x2, 0x3e5, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000200)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000007, 0x110, r1, 0x10000000) r5 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, &(0x7f00000002c0)="b754ceb234eb9d91c672fd419a1537a4a94890c428074ecb9d0437497bf1c9a55a5ec8085719839c35d9a20b63c95de338b5f80529e48c2c88618cb643fc120f3a7832dc4c8be3e9a5c8a25528bed619a59bea577373ec68c47f755ae3c2420ddf4fc8b7bfc0859009ff81e32b52c0d96b84fa4fad2f2576215f7c09fbafc8f3a041169dd0f631fcc4138fb9a1146585f7b7418cd996235872c06fcac3bfdef242560a99", 0xa4, 0x40}, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x1, 0x9, 0x480e, 0x6, 0x9, "a587664c2421a2e5b3915889dd6da87556b0f5", 0xbed, 0x8000}) [ 2183.785301] FAULT_INJECTION: forcing a failure. [ 2183.785301] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2183.788025] CPU: 1 PID: 11483 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2183.789465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2183.791171] Call Trace: [ 2183.791725] dump_stack+0x107/0x167 [ 2183.792469] should_fail.cold+0x5/0xa [ 2183.793261] __alloc_pages_nodemask+0x182/0x600 [ 2183.794219] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2183.795470] ? lock_downgrade+0x6d0/0x6d0 [ 2183.796327] ? lock_acquire+0x197/0x470 [ 2183.797160] alloc_pages_vma+0xbb/0x410 [ 2183.797989] shmem_alloc_page+0x10f/0x1e0 [ 2183.798855] ? shmem_init_inode+0x20/0x20 [ 2183.799745] ? percpu_counter_add_batch+0x8b/0x140 [ 2183.800761] ? __vm_enough_memory+0x184/0x360 [ 2183.801690] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2183.802810] ? shmem_unuse_inode+0xf60/0xf60 [ 2183.803725] ? __set_page_dirty_no_writeback+0x9e/0x150 19:54:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6da, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2183.804826] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2183.806003] shmem_write_begin+0xf7/0x1d0 [ 2183.806873] generic_perform_write+0x20a/0x4f0 [ 2183.807848] ? page_cache_prev_miss+0x310/0x310 [ 2183.808812] ? evict_inodes+0x470/0x470 19:54:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2183.809620] ? generic_write_checks+0x2ad/0x390 [ 2183.810698] __generic_file_write_iter+0x39d/0x5d0 [ 2183.811726] generic_file_write_iter+0xdb/0x230 [ 2183.811752] do_iter_readv_writev+0x476/0x750 [ 2183.811774] ? new_sync_write+0x660/0x660 [ 2183.811793] ? selinux_file_permission+0x92/0x520 [ 2183.811814] ? security_file_permission+0xb1/0xe0 [ 2183.811842] do_iter_write+0x191/0x700 [ 2183.811864] ? trace_hardirqs_on+0x5b/0x180 [ 2183.811890] vfs_iter_write+0x70/0xa0 [ 2183.811911] iter_file_splice_write+0x726/0xc90 [ 2183.811944] ? generic_splice_sendpage+0x140/0x140 19:54:29 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x54181) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfa, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0xfffffffffffffd32, 0x2, 0x7}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x28041) [ 2183.811980] ? security_file_permission+0xb1/0xe0 [ 2183.812001] ? generic_splice_sendpage+0x140/0x140 [ 2183.812021] direct_splice_actor+0x10f/0x170 [ 2183.812043] splice_direct_to_actor+0x387/0x980 [ 2183.812066] ? pipe_to_sendpage+0x380/0x380 [ 2183.812088] ? do_splice_to+0x160/0x160 [ 2183.812104] ? security_file_permission+0xb1/0xe0 [ 2183.812130] do_splice_direct+0x1c4/0x290 [ 2183.812148] ? splice_direct_to_actor+0x980/0x980 [ 2183.812172] ? security_file_permission+0xb1/0xe0 [ 2183.812197] vfs_copy_file_range+0x4f8/0x13c0 [ 2183.812221] ? generic_file_rw_checks+0x240/0x240 [ 2183.812262] __do_sys_copy_file_range+0x193/0x420 19:54:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7e5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2183.812282] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2183.812298] ? ksys_write+0x1a9/0x260 [ 2183.812316] ? __ia32_sys_read+0xb0/0xb0 [ 2183.812339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2183.812358] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2183.812379] do_syscall_64+0x33/0x40 [ 2183.812397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2183.812409] RIP: 0033:0x7f1d53837b19 [ 2183.812426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2183.812436] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2183.812456] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2183.812466] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2183.812476] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2183.812486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2183.812497] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:54:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:54:29 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250a00000010000280040004000800020007000000980ad02ee8811f9122b38f73034121de1224ff520e4c4aa1eccb09883c2bdb46bb5bbb7e5d6c6363cc3328dad7a086e836bb6836bc0bd088aff1d707060f82065eb5361e51a69f182d6b6e8d0584010744ef8537053fc1c7cb38815938779af7d24a3edc6433d86b61688e83cd94dd1b0778fe0442b4905a0fccf36293b80eb8908ff0687e6f45afa26cf845ce749abe07f928e5dc980e96d1dfb83f1b8090afabbd2381b9157796d6fa59880dad2402b106ba89d24613d21b72d9777db4f80d005abd5b5d3e20ad7d659b58c406db32fd2a61a9370db17a487b"], 0x24}}, 0x4000) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/157) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8001) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) 19:54:29 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 67) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2184.002745] FAULT_INJECTION: forcing a failure. [ 2184.002745] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2184.004314] CPU: 0 PID: 11514 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2184.005133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2184.006110] Call Trace: [ 2184.006428] dump_stack+0x107/0x167 [ 2184.006855] should_fail.cold+0x5/0xa [ 2184.007311] __alloc_pages_nodemask+0x182/0x600 [ 2184.007862] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2184.008558] ? lock_downgrade+0x6d0/0x6d0 [ 2184.009041] ? lock_acquire+0x197/0x470 [ 2184.009526] alloc_pages_vma+0xbb/0x410 [ 2184.009993] shmem_alloc_page+0x10f/0x1e0 [ 2184.010475] ? shmem_init_inode+0x20/0x20 [ 2184.010972] ? percpu_counter_add_batch+0x8b/0x140 [ 2184.011551] ? __vm_enough_memory+0x184/0x360 [ 2184.012079] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2184.012717] ? shmem_unuse_inode+0xf60/0xf60 [ 2184.013232] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2184.013853] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2184.014448] shmem_write_begin+0xf7/0x1d0 [ 2184.014933] generic_perform_write+0x20a/0x4f0 [ 2184.015477] ? __mnt_drop_write_file+0x9/0x70 [ 2184.015997] ? page_cache_prev_miss+0x310/0x310 [ 2184.016534] ? evict_inodes+0x470/0x470 [ 2184.016999] ? generic_write_checks+0x2ad/0x390 [ 2184.017541] __generic_file_write_iter+0x39d/0x5d0 [ 2184.018114] generic_file_write_iter+0xdb/0x230 [ 2184.018657] do_iter_readv_writev+0x476/0x750 [ 2184.019180] ? new_sync_write+0x660/0x660 [ 2184.019667] ? selinux_file_permission+0x92/0x520 [ 2184.020226] ? security_file_permission+0xb1/0xe0 [ 2184.020791] do_iter_write+0x191/0x700 [ 2184.021247] ? trace_hardirqs_on+0x5b/0x180 [ 2184.021754] vfs_iter_write+0x70/0xa0 [ 2184.022199] iter_file_splice_write+0x726/0xc90 [ 2184.022745] ? generic_splice_sendpage+0x140/0x140 [ 2184.023318] ? security_file_permission+0xb1/0xe0 [ 2184.023881] ? generic_splice_sendpage+0x140/0x140 [ 2184.024445] direct_splice_actor+0x10f/0x170 [ 2184.024954] splice_direct_to_actor+0x387/0x980 [ 2184.025492] ? pipe_to_sendpage+0x380/0x380 [ 2184.025990] ? do_splice_to+0x160/0x160 [ 2184.026446] ? security_file_permission+0xb1/0xe0 [ 2184.027004] do_splice_direct+0x1c4/0x290 [ 2184.027490] ? splice_direct_to_actor+0x980/0x980 [ 2184.028048] ? security_file_permission+0xb1/0xe0 [ 2184.028607] vfs_copy_file_range+0x4f8/0x13c0 [ 2184.029125] ? generic_file_rw_checks+0x240/0x240 [ 2184.029692] __do_sys_copy_file_range+0x193/0x420 [ 2184.030246] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2184.030789] ? ksys_write+0x1a9/0x260 [ 2184.031228] ? __ia32_sys_read+0xb0/0xb0 [ 2184.031705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2184.032309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2184.032902] do_syscall_64+0x33/0x40 [ 2184.033330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2184.033921] RIP: 0033:0x7f1d53837b19 [ 2184.034352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2184.036475] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2184.037361] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2184.038182] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2184.038998] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2184.039816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2184.040633] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:54:29 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:54:29 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b6a, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:54:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6f5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:54:29 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9520e31c844fad22}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000240)={0x0, 0x1, 0x2d5, 0x100, 0x4, "7143b0d49be9dc9c9c15c46b80d27036905119", 0x7, 0x881}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000280)={0x5, {0x6, 0x80000000, 0x5, 0x7, 0x3f}}) 19:54:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r1 = getegid() setgid(r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r1}}, './file0\x00'}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x0, 0x9}) 19:54:42 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 68) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:54:42 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7eb, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:54:42 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:54:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000001700)={&(0x7f0000000080)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000100)="735c4c0d0f34d37616738a3a81d44f4026611c71e1ab797e0b13e583ee8113de87fa2e10b21335ef058caf9556117918dd5b386496a7d62a9faf78", 0x3b}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)}, {&(0x7f0000001180)="945c42beac416ebb7b6786f64dccbed81c1393b8fa28e9ebd42ed4c8886c38b83cade6e7f866d552095af86bea2d682d9ba6e6518aec52a5285ac5d5bc97156a26dfbf2519b9892938661402187e2baf83d19dcab8fc60b274fe0d7bb9e8c01c24da61cb9f739e10dd4707d4ce9f3c544b6b98c0df86a39199d50efe0ed5582f1aed70320a9f715fc647d3462d23ed468fe889381cbde355bc", 0x99}, {&(0x7f0000001240)="b82f4169e80daf206f693299ddb5804cf191ea0369f1cba596d728697025f77f8e5ea32396dcf46f9fdfc89059866951c7976c51f7bf6fd7a62db74124c576eeb8e975c4cadeed49b05c63e75c4ef1ac0346d021cde38e76ce43b2cdab701ea25f8b6a070abe1b1be3fa1418a6113c698a59b66f300780eea75113d218c7c617bad890b97e73fd85f443f9af1284922618bada7c5c5d7e6a0afd3d460b663c49f9691bcc8630e2391cb2e16509808e7c10bbf9914c21f05f7a609d8dd82f6e06", 0xc0}, {&(0x7f0000001300)="46873c1d7db574d39182a9ffcd88442ee6b597d57a037c442638defae28e9768207030676291e88c75bdfc91991870961eda4baf441f37893129afdd684f0e9569602e4f4315f320b1b9f7f35d36ab62d3e440128f7793704219f1841a7518a370180e8a36b17234a82f", 0x6a}], 0x6, &(0x7f0000001400)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts={{0xc0, 0x29, 0x37, {0x33, 0x14, '\x00', [@generic={0x8, 0xa2, "cd9023bdd85d8959e53443a732b9a3b86785704e27a1fa44df000aa5929a8cb925f27f8cbecdd812bd951da255f0e702468005c7d1e7331796d7a8c0acbd99e3689dbf755d61e970cae0054ac262e38e9818a5234c904fe2ae93ac43cd3c96dfeb32afe96f7d5d52952597d55ed3c6d56cff33ee2d54548eed8fdf9da1e81b18f55f26bcd319d8865a1bf518a69e5fa8bf56728739c1fc6a939c7fcde0d8ce4d8131"}, @pad1]}}}, @dstopts={{0x78, 0x29, 0x37, {0x1, 0xb, '\x00', [@pad1, @pad1, @enc_lim={0x4, 0x1, 0x40}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x5, [0xfff]}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x3f, 0x1, [0x9, 0x69, 0x800000008000, 0x7f, 0xfffffffffffffff7, 0x81]}}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x1d, 0x10, 0x0, 0x9, 0x0, [@empty, @loopback, @loopback, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x32, 0xd, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x20}, @generic={0x2, 0x5e, "3d392ad605af4fed64ffbea9de8b775fd225b44fb82ab5a7264940dc8ac4a96a1cb11cc63c0a7a86800a424f0ad40e75da846711b1407bcf73ec6ce7a869be47e3c485966e7e86eeb4bb34e0bb76e09464d357fa57a0e95ba04d722c527d"}, @ra={0x5, 0x2, 0x1}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x87, 0x0, 0x0, 0x9c}}}, @dstopts={{0x28, 0x29, 0x37, {0x89, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x18c}, @enc_lim={0x4, 0x1, 0x29}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x1, 0x2, 0x1, 0x2, 0x0, [@local]}}}], 0x300}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) listen(r1, 0x0) syz_io_uring_setup(0x4ebb, &(0x7f0000001780), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0xffffffffffffffff, 0x0}, 0x0) r5 = syz_io_uring_setup(0x4ebb, &(0x7f0000001780), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0xffffffffffffffff, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, r7, &(0x7f0000001140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001740)=@ax25={{0x3, @null, 0x4}, [@bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000022e2f6669c4653000"]) 19:54:42 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x6ff, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:54:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) 19:54:42 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b70, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:54:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1f}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8d0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x4, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1d, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x3ffc, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010200da626ceb0000001000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x14, r7, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x20}, 0x40) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xd0, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffff29b}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x10000}, {0x5, 0x14, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x89}, {0x6, 0x11, 0xf183}, {0x8, 0x13, 0xce9a}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10040010}, 0x0) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2197.111396] FAULT_INJECTION: forcing a failure. [ 2197.111396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2197.112952] CPU: 1 PID: 11549 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2197.113764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2197.114723] Call Trace: [ 2197.115036] dump_stack+0x107/0x167 [ 2197.115469] should_fail.cold+0x5/0xa [ 2197.115923] __alloc_pages_nodemask+0x182/0x600 [ 2197.116469] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2197.117166] ? lock_downgrade+0x6d0/0x6d0 [ 2197.117650] ? lock_acquire+0x197/0x470 [ 2197.118124] alloc_pages_vma+0xbb/0x410 [ 2197.118593] shmem_alloc_page+0x10f/0x1e0 [ 2197.119072] ? shmem_init_inode+0x20/0x20 [ 2197.119570] ? percpu_counter_add_batch+0x8b/0x140 [ 2197.120154] ? __vm_enough_memory+0x184/0x360 [ 2197.120688] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2197.121323] ? shmem_unuse_inode+0xf60/0xf60 [ 2197.121836] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2197.122467] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2197.123067] shmem_write_begin+0xf7/0x1d0 [ 2197.123561] generic_perform_write+0x20a/0x4f0 [ 2197.124112] ? page_cache_prev_miss+0x310/0x310 [ 2197.124652] ? evict_inodes+0x470/0x470 [ 2197.124878] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2197.125118] ? generic_write_checks+0x2ad/0x390 [ 2197.125140] __generic_file_write_iter+0x39d/0x5d0 [ 2197.128108] generic_file_write_iter+0xdb/0x230 [ 2197.128646] do_iter_readv_writev+0x476/0x750 [ 2197.129162] ? new_sync_write+0x660/0x660 [ 2197.129659] ? selinux_file_permission+0x92/0x520 [ 2197.130228] ? security_file_permission+0xb1/0xe0 [ 2197.130793] do_iter_write+0x191/0x700 [ 2197.131242] ? trace_hardirqs_on+0x5b/0x180 [ 2197.131754] vfs_iter_write+0x70/0xa0 [ 2197.132210] iter_file_splice_write+0x726/0xc90 [ 2197.132757] ? generic_splice_sendpage+0x140/0x140 [ 2197.133333] ? security_file_permission+0xb1/0xe0 [ 2197.133902] ? generic_splice_sendpage+0x140/0x140 [ 2197.134487] direct_splice_actor+0x10f/0x170 19:54:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x5, 0x5ee, 0x6, 0x4d, 0x0, "43805251d376b4dbfc590ddc6b195564b7bd21"}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) r2 = signalfd(r0, &(0x7f0000000040)={[0x8]}, 0x8) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x2, 0x7, 0x5, 0x8f5d, 0xf, "8d550a7392d5d5f9b26cb233b38cc93c45c118"}) [ 2197.134503] splice_direct_to_actor+0x387/0x980 [ 2197.134517] ? pipe_to_sendpage+0x380/0x380 [ 2197.134529] ? do_splice_to+0x160/0x160 [ 2197.134539] ? security_file_permission+0xb1/0xe0 [ 2197.134554] do_splice_direct+0x1c4/0x290 [ 2197.134564] ? splice_direct_to_actor+0x980/0x980 [ 2197.134578] ? security_file_permission+0xb1/0xe0 [ 2197.134592] vfs_copy_file_range+0x4f8/0x13c0 [ 2197.134605] ? generic_file_rw_checks+0x240/0x240 [ 2197.134628] __do_sys_copy_file_range+0x193/0x420 [ 2197.134640] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2197.134649] ? ksys_write+0x1a9/0x260 [ 2197.134659] ? __ia32_sys_read+0xb0/0xb0 [ 2197.134672] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2197.134685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2197.134696] do_syscall_64+0x33/0x40 [ 2197.134707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2197.134715] RIP: 0033:0x7f1d53837b19 [ 2197.134725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2197.134731] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2197.134743] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2197.134749] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2197.134755] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 19:54:43 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 69) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2197.134761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 19:54:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7f4, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2197.134767] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 2197.144064] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2197.209046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11570 comm=syz-executor.1 [ 2197.243939] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2197.244231] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2197.245257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11555 comm=syz-executor.1 [ 2197.246234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11574 comm=syz-executor.1 [ 2197.282089] FAULT_INJECTION: forcing a failure. [ 2197.282089] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2197.282102] CPU: 1 PID: 11579 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2197.282108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2197.282112] Call Trace: [ 2197.282128] dump_stack+0x107/0x167 [ 2197.282140] should_fail.cold+0x5/0xa [ 2197.282154] __alloc_pages_nodemask+0x182/0x600 [ 2197.282168] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2197.282178] ? lock_downgrade+0x6d0/0x6d0 [ 2197.282187] ? lock_acquire+0x197/0x470 [ 2197.282207] alloc_pages_vma+0xbb/0x410 [ 2197.282221] shmem_alloc_page+0x10f/0x1e0 [ 2197.282232] ? shmem_init_inode+0x20/0x20 [ 2197.282255] ? percpu_counter_add_batch+0x8b/0x140 [ 2197.282267] ? __vm_enough_memory+0x184/0x360 [ 2197.282281] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2197.282301] ? shmem_unuse_inode+0xf60/0xf60 [ 2197.282313] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2197.282322] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2197.282336] shmem_write_begin+0xf7/0x1d0 [ 2197.282349] generic_perform_write+0x20a/0x4f0 [ 2197.282367] ? __mnt_drop_write_file+0x9/0x70 [ 2197.282376] ? page_cache_prev_miss+0x310/0x310 [ 2197.282385] ? evict_inodes+0x470/0x470 [ 2197.282395] ? generic_write_checks+0x2ad/0x390 [ 2197.282414] __generic_file_write_iter+0x39d/0x5d0 [ 2197.282427] generic_file_write_iter+0xdb/0x230 [ 2197.282441] do_iter_readv_writev+0x476/0x750 [ 2197.282457] ? new_sync_write+0x660/0x660 [ 2197.282467] ? selinux_file_permission+0x92/0x520 [ 2197.282480] ? security_file_permission+0xb1/0xe0 [ 2197.282495] do_iter_write+0x191/0x700 [ 2197.282506] ? trace_hardirqs_on+0x5b/0x180 [ 2197.282520] vfs_iter_write+0x70/0xa0 [ 2197.282532] iter_file_splice_write+0x726/0xc90 [ 2197.282550] ? generic_splice_sendpage+0x140/0x140 [ 2197.282570] ? security_file_permission+0xb1/0xe0 [ 2197.282581] ? generic_splice_sendpage+0x140/0x140 [ 2197.282592] direct_splice_actor+0x10f/0x170 [ 2197.282603] splice_direct_to_actor+0x387/0x980 [ 2197.282616] ? pipe_to_sendpage+0x380/0x380 [ 2197.282628] ? do_splice_to+0x160/0x160 [ 2197.282637] ? security_file_permission+0xb1/0xe0 [ 2197.282651] do_splice_direct+0x1c4/0x290 [ 2197.282661] ? splice_direct_to_actor+0x980/0x980 [ 2197.282673] ? security_file_permission+0xb1/0xe0 [ 2197.282687] vfs_copy_file_range+0x4f8/0x13c0 [ 2197.282700] ? generic_file_rw_checks+0x240/0x240 [ 2197.282722] __do_sys_copy_file_range+0x193/0x420 [ 2197.282733] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2197.282741] ? ksys_write+0x1a9/0x260 [ 2197.282752] ? __ia32_sys_read+0xb0/0xb0 [ 2197.282764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2197.282775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2197.282786] do_syscall_64+0x33/0x40 [ 2197.282796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2197.282803] RIP: 0033:0x7f1d53837b19 [ 2197.282812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2197.282818] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2197.282829] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2197.282834] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2197.282840] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2197.282845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2197.282851] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:54:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x4, [@empty, @empty, @private, @private=0xa010101]}, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000001, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0xbf27) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000500)={0x0, 0x4}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x30}, 0x0, 0x20000040}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1d}, 0x80000001) r6 = socket$inet(0x2, 0x1, 0x0) dup3(r6, r5, 0x0) io_uring_enter(r2, 0x3491, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:54:58 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:54:58 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b71, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:54:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x705, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:54:58 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 70) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:54:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7f9, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:54:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 19:54:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x3, 0x101, 0x1000, 0xce, 0x81, "fc7572c3b7d389248a63d40107217dbfa88ec3", 0x4, 0x1c3d0d5a}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/36) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000080)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 2212.473132] FAULT_INJECTION: forcing a failure. [ 2212.473132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2212.473154] CPU: 1 PID: 11605 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2212.473164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2212.473170] Call Trace: [ 2212.473196] dump_stack+0x107/0x167 [ 2212.473216] should_fail.cold+0x5/0xa [ 2212.473250] __alloc_pages_nodemask+0x182/0x600 [ 2212.473273] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2212.473291] ? lock_downgrade+0x6d0/0x6d0 [ 2212.473308] ? lock_acquire+0x197/0x470 [ 2212.473343] alloc_pages_vma+0xbb/0x410 [ 2212.473368] shmem_alloc_page+0x10f/0x1e0 [ 2212.473386] ? shmem_init_inode+0x20/0x20 [ 2212.473427] ? percpu_counter_add_batch+0x8b/0x140 [ 2212.473449] ? __vm_enough_memory+0x184/0x360 [ 2212.473473] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2212.473510] ? shmem_unuse_inode+0xf60/0xf60 [ 2212.473532] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2212.473548] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2212.473575] shmem_write_begin+0xf7/0x1d0 [ 2212.473598] generic_perform_write+0x20a/0x4f0 [ 2212.473628] ? __mnt_drop_write_file+0x9/0x70 19:54:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x807, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2212.473644] ? page_cache_prev_miss+0x310/0x310 [ 2212.473661] ? evict_inodes+0x470/0x470 [ 2212.473679] ? generic_write_checks+0x2ad/0x390 [ 2212.473704] __generic_file_write_iter+0x39d/0x5d0 [ 2212.473728] generic_file_write_iter+0xdb/0x230 [ 2212.473754] do_iter_readv_writev+0x476/0x750 19:54:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x70b, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2212.473775] ? new_sync_write+0x660/0x660 [ 2212.473794] ? selinux_file_permission+0x92/0x520 [ 2212.473815] ? security_file_permission+0xb1/0xe0 [ 2212.473843] do_iter_write+0x191/0x700 [ 2212.473863] ? trace_hardirqs_on+0x5b/0x180 [ 2212.473889] vfs_iter_write+0x70/0xa0 [ 2212.473910] iter_file_splice_write+0x726/0xc90 [ 2212.473944] ? generic_splice_sendpage+0x140/0x140 19:54:58 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 71) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2212.473979] ? security_file_permission+0xb1/0xe0 [ 2212.474000] ? generic_splice_sendpage+0x140/0x140 [ 2212.474020] direct_splice_actor+0x10f/0x170 [ 2212.474041] splice_direct_to_actor+0x387/0x980 [ 2212.474064] ? pipe_to_sendpage+0x380/0x380 [ 2212.474086] ? do_splice_to+0x160/0x160 [ 2212.474102] ? security_file_permission+0xb1/0xe0 [ 2212.474128] do_splice_direct+0x1c4/0x290 [ 2212.474146] ? splice_direct_to_actor+0x980/0x980 [ 2212.474170] ? security_file_permission+0xb1/0xe0 [ 2212.474195] vfs_copy_file_range+0x4f8/0x13c0 [ 2212.474219] ? generic_file_rw_checks+0x240/0x240 [ 2212.474259] __do_sys_copy_file_range+0x193/0x420 [ 2212.474279] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2212.474295] ? ksys_write+0x1a9/0x260 [ 2212.474314] ? __ia32_sys_read+0xb0/0xb0 [ 2212.474336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2212.474355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2212.474375] do_syscall_64+0x33/0x40 [ 2212.474393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2212.474405] RIP: 0033:0x7f1d53837b19 [ 2212.474422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:54:58 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b72, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 2212.474432] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2212.474451] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2212.474461] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2212.474471] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2212.474481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2212.474491] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:54:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x714, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2212.711985] FAULT_INJECTION: forcing a failure. [ 2212.711985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2212.712006] CPU: 1 PID: 11624 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2212.712015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2212.712020] Call Trace: [ 2212.712044] dump_stack+0x107/0x167 [ 2212.712064] should_fail.cold+0x5/0xa [ 2212.712087] __alloc_pages_nodemask+0x182/0x600 [ 2212.712109] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2212.712134] ? lock_downgrade+0x6d0/0x6d0 [ 2212.712150] ? lock_acquire+0x197/0x470 [ 2212.712183] alloc_pages_vma+0xbb/0x410 [ 2212.712208] shmem_alloc_page+0x10f/0x1e0 19:54:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x822, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2212.712225] ? shmem_init_inode+0x20/0x20 [ 2212.712265] ? percpu_counter_add_batch+0x8b/0x140 [ 2212.712286] ? __vm_enough_memory+0x184/0x360 [ 2212.712310] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2212.712344] ? shmem_unuse_inode+0xf60/0xf60 [ 2212.712365] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2212.712380] ? iov_iter_fault_in_readable+0x9a/0x410 19:54:58 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 72) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2212.712405] shmem_write_begin+0xf7/0x1d0 [ 2212.712437] generic_perform_write+0x20a/0x4f0 [ 2212.712466] ? __mnt_drop_write_file+0x9/0x70 [ 2212.712481] ? page_cache_prev_miss+0x310/0x310 [ 2212.712497] ? evict_inodes+0x470/0x470 [ 2212.712515] ? generic_write_checks+0x2ad/0x390 [ 2212.712539] __generic_file_write_iter+0x39d/0x5d0 [ 2212.712561] generic_file_write_iter+0xdb/0x230 [ 2212.712585] do_iter_readv_writev+0x476/0x750 [ 2212.712605] ? new_sync_write+0x660/0x660 [ 2212.712624] ? selinux_file_permission+0x92/0x520 [ 2212.712645] ? security_file_permission+0xb1/0xe0 [ 2212.712671] do_iter_write+0x191/0x700 [ 2212.712691] ? trace_hardirqs_on+0x5b/0x180 [ 2212.712716] vfs_iter_write+0x70/0xa0 [ 2212.712736] iter_file_splice_write+0x726/0xc90 [ 2212.712768] ? generic_splice_sendpage+0x140/0x140 [ 2212.712801] ? security_file_permission+0xb1/0xe0 [ 2212.712821] ? generic_splice_sendpage+0x140/0x140 [ 2212.712840] direct_splice_actor+0x10f/0x170 [ 2212.712861] splice_direct_to_actor+0x387/0x980 [ 2212.712883] ? pipe_to_sendpage+0x380/0x380 [ 2212.712903] ? do_splice_to+0x160/0x160 [ 2212.712918] ? security_file_permission+0xb1/0xe0 [ 2212.712943] do_splice_direct+0x1c4/0x290 [ 2212.712960] ? splice_direct_to_actor+0x980/0x980 [ 2212.712983] ? security_file_permission+0xb1/0xe0 [ 2212.713007] vfs_copy_file_range+0x4f8/0x13c0 [ 2212.713029] ? generic_file_rw_checks+0x240/0x240 [ 2212.713068] __do_sys_copy_file_range+0x193/0x420 [ 2212.713087] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2212.713102] ? ksys_write+0x1a9/0x260 [ 2212.713119] ? __ia32_sys_read+0xb0/0xb0 [ 2212.713140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2212.713159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2212.713178] do_syscall_64+0x33/0x40 [ 2212.713195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2212.713206] RIP: 0033:0x7f1d53837b19 [ 2212.713222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2212.713231] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2212.713250] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2212.713259] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2212.713269] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2212.713279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2212.713289] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 2212.902041] FAULT_INJECTION: forcing a failure. [ 2212.902041] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2212.902060] CPU: 1 PID: 11638 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2212.902069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2212.902074] Call Trace: [ 2212.902096] dump_stack+0x107/0x167 [ 2212.902114] should_fail.cold+0x5/0xa [ 2212.902136] __alloc_pages_nodemask+0x182/0x600 [ 2212.902155] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2212.902171] ? lock_downgrade+0x6d0/0x6d0 [ 2212.902186] ? lock_acquire+0x197/0x470 [ 2212.902215] alloc_pages_vma+0xbb/0x410 [ 2212.902237] shmem_alloc_page+0x10f/0x1e0 [ 2212.902252] ? shmem_init_inode+0x20/0x20 [ 2212.902288] ? percpu_counter_add_batch+0x8b/0x140 [ 2212.902306] ? __vm_enough_memory+0x184/0x360 [ 2212.902327] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2212.902365] ? shmem_unuse_inode+0xf60/0xf60 [ 2212.902385] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2212.902398] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2212.902421] shmem_write_begin+0xf7/0x1d0 [ 2212.902440] generic_perform_write+0x20a/0x4f0 [ 2212.902466] ? __mnt_drop_write_file+0x9/0x70 [ 2212.902479] ? page_cache_prev_miss+0x310/0x310 [ 2212.902494] ? evict_inodes+0x470/0x470 [ 2212.902510] ? generic_write_checks+0x2ad/0x390 [ 2212.902531] __generic_file_write_iter+0x39d/0x5d0 [ 2212.902551] generic_file_write_iter+0xdb/0x230 [ 2212.902572] do_iter_readv_writev+0x476/0x750 [ 2212.902591] ? new_sync_write+0x660/0x660 [ 2212.902607] ? selinux_file_permission+0x92/0x520 [ 2212.902625] ? security_file_permission+0xb1/0xe0 [ 2212.902649] do_iter_write+0x191/0x700 [ 2212.902666] ? trace_hardirqs_on+0x5b/0x180 [ 2212.902688] vfs_iter_write+0x70/0xa0 [ 2212.902707] iter_file_splice_write+0x726/0xc90 [ 2212.902735] ? generic_splice_sendpage+0x140/0x140 [ 2212.902765] ? security_file_permission+0xb1/0xe0 [ 2212.902783] ? generic_splice_sendpage+0x140/0x140 [ 2212.902800] direct_splice_actor+0x10f/0x170 [ 2212.902818] splice_direct_to_actor+0x387/0x980 [ 2212.902837] ? pipe_to_sendpage+0x380/0x380 [ 2212.902856] ? do_splice_to+0x160/0x160 [ 2212.902869] ? security_file_permission+0xb1/0xe0 [ 2212.902891] do_splice_direct+0x1c4/0x290 [ 2212.902906] ? splice_direct_to_actor+0x980/0x980 [ 2212.902926] ? security_file_permission+0xb1/0xe0 [ 2212.902948] vfs_copy_file_range+0x4f8/0x13c0 [ 2212.902968] ? generic_file_rw_checks+0x240/0x240 [ 2212.903003] __do_sys_copy_file_range+0x193/0x420 [ 2212.903019] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2212.903033] ? ksys_write+0x1a9/0x260 [ 2212.903048] ? __ia32_sys_read+0xb0/0xb0 [ 2212.903067] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2212.903083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2212.903101] do_syscall_64+0x33/0x40 [ 2212.903116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2212.903127] RIP: 0033:0x7f1d53837b19 [ 2212.903141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2212.903149] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2212.903166] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2212.903174] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2212.903183] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2212.903191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2212.903200] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:55:11 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 73) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:55:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r4, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14a080, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r7, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r0, r7, r1, 0xffffffffffffffff, r1, r5, r6, r7], 0x8) 19:55:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x4, 0xf8, 0x8001}) 19:55:11 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4bfa, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:55:11 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:55:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x8, 0x4, 0x2, 0x7fffffff, 0x5, "a629b7bb7a6fb0ab8f0e90ecde14f05000", 0x7fffffff, 0x8000005}) 19:55:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x82c, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:55:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x719, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:55:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2225.904335] FAULT_INJECTION: forcing a failure. [ 2225.904335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2225.907160] CPU: 1 PID: 11661 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2225.908617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.910385] Call Trace: [ 2225.910964] dump_stack+0x107/0x167 [ 2225.911727] should_fail.cold+0x5/0xa [ 2225.912544] __alloc_pages_nodemask+0x182/0x600 [ 2225.913546] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2225.914831] ? lock_downgrade+0x6d0/0x6d0 19:55:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x3c18002def58af94, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x4, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffa}, {0x5, 0x2, 0x5, 0x9}, {0x2, 0x4, 0xff}, {0x39, 0x3f, 0x0, 0x80}]}) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000000c0)=""/75) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000140)={0x5, 0x8}) [ 2225.915707] ? lock_acquire+0x197/0x470 [ 2225.916787] alloc_pages_vma+0xbb/0x410 [ 2225.917680] shmem_alloc_page+0x10f/0x1e0 [ 2225.918547] ? shmem_init_inode+0x20/0x20 [ 2225.919468] ? percpu_counter_add_batch+0x8b/0x140 [ 2225.920500] ? __vm_enough_memory+0x184/0x360 [ 2225.921482] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2225.922694] ? shmem_unuse_inode+0xf60/0xf60 [ 2225.923634] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2225.924800] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2225.925915] shmem_write_begin+0xf7/0x1d0 [ 2225.926791] generic_perform_write+0x20a/0x4f0 [ 2225.927776] ? __mnt_drop_write_file+0x9/0x70 [ 2225.928713] ? page_cache_prev_miss+0x310/0x310 [ 2225.929724] ? evict_inodes+0x470/0x470 [ 2225.930558] ? generic_write_checks+0x2ad/0x390 [ 2225.931531] __generic_file_write_iter+0x39d/0x5d0 [ 2225.932561] generic_file_write_iter+0xdb/0x230 [ 2225.933566] do_iter_readv_writev+0x476/0x750 [ 2225.934500] ? new_sync_write+0x660/0x660 [ 2225.935371] ? selinux_file_permission+0x92/0x520 [ 2225.936385] ? security_file_permission+0xb1/0xe0 [ 2225.936414] do_iter_write+0x191/0x700 [ 2225.936435] ? trace_hardirqs_on+0x5b/0x180 [ 2225.936462] vfs_iter_write+0x70/0xa0 [ 2225.936483] iter_file_splice_write+0x726/0xc90 [ 2225.936516] ? generic_splice_sendpage+0x140/0x140 [ 2225.936551] ? security_file_permission+0xb1/0xe0 [ 2225.936573] ? generic_splice_sendpage+0x140/0x140 [ 2225.936592] direct_splice_actor+0x10f/0x170 [ 2225.936614] splice_direct_to_actor+0x387/0x980 [ 2225.936637] ? pipe_to_sendpage+0x380/0x380 [ 2225.936659] ? do_splice_to+0x160/0x160 [ 2225.936674] ? security_file_permission+0xb1/0xe0 [ 2225.936701] do_splice_direct+0x1c4/0x290 [ 2225.936719] ? splice_direct_to_actor+0x980/0x980 [ 2225.936743] ? security_file_permission+0xb1/0xe0 [ 2225.936768] vfs_copy_file_range+0x4f8/0x13c0 [ 2225.936792] ? generic_file_rw_checks+0x240/0x240 [ 2225.953003] __do_sys_copy_file_range+0x193/0x420 [ 2225.954003] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2225.954995] ? ksys_write+0x1a9/0x260 [ 2225.955783] ? __ia32_sys_read+0xb0/0xb0 [ 2225.956661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2225.957810] ? syscall_enter_from_user_mode+0x1d/0x50 19:55:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x71f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2225.958913] do_syscall_64+0x33/0x40 [ 2225.959905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2225.961007] RIP: 0033:0x7f1d53837b19 [ 2225.961809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.965738] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2225.967385] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 19:55:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x239902, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x4, 0x3e, 0x6}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2225.968917] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2225.970579] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2225.972096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2225.973631] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:55:11 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:55:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:55:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x832, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:55:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x727, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:55:25 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 74) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:55:25 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7e2b, 0x0, &(0x7f0000000080), 0x28020, &(0x7f00000000c0)=ANY=[@ANYBLOB='shortnameDlower,rodir,utf8=0,nonumtail=0,nfs=nos,uni_xlate=0,uni_xlate=1,quiet,shortname=winnt,smackfsroot=\',uid<\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',measure,func=BPRM_CHECK,euid>', @ANYRESDEC=0x0, @ANYBLOB=',obj_role=,permit_directio,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',smackfshat=+,subj_role=@.&#,\x00']) dup(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:55:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x738, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:55:25 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x0, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:55:25 executing program 0: ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb13f) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000015c0)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) r3 = syz_io_uring_setup(0x4ebb, &(0x7f0000001780), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0xffffffffffffffff, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x4ebb, &(0x7f0000001780), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r11, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001580)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r11, 0x0, &(0x7f0000000580)="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", 0x1000, 0x2040, 0x1}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r12, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r10, &(0x7f0000000540)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x7) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/203, 0xcb}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000280)=""/94, 0x5e}], 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000e514e5a4004a68c2d2429e3c79459200", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x128}}], 0x1, 0x0, &(0x7f0000000500)={r1, r2+10000000}) ioctl$TIOCGETD(r13, 0x5424, &(0x7f0000000000)) 19:55:25 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4bfb, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:55:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000080c0)={@mcast2, 0x0}, &(0x7f0000008100)=0x14) sendmmsg$inet(r1, &(0x7f0000008a00)=[{{&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="cb76185c4d74e87cfa071fababa72cb6dbf5c50db63398932ebad1d1872f72049bfc6932c673084ebc7dc78de8cea782e963250926fbc94c70095da19ced1ad56c57b1ed9381619b925f758d48942a5e6327b16c7272a9a03e055ca35c3c4be6292efd648ed47fc3d51c647e0c5910307a29ecddd5d2039dca7a909b56922d4ad66920b038f3ede5c1a6f329b30f34a35820a867b39b8bedb2f843973a00fc9e1d708f9f8685dcd2c329bfd3afb3a508d8268c84a8d5", 0xb6}, {&(0x7f00000001c0)="4071e5bbe1b64f6488a0bc55c55b6e984ded1e8d42b6b21b0def8e05fb4dfaece6ca36afc0", 0x25}, {&(0x7f0000000200)="a4", 0x1}, {&(0x7f0000000240)="5545c7eedd9a953cd5e03a1af64a7c72aa3e97b56a5ba697324209e9101deddda42ba94d424759a0bb01ec21059de26e81ca409a667388d75a07643907810c076968ccf48d9e06fa971f64fcbcbc8734a293825617ecf2ac2202ad34db82f71346698876e3bf40115819d26550f27abffb479b694cfe2871590ab98188cbda65f404d1a382cd9b169ed8e8935797fc6678b316ec1ea763316f4d31c11e842d4d38bbf0217024aa", 0xa7}, {&(0x7f0000000300)="12f8c24db613895e9c080aeffad22f99e699cbf5f4fbfa56a646bff88b871ac7e82b53600d39a4ab89e201b6c0c321fa40a86fb1939becf7e7d212d950176ae20f4134c8ee5a8e836e9a0b36da9a999abef3db31db631732214ee91bfb0dbdc5bff3aaf2429454ce77faa99816405fc826e444d225be5ac31f35535533463c18d979d0aab9b261bdb9fef6a615fa56d6eec15cfa6c602900aae27859e902d538d91da7f229b7352397f1ba29d3ce069a85cf2c4b626bd125131a94558827b216f80199015a504ce0b4ddf9ab64b09a0fe4497eac3feea87742a389f8a9cf9e0fe6ae46", 0xe3}, {&(0x7f0000000400)="fe88328c755355cb89a273e5fd8a", 0xe}, {&(0x7f0000000440)="c76f94b4ac8f31d8f13795e628aa2816842cf97f12c19771a24f69a9afe1377524f1fb7e97378efc8efc0e4a376866a49b95aca36355c7d201f11628b8eee1b96881a5477fc319d3527469954c87659f8ac26162ae2fe344b5b97961e400e2477445148e34e9e9ce3cf3df9c43e476", 0x6f}], 0x7, &(0x7f0000000540)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x24, 0x0, 0x8, [0x1, 0x3]}, @rr={0x7, 0xf, 0x21, [@multicast1, @multicast1, @multicast2]}, @ssrr={0x89, 0x17, 0x82, [@loopback, @multicast2, @remote, @empty, @private=0xa010100]}, @timestamp_addr={0x44, 0x34, 0x79, 0x1, 0x6, [{@remote, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40000}, {@broadcast, 0x2}, {@local, 0xe08}, {@broadcast, 0xfffffff7}, {@broadcast, 0x3}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff3e7}}], 0x130}}, {{&(0x7f0000000740)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000780)="3be958da03b1182c7d8137240b7678062a9f57e1838c52e08c74abb4dac3d7f13dc6c8a2c49cd05495c873140e3eda62635deb771efe373facf353e9bde782a91512f1d7823f3f2009e5ee4edfa75b7b2f9402ab4aca47a0a17b0c8c48f1590ce33b777c16ca61d132e23e4481e5af815ec447a00b2ab9ccca67a5f2cb2d7e4bb226a6d7ea591b41a5f7f21e7e24c1b01ab0cdaff2cca4be9f25a0804bfa1aa6511b1c", 0xa3}, {&(0x7f0000000840)="bcd2c98d8e2ca575581e861e6980ee589ca48e742d0b14b42854ebfec9cf73a23d7a5988b8381b82a7c857e4229e362353f3fbdb34ba54713a4358b354647456b859245fa5ca63cf584ac75edbf9", 0x4e}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="7e8816bcb297a7a257c275d9f4d0b2a84b7028f39914e5113c0aba29fd27240bfe2d00f0d55ada8326b3f4df3784843d89288d7ed77f6d24108b40961a116ab84b7a2eee785979dd7347af1210cb554719d3b5684349fd", 0x57}], 0x4, &(0x7f0000001980)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x20, 0x3, 0x7, [{@loopback, 0x7}]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x34, 0x1, 0x7, [{@broadcast, 0x8359}, {@empty, 0xffff8001}, {@local, 0x1}, {@multicast1, 0x100}, {@multicast2, 0x1}, {@broadcast, 0x7fffffff}, {@broadcast, 0x6}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x83, 0x0, 0x4, [0x7, 0x1, 0x7, 0x1, 0x9]}, @generic={0x83, 0x5, "c36a98"}, @lsrr={0x83, 0x13, 0x36, [@private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2]}, @lsrr={0x83, 0x1b, 0xa5, [@dev={0xac, 0x14, 0x14, 0x2a}, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}]}}}], 0x110}}, {{&(0x7f0000001ac0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000001b00)="7e8c9c9219d11f86255ee05389eeffb34c74904d88d8fa35ada727cbe786c6a3f692ccb1012846484da11f5bb33555608a42d6c07955ef72fac37ca1b6869349263c82876f033e3bcb2834ae7ee5318135ba50a04ccb15abf58c69cb1f15cb13a7c8fdbfb215dee76a61feaf3048c5a1c7f945412cb0d45a6d851c4eb689be145ca65338d7eb5d9f319be91cb5836ba2bce0f897b7260caa2ea97ee1a8303ca4933936907e9801c86ba9480883b82f1f50e6907d8cf494cdcda42fe577b78d67c116bf90876b5b57e17aa8cab007d02ba8f7236907cee1e2b6679ad8e823c681bb27ab56b10c7c2a80731ef21f19ac07989aa5b6d92e50a31cfb4cc2aaebcd0e8d7234d3f32019a46088384265f9071bc7920b00353134c930ce5635c195cc6becfff5470c4a257b81fe2a57359aa0ccc3e2ea91c84ee378652fe50bb9d70b14c0f3d03325ac21b541d82564693d9240dbe38707435b6766407dffc3cba6c2342f8f5c1e5344e9f8bfd72eab40a8433fd0e4c5fc3d5c0bd7b0c11dd03ae8c472d7001a73d2efd66afbecfeb49c3ff3c336378a5d5beda26c63a0d368a6529b1db5c67bc641e3d152ea08b78cc70c8718e9b17547a17dde2c81a7f3ab1aa9800682b31d5530478650e5af22ac8e7f2dadadbea93d78697ddf7eeaceb38bd76f7102553eaf859c7ab04e6b2701d0f0477909a545d69a8c913db129af41ad667657b1edb6bafb28712d49f66133878addb1706f8bf83e8b89cf69a8c2a8a8c22749b463cf1546130e669dcfb446baa3c6da0ddc01000e8b1e2c8bc16fd8e683cfbf868278b40f2ff6858987501cdfdcd15b04aed0e49a160c4ed21135a3ea804510cd7776a0d963e28dc520d189b1ca5a0fa8c0dce5f74e79969fe6a31632074b3ad19c96c62584a55878d01cd10690484eb4adc193c9c261d12e778db53a30891a00b8befa609a286e94984e514ed8d3d1d70567c892568fc6df54d4d6a1931f2ee1e771285d7f64488e805723f3e04a48ffc7f5490605a1f3d602fed8364c948a5301f78028d608ae7a67068436f77a2c52fbecf6d59246a85acd4ccf310c95dab23f35c36f9b55fce7f93233fadc86c63e426a43af8ff63fd178dcd8ea14f19ec72f0012639ae36a4a117272b079eed040d7ccd6e327f6c4cd38a89c6a80248202b832b20c8bb59f9faab48ff1928b685a2c3852e25fd31380d64afb08adea5ecd3981c304b3ba6cd60b539a9cf19c0ca3d978abd10e2c135b1b55931f7e35460f9e07e9301cc9fa95ca3dd9b1d3d30f1cbb2e5e1408fc0a875edbd5a811a4094285e1e73feb77a2a953dbf7f2cd7065fe87c00156c70069ec945b1af8100c02613423bb0c7b4f4e9d0d00147ee5d2f012a6e3ae8468561409ac51920cb8522248193bc839dc709de0d5b69a182a10cac1de5e526dcb426c4e4ed0add6d2142ff2cdc22ddaa7e431b1115914dbb8257e8c2887d7404dc8d6a4dba44cdc7be3097a5b979b8a36e0dbeff4256a5817c19f5d716d797ce079615418c4fd4a20eaf0257f8652725dd84530f439788cb1fa2d28478fcc3f9dc967c84eeb61f667ea3c5610e7337a548d1c09e109d185e55e5acd5932c04f8d83241498b4fb5dc43a507072eebebee074cae20f621036e6594222119e16744e4854bc04a3245c81925a91956f3d8e0b8e8592d87bbab2796da9b712697bfd4c394ab4dff6c67838dd3edc742899653854c589bd1d0de45220b5c33d1a1b098512ef354124321cca1fa48ca86c08322ac1cfe5267d5722550606d009ad048a9aad9e146e8af1caa14410827fd9bfed963ad7049da01e85a9a4ec355a955484696dc48585e7fba8fbe70665fd50e456a5965657fbff982c26c3e2d070a59da12c2ab6ddedcd5bb7eda215a154f1954f858ff4c95b9cfaf4c44c3dec12765ce4b90632127cc46b85228cad6d5e0bfe689599b061fa81e63e7c2e287fc05396c371935f95e6baf3e67784268ace6c955a32f8cd35860a64744b947b273d49d2e5b5a441028babcd905b685bfb54c4aaa12aede7ff709494b7e7e9ec86cae7529d611e0e5bddd483689cd73be239d66e2fb7b91055087a93b714458117551ffaa7914bb0e1df503d8b19993053ca264a37d380a7ba731ad506efd93c60ba0781112f34492ec0fc2569c75e498bb1f0ecef023d57f2f0657cbe3b07429842812f87edff266c5fb7982f91ac05205915a1d0d4b80bd2869965e17bebfaac49acd54dadba9f02a88d0b507f480bfc0c38de7a11c90a8c9488e585c7b763f300a75f6192f1dd42990873cd09f43f0aae3f5003c9eab8436b91a024aaa018d5f4354c4c316c3e8c06475e612185a983175cdecca34c8253ba50130ba717e197f748e876d4934de6fa8454855f3cbafbae8fbc30befad4363c03387f8b8891a38a2103486a91b536ead28afca12440fd6dfd62a72b7d28ef64af5a68c6f7a59415fa25fbb2dccea80a04d758f265b5f40613deda1c5b2ebf43ef8723e45cbc41f2e09b997f283cac5d97775698496bd1d0f8958c9fb4c722a97bae9fd670165cf52ded39284df236e8b6ddb49c7ae4b7c0dce668dbb389e4896d9ceb50476f423b741e27e2c4ed4cf6b8b530001f78a21952dfff0f7c9fc680ffb06057851815a910c27928afdd7816855287c9d839e3ccbf94f59b6af67be2b88d1c71f52999a003c4ba708d703d2a67399b0bb1061625d98bf1e288c33a8b9e74842504561928b4fd0af65a2a7020150800adbdb836898d976e06c95ca883f57919d19c28cc710a737637f00c51faa7895a0b38f6efaf898a98e21bf3b0b8d111062bcaa3005004c1d33b8a130eaa5895d2edec827400aa5558f4801255b36e7922ec6d8cf23dd9f9937e5d5eb96b1080e28c3f5711059d82c5866727ad40f24f5f4085d035b92396f6abae10a4f72de34b7612535032635da5f238a2fab07c6df2fa1d9239d7ba8478b48c946934c6f8b585809b3a6986abf1a78a7e6066ccbea5093c8032aa9b630e3359ab5fc3a66977bfa111ca0696ffc4b780a1cede93438e8e0c707c64fc4682f5c2d656327be71fc9761682af41d499727c5ff6d79048b587055e4fc3fa2638ab828a6bc897eef3cd31016251072f0ed401e6bef8069ad0b710b1b9dde8ee2a60e30cf6b1f6c2820d10a7d70cc10e3c61ef3478e29acb33fb240dea24fbd5bb0420a7f9f71633328cd44dba5d2ed16420bedecd5ebd633de9ce847abce92129eb41660cd908f3d85ea7683a81f909b78d53939abda3900b6b1de3e23309e5ed573c9e1280caeff08380833e331bcac174d39e74535196a9431ca7684a585f1081c1e1adfe88d45f57af11984cb594a0d4e24cd859bbeadc1241c18d1b051f2a19e436dbf8de2357ef750e502b3f2703c3fb7b55da724540e7d6fd06f7f4d02811a9b68a84bc48e00872c431584b6422357fa660c3cf67386638b951f6ce69b75d5fc856af8dc049d5ffa877a1a3f936b54b490a6b78f74678e646aa72138057beb279fd434b8e64a8f1f37d7872de8a95565fefae3e12347736aa47dbd17c7fcad12d5fdf1c36d7e5013b32c4b0edb843c85a33976b9b5837e2ed766f5b39c7bf4a2effe267be11faa2040d07545727f248eae9025221c5758774da45f56f41a79aa48d4246fe9b44610c926bbda2c7084aed57e391d11abb2781d342f4ef064c87e148cce8238396c690a7139fb053909316951b78aac1cde4a14f71454913fd329cb7e9d99d761c6a52c72a9dcba592409177ce473d64ddc0abc774c136d2b1d39f7382bdbebc523b26306a559ac361b4a46706f2ae42fd9aac9bebdcc418aecae8db27bb85ecb8027323d7a1bf1041dbc02f226e33ca865532521204b12d8f61aa0cb1d4f0b7e78ab04d4172d838d76080579087d91d71196d587abff4d34d6cad926a965edbaa8db85989af6aeefb2ac804f028d1bddd4350fe2deae9993ace3322ca865e698a38443e7e9f6a0dc9a50927057d377522ab5be2f6f67fb80bfe3f9bdfc4d52ed51d5e809c5331d030dc1387280e7af9bf514c318e4079a6e7b044e46e17c35def09e2df0213590fc42a54400630250c511b404d9134c99c95f7a0f09d0f510968361f23487bfcd76691cd5a5b79e50993ff4c85d00f8a22e230521142bd38c1e460fedfe33e82aaa54f47f3c4186701d8f9a37189c9651c844361a3f0db5206f10f32f851807c98fbfba342971198972d7a8f8f29f6ccd9f478b7b80d45c6224094a65d923a0875280bb6857ef614d78de490a842129beae28eeb0413d867e18f354ac6a4dee22a53f4cc7061d1cec51464dfae27f266c74ec3807792b171a6bd85bbf1a226209ee483d99f9bc2ccd74fd0e3b752fff728bf42a24c7294e1e0671529d454d481140e6aeeeedaf2f94c658064395218d2fca25e3bf3a35ee560fafb8410e17bf8bd6f42e3db500970fb3fdc80523a3cdb195af22a37a7c4411faf562847a1e95bbce580e0a243bed5c691dc106518b8bca4720b1f0fa15914296aa092b74372d7936dcf8836a313d8f3e8663441d4d244cf32879814dbe79cfec769a1b611391df5b09bd87d1b9b9c1fea935ea43e9a937acb98b28c1b3588b4018041ba2cf49c5f1a86f086ff4aa9a3e3ec5c1a1ec80db948c87e39433db26713b315fafddcd5fd9f86f6f2f7c21b647b3cd036a368f791f43bcff42ce6be86c78887b750e703a7a30ef2a2e6c57cf7fbefd8cef65454b0ff8f908a738b79b361ff1e242a2b37cf893f9a33d34bb152f9d56ea39449a8ce80bbfc588438cea3da1dd9eee9bc07cd266b622b1b741bc3a44bfab1fbcb15338ba265ad62ae72fa33841bfef2a449a4be63192fb4df3a63cb0b391f3d20a167bb241cc06718edaae4f05dacb84a89ec808592471d1c53d47bb6d220f7bc19be43b1b4f64e6771c7fccb4637552ee209f986c79e4501f4ed1907b632ebdad5b2ec518b758d6ca4055609b7a71f3b72fa0c99f20e05013e1cb44d0611c9b7177f906d983243370b8e04e1cb3f59a172b30990bb4251aa3e8b60b6259ec462f959400129e6cd49c80d74ae3421b62001f28c977d6706c47deb015617b0ae1dc1f8205bc700e8ace8bc8ca14d6a09fec97dbbb5140f8188630698f2a86036c516195e7444ae0c3b2c4188449b12817673fbc24d2c5e2a53fde308b9cc01e14f845591a6e3f5dc8c1ad9495f3c9cd81c69f9b6654200702f86c2cb163c6efde9cd09e761b08bc495bfa179f4df8df3be35b0d1a913f6b36064522b482aafc48b462c4abc7835a5037c4ed0ffc7b49cf0798801278d0400be62b1a47c1e807330473dfc24be6e628621a444424f581c4796bb33cdf3ce34623336e2666ed060dbe0e4052ba893681a2ba8bc46044983a04b844f18a43b461b2bf4f538229f129e70a53aa1a4972aeda806f5026d36d7e158a9f5187f45826969b3a1d25273bc499acc8a3e24999c8f797f6c421044a54a7cdc7f10e1c64a914fcca8e8bc6c3216b8114539ef574c33ef76baadeda53d0cc3b6a054673b7127a0a87d587a3e7b7907683792425844e8dac46b90701de8e4f728648449c9bb598415c9212d32f02dcc698847f0b58ce9e3e8c2e93b669a35b85749829584d775e8b976e89773d79b8db56cce01972e82043f700437136ccb596d97ade893a9c1c72099cab1c27fb123052b66d5f0b373b89535bf7b1025bdd505a01654724e9ceaecaf7d618d78bdae51e04f8e5be6220d17263f12271beac861699773c6afbbefa75f8f67fc069c5f8f36030ef2a2b7e327c03b6f", 0x1000}, {&(0x7f0000002b00)="a76a2b0240ea981fdbc20eac355811ad9444fa808e0db1276ebfbd587a72ae2e44a7657d4c2a9bdaab2dcd7353dafcbcca0c4a174224fe562054ad7427150ea5cac2a1007c40028bbf502ce04cb208366603b8ca3b34843a341457b17a305f7c6b9400b5f9491dc2d4db1b82401e3aaadd17832c843175a41510b7168c3631b9aa881f9d56713eeff07bdb6a4a712cb04f16cc8d30a1bf03b670fe12fb19ea4a975003982c2ceb2c650cf83d051862f121eb137aa3c520c39b107fd5668adee8abda6b6d67451f3a3584ab712e78faf2c6bd6750a118080e3e64e08f0b544cae6e7ffbf34542bc4b75386050efd7b36216131de2", 0xf4}], 0x2, &(0x7f0000002c40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x8}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xa0}}, {{&(0x7f0000002d00)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000003d40)=[{&(0x7f0000002d40)="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", 0x1000}], 0x1, &(0x7f0000003d80)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_retopts={{0x98, 0x0, 0x7, {[@cipso={0x86, 0x33, 0x3, [{0x5, 0x6, "cc35b2c6"}, {0x6, 0x11, "7e13121cf937451ad5fc32c5eb893e"}, {0x1, 0xc, "7017692b8b64aabbb025"}, {0x0, 0xa, "42185d84f734bf71"}]}, @rr={0x7, 0x27, 0xfa, [@rand_addr=0x64010101, @private=0xa010102, @remote, @private=0xa010100, @broadcast, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @local]}, @rr={0x7, 0x23, 0x34, [@broadcast, @loopback, @multicast2, @rand_addr=0x64010101, @loopback, @local, @multicast2, @loopback]}, @end, @timestamp={0x44, 0x8, 0xa, 0x0, 0x5, [0x6]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x2d, 0x1, 0x9, [{@local, 0x2}, {@loopback, 0xffffff81}, {@local, 0x200}, {@rand_addr=0x64010101, 0xd5}]}, @timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x5}]}, @ssrr={0x89, 0x17, 0x13, [@local, @private=0xa010100, @remote, @empty, @broadcast]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010100}}}], 0x158}}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003f00)="4633fe89bd815fd22c6d73d91ce66e2493c869e3bf5f133b7f766ae39f8177ea554495d41809758a5b5e49059ffea7", 0x2f}], 0x1, &(0x7f0000003f80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @dev={0xac, 0x14, 0x14, 0x39}}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x30, 0x3, 0x4, [{@rand_addr=0x64010102, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x7f}]}, @ssrr={0x89, 0xb, 0x92, [@remote, @empty]}, @rr={0x7, 0x1b, 0xa1, [@loopback, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010101]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x1f, [@private=0xa010101]}, @generic={0x94, 0x8, "e5981c23f57c"}, @timestamp_addr={0x44, 0x44, 0xa8, 0x1, 0x5, [{@private=0xa010101, 0x400000}, {@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x3}, {@loopback}, {@empty, 0x100}, {@multicast1, 0x5}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0xb6, 0x3, 0xa, [{@rand_addr=0x64010100, 0x4}, {@loopback}]}]}}}], 0x170}}, {{&(0x7f0000004100)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f00000053c0)=[{&(0x7f0000004140)="9e1a3c8b6117b1e7fe8eadf309b2b64f2e7eda96e8a59eca035a73a12a6871303c9a077d16d047a22df35cf62c7103561bc89624d42092015192bb000c5467ffcc4df97a0a4078ea5b83272066588a585db8acb6fc2b08b104c3d33bdd92814f661ec6b7fc9daefb01cf06bc70f97701f450c3a2b25634b32ec51c64591fe8ffaad788d395b4b7bf014aadf7662ee5e08d73b19827a7ecda81d2b489", 0x9c}, {&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000005200)="8f570962cb55a095082a214db3027fb2def159d04b72a5e6256f0f8340d46ccf421dcb538288f4d9ccabd726a7494db36732759ff232380b87f4598a98a0731156863387e9fb9fa0c0fdf30d53fc70e5c78c4be94da42411b440ea2dd41e412143a4d9df6c264058ad1da585bdf456267beddea4af4fed24bc50776cbeaee2f84cef9549540e7d49e74f3d3d7d60b031a051cc592b8bb6ad85be081bf9967d832aea08316f02367081382e53043576a724c1c7", 0xb3}, {&(0x7f00000052c0)="159f7d8781763450f23a6e9dd42218a6e83af131b50ee6515d9e3c3f33a4ba8411776f785037e941d08472dbb9f17495f2cbeb06b258681021a3e6c9f2c4a7dfdbfdadd644852b08c0c73e5cb4716bc9b729e53e4692de009ff25ae257fc1d008c9aea6897884e4d1b353a9ecc775e470d43267696c442a70ba315ce4b674d0be23da4a9d79cec61e16159af53b90964ae4afd26a1e4a442c3af0b26743bb1d5e2f3dbb14ec6941296e36296516c75ca3f2089dd2632afcc74d45533b6b668442313492079fa0c45f2c94288cddd75d8d8a47bc520ad5abcd37ee3b532df42494226e46c90cb4e97c63b80fdf9280c604489", 0xf2}], 0x4, &(0x7f0000005400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x31, 0x0, 0x8, [0x3f, 0x1ff, 0x1, 0x5, 0x7ff]}, @ssrr={0x89, 0xf, 0x94, [@broadcast, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0x44, 0xd3, 0x3, 0x6, [{@multicast2, 0x2}, {@rand_addr=0x64010101, 0x7}, {@empty, 0x2b4}, {@loopback, 0x3}, {@private=0xa010102, 0x80}, {@broadcast, 0x80}, {@rand_addr=0x64010100, 0xe67}, {@multicast2, 0x3}]}, @end, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_retopts={{0x48, 0x0, 0x7, {[@cipso={0x86, 0x16, 0x3, [{0x0, 0x10, "06e2b3039ef6530615894091516a"}]}, @timestamp={0x44, 0x14, 0xfc, 0x0, 0x4, [0x6, 0x525b, 0x6, 0x7]}, @rr={0x7, 0xb, 0x75, [@multicast2, @broadcast]}]}}}], 0xf8}}, {{&(0x7f0000005500)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000005bc0)=[{&(0x7f0000005540)="0323d879e4c7be7c8ec7cbe746cd3071f8ca36e9cd8c2449162c50ba09e03584a5a44836445372abd1148cb6f3a143448a8cdf35e34fb2c648b72c6008ace9a45f55791d680bedf300b129c3b67fe050dcd765ac6b6f50ee80b5ff73fb5d6c9fbff031b28a9dd44770240334d2a6ba41a793b5fb371ed8330287339cfcf26f66d57a46f1250a5f2e7c7b0569d8a7b8b04f397db1572fd0fcdcfa8b921e1d958a412087193321d9f4f225f2e51b9a142bfbc5d715ce24467b5d9384b718b8ab6fbe67fa98c1b3a39050365d11a7401dec5553b5854d4fe449ff13a133c6e4eb5ed6db265da30e11bfb185", 0xea}, {&(0x7f0000005640)="44229ac19995bd328125ba52094f703124bff8e0863ab8f3fb117dd9507951eef0bed5c5b5719e0ef75ea1df2519385c100c50fad5f069999901f99e4ae207234d0349cec51d434389463cee5ae26a2bcc7ae7bf4fac8c8fa02330a9fee90ca351ef0f89cce6456bffd22974feaa52d016c36a9d99d0d3909342d8645b52b8682855f242707791ce10f4fbf58269548bf275f5a970b957cb051aa1ca193bd108576a76a1b565f12fe769bf8be706f8937bfed10de1ab5683c2869bf31e86e5c84c5b4d8da0a6ef76d36e3c2fa7dca68bbdc4205f", 0xd4}, {&(0x7f0000005740)="fbc8b831dad776d13d449cf400a1a6b49b51f3df62155380b8e020de19cec1a384c5b9021b9fbd29d6853a053397a63715f41a6dbed3f9f7c10291112e513cb143e7a05c8a97b73e6478fde7ade769edbc92f16483eedab9e2405baaf3c2b4736722bcd4769b8cb61677c171e093365770b435b8ebbfd11c47806af208ef0c3d869c81a038a583a27ad9afda80949f66da5e6e4d35bf3b05e8853bf2326145ca0d2a7b61f1", 0xa5}, {&(0x7f0000005800)="1f0087bb34d4839d5fb4dd5904b5155c989eadfa968aa7bbe441bcc61082395df6cf37ff8288a59ca67dcb6358f779437ef2fbcacc1bd2cefd1ddb6a70b4abbd7874cbdba9738d16c6d3b00751f292824334eb1b3ebf52318d4b1bdf6132dcaf4d45ff6bb3157cffc3d4fcbab80d7473c3adaa716e4693cbbefb80705a677f2c2771917017967f19d355c296fda732db476b0f7b25bbb0da59eee80c92b1b91591d62e8dd605660bd58a62fdef0f4ecff60fe8bc4fa8802aa16023429ae0ff82f9ff2db1fda84701c34b6bbbe818cf529b02d6984c06f0d9668273e63e2848a660691b2c8c9eac3fbfac57d3aa8716b5c6", 0xf1}, {&(0x7f0000005900)="60ba4c9361ebdb489eae112af6a75b00a7a40054c26bcc5b860a7841022c508291253d1c3661ae7ca3e7bd38a99be87bc0b4cdea442a7daa20f2ec652970b6f64f2e15353dcaad756142041d946d018596b2603ecdd0464f681b067bd33bdf697479461daa08ac1562a3abfaaa98262e8bb550204281471162cb8767a1c23ba8db6c6d4704de75c7d4f4df7dca2e234c", 0x90}, {&(0x7f00000059c0)="c2b328ba0b57616013a725439f51c2ed03dc59f0b6b4838dfa28a3b99d1cccaa27aec72b18b46e5744d255f68e0d9faa62d38ebb3dd566", 0x37}, {&(0x7f0000005a00)="9303e85df65c1b7c943f8658ee61b8631ade46", 0x13}, {&(0x7f0000005a40)="ccc77d4e875aa542a6d8d6070a2ff33e05cd81f032b9381f0aa9f27a497ec850f0265f08e16b61c57b2dc4217f78c9a8092553505f367967f36a52514fc25c1867777e4042f712c18fb9c39d", 0x4c}, {&(0x7f0000005ac0)="7daed06c19993b740405b9148ef06bccf25487c6cbb550a494673fd94a378bee95ef93ac17e3359d47eda3cf6034e7dc7d6d684931378f4d0c267b5bf7133df716a6d28762b1cb78ff44995893bdb833703562fe4757939b287d36d9c2bd30810913c4d041cebf4e385d6fc6f8f067f9a235df8e932bc0021ed8877300ec12dfd9b3d78d6142a84605d02e14bef75d6efe3772c9a68d4b901da58ad2c1a9a48a9f6e37d048744b49d9a43abe05722ef0c11b16fc0499edd71b882af48bf6ddffd91f218a134b2f", 0xc7}], 0x9, &(0x7f0000005c80)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0xa, [{@empty, 0x84f}, {@rand_addr=0x64010100}, {@private=0xa010101, 0x3}]}, @noop, @generic={0x83, 0x8, "92905cea3805"}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x58}}, {{&(0x7f0000005d00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000006f80)=[{&(0x7f0000005d40)="81f7da6ff4b69146c73d94ffd008d9e7303fd935a4b742088f0f52ccdd88397b144d078003059989b1a9e081d45371861eb560dfa9684a7f0051ededd012ec45b746de7245a210c36bcdcb704b8fa3c8376f0526defb46c77df11466dc756559fd83bc83a3c3e65441b06855424aacad8f40b9bada0958d2f7bf68c57a9d1511d1a44cad971c682ac6a3d25e0a2b4666b37544d1085cfb4eeac3ae6d93ddb9ca03b6791240c7cebc87a92cca856ef970087c5f1fce42f13bb72007d6668df0f948a7b435c6325ed14745508dfedd67841471dda8cfeed9", 0xd7}, {&(0x7f0000005e40)="7cd2df830f44d72558006a93cd9d6c3e33999b8bde760b6f6520770d8fe18ec456ea1ebfe3df08321109bf05d802e1871fc391e2759ae1a74a2ace2a2ff93a328fe54e9364f14ea7bd19789bca039849d2f0fdf250b629e5b921193f7a9d", 0x5e}, {&(0x7f0000005ec0)="6e723f2064dba57c2b95f90cdfe73f2b38245b0181354af2f6567b3f58b10f9d2ba5326b2036a0b9365e6e4853edf94d0c7a1a6d7b00cf0a1e356e3ce698db09fb13fb7d1de3f13f01116da480502e982b83ab1e1f2596748e7b576aa088356acb4e7125e89b9203d7fcc95e19277237af59a6bd927dda43da55e80ed48db5bdebc1e2dcf7a87b4505ac19d20fe141f2c97f0b1790687f78fca9117b3775810355ff2dce299f2a6ee241bdc6f429195308c8bc83e864f9af6b4b9a204f27", 0xbe}, {&(0x7f0000005f80)="c7606cac0dff25f3a35a80dd936e9cd53b6da5b70583bb6f01b0c009be6c9d9f34b9db6ae34af1e1150e612a5b2eca9334479dc2cd018af741d36230602ad92edb36f8f29a5a290d78dbc39501fd40ff8901582c15dc8316a2d260663a885195e4163382780fbae7ace7c10796450e6d347e199b600fd55deda076d86240c62a95b49581c807500e23cef7ed8f785cdd4f85829bd343d1e8695beda5d23d1b693d70f0d5660308ba308c1ad66e53a6b55af13a5d58a0b9e2d24390dc0b3bd91424bf00ba15395ee69e3b3d5085f60a00356e906b376135200f04eccacf4a076d66951de834b42d1019123c42db48df0d814693819ee4fb763e3d0bb1b8d886e7e58187869edd0cef331a57a7f85349abf4c0d174296c1ef435959637fd9b4503622c66ed5fb9b981a15f82074f0efa9c7d9b3eefdbc1f2c0cfefaf5089d800a916448c75e82601f58a0f70cf6e94c475bab9ac0361ff7aa01a08bd525a57e75ebf6ce0605e27e5421b7ad542ed5a4ce37759b1142ac33a8812dce1fb39252b5d01987068431e294df9b7a40e213531c41de56abf6682286a4e9e6c86594ee7ce1d70e95d404f6f66e1763ad4e5fe7640c43ff2262059f95e3570e4cbe50b7f4be8c51270fe11d617501b977ed65847542e913a008a20589455da21d52b8ef21dfbb38c735d7762478eb3853cf968758b1884b5427ea842a86784b3c47745142e7fa62f2e14a2bbf83f9d563224ef87e08da2140461e2b861d842eee45db63e0b8dd0b879f06e72cb0e08a47879f064c50e7abcce6cd7b663931d97f7885264fac94bc5dd1a49a3347d96e4d969dce1c866992cf06e98914d8fab5e984e94198bd62766ba0387f21efb9ae650c1f62d23cb6424e6e41a96e7f3db8494ae8bf9809d52c3945e1ba4509673063d2a03b860a49e5b3d69ce156b215ce70439fb640cfa15d70519908fa14512336d83994d70d0759cfe39c365113942dc755d36935a57f7c26b35db40a646f7787a11f378b3ca01617280d36fc4b8c7f3f9bf9c83dc08c4130308db2f7b624dc8b14e886c41a27d4e5fb72e5fcca37b59587a15d1b3fb095a1b4687637335825b21181efb6e1fba0388cecd848d3bd079616efd03ab9f8e5d2a3ec0c9569c169374db68b6747a1e3cf0da258f82d0fbd273c2805dca5b2b63f18399e7d075cf5f73406860e5405ccc63c115bfe27189479cb1f0c3c64aed20cbce7a88c567e75357eb983f0d4ba79c8f27227c28b392d2e3eb06f990503252839f9d9b384775e2d3a3a927771cdb429e5651dc743f46c390162aadcfa4311344636bc4a07b922c5699fd701fc6a61939059430a9aa02648ec56bf70dddb1d6fb251f06818c0e84cacfa91a0ab3080bec2e7063528228f3b1a03c51794b3a6aa591a921697b5cd5152ff060a0c27383798631457d1aced321ff355689b18bdb8fae26944143de503e56f15595f2ee2f7b7440e699e41a4e402c9769e334322a0199a5e5d4a9d24e50bab652313dda8fe84a97541e31bdebbe02cd86b227069199673d6d1d365637ccdc370b754f106ee19ac6424e552994d7b85496e08c6f8be1057d0eff7fc8bb6b8b38d051695ff282ae86db610856cbb10d2aa3cdde04208cfe9aed8b30580a4bd34fcb080a0d01bf5a56012f55df6d6b2607a3f0c2e1b85ce8fa865a0b241f2d6cf7f31369d12182dcf5b8544cda2a7aeab28846462c611dc0f8b22c4490532584f38ec3710297ba16bc07fa5c10a23355c929b75d779d6a08d3c1fac589661db5599cf618a777d473a71543c563610e1094fc5bb69a789c0915d38b8f4e3c57bb4ca627ff4e8a14531438ce832053ad75ea4bad8cb4596556b4e72c905c955f34a54a33e596a5abd509699d9b9ccc0dec3d925af550de98c37a13b76bfa6f3a466f0f2830756549c7c60a10998faeb2e1adeb077eaa2bb569fd3a78d0b04aacf5b3c3b69a8ff75aae8a0b49cff9292a698ee470e0c789304277dd77779bcaa719c49e1deb1bf4fab28d1cbd8603cccccc301926346dfe8458422676feb552aed386ece34d8f457a72a8dcf7e352c0d01d30be3d008a9cf0fc65bb203b9f31161329c0d4ede2bc883f3c2066be17743e2b7e83def5c4853758b2f44e703fe345dc7c4046929f16f3bbe448014189197d47622940272cebda3f374790d5f2b9fa0c81b3c301cfd37d303abf7e8ef3dc02c2b25a84d8d54ab0345a95c4dc08ea23578ff5ffb698a188d5ba076955830e369c861f966d4f3b3654f773e5f971b1fcfd4ddd55cd79ca64c909f72d853f1c6e6f9df8c1b40b05146f5c074deeeace05a33742ddf5ad25a0f54f961f931ff077445f96f7e8c59191ff935fb41c1e49e4e0bbc0224b6fb0d4c796950f35635acd749f77c6247db45b381fab5213becfa804d8a66936a24f984b9b917b9f928d0a0269677853d8704af880a85cbf9fbe4b09ee82289df20c4b77d7c6c37607513f40b6f79ed80d6fba222dc750bec962488ef6868eecf683e08d59e14a2ddeaa094c7f6d03274bfcfeed413f532560b686743a75921149aec8d0f88c936aff6da4ad94c7faf062ed9476e366040fe11860f55176cc866f90606c3b55f1d47f3b3fec814652765302a95b97b5ccf3bca0c390387c383ee523afdd6a3a38495b80c290faa893ef4615d37a9d94867bc297d7bb15c4f80f3f205928a72b8b6d429744efefe4cf924f127c54dd7c277b297e251c8f937b8d8d70679b6931fb51e82b36217315b6722a07734eda4d0109a49da03c84c8a73c89c67c21422f45e1c270b155efe024136158b9968614622cea3f83bec52002084a321fd503ca7756e9ca27daed5f62ef26234ec2554f3e5f41ae6a04dfd4e3bacc0821483eea4e548b952f79a81cbafbea7bdb22b4d0e0007f8c7e903963ba926cc66ea7ca3923a6e531d4b73378761dae39ab2d8b18c7339c1580ce6d68b5ddaceb2cd1964a251b842044df78306b900ba6e812608ac531b8c418bc2dc7d9f28d47bd8ea498f6560d39e725b979a36529c063e725fa102b02558c4343beaa63c3c4460e3a1b237957c4598a159a9dcd5aef54b3bd6c07935865eed3e4ee9a6734d7e8375b46d2aa895f1aab3c2501cbc9c3c55f0e4e2a6c03e42984ffc8e32f3d8fd17c4508d34125120d3e35457db2419e36d929901e2fb0c814e898cdd6d239024d082da5a7811c6183e354bd08c79adc32b334b7e696a0cdaae29b0fabd29ffbebe5586485a2b90e230a7ba5f8606e274141f490fe0c24339a071f11535d4b82c777b43070738e8a8ee8f8b2b69203b7beee4f27f9c264313ac2395b156829f9b183f44f8ece84dc5637c50c41c34c660d5999e709ee7eccaf3b65061c6213ec3442f3abb8a3dcc211982930ef24ee8c35ffcef7be570d93ad229b4c8bec14f1905b73b8650f98a602210b3dae0d50583a2a743f2b0492b8b9aa00e1200c5dbb5c9008af4187cf9752701a3765ee69de3280ed28398e4a4def53277463e6ef78a12f9a479786edc575242c92b82a45110a6f11cb8396d8fcce23032d55bcd29ac6de04b5fd60c7f4b703cd676025e5b5562b855420d0ff427e1276d04b953802789be42f08cfc2d6ef1df85182d5da1349c6325a6d2940594ba7d223e18227eb4983713972c17dd58889e74324b5b504194d8c165c5bb211485408fabb01c4238dc1b8c67de28c8c0c28229c4b3c8c78bc06d232aecf7cefe1360ba8c60dcc6eaf4c44e73b9484ad455758200206ddef0ee813d3ab37305a524bfbe3c35bea5c330038f19da489e14be09b12693926bf1f1c733aec02251874708ac01b5af87d29d1749a5baf25d69732db6b712bb346cdbd1acee1f94ce8547f37f32af236276cd619e37f47c73273a8cccbda8da65260c62aaa729adb7a08b8e2d7f67cee8b1f448b3445da5a3287e3bda0fbafac274e844a0c4955c6b6c79cf168ce94fccdedb27158feaa301aeeba38789c1459fe6186e90f9c0bb4eb5aeee6dc81bf64ac908fce069c933c4d9880ec50d523205dc573138f68228991bd2057bd165db7030d46f2349779bc36f59d1210c255def6d6c1799f5d1db0376ea737cd6eea37775d156a58d467de9ff95cdc040935350db0a3dd42f460c71eb56468ab7e4e89a466c218844639c2be424bfdb176c713a84b822731b402d6c3a4843cb17a9233d742136b020971de7c4f3a7dcb8367c106d6c3b87d88d97bd411fc39f7ce8417e889c168d272bdbb5d807daf2618187e6b273bced73b8cdb75550ff557b8ee7f37aed37f90ba0a40de9b14f690e447d429b59484b639d79214dd87c4ddad596a08b757348b9419ed1826e2d4575638722f4edadbabe649f81f6d152f9c5e8b8dfa2efbce809589d1291087819f06c6d16e1ba25a519c74900a709bae410ca8bee73bca2811f02f1641958a88b8e3fb130e2e939a130597bb3b496b6e5da6fa575692baf1816e1ff3a05567f9baa248fe803d906fd88114c12947cc7fbe8630217f9021dd4f03713550a89da88d603353a2f1f3d975dff94b0b134b45b8b33aeaa06a0449a414418ee2ecc62087ed070af0de154519d28561c0b35be243d950d670521baaf4110d87c12b691d3cfdab7326d09c95140aa2180ea97c6173820275b16c5f2c6c7cc46d2656f1215e91dfad9e53220d6c92e023b54f26d411ebddc4fefa2a2edf655eae2947b8f3360961a038c5d2251685e00141975dd6fe4a8d60df0667be5af2ad7c6bc83ae1092a05deedc158a6401b7104dae2f35e781cf452f0b3a6d69f2cf7a617ee2e3ca9f1b8cf0d6c86d77167b6e6dedd87f2574cdfc900c0a0eb98bd35b1a9f681e40a72fff9b9dc7bc98d8d220b4e8f3c437a7a07f48e100c960b6bbe6259aa331d55e1a78de6f2a4b145728d03f271005bbeeb173761e8e42770ee9b2f40a8255b070e9131c062e3a3a6c1c578fd8a23948f71257e6805486e1a80b1255b1d8f5feb790f5d8614305e9f54d92b3d2594159b8a8750dae9e920dc4dcd615b5aa62ed73a96abc1349391e06e528812ab92a29cf1c5b7f0b1be2416dd715d72efccf25879ace39bc1b2a8b7b9e032c02680afc1ba214929fa2da498d3413e82bf4784ee16c8f9871ad43ef9e6cd23d27abe9199f7a93c8cc040e9604b5b50a0eed88343bff01d0785375c1077bf0c849fb20bea035cc08764a1116b8a54ce0cc1b1de498fbf0f17db9c4cd1e2b6551fbf251e4295fff927b4abfc5f175f4c1bd610db4a404b760f306a5e3380fbc9d3f5597529fe9f8ec9b01bb6a17589ce987df9b83eb9fe2565f482f72d07aad779ac1782020266e7c37a536511c5b565cd6484de36d770a5bcf87420ef2f41db6d289c4de61c9a8eeea8f17f6211892ad4dbce2275cede2942cdc25fffd699d874a69f5fe112243715c57d37a521fc3574d9cc198fa3fcb59506f7d7f79c3e3110ced210cca84f1c36b66ca7bac441a15e2a43bdad6d2e481ac68f42af3aec50e7fe20bb07f18c7a65e74740bbbe54f479c39b1c2378a54890aeceac7b406e119fc6c2ea6f2083ee1832b317c16e25e9543c92e9154ba39486598ab7964b8c96666998af28d6f09f157e99f63f7f5e211e59a12f484873ecbb7f5aeb17d01b392e0e3588f73f923c29b6070a8b2b2712b701320266e2ceacfb4f888c1d585b68ac1f7050041e82ffe606e01bb562b954cdfb9021f501fb1fc43f44e1f234d004f40aa8fe583eccfeb5c88f808cae919b85a045f22f8daa8181925936f2ef147c9bd4368d0d8d063f1226f5334d9b06d9809a02a76e73", 0x1000}], 0x4, &(0x7f0000006fc0)}}, {{&(0x7f0000007000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000008080)=[{&(0x7f0000007040)="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", 0x1000}, {&(0x7f0000008040)="af991874a6a3e7e906280085f086898bbf93f9dd7cfe7b", 0x17}], 0x2, &(0x7f0000008140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x96}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5fd6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0xee, 0x0, 0x3, [0x5, 0xfaa, 0x1f, 0x5, 0x6, 0x8a8, 0x1000, 0x7ff, 0x800, 0x461]}, @end, @timestamp={0x44, 0x10, 0x2c, 0x0, 0x6, [0x9f, 0x28c, 0xff]}, @timestamp_prespec={0x44, 0x54, 0x5f, 0x3, 0x9, [{@multicast1, 0xfff}, {@local, 0x3}, {@empty, 0xea7}, {@local, 0x3a36e251}, {@broadcast, 0x20000000}, {@remote, 0x64e}, {@empty, 0x401}, {@private=0xa010102}, {@local, 0xff}, {@local, 0x5}]}, @end, @timestamp={0x44, 0x18, 0xde, 0x0, 0x5, [0xe584, 0xf7e, 0x6, 0xde, 0x7fffffff]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @loopback, @multicast1}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@cipso={0x86, 0x44, 0xffffffffffffffff, [{0x0, 0x3, "86"}, {0x7, 0x12, "41ea09331313361dc05e11b94945f666"}, {0x5, 0xe, "ede99cef80e2e805c8609967"}, {0x1, 0x2}, {0x7, 0x10, "8883efd2c030cfef81975e96e9ab"}, {0x0, 0x9, "cd095969ab7ddf"}]}, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x6, 0xf, "9cd9643df52470ef4d6f47930d"}, {0x6, 0x7, "131aaafb5a"}, {0x5, 0x9, "1002c558a596cf"}, {0x6, 0xa, "8a7bb68905e42139"}, {0x2, 0x8, "abc318788c7d"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x220}}, {{&(0x7f0000008380)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000008940)=[{&(0x7f00000083c0)="237fdd2bf9d63080cb0a54d7c10fc62858d6f962b902dfdfa00681854ee1167e864d8e2935577124ac6f3dd154693d405d5951ccf06278c7bf3730ac37b0bd127e155936f0eed2b7e7699dc8de4144624948a70ef638a68a19c68e7ea640030b3b026b4d51d4e231ce0f33dedd4fc891b62263f91a5c9d7a69a6d987a009ade598b3de7f3f52f5a5ecae81f9f600b2ea8c306a525b7353ae8d2bab96b1810ceefcd152ac06bbe8246d5c8fe165d6ae11fb5337e7aea9515b72ff8421f0410776872f56a3379791a0d4c3b8a695175c138ec5f7e7676f50175074044bb7dd3da086c6e7bb21b34f7f53ed274f4a", 0xed}, {&(0x7f00000084c0)="279b9284323194808272027dbcb95f831a20585201c5636e5e228df2f0e9053de55cc3eb4ee0ad1b5dd2ebe815f7db403b65bdb1fb61032c6badb2fb8c16fd7ba86789b4c9f993dd8cd8b8caa71db79f3e0674acec9edbb5e38c515014006da8313b9f1608cccdba63b797686318d88bde67d1f310fdde328a78bee24b7c8038b31200ab78d7554a49f365f2781e39d1c4ca359916dbbaaf33b2eccfed24be46878c2f7e6d29efe425cf9686c1579a19ae55e8097812c8ac8ea0974077b40a90ddce91827bf63c7f8204453b6a75a9a895fbf805", 0xd4}, {&(0x7f00000085c0)="fdd852d0a6c2f3a996a814a466c66950ffb169", 0x13}, {&(0x7f0000008600)="6f7b9a09b236e634d7b6e324a3bd04b10c62818071a4657013c6692a4e48f740ba60b973b0ab94498ad62b5031ea1963040cbb0d96d6e157e6e79c925c316cf7bfbfb1", 0x43}, {&(0x7f0000008680)="4f69dc3e8d17f2f139fa17e55296f19335e2a7eeb3a45eb49763e3d00925a839ed03fec23a0429daad036e310d53f96d24c46d6e2bbe0e603b6a72ee91270f6799ed384d98c5b88f58782a413061d7ca8af6f0dd7e380bfe0dc361fb0785423b3603eafc01b987c5b95cb65f972b159626fb8fa27ae7635f247fab363c5ce0c21f6c3fe0d64ec39875c806bae3615563df421f9de1721d1e3d817bbf4692491ce3575d270a8fb6e2238a320660cbf8f412618e827ca4b2d971af70d8424a8694e3b8bc0e3dae3262dddaf55908cb730592598785", 0xd4}, {&(0x7f0000008780)="396f86befa5e53d21daa20583734c5b930aecdefcc5b0cab985a3e9be5492bd452db5a6b7a93eb63390e79e986bb604a03c78454d34e76f8e53cbfb9f38e021c3ea81737b76c197dacb5e8312641a1cbaefe3e6fb8f8a5b72d6b1e987f45ac06a6976762f14c2eab4c6fea28dbcc4d4b01512570afd4edeafab6799a53ab6bb0a0a450546a7d951e89c6ebf91c482cea068a23c0dda36e0ff7042f96c888da72516cd713569d9d9fc283c5d745860738b47324ed536878fcf6caeb3afa448ee52cfb8ea091984a324974dc2051275a31", 0xd0}, {&(0x7f0000008880)="02b3735892f495bbada871fef4a95b42c404ca2a00920bee1c3eb52f9082c7966eb75fce7905010ca7a1340d45b92434740e085db47d7da4223414e4a610b023914ed82ce45598a05cd8ba390bf49a237697625705b089625199be9bfc7a15ce040123a78fc90077cae938244625463600efdc01acdf1913759c1732bf21efb479b837ddbde21dc8ae9a5090e9c2eeb99e282ba9504c77f6f5c4cf7696200a9b731dffe2058da455d1c46e297fb8f810e521b0d2c23a6492b828", 0xba}], 0x7, &(0x7f00000089c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}}], 0xa, 0x4000) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100ded1b96deba8aa2dba2e000018580000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$VT_RESIZEX(r12, 0x4b68, 0x0) 19:55:25 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x838, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:55:25 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) r2 = memfd_create(&(0x7f0000000100)='/dev/ptmx\x00', 0x6) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000140)={{r2}, "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"}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:55:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000080)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x414082, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KDGKBLED(r0, 0x4b64, 0xfffffffffffffffe) [ 2239.318809] FAULT_INJECTION: forcing a failure. [ 2239.318809] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2239.321949] CPU: 0 PID: 11729 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2239.323548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2239.323557] Call Trace: [ 2239.323588] dump_stack+0x107/0x167 [ 2239.323617] should_fail.cold+0x5/0xa [ 2239.323651] __alloc_pages_nodemask+0x182/0x600 [ 2239.323683] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2239.323708] ? lock_downgrade+0x6d0/0x6d0 [ 2239.323731] ? lock_acquire+0x197/0x470 [ 2239.323783] alloc_pages_vma+0xbb/0x410 [ 2239.323818] shmem_alloc_page+0x10f/0x1e0 [ 2239.323843] ? shmem_init_inode+0x20/0x20 [ 2239.323905] ? percpu_counter_add_batch+0x8b/0x140 [ 2239.323938] ? __vm_enough_memory+0x184/0x360 [ 2239.323972] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2239.324026] ? shmem_unuse_inode+0xf60/0xf60 [ 2239.324055] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2239.324072] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2239.324099] shmem_write_begin+0xf7/0x1d0 [ 2239.324122] generic_perform_write+0x20a/0x4f0 [ 2239.324152] ? __mnt_drop_write_file+0x9/0x70 [ 2239.324169] ? page_cache_prev_miss+0x310/0x310 [ 2239.324186] ? evict_inodes+0x470/0x470 [ 2239.324205] ? generic_write_checks+0x2ad/0x390 [ 2239.324231] __generic_file_write_iter+0x39d/0x5d0 [ 2239.324255] generic_file_write_iter+0xdb/0x230 [ 2239.324280] do_iter_readv_writev+0x476/0x750 [ 2239.324302] ? new_sync_write+0x660/0x660 [ 2239.324320] ? selinux_file_permission+0x92/0x520 19:55:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2239.324342] ? security_file_permission+0xb1/0xe0 [ 2239.324370] do_iter_write+0x191/0x700 [ 2239.324391] ? trace_hardirqs_on+0x5b/0x180 [ 2239.324417] vfs_iter_write+0x70/0xa0 [ 2239.324438] iter_file_splice_write+0x726/0xc90 [ 2239.324471] ? generic_splice_sendpage+0x140/0x140 [ 2239.324506] ? security_file_permission+0xb1/0xe0 [ 2239.324527] ? generic_splice_sendpage+0x140/0x140 [ 2239.324547] direct_splice_actor+0x10f/0x170 [ 2239.324568] splice_direct_to_actor+0x387/0x980 [ 2239.324592] ? pipe_to_sendpage+0x380/0x380 19:55:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0xfff9, 0xfffd, 0x4}) r1 = syz_open_pts(0xffffffffffffffff, 0x220000) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x2, 0xc940, 0x8001, 0x4, 0xfa, "05340057618a7df0e07666452678847210de87", 0x2, 0x80000000}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) mq_open(&(0x7f0000000080)='@:&\xe5\\&(\x00', 0x801, 0x5c, &(0x7f00000000c0)={0x3, 0x6, 0x0, 0x7}) [ 2239.324613] ? do_splice_to+0x160/0x160 [ 2239.324629] ? security_file_permission+0xb1/0xe0 [ 2239.324655] do_splice_direct+0x1c4/0x290 [ 2239.324674] ? splice_direct_to_actor+0x980/0x980 [ 2239.324754] ? security_file_permission+0xb1/0xe0 [ 2239.324782] vfs_copy_file_range+0x4f8/0x13c0 [ 2239.324806] ? generic_file_rw_checks+0x240/0x240 [ 2239.324846] __do_sys_copy_file_range+0x193/0x420 [ 2239.324866] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2239.324882] ? ksys_write+0x1a9/0x260 [ 2239.324900] ? __ia32_sys_read+0xb0/0xb0 [ 2239.324923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2239.324942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2239.324963] do_syscall_64+0x33/0x40 [ 2239.324981] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2239.324994] RIP: 0033:0x7f1d53837b19 [ 2239.325012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2239.325022] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2239.325042] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2239.325052] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2239.325063] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2239.325073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2239.325083] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:55:25 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x841, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:55:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x742, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:55:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:55:25 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 75) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:55:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) 19:55:25 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5409, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:55:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCCONS(r0, 0x541d) [ 2239.547119] FAULT_INJECTION: forcing a failure. [ 2239.547119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2239.549986] CPU: 0 PID: 11760 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2239.551480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2239.553260] Call Trace: [ 2239.553836] dump_stack+0x107/0x167 [ 2239.554622] should_fail.cold+0x5/0xa [ 2239.555453] __alloc_pages_nodemask+0x182/0x600 [ 2239.556453] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2239.557753] ? lock_downgrade+0x6d0/0x6d0 [ 2239.558641] ? lock_acquire+0x197/0x470 [ 2239.559513] alloc_pages_vma+0xbb/0x410 [ 2239.560372] shmem_alloc_page+0x10f/0x1e0 [ 2239.561266] ? shmem_init_inode+0x20/0x20 [ 2239.562185] ? percpu_counter_add_batch+0x8b/0x140 [ 2239.563240] ? __vm_enough_memory+0x184/0x360 [ 2239.564205] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2239.565361] ? shmem_unuse_inode+0xf60/0xf60 [ 2239.566309] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2239.567433] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2239.568528] shmem_write_begin+0xf7/0x1d0 [ 2239.569425] generic_perform_write+0x20a/0x4f0 [ 2239.570418] ? __mnt_drop_write_file+0x9/0x70 [ 2239.571363] ? page_cache_prev_miss+0x310/0x310 [ 2239.572358] ? evict_inodes+0x470/0x470 [ 2239.573198] ? generic_write_checks+0x2ad/0x390 [ 2239.574210] __generic_file_write_iter+0x39d/0x5d0 [ 2239.575254] generic_file_write_iter+0xdb/0x230 [ 2239.576258] do_iter_readv_writev+0x476/0x750 [ 2239.577260] ? new_sync_write+0x660/0x660 [ 2239.578163] ? selinux_file_permission+0x92/0x520 [ 2239.579189] ? security_file_permission+0xb1/0xe0 [ 2239.580231] do_iter_write+0x191/0x700 [ 2239.581053] ? trace_hardirqs_on+0x5b/0x180 [ 2239.582000] vfs_iter_write+0x70/0xa0 [ 2239.582024] iter_file_splice_write+0x726/0xc90 [ 2239.583496] ? generic_splice_sendpage+0x140/0x140 [ 2239.584564] ? security_file_permission+0xb1/0xe0 [ 2239.585608] ? generic_splice_sendpage+0x140/0x140 [ 2239.586664] direct_splice_actor+0x10f/0x170 [ 2239.587611] splice_direct_to_actor+0x387/0x980 [ 2239.588613] ? pipe_to_sendpage+0x380/0x380 [ 2239.589548] ? do_splice_to+0x160/0x160 [ 2239.590398] ? security_file_permission+0xb1/0xe0 [ 2239.591437] do_splice_direct+0x1c4/0x290 [ 2239.592328] ? splice_direct_to_actor+0x980/0x980 [ 2239.593377] ? security_file_permission+0xb1/0xe0 [ 2239.594422] vfs_copy_file_range+0x4f8/0x13c0 [ 2239.595383] ? generic_file_rw_checks+0x240/0x240 [ 2239.596445] __do_sys_copy_file_range+0x193/0x420 [ 2239.597482] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2239.598495] ? ksys_write+0x1a9/0x260 [ 2239.599309] ? __ia32_sys_read+0xb0/0xb0 [ 2239.600175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2239.601294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2239.602391] do_syscall_64+0x33/0x40 [ 2239.603175] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2239.604259] RIP: 0033:0x7f1d53837b19 [ 2239.605044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2239.608949] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2239.610570] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2239.612080] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2239.613604] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2239.615112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2239.616625] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:55:39 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 76) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:55:39 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x540b, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:55:39 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x748, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:55:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/150}) 19:55:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x846, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:55:39 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x0, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:55:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x410002, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12], 0xc) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000080)={0x10001, 0xfffeffff, 0xad7}) 19:55:39 executing program 4: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) [ 2253.336820] FAULT_INJECTION: forcing a failure. [ 2253.336820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2253.340710] CPU: 1 PID: 11794 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2253.342634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.344965] Call Trace: [ 2253.345713] dump_stack+0x107/0x167 [ 2253.346762] should_fail.cold+0x5/0xa [ 2253.347849] __alloc_pages_nodemask+0x182/0x600 [ 2253.349142] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2253.350860] ? lock_downgrade+0x6d0/0x6d0 [ 2253.352037] ? lock_acquire+0x197/0x470 [ 2253.353188] alloc_pages_vma+0xbb/0x410 [ 2253.354411] shmem_alloc_page+0x10f/0x1e0 [ 2253.355401] ? shmem_init_inode+0x20/0x20 [ 2253.356401] ? percpu_counter_add_batch+0x8b/0x140 [ 2253.357560] ? __vm_enough_memory+0x184/0x360 [ 2253.358632] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2253.359899] ? shmem_unuse_inode+0xf60/0xf60 [ 2253.360936] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2253.362208] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2253.363396] shmem_write_begin+0xf7/0x1d0 [ 2253.364366] generic_perform_write+0x20a/0x4f0 [ 2253.365450] ? __mnt_drop_write_file+0x9/0x70 [ 2253.366479] ? page_cache_prev_miss+0x310/0x310 [ 2253.367560] ? evict_inodes+0x470/0x470 [ 2253.368477] ? generic_write_checks+0x2ad/0x390 [ 2253.369572] __generic_file_write_iter+0x39d/0x5d0 [ 2253.370710] generic_file_write_iter+0xdb/0x230 [ 2253.371782] do_iter_readv_writev+0x476/0x750 [ 2253.372813] ? new_sync_write+0x660/0x660 [ 2253.373778] ? selinux_file_permission+0x92/0x520 [ 2253.374883] ? security_file_permission+0xb1/0xe0 [ 2253.376063] do_iter_write+0x191/0x700 19:55:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000400)={0x12e, 0x2015}) 19:55:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x480004, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x0, 0x2, 0x101, 0x4, 0xa7, "c567ca3220e9dcb67bda43b467b7a3d2c0b1b8", 0x2, 0x33b}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r3 = signalfd(r2, &(0x7f00000000c0)={[0xffffffff]}, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x200, 0x4) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) [ 2253.376090] ? trace_hardirqs_on+0x5b/0x180 [ 2253.376118] vfs_iter_write+0x70/0xa0 [ 2253.376141] iter_file_splice_write+0x726/0xc90 [ 2253.376178] ? generic_splice_sendpage+0x140/0x140 [ 2253.376217] ? security_file_permission+0xb1/0xe0 [ 2253.376241] ? generic_splice_sendpage+0x140/0x140 [ 2253.376263] direct_splice_actor+0x10f/0x170 [ 2253.376287] splice_direct_to_actor+0x387/0x980 [ 2253.376312] ? pipe_to_sendpage+0x380/0x380 [ 2253.376336] ? do_splice_to+0x160/0x160 [ 2253.376354] ? security_file_permission+0xb1/0xe0 [ 2253.376383] do_splice_direct+0x1c4/0x290 [ 2253.376403] ? splice_direct_to_actor+0x980/0x980 [ 2253.376430] ? security_file_permission+0xb1/0xe0 [ 2253.376457] vfs_copy_file_range+0x4f8/0x13c0 [ 2253.376484] ? generic_file_rw_checks+0x240/0x240 19:55:39 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x4}}, './file0\x00'}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x200000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) [ 2253.376529] __do_sys_copy_file_range+0x193/0x420 [ 2253.376551] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2253.376569] ? ksys_write+0x1a9/0x260 [ 2253.376589] ? __ia32_sys_read+0xb0/0xb0 [ 2253.376613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2253.376634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2253.376656] do_syscall_64+0x33/0x40 [ 2253.376675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.376689] RIP: 0033:0x7f1d53837b19 [ 2253.376740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:55:39 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x0, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) [ 2253.376752] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2253.376773] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2253.376784] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2253.376795] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2253.376806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2253.376817] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:55:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x84c, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:55:39 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x74e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:55:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) fcntl$addseals(r1, 0x409, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 19:55:51 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 77) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:55:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20000000) 19:55:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x854, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:55:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x63, 0x8000}, {0x8, 0x7}]}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:55:51 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x540c, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:55:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x0, 0x7, 0xffff}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:55:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x757, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:55:51 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x0, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) [ 2265.391372] FAULT_INJECTION: forcing a failure. [ 2265.391372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2265.394232] CPU: 1 PID: 11857 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2265.395697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.397446] Call Trace: [ 2265.398011] dump_stack+0x107/0x167 [ 2265.398798] should_fail.cold+0x5/0xa [ 2265.399600] __alloc_pages_nodemask+0x182/0x600 [ 2265.400576] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2265.401828] ? lock_downgrade+0x6d0/0x6d0 [ 2265.402702] ? lock_acquire+0x197/0x470 [ 2265.403557] alloc_pages_vma+0xbb/0x410 [ 2265.404394] shmem_alloc_page+0x10f/0x1e0 [ 2265.405266] ? shmem_init_inode+0x20/0x20 [ 2265.406155] ? percpu_counter_add_batch+0x8b/0x140 [ 2265.407199] ? __vm_enough_memory+0x184/0x360 [ 2265.408143] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2265.409278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.410385] ? shmem_unuse_inode+0xf60/0xf60 [ 2265.411310] ? avc_has_perm+0xc5/0x1b0 [ 2265.412127] shmem_file_read_iter+0x2a6/0xbb0 [ 2265.413070] ? kfree+0xd7/0x340 [ 2265.413769] ? shmem_get_link+0x440/0x440 [ 2265.414674] ? inode_has_perm+0x171/0x1d0 [ 2265.415708] ? iov_iter_pipe+0xf1/0x2a0 [ 2265.416705] generic_file_splice_read+0x455/0x6d0 [ 2265.417905] ? pipe_to_user+0x170/0x170 [ 2265.418915] ? fsnotify_perm.part.0+0x22d/0x620 [ 2265.420073] ? security_file_permission+0xb1/0xe0 [ 2265.421278] ? pipe_to_user+0x170/0x170 [ 2265.422281] do_splice_to+0x10e/0x160 [ 2265.423234] splice_direct_to_actor+0x2fe/0x980 [ 2265.424408] ? pipe_to_sendpage+0x380/0x380 [ 2265.425486] ? do_splice_to+0x160/0x160 [ 2265.426487] ? security_file_permission+0xb1/0xe0 [ 2265.427697] do_splice_direct+0x1c4/0x290 [ 2265.428733] ? splice_direct_to_actor+0x980/0x980 [ 2265.429953] ? security_file_permission+0xb1/0xe0 [ 2265.431169] vfs_copy_file_range+0x4f8/0x13c0 [ 2265.432281] ? generic_file_rw_checks+0x240/0x240 [ 2265.433497] __do_sys_copy_file_range+0x193/0x420 [ 2265.434764] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2265.435933] ? ksys_write+0x1a9/0x260 [ 2265.436872] ? __ia32_sys_read+0xb0/0xb0 [ 2265.437877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.439170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.440440] do_syscall_64+0x33/0x40 [ 2265.441345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.442611] RIP: 0033:0x7f1d53837b19 [ 2265.443527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.448067] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2265.449930] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2265.451695] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2265.453442] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2265.455199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.456949] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:55:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) recvmmsg$unix(r1, &(0x7f0000000f00)=[{{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000880)=""/3, 0x3}, {&(0x7f00000008c0)=""/19, 0x13}], 0x2, &(0x7f0000000940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/113, 0x71}], 0x1, &(0x7f0000000a40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/239, 0xef}, {&(0x7f0000000b80)=""/152, 0x98}, {&(0x7f0000000c40)=""/104, 0x68}, {&(0x7f0000000cc0)=""/104, 0x68}, {&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000000d80)=""/21, 0x15}, {&(0x7f0000000dc0)=""/29, 0x1d}], 0x7, &(0x7f0000000e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}}], 0x3, 0x0, &(0x7f0000000fc0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) r3 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, 0x7, &(0x7f0000000540)=[{&(0x7f00000000c0)="f17449a44dd8b2a53c58a62571d42baf609680bf543112b4cfd0916eb55dc9de05d6c9026bf40d6e1a8c18f842f09e29ffd7fe163fb0b3d450d61adf96bcaff9ee8ff6f69418f830aca6cef9e2989518b066eb03f1a31520f8f4de12cc7e1fe51940a3b5", 0x64, 0xfa}, {&(0x7f0000000140)="88bfeeb8ae2d92cb5cfbc47a7c4f117f1633daee6ee438e09406e31fc9088c4a4cacd0d24e24d346f9964248879b68e34d94551c8a7c9ec2284ba36749812cb4e48f7a78b1677fd4c5c85275b8ceab8865c21bf696e08e1c22bd713d4c351ea7606f87608f8645ed649ddf9896cfa5503492ab67138672fbfedee3dbcd72c2c20c8978c020904dba24649fccf840b7ed608492ad043efdc5d353659ada4943a0f6bf120e0b7145067ab6c1ad39faab5672eb3eff744ff7c166892ddb2952cb92c64e0ba3106971bf71ac0ec725cdef3bd2c1a925b7dba82a2949c3abaea40949e2e037703bd25f2f203170971933c3e28a2f901bfe34", 0xf6, 0x3f}, {&(0x7f0000000240)="30f3a3f60b4ec54cec2d6a12b95063ca25224e3671248fb07ed69103226e5f6dfebe58aec9b6240d25c89c583427af0188b1d646f19fa1edb7c27babdfc6bc2ef76075164c0992b80e7c8401", 0x4c, 0x4}, {&(0x7f00000002c0)="2af175b5aadd6557b36a1473341002485e0b8d66fa65a3f8e53f9e3e14995f4931c3dca5eb6cc0ae386379dc97801abdf9e2018134e9b5852427d466bfa06add3ceb13e997292ae90861dfe9a5138dda12a4eee9b06c56c9013d655c", 0x5c, 0x1}, {&(0x7f0000000340), 0x0, 0x6}, {&(0x7f0000000380)="6fbb5591a91bbe4e97f215486de2996c6d77a1ac03915d56355003c901ce0281a7bd1c1d6d97c0f6cc83e5826e02b4daaaa461f5fa46d1acbadf1f38e2c66ec93d3fa4980d398f279cbe89bdbaacb9d0e44173aafad2a8ccd4503040fa9c859fd149a5bac34c4e0d6f3ace6131aae2da3d4ef629adb7463dbfadb9261ef849ff032091991ec987acdca29291cde274a0bdd888ad17458e57f0bfe5b5b61d8896f09370c2011514d91f078107d9", 0xad, 0xb0}, {&(0x7f0000000440)="37ccefc6478e6c8617ae482a8861452f1b80e8b0ece40202f7c0ffe2bfe5146fd9845e9f435c3459ed6ea8011aa430e456ee5293bd5cf27d5ec02f8b710ad6a8d1a9857d06d32ac8064e738404609e9307f7ba9a5c6db5d790f17c140b8a235482d1d409ed132651be67de3039ad357b517de7820a272ea09bfac15fab7ca10045c534c949b8d5d39d8e24ed4457b40c55dd1dffe69aefa374a7c3e99517834c380376937ff046e787e322afd43af80575b9364610a2ed0863aa6cc185777c6d7106e91865f8abf556907f4797d90ae528820f1fdcda578f8f6232c703", 0xdd, 0xff}], 0x100010, &(0x7f0000000600)={[{@unhide}, {@session={'session', 0x3d, 0x5a}}, {@check_strict}, {@nojoliet}, {@unhide}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '#}-\xee*'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x61, 0x65, 0x65, 0x66, 0x33, 0x66, 0x38], 0x2d, [0x30, 0x34, 0x34, 0x33], 0x2d, [0x34, 0x37, 0x37, 0x37], 0x2d, [0x39, 0x36, 0x34, 0x32], 0x2d, [0x64, 0x62, 0x37, 0x31, 0x33, 0x37, 0x65, 0x31]}}}]}) socketpair(0x29, 0x4, 0x2, &(0x7f0000000340)={0xffffffffffffffff}) write(r4, &(0x7f0000000700)="5ac45cd7cc555caa093a0f1170f08a0a6889def30f3c633e89ce9ad3fb5fd00034e03c9120dc91e3612f58bfa1c559cda2d75f115558d581446a240536349d1a89d2b4034ff9da242d4c7da5afa568a8229f757cdf6045f7743731b7027cb7898f8650d269ea2f669bab230a0874c3bf5fefe3d203bf38fd5db3663491d44e9f9605dbf065e981aca2fccc64dd6acc6bcc5aa544571434f5d225054a4c86d6a19927b0df508a01a325570e4e30e2be4fcf15e96293c5503f93898a0a1f12ae3aec8dfaa89521a09423976527fc86ba2295e7420288e160b9f824dc9fb26ff63206557148e1295d2ab0b5b8606788258486ef85bce4", 0xf5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) 19:55:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000001440)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) readv(r1, &(0x7f0000002500)=[{}, {&(0x7f0000000040)=""/204, 0xcc}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/65, 0x41}, {&(0x7f00000025c0)=""/4100, 0x1004}, {&(0x7f0000002440)=""/144, 0x90}], 0x9) ioctl$KDSETLED(r0, 0x4b32, 0x6ae) 19:55:51 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x540d, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:55:51 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x0, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:55:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) r3 = fcntl$dupfd(r2, 0x406, r1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) r4 = signalfd4(r0, &(0x7f0000000000)={[0x285]}, 0x8, 0x800) fcntl$dupfd(r1, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) setsockopt$inet6_tcp_int(r5, 0x6, 0x1f, &(0x7f0000000080)=0xfffffff9, 0x4) 19:55:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x865, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:55:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x75c, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:55:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x59}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}]}, 0x68}}, 0x4000) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x9, 0x7fff}, {0x8, 0x2}, {0x1, 0x1}]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/92) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9831}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x79b38418}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 19:55:51 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 78) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:55:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) 19:55:51 executing program 0: sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x8, 0x401, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x100}, @ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2bd}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x20004010) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2265.729317] FAULT_INJECTION: forcing a failure. [ 2265.729317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2265.731181] CPU: 0 PID: 11901 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2265.732124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.733256] Call Trace: [ 2265.733617] dump_stack+0x107/0x167 [ 2265.734111] should_fail.cold+0x5/0xa [ 2265.734638] __alloc_pages_nodemask+0x182/0x600 [ 2265.735268] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2265.736080] ? lock_downgrade+0x6d0/0x6d0 [ 2265.736640] ? lock_acquire+0x197/0x470 [ 2265.737182] alloc_pages_vma+0xbb/0x410 [ 2265.737724] shmem_alloc_page+0x10f/0x1e0 19:55:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0x0) sendmsg(r0, &(0x7f0000002880)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x2, {0xa, 0x4e22, 0x9, @empty, 0x8000}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000080)="1a9919f409b184ac87e7fcf515d8a471f2d3bf04e047f6220fe38c2e7c63101a1bbddfd3817267ad742867ac9b3d7944548f6aacacf9dba7a76755c070e19083426d55608882c21a5335c8621ee4c804ca7630", 0x53}, {&(0x7f0000000100)="1abed495cb3c24a645fec2d1810d6f0872330f21e655d8f7a9cc654ea029d43f2a2d4daaae970d0bb336b6f1023f4ba24792e7c424eb5b8243e325e2e2865fcf1df08cb89cff0d029a151a83d8e49065649e2d29531943ae32102add4b3b9cd5fab2b417d6152d07ee89f084ea8857d17791fb042c5f6e9bad9afd1b385137643c9624c8b3523dcc40a2fa2182de48fec1b4db8a90824ace00187b05dcadf055549af7bcedba9fa3dec08cfa5ade549e4133a2981d8f0b37c6e16d8cedc7e231d3186f0a539ed8148c36bf3ef7f6d9ea48f014881be174", 0xd7}, {&(0x7f0000000200)="cfb63297c78b86a51ff9370ca1680908686e0fd5c7bb6dfcc19323713e9bee72d5e0fe5cb3445bdad0c4cba0b7241a6f151a71f5a71f601c90f1e769fb4cc2449da2f3919d0cf42a70a6a888d689e22900f07842e39a3d1c047dd6cf2e1b17479888e3138dc1729e2fdef96081ad6751cbfb5debabdb2b1b46aa64bf77998cfa2937e50845c7cebb7f1079245caed2c687466fd63502aa0f243d163918d66deeaeb1cb4b4f467815e65cce74f4ba700125f25547bbac07492fb033001eb03b295e1587f9b54a1632afa11b4db1ac4d6881e77325e274dd9b1845312f23c64e14e653455d5b2884231e318b3df0cb78b54801cafc1c1d1459502c9bc3ded9f0938e4e51761fb3aa6205b695e2ae08749a8b1294435efcaf8f9ed1b4b984f41ffb485ef3d6e42f86b2f26630d04971ef080beed5080d38f0e3c1ccbae1795c950c42d41f513c9e416f001d1f63cd0c66de027d76740305b96953d85243c64fcd36b96b9d243cbe42e483593d47b1bf9e59b4ede96c954fdbc5d4f841174449b231c8fbbd28c3c59affb112e78966bc984ecbaa445410b8fbdddd6665521c067b3715276f4315602ff7bad3d42444cc0d24dfb1f017ed97d95fda0a482af6389e96e40778b517d89d9301cbaf4103b8c655ad37f9175f1ae9445c03bb5efbe3bd7745cd2210fbdc2791b2ee5b5e3711503f99d1db9d2fd3ba80274a91f9d89d6676d18153026158b43921047fd98f1e7bebb5112d9a74e16785ed9539dfb0af20f0a068c08499b296a64b8c8c545d63b4acf5a23c47752662284b10f63c0710535c94f9b6b839e05160ed156b92f50593554b39cbf83c858e56f81bfe94744a22359534143eff89aad8628ae4f4acd05836a5c94064dfaabb0478a6ca7ce39f31733ab24a9cb1f12aac8aa098f83c5fb9c74c39f0644823e22af0987be2d5290035f1be3be26005e26b8485ee3cdcff2f7b278e6a52de527c337591a2033f5b13a5adc3c47ed85f36093ed46acad85e8a699242f2249042f3e43e668b27db8fb2ef8d92403fdf2ed66854d528170dceaa44bdb4a35812a5ec4ccfc9277335a400fff0641c2be3a7e8a0dcf6be85b3499f8b6927c90eae69a2e3e955059d8acb47da003c0be2e58b14172708e2ea8cfe17a2d7138da2f9764eaeeb7cbbb01bab779aff3aff9870f9498059d64de60880c59b5e5ef6d2d54d39a28d89d9496ce69921a39cb0ebabe6e7930d8dfead9ce8e5ae482977733aaf1949aa174368e8cccba09599a02594655cae6aa97714edd2a83d620fba57d5a1d4ec7944811254d26cfb9c6b8a2c038993e24810fc49ee3b0703b368333fe71a6e3544d7c9b58caa36e8e6c4b2a7112037ff8db3d854c2deb5c89396305aceb4250b017febaf148b8f52644f6bb6ea2b41a4f625eff1e373de7e99d1e650f7da0cb3cfba28451d8805bf6c2df8b9b8429da61fa3ee6c3f42c9dfb0e17c0ac3bd07c3aa2520b5be51e08493e2dce0e74cfca4af999709565020f511fa546bfdcecf701be267dece4a755c6ffa24887f2008009d46dbf3c16cea106cdbd72e6b2a7971cbead025846ef7971db160572b8a875ba70d626868e7d24e33d03724cc136bd529466dae5cbdd8851609ae1125d05564d5376ba1cc9c78c043d1e0154bf68ea8be60e67f24402f3c3719c8f4382602c201e5d77718e827b7356763c7b292e08bfe46a4709411719d37c8a632c992f2d0c028cc7685e4e0dcb127299251cc25b0a6582fbcf3f451ef7bdd33e14cf861afab9a78270ecd53db8b54b4b3d9cc55313d7208c51ae4a9d03cd5b44755da469138bdf604444d032d4dd77fd70b34761238c1a72ec853e876a37560556afac7459715eff91348bb72c686066d22da303b0b3ac172980840ae8751393499d337244643f974ac788e33111352372d6c6cd7cac5ba1197c26bdb758907bbd654ca56678970836f24f960bee6c00fc0ce6d71b1acaaec33b0c1d38b3eb31db0e12b92de0c31faad7360b099a3aca787737f41e190e7874c433777fb436a510e9477e77f0b47ee00eadc8d9b2deb9d4272c88f4bda2e435eb10aca54e5520fad9a26ed18fcf341597ac0bac6af3be1e1e2db9de70491b44250857575514cbdf8ae7a905a1d6d1d8f9b32b4ff3635088320e4daf42dadcdf97bc9ef461681b73d6cae9d4239bbf70122e75c386f159c61c30f8a69027382ae7a35eaf2007e91f8433403c511166a0c7d1b7c0cd3cf2e0a8f05c9c583c40384a29b1fc2323cf098637f2760fb2ca4e67686d9806ea2310fa58606de6e8817fcb137fb610acc0b79ca128c7bb931fa5361a11cbdf293ca79de17757c883f2ed54fa88c429ac6a75cbd731c0a49b5003c54a5d3cde0aab0eb7f51467445eaff4423d0d0aabe2c2bc88f741d88bd84a9f33754a452d372d57c880642d14f31cc5cf781f93ffc851727c9ce6f9cad43972b30003d9b8c0a1f22196f4f3486ab4fff31ffd6c375c060b23747b0d553a55d51ba11c847566797b4865638f1409d915ebfd86acdc72a6e2f85e3e6bfcca4c5b52133fe57aade344a1df7ade4e6aa500872bf1f24dfa2de2f5494d0b33578f8678f57e7121c93cf5d1df4da5cf5cd095e5e6c975a3fb51b266b3fb1643dabd3d0d77e277476e515bcee95bd9968c047898f47c3af34b5f80b5537bfc4d572cd6400df85d2e1e1d840f0dd4a4e23e7fa4e3cd745911d47fdc54023af8a6b81527790c16f124907e8828df87e57ccbb4e097c022c250714438423a3978a6eba9778d256e2e3fdf55a9735673fe243ce1c6b5f13ca2d598f482a46df6dcc42d3a0f1555840e0ff0c46e5953a801c47997747ed038b7c4fa9ba004eab4e5c658058c35fe1997a6f1d47d431792841bcdaf2a188320c0bb2a7752c2b6ed644392e9d7c3a4c7498b9656ce1f7152ec1ee0f0376bfec87e4a9b98bce700b10a9d72803cac82d86ce5fc084c00af17cd444e9ba48ec05cc395ed98c7dd7ad4ef8c9135da591126bcd8f48383c0b4534de110aa54e9ac6c43ef52e23826b8cd7f7555fc16a71ec7f33c4d017bb1be0a0c1375721489aebd1865072d91b74f4a35b648df37769b8e418604c518dca09e9324e6f06f513b083a14e39a04c01b5597a8371a2c59056829bc83823e90a2982061386b649b0cdb8ecaf086f24aac2e2f8143d227d0d7bd1bcc024082642bc5bf50b71a9f099e29bdaa6a6690459b245c9d248d6cbecc0d06c2600953a529420944765c57b942f8b57a69be6d7494e01e5c566ce29f62d84e07d8823fe326e3f2675058a94fe348c711dd08d36b067b2db05853b3376fc8713efc9dca43ec03f9755272735ca9ff1fc8ec072bc07bbc6cf79a23a7559b54d22a0f68e12d4109f8e955b711c7efbdf33f7fe77be1ff1040083d6bfc682991e6e1c2978417a1870bea1a668342a90105fd5a3ff6b50eb94d5392fbfb19f82fded1a1fcff70f4f5099296eeb51e3001224ce7c72bccd7b6d27dd223fdd733a24fa8764f68ee2be4fc13acbfa320c5306b751c0437920c9ee5779e1ebb728359f99ce88495f02f51005df0e8b5e55520cee04bee9494af146c6775de83ab109f4e4e28f28f6fdd7091185205153ce19e6d8806a84b8deea1f8f4ededd97d27613894d01331c3e893145b4e2d12d3cc05ade6fc6b26adda03a82f916f6e0ed3e148b7d64b622713084fa757ccc28360279d7bdaaca2a508c1ca518adeb8716631a6119d695a43530fd83aa6b43c3a766c0ffca1622b980aa54d8bd32d7ac69f293989864e06fd44db3f310864c7eb2097dc828a7f8e94c8ac248e6a5703162b05e70205a630a5dccbfd8bef478abb66bbb5bc7a69da7a45e4719ac86137d644fcea26c06b97e02015a7f318271daa437781a28abe6611ab9b5a421fc356c1e8c87cb88687c5e5ac08b25af9a2986a2fabcf00ba7a4bd53a5517492d385f517396b6d3b564bb453342395357e52fbea35ab431d83db2aab56528d8227e6e2a951b4ae11a4538fe260f0331505278d658a63c391bc25ddde20814582d75fdfa90d7d1a0378ecf426389645f3a30690c28819bb32e6690fd5b6fa56424b48b8e9076e9fd852e41cbf7120630bdd297fb7a2bbc1fdffaddff23716c3e978953af02c463e87ee145527c0d1cadd47c7d6e1f563b169259a90d78729b8784bb9c37b3a1d6d91044c36a98c2217700eda3ad053aced3192166bc6249b397bf969d161038e5c5255b871b743eddd751da392784383c5a1e4c5d8700601dd55f148f373c2a69544a1ec607a8b78574a89315ffc2fec5d6e88d4cc49ee96c5546e4bc908a0e7d60fdb9eb40da43e7be37e2469f6295d3aeaae121830c15b01b7755bc6360f2f33a71411bde9fa188c587d59f236b009056e541e7459d0b7691401bc4fc30524314bdb1c28d3ee2661540e36b432b6fc81d9ecc137e56dfe0da3dbddb89ab66dfc4a5bdd66e7dfc87f77949e17d1cfdfef0a5d0bc207de006e41e975fbf6ca2c08c2301ceb68237ccaa5bba6d2fa4a0ab5043a58f1f56242cbe1d427b415f681e1161f480bc15b819e354573f0c6f411db175c2f9cc2c5323ac55c95f19deab4c6c3c6364b9bc3a846a5bfbd113821035972750f391c0c1baa104dca0c840cdc1b2a8154992623fa1163a270fafdf18ace3c3c8a39eb3dd45efcbbba930f5ba00cb7d192319809c754b9cd190234c4fcaf7cac83431255bdeb01f6fb89b9c4ccca40a32c141a8a408c83284f00fdaf2958de8e752c779f9f39898de9787fbd7b916deab37835e4f567043e875f4a80f530d9ef9870cd2463b934da044ded9e2338d725a1156b0902348bf6d7c8ed45f98b7f268589bc396c4ba75d774869867ef0945eeced23f81216746977da86598ebec5e80efa0cea69ffa1049a4fe077650d2ef12e7f298ca7356ee765ea3d2eb1b3c87f2f1dc2bbb2c4ea7dfe5cf73594ea2dfb79ee0ee3293d17eedb4d9459abb1c670a62982b28791bf3af9ad3d7e5f8b4786ca37faedd7f9f2d723ab02e8bd4641c5122b204fdc725c1d66eb351a5e1cd3897233c50d54446dd6f58be6bc48d19ecd3d58563442424e239f7b06c3204e05351e3a87ff323309a58874cc3c8a6daf067b9c1b1b67957ecc1cc3c3a4446dfacaeef0b8eff6eac3baece6a76b1ae91941b7fd67cbaa4ad5500790ff3156050b77a4a5140c9f46375944fb774bd80de6ea3ed1d6c70abaaae7bc0ed71d79a19f91e46f84d4c6c5c8014fadf9728bed45b2d246bddb61261731b83ae0aa8bd999e210e1e8324bbd0dd7b9cc05ddf93efaf02914ed28994b114ca0ffa0aa2bfb0ea5e516fc8b3b29598995d02cd7249e4739be80cd0e526a268cead218c0616de2e25c0e4dff7c2c4c650df3f8483464c5a078c0993cb8b8ce198c38a183c9d3668ad0d487a2ee11b8cf0d2ce047f67578022635f9f7471aa002c893759b830c98d519d91cfe7be8010b35d79c091c93c3146e3a47a3a94280d3b20d80a958b5ee039fa2c0162ccb38eec719b44e7381aa8403da2d8c4ef3a57d4dfc414877d1bbab734f072e206317ef523c54fce1d3b28ebbb6fad2f8a13d33e2fdbf431618b112ff585c17548ee2f9e8babd0176572f14be5c0e240e4f53b279cf6a7403f8d8f92b072bb24266649e9002bbd6db64c93152de064ceb80971225a76b2915d1649c05951def5d2541e9148d459a35aa22942fa25069d6e386d0d1fe56aac8b9fc3426e178df24c6d39d67712ba67e2755f0dc68f8b6fe1e31e7b5ed6b5e566255f320a24c417226a03304ca675237", 0x1000}], 0x3, &(0x7f0000001240)=[{0x1010, 0x10f, 0x8, "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"}, {0xe0, 0x101, 0x6, "ea3a7e1c4f3998debbb1ac56856ec1c7b249b8cbc5d4eb43a55f0042192667971051fbe0ea31142fc90c639ceef955fc06493b98cff3ecab060af648907a3084ea93b00fca9ada660fe3bb0115d9bae5b3ca224d42652b10aa5fae29648ffd7ba2d32dc5f84e32fcfcb95997ddb627d88996ddfdae0e85072906325f092537765c0d35597d5d489ddc4d201af825b0d5f0380b3cd66fb3a0089d70e252ddaf5a77cceed6319cb2c1192f20d7e2a5da8b69deeb0edf0ef826f12956be5410cc599715d22de3ac9cc4b2779846"}, {0x30, 0x1, 0xff, "c1bd21fa5ffc0cc2bf2a4e748fe25f6c809f53fc7421da20468b0ea93e"}, {0xe8, 0x119, 0x2, "b69116c927bfbcf04e4b0f19698e7db4072859fd961103a06f67a3f3b193699d9da3fb9195c6310841e7c3b3d899bc7e50fdd6387fe65b4f00f26d87978904b2ea0cb46516c56bd212779c16e9acac54e160dfcdea7ac74a82b1c33e498c4a3f4dbb2488bfe03c590c6cd64d5919e7001deca0d61bc5b3cbdac7d630d8e18cdb3bead91475541a9485dfdac0c341dfd22bb627e65aaaa37def2d5b40011f0543c231360202254766b1a39440ca38a6c0a704aad938dbc2cc4b349c98d78feb0b333650e556b8ce6ff1184e9bd72abab832cdbd5ffa54"}, {0x100, 0x10f, 0x5, "754e01e032eda9c137da6f97141d7a86a2a594402d79e4fb4f8cff076ce18ebb932de4e0eb5dbde7d7d24dfc33d3285e31ec951680f2d13dffb240ada52f41910e71b47c0fba37bb9aabcdd97a88edd12f2d0f01ad71465fca2f60bdc79068d4807d80c6bb59923d713c97b14647ca72e90664c79955d0e2def05a2ae2d3e62b71319978aba52b74a008208506fcd6030a13900fcb643f3d9b26923de4696be3e1071eb506e4d21667c9c02c2cdf2bc8730bddc5bf7b5f11dc16590a44add490e2f550014d6a8e5e7f04061526b4ea279105976213ad85f68f153392bc6c0bd386a053dcd535951c6329eac470"}, {0xe0, 0x101, 0x0, "fb3e86113337f012b02b06fcd7a121d5d9e7b25066ac0a2a4bbdb4813b8b19a389b81ff28be9685cd341470146a905d33131d993d5c07ac9733bdd06dd8713a62ce31956cbe8fb8c149831da32696a849b711338c861f33adc612199d17859b5faa7d99b3ab33b46bf106f6e2e109a5b3f513bde0e1c767dbf8124427bb1a6b93d3b34a44d1d8004ffcf8b8755461e2eed0ac3b95f88ed54cb2e3089af469bdb44fbd118709973a606a425d6fd6d81255ed96bd6a1e8bce0b73f9d9b6134d309d55058b5319215d42870f48b2a4e"}, {0x100, 0x105, 0x7, "c1c33b7c14b51110434350a271f437e3b58e56435006916365628daca36d29c027766ea289006fe33a59c3a6fd3b61b3e1f5ba2b081344e0a8bb01c7f10663a7399685b0a055914f301ae9d255aa6e3c614ebfdac8a13dbd37ca8257984c916d06ad7a23c412f53a70ca09687fe0f3b01a599295d54c792cf4c7ba4410841ac94a739386dbed4a2b8716e78737b6d6413bbd930f4292af342591bcf716c055e0dbff3de8522960265a46bd1d6cc9b0a4629f6d82ff628979073a6f08ccac4f6d9a154f7e599345d16e9aaff3faf0965f08473eebc16ae147a81d765a0641c9a0b50752961d5c37b0851ca1fc3f76683a"}, {0x98, 0x0, 0x0, "96a07fa47b1b38ef094a5c0d2c62e3a30f169c1d74e7893a6fe1a788551931c8494c7874ff4b73c55abb828da2b7f5a347f718874f31dedc7d5275a06738a46686a2d1c5af6c91a6b5368a19f05b3ab300af9c81e959f73be4ef3fffd4955645419ebc7c3b74d3c4616d5fbf3152f0ca86ef636bd331c0e383afb8e1761e25353a698e48e9d5"}, {0x90, 0x110, 0x6, "d9ee7b0196cbf450706a28fdc2241339664d3341e022fef03ecf9b5b3539ec458348e07e1d29222201849258fd925834da92dde69223e03fa64b091308b55c21903bf0c8396305cbf082e7c318e14382d37755ee2b73c129e10f641b20dbef81b9b00d418889b1247580a7b7b87701c1fab018b5f328bc85c076a7"}, {0x10, 0x13cbf2592519ccd8, 0x4}], 0x1620}, 0x4040000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) [ 2265.737736] ? shmem_init_inode+0x20/0x20 [ 2265.737762] ? percpu_counter_add_batch+0x8b/0x140 [ 2265.737776] ? __vm_enough_memory+0x184/0x360 [ 2265.737792] shmem_getpage_gfp.constprop.0+0x512/0x1920 19:55:51 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDENABIO(r1, 0x4b36) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) [ 2265.737814] ? shmem_unuse_inode+0xf60/0xf60 [ 2265.737834] shmem_file_read_iter+0x2a6/0xbb0 [ 2265.737855] ? shmem_get_link+0x440/0x440 [ 2265.737866] ? inode_has_perm+0x171/0x1d0 [ 2265.737879] ? iov_iter_pipe+0xf1/0x2a0 [ 2265.737893] generic_file_splice_read+0x455/0x6d0 [ 2265.737905] ? pipe_to_user+0x170/0x170 [ 2265.737922] ? fsnotify_perm.part.0+0x22d/0x620 [ 2265.737935] ? security_file_permission+0xb1/0xe0 [ 2265.737947] ? pipe_to_user+0x170/0x170 [ 2265.737959] do_splice_to+0x10e/0x160 [ 2265.737972] splice_direct_to_actor+0x2fe/0x980 [ 2265.737987] ? pipe_to_sendpage+0x380/0x380 [ 2265.738000] ? do_splice_to+0x160/0x160 [ 2265.738010] ? security_file_permission+0xb1/0xe0 [ 2265.738076] do_splice_direct+0x1c4/0x290 [ 2265.738088] ? splice_direct_to_actor+0x980/0x980 [ 2265.738103] ? security_file_permission+0xb1/0xe0 [ 2265.738120] vfs_copy_file_range+0x4f8/0x13c0 [ 2265.738135] ? generic_file_rw_checks+0x240/0x240 [ 2265.738160] __do_sys_copy_file_range+0x193/0x420 [ 2265.738172] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2265.738191] ? ksys_write+0x1a9/0x260 [ 2265.738202] ? __ia32_sys_read+0xb0/0xb0 [ 2265.738216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.738230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.738242] do_syscall_64+0x33/0x40 [ 2265.738254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.738262] RIP: 0033:0x7f1d53837b19 [ 2265.738274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.738280] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2265.738293] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2265.738300] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2265.738306] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2265.738312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.738319] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:56:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x20, 0x40, 0x4, 0x15f, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x66, 0x0, 0x8a, 0x29, 0x0, @broadcast, @private=0xa010101, {[@end]}}}}}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c1}, 0x4000000) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x3ff}) 19:56:04 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 79) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:56:04 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x0, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:56:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x100, 0x40, 0x20, 0x70bd2c, 0x25dfdbfe, {0x14}, [@nested={0xe9, 0x1f, 0x0, 0x1, [@generic="c0e6d466f605d8bbbfa15093b85448427a18445da9f003e58b2b001a360f55bbb32c808861d9d5cf00eccbc313e8ef0e1544b3ebcea96ff7b4074eb7e5753e199dd3db6335719e1c2ed123dc0e54093e80b193bf251e0d45d54e9ea14c49dd65776eb071a71e633b6afce7abbf09080cd1c553b3466396c9304bdd03e825756548c95e15403febe9eeb51cdf97552139c028521f4e03c2db7163eb4bf5c762cac4a12a6bbe0bc5ba73eec6f8a3e4bc3208ad7cc78ff1c4ac8a16245f864d7cbe17af54baac10f89a1e7ef0c042915d86", @typed={0x13, 0x1, 0x0, 0x0, @str='\x9c\xc0\xb5]\xde\xed\xa2\x05\xd8\x9d\x91\'!\'\x19'}, @generic="fa"]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8004}, 0x4000880) 19:56:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7, 0x4}, {0x1, 0xb6}, {0x8001}, {0xfc00, 0x1}, {0xc2e8, 0x2}, {0x66f, 0x3}]}) 19:56:04 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x762, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:56:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x86f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:56:04 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x540e, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 2278.330571] FAULT_INJECTION: forcing a failure. [ 2278.330571] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2278.332020] CPU: 1 PID: 11937 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2278.332817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.332821] Call Trace: [ 2278.332838] dump_stack+0x107/0x167 [ 2278.332849] should_fail.cold+0x5/0xa [ 2278.332864] __alloc_pages_nodemask+0x182/0x600 [ 2278.332877] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2278.332888] ? lock_downgrade+0x6d0/0x6d0 [ 2278.332898] ? lock_acquire+0x197/0x470 [ 2278.332917] alloc_pages_vma+0xbb/0x410 [ 2278.332931] shmem_alloc_page+0x10f/0x1e0 [ 2278.332941] ? shmem_init_inode+0x20/0x20 [ 2278.332966] ? percpu_counter_add_batch+0x8b/0x140 [ 2278.332979] ? __vm_enough_memory+0x184/0x360 [ 2278.332994] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2278.333011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.333023] ? shmem_unuse_inode+0xf60/0xf60 [ 2278.333037] ? avc_has_perm+0xc5/0x1b0 [ 2278.333050] shmem_file_read_iter+0x2a6/0xbb0 [ 2278.333062] ? kfree+0xd7/0x340 [ 2278.333078] ? shmem_get_link+0x440/0x440 [ 2278.333087] ? inode_has_perm+0x171/0x1d0 [ 2278.333098] ? iov_iter_pipe+0xf1/0x2a0 [ 2278.333112] generic_file_splice_read+0x455/0x6d0 [ 2278.333123] ? pipe_to_user+0x170/0x170 [ 2278.333188] ? fsnotify_perm.part.0+0x22d/0x620 [ 2278.333202] ? security_file_permission+0xb1/0xe0 [ 2278.333213] ? pipe_to_user+0x170/0x170 [ 2278.333223] do_splice_to+0x10e/0x160 [ 2278.333273] splice_direct_to_actor+0x2fe/0x980 [ 2278.333292] ? pipe_to_sendpage+0x380/0x380 [ 2278.333309] ? do_splice_to+0x160/0x160 [ 2278.333319] ? security_file_permission+0xb1/0xe0 [ 2278.333333] do_splice_direct+0x1c4/0x290 [ 2278.333343] ? splice_direct_to_actor+0x980/0x980 [ 2278.333356] ? security_file_permission+0xb1/0xe0 [ 2278.333371] vfs_copy_file_range+0x4f8/0x13c0 [ 2278.333384] ? generic_file_rw_checks+0x240/0x240 [ 2278.333407] __do_sys_copy_file_range+0x193/0x420 [ 2278.333418] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2278.333428] ? ksys_write+0x1a9/0x260 [ 2278.333438] ? __ia32_sys_read+0xb0/0xb0 [ 2278.333450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.333462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.333473] do_syscall_64+0x33/0x40 [ 2278.333484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2278.333491] RIP: 0033:0x7f1d53837b19 [ 2278.333502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.333508] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2278.333530] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2278.361106] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2278.361922] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2278.362753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2278.363570] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:56:04 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0xf7, 0x6, @remote}, 0x14) syz_open_dev$tty1(0xc, 0x4, 0x4) 19:56:04 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x20, 0xffff, 0x10001, 0x1, 0xc, "790110bfb94df33efc0bbcf8a27d4270becb07"}) 19:56:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x875, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:56:16 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x76a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:56:16 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x0, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:56:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:56:16 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x540f, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:56:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x6196, 0xca9a, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x4ebb, &(0x7f0000001780), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0xffffffffffffffff, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r9, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:56:16 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 80) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:56:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001500)='.log\x00', 0x420000, 0x0) pread64(r2, &(0x7f0000001540)=""/146, 0x92, 0xd046) syz_open_procfs(r1, &(0x7f0000000200)='net/nfsfs\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001480)={&(0x7f0000000040)={0x1428, 0x19, 0x301, 0x70bd29, 0x25dfdbfd, {0x1a}, [@typed={0x8, 0x5a, 0x0, 0x0, @pid=r1}, @nested={0x2ab, 0x51, 0x0, 0x1, [@generic="f3e3bfb118d8ff97126bdb43eb5836b4a9f05e6f72c5286a61eaece3eb90ad3cb6ac4b0532be9a35c84b3ce713", @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}, @generic="695715b0d8b53218d9251fb0efe5f1b32a9cb4ecbfc79912720021a942ae0246e2512e825d2e32df6400a1e1955ab49b61a796782383d2a147261f7bd80ccde8d92be188f514ae219acfd6face87e4474bbb43035cfae486900f8a77a5a59cf4eb1b43106eefbceae897f4095e66da8a202904e693e78443211dce2f956642ee5407202d1173819ca4e8cfcfdd0ffc1d27e661237c7edf6d9bc5cc471f657fc53947e30312ac5ef4", @typed={0x4, 0x3c}, @generic="26afb02f4ef10c3e3aeda3524f73ce35df70a734290b6819557d32470fc5968b66c69dc32a01dcd5506ca2a5972ef83121d74e68c30a7dda56ff51a4b7370c9dc233a4a4b6261a402d59aaf04616c59da9285f97da04645bc4f29385315e4170fc1bbf3f53f765458b385b3cb62b7c4820548febecd8d273d61c919d6a0fdbcf157d7a738b636a99d51ff51e7d0fe7518f21f4", @generic="c1f4358f466aefee24519a43ccafcf89958ef00316115f7510f0a52c15c82750aa50f14735aa9a5df6f23b46416a3a4dad65302fc9e8087c5625f8320d09884f0eacdf116f09d884f2c7b53a08f3ed4a528bd1eff68be2244527e44052c04aa95e0a8225721c", @generic="41d79b8e6ce41d49f4d429ca3480e2514d17ece3b8fce1834f1505219ed618470f170f8df0f0d267239afa76adf3fefb64e2074dc5d3b0b0f56c9ac7570343", @generic="ad56ec0184424b9e41d43644e673", @typed={0x8, 0x96, 0x0, 0x0, @u32=0x9}, @generic="bc842e32583e84a3ac5d30f654dcd75fab988aab0e36eaa7cd02de96dd330d387a7b991589202122c45b0545a31a51648ef8f48df2c933a1bd91d3678d3da711aa8742cf190ae667fc9c07c849714a32b1a082b43242ddc3deaa72e811114f6ec4cb6d33fb7e74a464dd7ac2f6941cdb9b1ed5ae54fca853"]}, @nested={0x115e, 0x42, 0x0, 0x1, [@typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@broadcast}, @generic="34950ecfd44bf07068b454b15be6f85c3e95794e939461d8ebe5d635e0faf4466f3d73f9bbbdb2b9c3046e1c468249faea368b704317941f72bc30dfe7ed9ded0efa4e84bd76f48d6099c1302927b24499eaf7d86fad73b5f8049cf8bead7798635a440151927e01eb7999937a7b95d694fe74f06c2c7f85652fe50e452ba2c7ec4887d570cbb272f3bc5c1a799b89ac7460fc7bd98f3ffcfa10b7b58276fb84f9736b8971c6d9fb68a208d7bff51ab41235ba4b7424e7d3567111b69c3febafec9d940b9e6b985bdd77c465308a86a905c73f6b9e1979", @generic="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", @generic="4a7081225c517a9c52559d65c3fb784d24a7c3a1193478504ec219b4fcc55b1dbd5e8273c9005fb683aed56fd6b1478b1e874ff7290cdd57017d74d03d900ecae464812271ebc841bf7425543c11d7f8fb8bb6033c2de144ae635ee356f1264906f13adcaa64f4dcb5e483ef1c01241603e147509ad14abbbc6dc3"]}]}, 0x1428}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0xb) [ 2291.020925] FAULT_INJECTION: forcing a failure. [ 2291.020925] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2291.024115] CPU: 0 PID: 11976 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2291.025863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2291.027824] Call Trace: [ 2291.028462] dump_stack+0x107/0x167 [ 2291.029357] should_fail.cold+0x5/0xa [ 2291.030340] __alloc_pages_nodemask+0x182/0x600 [ 2291.031409] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2291.032773] ? lock_downgrade+0x6d0/0x6d0 [ 2291.033678] ? lock_acquire+0x197/0x470 [ 2291.034643] alloc_pages_vma+0xbb/0x410 [ 2291.035566] shmem_alloc_page+0x10f/0x1e0 [ 2291.036501] ? shmem_init_inode+0x20/0x20 [ 2291.037457] ? percpu_counter_add_batch+0x8b/0x140 [ 2291.038566] ? __vm_enough_memory+0x184/0x360 [ 2291.039595] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2291.040842] ? shmem_unuse_inode+0xf60/0xf60 [ 2291.041911] shmem_file_read_iter+0x2a6/0xbb0 [ 2291.042962] ? shmem_get_link+0x440/0x440 [ 2291.043910] ? inode_has_perm+0x171/0x1d0 [ 2291.044862] ? iov_iter_pipe+0xf1/0x2a0 [ 2291.045821] generic_file_splice_read+0x455/0x6d0 [ 2291.047064] ? pipe_to_user+0x170/0x170 [ 2291.048009] ? fsnotify_perm.part.0+0x22d/0x620 [ 2291.049077] ? security_file_permission+0xb1/0xe0 [ 2291.050184] ? pipe_to_user+0x170/0x170 [ 2291.051119] do_splice_to+0x10e/0x160 [ 2291.052007] splice_direct_to_actor+0x2fe/0x980 [ 2291.053066] ? pipe_to_sendpage+0x380/0x380 [ 2291.054018] ? do_splice_to+0x160/0x160 [ 2291.054906] ? security_file_permission+0xb1/0xe0 [ 2291.056000] do_splice_direct+0x1c4/0x290 [ 2291.056926] ? splice_direct_to_actor+0x980/0x980 [ 2291.058023] ? security_file_permission+0xb1/0xe0 [ 2291.059135] vfs_copy_file_range+0x4f8/0x13c0 [ 2291.060146] ? generic_file_rw_checks+0x240/0x240 [ 2291.061253] __do_sys_copy_file_range+0x193/0x420 [ 2291.062347] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2291.063442] ? ksys_write+0x1a9/0x260 [ 2291.064411] ? __ia32_sys_read+0xb0/0xb0 [ 2291.065399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2291.066530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2291.067698] do_syscall_64+0x33/0x40 [ 2291.068499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2291.069598] RIP: 0033:0x7f1d53837b19 [ 2291.070397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2291.074359] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2291.076033] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2291.077618] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2291.079174] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2291.080748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2291.082432] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:56:16 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5410, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:56:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000300)={{r1}, r2, 0x0, @inherit={0x68, &(0x7f0000000280)={0x0, 0x4, 0x6, 0x0, {0x27, 0x7, 0x0, 0x100000001, 0x1}, [0x0, 0x8000, 0x1, 0x401]}}, @subvolid=0x3}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)="72100091d48c75592d7b6ace2b134aad97e5b519b0c8ca498c7934f9f60aa978dd5cd0604c035d77503d66b01a63f04f998e3b680919d31c6932d4", 0x3b}, {&(0x7f0000000080)="25cd818795a8de0965044a5f09a4633dde91add19ea63819c6dcb10229338d4a28c08d9ade96aedbf5cd523229a9b1756a667d38b929ad138282cd1df641129c3f0fe3319e7158c99b038faf61743895abbbb507a40ba09860525b183b3e538624b6a4d11e908386c12b54fcfbd8d820ab3d12c73eddb11f40f00c53ffbc7b69af8e914e7e1e71659f586d3d642111b3934d8ac22506730ab9", 0x99}, {&(0x7f0000000140)="566fa813ccefeb9f7ab2e92c07c9f41e4b8c74ac98ec2384f6d4cd2087aa53b0dea42d47c047a8f8b3b4b7aa8c046e3e6fd80c409caa9de4096963dbe5c1483f4ae6347c8239b348254506db560bf089e8b5e8340853d99397ceeded7630eb5c561053a31a554024ec486c7a024c6f8128d1e2017c9e280bda40eb4bf10f464d58a62b5dcf0bfc", 0x87}], 0x3) 19:56:16 executing program 0: fcntl$notify(0xffffffffffffffff, 0x402, 0x80000014) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/253}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:56:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:crond_exec_t:s0\x00', 0x22, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="d2be0b05ca836b73a692ee4805e35d110b1308f67bc6b947d62a56607bc0bee59b3adcec57f55a62282d874de8a397a604eb821a004d4c0805c929005f9de8aaec4a79cd386f9e20d80fd736f7553f1a4f02dc61e9fa31deca1f95f1dc145d61447a99ba0dfb2037f285476ca6cb8e99a5ce7a36307665b0772d0929256ecc478f15f5cd64565a6969245c72ef1599b0469b6a5a9a896df86c66b583b4723f6724a606bdf87158a931d36fb3a1ac242b1fc35eedf45a9d480b81276ccd40d233aec4d9ae41506206d85513e1a0d3f7182f65ae2c75e0bd3f84", @ANYRES16=0x0, @ANYBLOB="000427a7000000fedbdf13c52c4e28fe0a2000001000028004000400050a8038000000000000000000000000000000cac868d610d6f9c87a57049c68d92dd1b6f80a2b2cd5e813bfd22879e57fa8a6655f3b796f5fff4d733f269904efdfee53166dd27026839483b32a1316fce8ca81e083d3dfbb2dbc"], 0x24}, 0x1, 0x0, 0x0, 0x20044841}, 0x200080d4) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 19:56:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r0, 0x308, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xf}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000054) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x4b68, 0x0) [ 2291.182852] audit: type=1400 audit(1734292576.986:14): avc: denied { relabelto } for pid=11999 comm="syz-executor.4" name="TCPv6" dev="sockfs" ino=53299 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crond_exec_t:s0 tclass=tcp_socket permissive=1 19:56:16 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x788, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:56:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) 19:56:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x87b, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:56:17 executing program 4: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xda86, 0x7f, 0x0, 0xa1e, 0x6, "491158f59f6da5c1dde97e0328fa390a198076"}) 19:56:17 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x0, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:56:28 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 81) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:56:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40000, 0x40, 0x8}, 0x18) dup(r1) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000080601030000000000000000030000090900020073797a32000000000900020073797a320000000005000100070000000900020073797ae231000000000900020073797a32000000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000002c0), &(0x7f0000000300)=0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000180)) 19:56:28 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x0, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:56:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:56:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:56:28 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x792, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:56:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x884, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:56:28 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5412, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 2303.094543] netlink: 'syz-executor.0': attribute type 39 has an invalid length. 19:56:28 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2303.105963] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2303.118389] FAULT_INJECTION: forcing a failure. [ 2303.118389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2303.121532] CPU: 1 PID: 12041 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2303.122972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2303.124704] Call Trace: [ 2303.125254] dump_stack+0x107/0x167 [ 2303.126008] should_fail.cold+0x5/0xa [ 2303.126802] __alloc_pages_nodemask+0x182/0x600 [ 2303.127774] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2303.129020] ? lock_downgrade+0x6d0/0x6d0 [ 2303.129919] ? lock_acquire+0x197/0x470 [ 2303.130769] alloc_pages_vma+0xbb/0x410 [ 2303.131608] shmem_alloc_page+0x10f/0x1e0 [ 2303.132466] ? shmem_init_inode+0x20/0x20 [ 2303.133344] ? percpu_counter_add_batch+0x8b/0x140 [ 2303.134370] ? __vm_enough_memory+0x184/0x360 [ 2303.135305] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2303.136432] ? shmem_unuse_inode+0xf60/0xf60 [ 2303.137356] shmem_file_read_iter+0x2a6/0xbb0 [ 2303.138300] ? shmem_get_link+0x440/0x440 [ 2303.139157] ? inode_has_perm+0x171/0x1d0 [ 2303.140021] ? iov_iter_pipe+0xf1/0x2a0 [ 2303.140879] generic_file_splice_read+0x455/0x6d0 [ 2303.141870] ? pipe_to_user+0x170/0x170 [ 2303.142707] ? fsnotify_perm.part.0+0x22d/0x620 [ 2303.143683] ? security_file_permission+0xb1/0xe0 [ 2303.144672] ? pipe_to_user+0x170/0x170 [ 2303.145494] do_splice_to+0x10e/0x160 [ 2303.146286] splice_direct_to_actor+0x2fe/0x980 [ 2303.147248] ? pipe_to_sendpage+0x380/0x380 [ 2303.148148] ? do_splice_to+0x160/0x160 [ 2303.148963] ? security_file_permission+0xb1/0xe0 [ 2303.149965] do_splice_direct+0x1c4/0x290 [ 2303.150815] ? splice_direct_to_actor+0x980/0x980 [ 2303.151826] ? security_file_permission+0xb1/0xe0 [ 2303.152830] vfs_copy_file_range+0x4f8/0x13c0 [ 2303.153754] ? generic_file_rw_checks+0x240/0x240 [ 2303.154769] __do_sys_copy_file_range+0x193/0x420 [ 2303.155772] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2303.156746] ? ksys_write+0x1a9/0x260 [ 2303.157527] ? __ia32_sys_read+0xb0/0xb0 [ 2303.158365] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2303.159450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2303.160516] do_syscall_64+0x33/0x40 [ 2303.161280] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2303.162347] RIP: 0033:0x7f1d53837b19 [ 2303.163114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2303.166907] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2303.168482] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2303.169957] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2303.171433] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2303.172914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2303.174394] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 2303.185280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=12036 comm=syz-executor.0 19:56:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2303.197789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=12058 comm=syz-executor.0 19:56:29 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5413, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 2303.208143] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 2303.211315] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 19:56:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) signalfd4(r0, &(0x7f0000000000)={[0x3ff]}, 0x8, 0x80400) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:56:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x20) 19:56:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x798, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:56:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x889, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:56:29 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:56:29 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 82) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:56:29 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x200, 0x103) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) [ 2303.409877] FAULT_INJECTION: forcing a failure. [ 2303.409877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2303.411575] CPU: 0 PID: 12084 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2303.412413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2303.413397] Call Trace: [ 2303.413715] dump_stack+0x107/0x167 [ 2303.414143] should_fail.cold+0x5/0xa [ 2303.414610] __alloc_pages_nodemask+0x182/0x600 [ 2303.414624] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 19:56:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2303.414634] ? lock_downgrade+0x6d0/0x6d0 [ 2303.414643] ? lock_acquire+0x197/0x470 [ 2303.414662] alloc_pages_vma+0xbb/0x410 [ 2303.414675] shmem_alloc_page+0x10f/0x1e0 [ 2303.414685] ? shmem_init_inode+0x20/0x20 19:56:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x79e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2303.414708] ? percpu_counter_add_batch+0x8b/0x140 [ 2303.414720] ? __vm_enough_memory+0x184/0x360 [ 2303.414733] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2303.414752] ? shmem_unuse_inode+0xf60/0xf60 [ 2303.414769] shmem_file_read_iter+0x2a6/0xbb0 [ 2303.414787] ? shmem_get_link+0x440/0x440 [ 2303.414796] ? inode_has_perm+0x171/0x1d0 [ 2303.414808] ? iov_iter_pipe+0xf1/0x2a0 19:56:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x88f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2303.414821] generic_file_splice_read+0x455/0x6d0 [ 2303.414831] ? pipe_to_user+0x170/0x170 [ 2303.414847] ? fsnotify_perm.part.0+0x22d/0x620 [ 2303.414858] ? security_file_permission+0xb1/0xe0 19:56:29 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 83) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2303.414869] ? pipe_to_user+0x170/0x170 [ 2303.414879] do_splice_to+0x10e/0x160 [ 2303.414890] splice_direct_to_actor+0x2fe/0x980 [ 2303.414903] ? pipe_to_sendpage+0x380/0x380 [ 2303.414914] ? do_splice_to+0x160/0x160 [ 2303.414923] ? security_file_permission+0xb1/0xe0 [ 2303.414937] do_splice_direct+0x1c4/0x290 [ 2303.414946] ? splice_direct_to_actor+0x980/0x980 [ 2303.414959] ? security_file_permission+0xb1/0xe0 [ 2303.414974] vfs_copy_file_range+0x4f8/0x13c0 [ 2303.415027] ? generic_file_rw_checks+0x240/0x240 [ 2303.415049] __do_sys_copy_file_range+0x193/0x420 [ 2303.415060] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2303.415070] ? ksys_write+0x1a9/0x260 [ 2303.415079] ? __ia32_sys_read+0xb0/0xb0 [ 2303.415092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2303.415103] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2303.415114] do_syscall_64+0x33/0x40 [ 2303.415124] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2303.415131] RIP: 0033:0x7f1d53837b19 [ 2303.415141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2303.415165] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2303.415177] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2303.415182] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2303.415187] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2303.415193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2303.415198] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 2303.541313] FAULT_INJECTION: forcing a failure. [ 2303.541313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2303.541327] CPU: 0 PID: 12099 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2303.541332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2303.541336] Call Trace: [ 2303.541351] dump_stack+0x107/0x167 [ 2303.541362] should_fail.cold+0x5/0xa [ 2303.541381] __alloc_pages_nodemask+0x182/0x600 [ 2303.541394] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2303.541404] ? lock_downgrade+0x6d0/0x6d0 [ 2303.541413] ? lock_acquire+0x197/0x470 [ 2303.541433] alloc_pages_vma+0xbb/0x410 [ 2303.541447] shmem_alloc_page+0x10f/0x1e0 [ 2303.541457] ? shmem_init_inode+0x20/0x20 [ 2303.541480] ? percpu_counter_add_batch+0x8b/0x140 [ 2303.541492] ? __vm_enough_memory+0x184/0x360 [ 2303.541505] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2303.541524] ? shmem_unuse_inode+0xf60/0xf60 [ 2303.541541] shmem_file_read_iter+0x2a6/0xbb0 [ 2303.541559] ? shmem_get_link+0x440/0x440 [ 2303.541568] ? inode_has_perm+0x171/0x1d0 [ 2303.541579] ? iov_iter_pipe+0xf1/0x2a0 [ 2303.541592] generic_file_splice_read+0x455/0x6d0 [ 2303.541602] ? pipe_to_user+0x170/0x170 [ 2303.541618] ? fsnotify_perm.part.0+0x22d/0x620 [ 2303.541629] ? security_file_permission+0xb1/0xe0 [ 2303.541639] ? pipe_to_user+0x170/0x170 [ 2303.541649] do_splice_to+0x10e/0x160 [ 2303.541660] splice_direct_to_actor+0x2fe/0x980 [ 2303.541673] ? pipe_to_sendpage+0x380/0x380 [ 2303.541685] ? do_splice_to+0x160/0x160 [ 2303.541693] ? security_file_permission+0xb1/0xe0 [ 2303.541707] do_splice_direct+0x1c4/0x290 [ 2303.541717] ? splice_direct_to_actor+0x980/0x980 [ 2303.541729] ? security_file_permission+0xb1/0xe0 [ 2303.541744] vfs_copy_file_range+0x4f8/0x13c0 [ 2303.541756] ? generic_file_rw_checks+0x240/0x240 [ 2303.541778] __do_sys_copy_file_range+0x193/0x420 [ 2303.541788] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2303.541797] ? ksys_write+0x1a9/0x260 [ 2303.541807] ? __ia32_sys_read+0xb0/0xb0 [ 2303.541871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2303.541883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2303.541894] do_syscall_64+0x33/0x40 [ 2303.541903] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2303.541910] RIP: 0033:0x7f1d53837b19 [ 2303.541920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2303.541925] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2303.541936] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2303.541941] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2303.541946] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2303.541952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2303.541957] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:56:43 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 84) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:56:43 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5414, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:56:43 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:56:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) pread64(r1, &(0x7f0000000200)=""/77, 0x4d, 0x3) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0080040}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r2, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfffeffff, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4c002}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000000)=0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xdf}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000031}, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000003c0)) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000400)="510cc526ba976fba510ada9b7f27d169a6") ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000418000000", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x3c) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r5, 0x200, 0x70bd2d, 0x0, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000010) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x880) 19:56:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x897, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:56:43 executing program 4: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1800) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x20008082) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:56:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) pread64(r1, &(0x7f0000000000), 0x0, 0xff) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$inet6(r2, &(0x7f00000016c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x80, @local, 0x9}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000080)="b5d236a10f089d94f70a655f0b51", 0xe}, {&(0x7f0000000100)="db69ad38dc6d1dbafe8d6e36519c25b85c8958f6b1aa3b4b11a797426c66b600a42dc5a9a6e05399dd8e3891f069776390c68eed149a4256e90ff14067ab7beb4eb927bb7f6ff2587c8e7ab9d8711f4dcc56fed07533b3e00571e6e1fb2c369c625ef780dabffe43843af3ce36f8b9a55c65cc2f35e7ce98b28cb3ff5c4c0f271bfa7c89d774d94fbbfe5a19fc15010b885b5e0b6408e2513bcdbc201550c019767ecbbb5017bf3de0653d94be826acae30a623c01be6700efe20d776b323a793fe32ba65fbcc4a10312a0e4661913827080c3a5", 0xd4}, {&(0x7f0000000200)="4b9c186aa90e74eae16eb49fd9e7dfce2028e6e0c703019d70508be35651ba7295d7c1850ec66c857bdd476de577851ec6d49b5e530b25b868fd7d618689aae4f09d0c75", 0x44}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="110057d6963b2be1220238085d77cce1cda745ddd67d5651f6467cf6636bc7748ccd6c24a57bb1ebe3569bf37ea74283980832bf56e6abab9221271c007bdbdd89e6f875a9e4a30901c2653af70baa98c73c4060258c03ca9d5d69c12510d24ea8555108045856fe76df163270d630fb026e0ad80b06762a47891fa2bf5d4042d458d59b5797c3bf66c268d16bac227d4a93f2bb52c72abf07eb73197a3b45712b1c85034c97318def0b51aeabfa0e42a1cf4cc577", 0xb5}, {&(0x7f0000001340)="4fd502f652c47ac27df1da8f8e490e9203a40409759bb52e5d9ebbebadea0db48a89713bcc4263579f685113ee12dc0be2bebf39f4d74edaf57703a75a5b378b77ae8adb002fbc06d3903a19b19a0ced537ad755d4183b9b99dcf28c33475d0b88410fa507ce9f1bd48b6e24fe0ef688f4770f19c3630f2d3e06b892d02fbf52f659c7a7042dadf2653e539818e76abe76c172613e8035cbd7cfdb2664b67636ff30269de5f0be44d6c3da5bf0bd51e6e83838b70c5afbb91dd0bb768b1145c8435a18e1748e53b83aa0", 0xca}, {&(0x7f0000001440)="acf8e363ec187b75f4ab24351cbed36a1f66fce5e9a353ba2ab78e4e584ce3f20d7957736e238d7f3f185ddbfd0b0b66f50cb573b458ecdf27dd2a4e130367e07769951292d44e996b07a131be15b8878935bfac975af8b19c7c39d7bc2be336c1236f4a15094818b65da9a49a049e270dfe1a50accee28bed1ad6cd33385c19d568b319263b19181dc7f75b13e99b66059c5011ae49985f2a6b0fe9acd96ec06ccdb0e5", 0xa4}, {&(0x7f0000001500)="ebf8aab912c7feb0d25c8327698c25b2f8146f32655fcf08dd39318584c0923f6fcf26fdcf44713ac0dd867ea1dafb733c4f3647cc2ea571628f97993938388415b2d28bec1ca1b1d8460e472c642f9c23d3cf888689f561f23cfd291ede4d9788b712ecc06d6069994f578b048b0918f650d1340b2e9167b80e2868bf4b249b5f64c27fca8eb9716ff6d717b4dd2f489e528ec0b32d061064bdf383948ae7c8c20f23df9859eb0e", 0xa8}], 0x8, &(0x7f0000001640)=[@tclass={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @hoplimit={{0x14}}], 0x48}, 0x80) 19:56:43 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7a7, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:56:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x6, 0x3, 0x6}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2317.349899] FAULT_INJECTION: forcing a failure. [ 2317.349899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2317.352836] CPU: 1 PID: 12112 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2317.354286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2317.356028] Call Trace: [ 2317.356584] dump_stack+0x107/0x167 [ 2317.357335] should_fail.cold+0x5/0xa [ 2317.358131] __alloc_pages_nodemask+0x182/0x600 [ 2317.359101] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2317.360359] ? lock_downgrade+0x6d0/0x6d0 [ 2317.361219] ? lock_acquire+0x197/0x470 [ 2317.362061] alloc_pages_vma+0xbb/0x410 [ 2317.362894] shmem_alloc_page+0x10f/0x1e0 [ 2317.363759] ? shmem_init_inode+0x20/0x20 [ 2317.364647] ? percpu_counter_add_batch+0x8b/0x140 [ 2317.365671] ? __vm_enough_memory+0x184/0x360 [ 2317.366605] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2317.367739] ? shmem_unuse_inode+0xf60/0xf60 [ 2317.368670] shmem_file_read_iter+0x2a6/0xbb0 [ 2317.369614] ? shmem_get_link+0x440/0x440 [ 2317.370476] ? inode_has_perm+0x171/0x1d0 [ 2317.371344] ? iov_iter_pipe+0xf1/0x2a0 [ 2317.372191] generic_file_splice_read+0x455/0x6d0 [ 2317.373191] ? pipe_to_user+0x170/0x170 [ 2317.374030] ? fsnotify_perm.part.0+0x22d/0x620 [ 2317.375000] ? security_file_permission+0xb1/0xe0 [ 2317.376009] ? pipe_to_user+0x170/0x170 [ 2317.376845] do_splice_to+0x10e/0x160 [ 2317.377634] splice_direct_to_actor+0x2fe/0x980 [ 2317.378607] ? pipe_to_sendpage+0x380/0x380 [ 2317.379501] ? do_splice_to+0x160/0x160 [ 2317.380316] ? security_file_permission+0xb1/0xe0 [ 2317.381326] do_splice_direct+0x1c4/0x290 [ 2317.382187] ? splice_direct_to_actor+0x980/0x980 [ 2317.383197] ? security_file_permission+0xb1/0xe0 [ 2317.384204] vfs_copy_file_range+0x4f8/0x13c0 [ 2317.385186] ? generic_file_rw_checks+0x240/0x240 [ 2317.385229] __do_sys_copy_file_range+0x193/0x420 [ 2317.385249] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2317.385266] ? ksys_write+0x1a9/0x260 [ 2317.385285] ? __ia32_sys_read+0xb0/0xb0 [ 2317.385307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2317.385326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.385346] do_syscall_64+0x33/0x40 [ 2317.385364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2317.385377] RIP: 0033:0x7f1d53837b19 [ 2317.385394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.385403] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2317.385423] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2317.385433] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2317.385443] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2317.385453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2317.385463] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:56:56 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:56:56 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8a8, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:56:56 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5415, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:56:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x8000, 0x8001, 0x7fff, 0xed25, 0x7, 0xff4e}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:56:56 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7ac, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:56:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$VT_RESIZEX(r1, 0x560a, 0xfffffffffffffffd) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x5, 0xffff, 0x3, 0x2, 0x6, "d18c279c90d92ba9"}) 19:56:56 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0xa69, 0x4400) 19:56:56 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 85) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2330.993712] FAULT_INJECTION: forcing a failure. [ 2330.993712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2330.996685] CPU: 0 PID: 12158 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2330.998258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2331.000149] Call Trace: [ 2331.000766] dump_stack+0x107/0x167 [ 2331.001591] should_fail.cold+0x5/0xa [ 2331.002454] __alloc_pages_nodemask+0x182/0x600 [ 2331.003514] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2331.004864] ? lock_downgrade+0x6d0/0x6d0 [ 2331.005799] ? lock_acquire+0x197/0x470 [ 2331.006718] alloc_pages_vma+0xbb/0x410 [ 2331.007620] shmem_alloc_page+0x10f/0x1e0 [ 2331.008563] ? shmem_init_inode+0x20/0x20 [ 2331.009524] ? percpu_counter_add_batch+0x8b/0x140 19:56:56 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) [ 2331.010624] ? __vm_enough_memory+0x184/0x360 [ 2331.011810] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2331.013025] ? shmem_unuse_inode+0xf60/0xf60 [ 2331.014023] shmem_file_read_iter+0x2a6/0xbb0 [ 2331.015043] ? shmem_get_link+0x440/0x440 [ 2331.015956] ? inode_has_perm+0x171/0x1d0 [ 2331.016877] ? iov_iter_pipe+0xf1/0x2a0 [ 2331.017771] generic_file_splice_read+0x455/0x6d0 [ 2331.018839] ? pipe_to_user+0x170/0x170 [ 2331.019711] ? fsnotify_perm.part.0+0x22d/0x620 [ 2331.020749] ? security_file_permission+0xb1/0xe0 [ 2331.021817] ? pipe_to_user+0x170/0x170 [ 2331.022704] do_splice_to+0x10e/0x160 [ 2331.023530] splice_direct_to_actor+0x2fe/0x980 [ 2331.024579] ? pipe_to_sendpage+0x380/0x380 [ 2331.025551] ? do_splice_to+0x160/0x160 [ 2331.026498] ? security_file_permission+0xb1/0xe0 [ 2331.027596] do_splice_direct+0x1c4/0x290 [ 2331.028536] ? splice_direct_to_actor+0x980/0x980 [ 2331.029612] ? security_file_permission+0xb1/0xe0 [ 2331.030688] vfs_copy_file_range+0x4f8/0x13c0 [ 2331.031687] ? generic_file_rw_checks+0x240/0x240 [ 2331.032785] __do_sys_copy_file_range+0x193/0x420 [ 2331.033860] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2331.034926] ? ksys_write+0x1a9/0x260 19:56:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2331.034948] ? __ia32_sys_read+0xb0/0xb0 [ 2331.034973] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2331.034994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.035017] do_syscall_64+0x33/0x40 [ 2331.035037] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2331.035051] RIP: 0033:0x7f1d53837b19 [ 2331.035071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:56:56 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5416, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:56:56 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8b2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2331.035081] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2331.035103] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2331.035114] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 19:56:56 executing program 0: accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x2f, 0x4f, 0x3, 0x6, 0x40, @private0, @mcast1, 0x10, 0x7, 0x2, 0x3}}) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:56:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2331.035125] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2331.035168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2331.035180] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:56:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x9a, 0x80, 0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5220, 0x2, @perf_config_ext={0x401, 0x3c}, 0x1, 0x5, 0x0, 0x0, 0x9d, 0x3, 0x2, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x3) 19:56:56 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7b2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:56:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r2, 0x5, 0x80000}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:56:57 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:56:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x7fc000}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:56:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000400)={0x54, 0x12}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:57:11 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:57:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8b8, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:57:11 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:57:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x100, 0x200, 0x7, 0x8f, 0xfa, "f91b2646898e660165f565fa155fc0364b3b45", 0x8000, 0x8001}) 19:57:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7ba, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:57:11 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="a6ac6a00010000c6f3361af686a394f84453b54c6192b134e54a6f071b9d107ac76890aab1ab4bfbed127b5615cb0b6f6b8106e64357735c2f1e865b45454a53f7a474578e9ee44b6c83a7fb3fffbcbc7f0876eefb5e814fac", @ANYRES16=0x0, @ANYBLOB="00c4042f7000fedbdf8a00008010001c7a0400e6ffffff000003000000"], 0x24}}, 0x4000) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:57:11 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 86) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:57:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r0, &(0x7f0000000000)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055fc0)={{0x0, 0x10001, 0xe02, 0xffffffffffffffe8, 0x80000001, 0x4, 0x80, 0x7, 0x8, 0x0, 0x8, 0x3, 0x7fff, 0x1, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c140)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000056fc0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000571c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r2}, {}, {r3}], 0x7, "523bafa26db5a5"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000501c0)={0x4cc9, [{0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}], 0xc5, "bcb6a75facb2ca"}) r97 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r98, r99, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r97}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r97, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r97, 0x8000000) ioctl$BTRFS_IOC_TREE_SEARCH(r97, 0xd0009411, &(0x7f0000055fc0)={{0x0, 0x10001, 0xe02, 0xffffffffffffffe8, 0x80000001, 0x4, 0x80, 0x7, 0x8, 0x0, 0x8, 0x3, 0x7fff, 0x1, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c140)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r97, 0x81f8943c, &(0x7f0000056fc0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000571c0)={0x5, [{}, {0x0, r28}, {0x0, r15}, {r7, r5}, {}, {}, {r27}, {}, {}, {}, {}, {}, {}, {r93}, {}, {r87, r68}, {0x0, r60}, {r65}, {r86}, {}, {}, {}, {r48}, {}, {r7}, {}, {0x0, r63}, {}, {}, {}, {}, {0x0, r41}, {r19, r76}, {}, {}, {}, {}, {}, {0x0, r29}, {}, {r17}, {}, {}, {}, {r21}, {r72}, {r91}, {}, {}, {}, {r30}, {}, {}, {}, {}, {0x0, r90}, {}, {}, {r89, r44}, {r11}, {0x0, r75}, {}, {r12}, {}, {0x0, r60}, {}, {}, {}, {}, {0x0, r79}, {0x0, r39}, {r56}, {}, {}, {}, {0x0, r94}, {}, {r52, r76}, {}, {r71}, {}, {}, {0x0, r45}, {}, {r37}, {}, {r50}, {}, {}, {r4}, {}, {r64}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r70}, {}, {}, {0x0, r35}, {r43}, {0x0, r8}, {}, {}, {}, {r14}, {r23}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r85}, {}, {r31}, {}, {r62}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {}, {r77, r33}, {}, {r51}, {}, {}, {}, {0x0, r57}, {}, {0x0, r95}, {}, {}, {r55}, {}, {}, {0x0, r68}, {}, {}, {}, {}, {r69}, {0x0, r76}, {r20, r13}, {r53}, {}, {0x0, r24}, {}, {}, {r34}, {}, {r9}, {0x0, r96}, {}, {}, {0x0, r26}, {}, {}, {}, {}, {}, {r80}, {0x0, r6}, {r54}, {}, {}, {}, {}, {0x0, r35}, {}, {}, {r42}, {}, {r18, r49}, {0x0, r88}, {}, {}, {0x0, r41}, {0x0, r47}, {}, {}, {0x0, r78}, {}, {}, {}, {}, {r38}, {r16}, {}, {}, {0x0, r49}, {}, {r67}, {}, {}, {}, {}, {r91}, {}, {}, {r84}, {r10}, {}, {}, {0x0, r40}, {}, {}, {}, {}, {}, {}, {}, {r12, r92}, {}, {0x0, r58}, {r61}, {r74, r82}, {}, {}, {}, {}, {r59}, {}, {}, {}, {0x0, r60}, {r46}, {0x0, r25}, {r36}, {}, {}, {}, {}, {0x0, r83}, {r22, r90}, {r66}, {0x0, r32}, {0x0, r73}, {0x0, r81}, {r100, r101}, {}, {r102}], 0x7, "523bafa26db5a5"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000042940)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r101}], 0x6, "3a1dd93bae77b3"}) [ 2345.391112] FAULT_INJECTION: forcing a failure. [ 2345.391112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2345.392649] CPU: 0 PID: 12228 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2345.393439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2345.393442] Call Trace: [ 2345.393458] dump_stack+0x107/0x167 [ 2345.393468] should_fail.cold+0x5/0xa [ 2345.393482] __alloc_pages_nodemask+0x182/0x600 [ 2345.393495] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2345.393505] ? lock_downgrade+0x6d0/0x6d0 [ 2345.393514] ? lock_acquire+0x197/0x470 [ 2345.393532] alloc_pages_vma+0xbb/0x410 [ 2345.393546] shmem_alloc_page+0x10f/0x1e0 19:57:11 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) [ 2345.393555] ? shmem_init_inode+0x20/0x20 [ 2345.393578] ? percpu_counter_add_batch+0x8b/0x140 [ 2345.393590] ? __vm_enough_memory+0x184/0x360 [ 2345.393603] shmem_getpage_gfp.constprop.0+0x512/0x1920 19:57:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x7}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2345.393622] ? shmem_unuse_inode+0xf60/0xf60 [ 2345.393639] shmem_file_read_iter+0x2a6/0xbb0 [ 2345.393657] ? shmem_get_link+0x440/0x440 [ 2345.393666] ? inode_has_perm+0x171/0x1d0 [ 2345.393676] ? iov_iter_pipe+0xf1/0x2a0 [ 2345.393689] generic_file_splice_read+0x455/0x6d0 [ 2345.393699] ? pipe_to_user+0x170/0x170 [ 2345.393714] ? fsnotify_perm.part.0+0x22d/0x620 [ 2345.393773] ? security_file_permission+0xb1/0xe0 [ 2345.393785] ? pipe_to_user+0x170/0x170 [ 2345.393795] do_splice_to+0x10e/0x160 19:57:11 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 87) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2345.393806] splice_direct_to_actor+0x2fe/0x980 [ 2345.393819] ? pipe_to_sendpage+0x380/0x380 [ 2345.393830] ? do_splice_to+0x160/0x160 [ 2345.393839] ? security_file_permission+0xb1/0xe0 [ 2345.393852] do_splice_direct+0x1c4/0x290 [ 2345.393862] ? splice_direct_to_actor+0x980/0x980 [ 2345.393874] ? security_file_permission+0xb1/0xe0 19:57:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8be, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:57:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7d5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2345.393889] vfs_copy_file_range+0x4f8/0x13c0 [ 2345.393901] ? generic_file_rw_checks+0x240/0x240 [ 2345.393922] __do_sys_copy_file_range+0x193/0x420 [ 2345.393933] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2345.393942] ? ksys_write+0x1a9/0x260 [ 2345.393952] ? __ia32_sys_read+0xb0/0xb0 [ 2345.393964] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2345.393975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2345.393986] do_syscall_64+0x33/0x40 [ 2345.393995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2345.394002] RIP: 0033:0x7f1d53837b19 [ 2345.394012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:57:11 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x541b, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 2345.394017] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2345.394028] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2345.394033] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2345.394039] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2345.394044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2345.394049] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 [ 2345.550256] FAULT_INJECTION: forcing a failure. [ 2345.550256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2345.550279] CPU: 0 PID: 12250 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2345.550290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2345.550296] Call Trace: [ 2345.550322] dump_stack+0x107/0x167 [ 2345.550343] should_fail.cold+0x5/0xa [ 2345.550376] __alloc_pages_nodemask+0x182/0x600 [ 2345.550406] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2345.550425] ? lock_downgrade+0x6d0/0x6d0 19:57:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7df, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2345.550444] ? lock_acquire+0x197/0x470 [ 2345.550483] alloc_pages_vma+0xbb/0x410 [ 2345.550508] shmem_alloc_page+0x10f/0x1e0 [ 2345.550528] ? shmem_init_inode+0x20/0x20 [ 2345.550572] ? percpu_counter_add_batch+0x8b/0x140 [ 2345.550596] ? __vm_enough_memory+0x184/0x360 [ 2345.550622] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2345.550661] ? shmem_unuse_inode+0xf60/0xf60 [ 2345.550694] shmem_file_read_iter+0x2a6/0xbb0 [ 2345.550730] ? shmem_get_link+0x440/0x440 [ 2345.550825] ? inode_has_perm+0x171/0x1d0 [ 2345.550848] ? iov_iter_pipe+0xf1/0x2a0 [ 2345.550873] generic_file_splice_read+0x455/0x6d0 [ 2345.550893] ? pipe_to_user+0x170/0x170 [ 2345.550922] ? fsnotify_perm.part.0+0x22d/0x620 [ 2345.550944] ? security_file_permission+0xb1/0xe0 [ 2345.550965] ? pipe_to_user+0x170/0x170 [ 2345.550985] do_splice_to+0x10e/0x160 [ 2345.551007] splice_direct_to_actor+0x2fe/0x980 [ 2345.551032] ? pipe_to_sendpage+0x380/0x380 [ 2345.551054] ? do_splice_to+0x160/0x160 19:57:11 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 88) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:57:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8c7, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2345.551071] ? security_file_permission+0xb1/0xe0 [ 2345.551099] do_splice_direct+0x1c4/0x290 [ 2345.551118] ? splice_direct_to_actor+0x980/0x980 [ 2345.551143] ? security_file_permission+0xb1/0xe0 [ 2345.551171] vfs_copy_file_range+0x4f8/0x13c0 [ 2345.551196] ? generic_file_rw_checks+0x240/0x240 [ 2345.551239] __do_sys_copy_file_range+0x193/0x420 [ 2345.551260] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2345.551277] ? ksys_write+0x1a9/0x260 [ 2345.551297] ? __ia32_sys_read+0xb0/0xb0 [ 2345.551321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2345.551341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2345.551362] do_syscall_64+0x33/0x40 [ 2345.551380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2345.551393] RIP: 0033:0x7f1d53837b19 [ 2345.551413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:57:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7e5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2345.551423] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2345.551444] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2345.551455] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2345.551466] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2345.551477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2345.551489] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:57:11 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) [ 2345.856176] FAULT_INJECTION: forcing a failure. [ 2345.856176] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2345.857575] CPU: 1 PID: 12274 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2345.858359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2345.859302] Call Trace: [ 2345.859606] dump_stack+0x107/0x167 [ 2345.860020] should_fail.cold+0x5/0xa [ 2345.860454] __alloc_pages_nodemask+0x182/0x600 [ 2345.860988] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2345.861671] ? lock_downgrade+0x6d0/0x6d0 [ 2345.862137] ? lock_acquire+0x197/0x470 [ 2345.862596] alloc_pages_vma+0xbb/0x410 [ 2345.863049] shmem_alloc_page+0x10f/0x1e0 [ 2345.863524] ? shmem_init_inode+0x20/0x20 [ 2345.864065] ? percpu_counter_add_batch+0x8b/0x140 [ 2345.864622] ? __vm_enough_memory+0x184/0x360 [ 2345.865144] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2345.865754] ? shmem_unuse_inode+0xf60/0xf60 [ 2345.866264] shmem_file_read_iter+0x2a6/0xbb0 [ 2345.866786] ? shmem_get_link+0x440/0x440 [ 2345.867255] ? inode_has_perm+0x171/0x1d0 [ 2345.867725] ? iov_iter_pipe+0xf1/0x2a0 [ 2345.868177] generic_file_splice_read+0x455/0x6d0 [ 2345.868725] ? pipe_to_user+0x170/0x170 [ 2345.869181] ? fsnotify_perm.part.0+0x22d/0x620 [ 2345.869707] ? security_file_permission+0xb1/0xe0 [ 2345.870250] ? pipe_to_user+0x170/0x170 [ 2345.870704] do_splice_to+0x10e/0x160 [ 2345.871133] splice_direct_to_actor+0x2fe/0x980 [ 2345.871656] ? pipe_to_sendpage+0x380/0x380 [ 2345.872144] ? do_splice_to+0x160/0x160 [ 2345.872597] ? security_file_permission+0xb1/0xe0 [ 2345.873151] do_splice_direct+0x1c4/0x290 [ 2345.873617] ? splice_direct_to_actor+0x980/0x980 [ 2345.874162] ? security_file_permission+0xb1/0xe0 [ 2345.874708] vfs_copy_file_range+0x4f8/0x13c0 [ 2345.875218] ? generic_file_rw_checks+0x240/0x240 [ 2345.875773] __do_sys_copy_file_range+0x193/0x420 [ 2345.876323] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2345.876868] ? ksys_write+0x1a9/0x260 [ 2345.877302] ? __ia32_sys_read+0xb0/0xb0 [ 2345.877762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2345.878354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2345.878935] do_syscall_64+0x33/0x40 [ 2345.879353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2345.879933] RIP: 0033:0x7f1d53837b19 [ 2345.880352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2345.882433] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2345.883295] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2345.884109] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2345.884923] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2345.885720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2345.886523] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:57:24 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 89) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:57:24 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:57:24 executing program 1: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:57:24 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7eb, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:57:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8cc, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:57:24 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x541d, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:57:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x20010, r1, 0x19764000) 19:57:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x9, 0xe2, 0x0, 0x0, 0x6, "0b818fd410d8e835"}) creat(&(0x7f00000001c0)='./file0\x00', 0xb) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/nfsfs\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000010129bd7000fddbdf2512000000090043005bf62e2d0000000044007f801400430000000000000000000000ffffac1e000108006f00ac14141608007f00", @ANYRES32=r1, @ANYBLOB="08007500ff00000014004a00000000001700000000000000000000001b1a1e50e8854d537dbf996f5086b6d2d5a9309d212de285cf25333b537d7d097d098282c0ac8e7ed3b00b40f50f8e1570100004deb851d9528586d8c55f08e661ec34e09d00083e7fe9eb1dad97e6b93077c1d0d8da7ed51a01116015c677c1"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) poll(&(0x7f0000000180)=[{r0, 0x4000}, {r2}, {r0}, {r2, 0x1000}], 0x4, 0x3f) 19:57:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/251) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pread64(r1, &(0x7f0000000100)=""/71, 0xfffffffffffffe30, 0x7f) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:57:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup2(r0, r0) ioctl$TIOCSIG(r1, 0x40045436, 0x13) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r2, 0x9, 0x0) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2358.946828] FAULT_INJECTION: forcing a failure. [ 2358.946828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2358.948647] CPU: 1 PID: 12303 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2358.949647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2358.950795] Call Trace: [ 2358.951167] dump_stack+0x107/0x167 [ 2358.951670] should_fail.cold+0x5/0xa [ 2358.952198] __alloc_pages_nodemask+0x182/0x600 [ 2358.952840] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2358.953706] ? lock_downgrade+0x6d0/0x6d0 [ 2358.954282] ? lock_acquire+0x197/0x470 [ 2358.954846] alloc_pages_vma+0xbb/0x410 [ 2358.955396] shmem_alloc_page+0x10f/0x1e0 [ 2358.955992] ? shmem_init_inode+0x20/0x20 [ 2358.956580] ? percpu_counter_add_batch+0x8b/0x140 [ 2358.957286] ? __vm_enough_memory+0x184/0x360 [ 2358.957917] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2358.958698] ? shmem_unuse_inode+0xf60/0xf60 [ 2358.959323] shmem_file_read_iter+0x2a6/0xbb0 [ 2358.959950] ? shmem_get_link+0x440/0x440 [ 2358.960539] ? inode_has_perm+0x171/0x1d0 [ 2358.961126] ? iov_iter_pipe+0xf1/0x2a0 [ 2358.961708] generic_file_splice_read+0x455/0x6d0 [ 2358.962383] ? pipe_to_user+0x170/0x170 [ 2358.962949] ? fsnotify_perm.part.0+0x22d/0x620 [ 2358.963608] ? security_file_permission+0xb1/0xe0 [ 2358.964298] ? pipe_to_user+0x170/0x170 [ 2358.964874] do_splice_to+0x10e/0x160 [ 2358.965428] splice_direct_to_actor+0x2fe/0x980 [ 2358.966099] ? pipe_to_sendpage+0x380/0x380 [ 2358.966715] ? do_splice_to+0x160/0x160 [ 2358.967290] ? security_file_permission+0xb1/0xe0 [ 2358.967976] do_splice_direct+0x1c4/0x290 [ 2358.968572] ? splice_direct_to_actor+0x980/0x980 [ 2358.969264] ? security_file_permission+0xb1/0xe0 [ 2358.969957] vfs_copy_file_range+0x4f8/0x13c0 [ 2358.970592] ? generic_file_rw_checks+0x240/0x240 [ 2358.971289] __do_sys_copy_file_range+0x193/0x420 [ 2358.971955] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2358.972621] ? ksys_write+0x1a9/0x260 [ 2358.973161] ? __ia32_sys_read+0xb0/0xb0 [ 2358.973793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2358.974542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2358.975270] do_syscall_64+0x33/0x40 [ 2358.975799] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2358.976523] RIP: 0033:0x7f1d53837b19 [ 2358.977053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2358.979675] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2358.980749] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2358.981778] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2358.982792] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2358.983802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2358.984821] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:57:24 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7f4, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:57:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x7f9, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:57:41 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 90) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:57:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x1ff, 0x6, 0xffffe786, 0x6, 0x4, "d1cfdf414aeca11cb3f4075c639bf9b553b702", 0x1fe, 0x400}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x10001, 0x7, 0x54f, 0x24}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) r4 = inotify_init1(0x0) ioctl$FICLONE(r3, 0x40049409, r4) 19:57:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000501c0)={0x4cc9, [{0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}], 0xc5, "bcb6a75facb2ca"}) r95 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r96, r97, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r95}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r95, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r95, 0x8000000) r98 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r98, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x13, r98, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r95, 0xd0009411, &(0x7f0000055fc0)={{0x0, 0x10001, 0xe02, 0xffffffffffffffe8, 0x80000001, 0x4, 0x80, 0x7, 0x8, 0x0, 0x8, 0x3, 0x7fff, 0x1, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c140)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r95, 0x81f8943c, &(0x7f0000056fc0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000571c0)={0x5, [{}, {0x0, r26}, {0x0, r13}, {r5, r3}, {}, {}, {r25}, {}, {}, {}, {}, {}, {}, {r91}, {}, {r85, r66}, {0x0, r58}, {r63}, {r84}, {}, {}, {}, {r46}, {}, {r5}, {}, {0x0, r61}, {}, {}, {}, {}, {0x0, r39}, {r17, r74}, {}, {}, {}, {}, {}, {0x0, r27}, {}, {r15}, {}, {}, {}, {r19}, {r70}, {r89}, {}, {}, {}, {r28}, {}, {}, {}, {}, {0x0, r88}, {}, {}, {r87, r42}, {r9}, {0x0, r73}, {}, {r10}, {}, {0x0, r58}, {}, {}, {}, {}, {0x0, r77}, {0x0, r37}, {r54}, {}, {}, {}, {0x0, r92}, {}, {r50, r74}, {}, {r69}, {}, {}, {0x0, r43}, {}, {r35}, {}, {r48}, {}, {}, {r2}, {}, {r62}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r68}, {}, {}, {0x0, r33}, {r41}, {0x0, r6}, {}, {}, {}, {r12}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {r29}, {}, {r60}, {}, {}, {}, {}, {r82}, {}, {}, {}, {}, {}, {r75, r31}, {}, {r49}, {}, {}, {}, {0x0, r55}, {}, {0x0, r93}, {}, {}, {r53}, {}, {}, {0x0, r66}, {}, {}, {}, {}, {r67}, {0x0, r74}, {r18, r11}, {r51}, {}, {0x0, r22}, {}, {}, {r32}, {}, {r7}, {0x0, r94}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r78}, {0x0, r4}, {r52}, {}, {}, {}, {}, {0x0, r33}, {}, {}, {r40}, {}, {r16, r47}, {0x0, r86}, {}, {}, {0x0, r39}, {0x0, r45}, {}, {}, {0x0, r76}, {}, {}, {}, {}, {r36}, {r14}, {}, {}, {0x0, r47}, {}, {r65}, {}, {}, {}, {}, {r89}, {}, {}, {r82}, {r8}, {}, {}, {0x0, r38}, {}, {}, {}, {}, {}, {}, {}, {r10, r90}, {}, {0x0, r56}, {r59}, {r72, r80}, {}, {}, {}, {}, {r57}, {}, {}, {}, {0x0, r58}, {r44}, {0x0, r23}, {r34}, {}, {}, {}, {}, {0x0, r81}, {r20, r88}, {r64}, {0x0, r30}, {0x0, r71}, {0x0, r79}, {r99, r100}, {}, {r101}], 0x7, "523bafa26db5a5"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000040)={{r101, 0x13, 0x80000001, 0xffffffff, 0x1f, 0x0, 0x1eb1, 0x5, 0x8001, 0x5, 0x7, 0x2, 0xe83, 0x3, 0xffff}, 0x10, [0x0, 0x0]}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:57:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) openat(r1, &(0x7f0000000000)='./file0\x00', 0x484480, 0x28) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x189003, 0x0) 19:57:41 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x541e, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:57:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8d2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:57:41 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x8, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) [ 2375.304336] FAULT_INJECTION: forcing a failure. [ 2375.304336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2375.307697] CPU: 1 PID: 12338 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2375.309329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2375.311210] Call Trace: [ 2375.311814] dump_stack+0x107/0x167 [ 2375.312633] should_fail.cold+0x5/0xa [ 2375.313492] __alloc_pages_nodemask+0x182/0x600 [ 2375.314556] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2375.315904] ? lock_downgrade+0x6d0/0x6d0 [ 2375.316837] ? lock_acquire+0x197/0x470 [ 2375.317754] alloc_pages_vma+0xbb/0x410 [ 2375.318668] shmem_alloc_page+0x10f/0x1e0 [ 2375.319597] ? shmem_init_inode+0x20/0x20 [ 2375.320557] ? percpu_counter_add_batch+0x8b/0x140 [ 2375.321674] ? __vm_enough_memory+0x184/0x360 [ 2375.322697] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2375.323917] ? shmem_unuse_inode+0xf60/0xf60 [ 2375.324924] shmem_file_read_iter+0x2a6/0xbb0 [ 2375.325959] ? shmem_get_link+0x440/0x440 [ 2375.326890] ? inode_has_perm+0x171/0x1d0 [ 2375.327829] ? iov_iter_pipe+0xf1/0x2a0 [ 2375.328729] generic_file_splice_read+0x455/0x6d0 [ 2375.329815] ? pipe_to_user+0x170/0x170 [ 2375.330731] ? fsnotify_perm.part.0+0x22d/0x620 [ 2375.331779] ? security_file_permission+0xb1/0xe0 [ 2375.332863] ? pipe_to_user+0x170/0x170 [ 2375.333759] do_splice_to+0x10e/0x160 [ 2375.334626] splice_direct_to_actor+0x2fe/0x980 [ 2375.335680] ? pipe_to_sendpage+0x380/0x380 [ 2375.336654] ? do_splice_to+0x160/0x160 [ 2375.337544] ? security_file_permission+0xb1/0xe0 [ 2375.338640] do_splice_direct+0x1c4/0x290 [ 2375.339575] ? splice_direct_to_actor+0x980/0x980 [ 2375.340660] ? security_file_permission+0xb1/0xe0 [ 2375.341747] vfs_copy_file_range+0x4f8/0x13c0 [ 2375.342763] ? generic_file_rw_checks+0x240/0x240 [ 2375.343870] __do_sys_copy_file_range+0x193/0x420 [ 2375.344949] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2375.346020] ? ksys_write+0x1a9/0x260 [ 2375.346875] ? __ia32_sys_read+0xb0/0xb0 [ 2375.347797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2375.348926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2375.350090] do_syscall_64+0x33/0x40 [ 2375.350915] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2375.352030] RIP: 0033:0x7f1d53837b19 [ 2375.352842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2375.356941] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2375.358660] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2375.360257] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2375.361916] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2375.363517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2375.365113] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:57:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x807, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:57:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8da, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:57:41 executing program 1: r0 = semget(0x1, 0x7, 0x4) semop(r0, &(0x7f0000000000)=[{0x7, 0x8}, {0x1, 0x1000}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x40, 0x6, 0x5, 0xc0, 0x8, "1aa3c139f2df0271"}) semtimedop(r0, &(0x7f0000000040)=[{0x1, 0x5}], 0x1, &(0x7f0000000080)) r2 = semget(0x1, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TIOCMGET(r3, 0x5415, &(0x7f00000000c0)) 19:57:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x7f, 0x7, 0xf, 0x400, 0x2, "d59f7d0ab2a25a5e7103b7f701002afab03884"}) 19:57:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x9c, 0x6, 0x3, 0x3e, 0x13, 0x382, 0x40, 0xec, 0x6, 0x0, 0x38, 0x2, 0x9, 0xbe09, 0x4df}, [{0x60000000, 0x6c9, 0xffffffffffffda4f, 0x200, 0x3, 0xff, 0x0, 0x4}, {0x7, 0xfffffffd, 0x1, 0x3, 0xff, 0x3, 0xfffffffffffffff8, 0x9}], "7b9b598530fd2fbb4edafdc54f08d29ee22b6210def3d14c5dd7a7713cb94b95b73b8e604cc6278d051f1d79a8e9e5487108360383c9b047aa6b192f6b58750fbafda11bafa4ce9daa8ee5db04ca3145ae324263cb44bf4d120ec4f1542ca4ded24215bab27c6cba021cd886c218a43a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\ab']) fcntl$dupfd(r0, 0x406, r1) 19:57:41 executing program 1: set_thread_area(&(0x7f0000000100)={0x13, 0x20000000, 0x1000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}) r0 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(r0, &(0x7f0000000200)='net/nfsfs\x00') perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0xda, 0x46, 0x81, 0x6, 0x0, 0xffffffffffff039d, 0xa201, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x8d, 0xd1}, 0x41, 0x1, 0xfd0, 0x4, 0x80, 0x30c, 0x8, 0x0, 0x9, 0x0, 0x4}, r0, 0x10, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) 19:57:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0xfa, 0x1, 0x9}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101003, 0x100) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0x15, 0xe, &(0x7f0000000080)="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"}) open_by_handle_at(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="280000004e0000000500000000000090ac040000000000090000000400000000000000060000000001000001000000b1dc8a85989e6ad5398afab778e49e9761be12bc3d2b0293db7bc10cd96bfc70eb32023b3d1dcf7ec77659b2b9722f8052e2696b869bab572ddca6389a3580cf3078815c00084b62a485cfc81723d544c6d0825766bd5f071c06218c966fcb04a370f5282811838003d4e0700fd3f2c8d0590dce384e22912208bfd81269e401037333c93af166113034b25b3f5d3c660cf61e99cb6cdc75136dd8144a882baea24b84214a"], 0x800) 19:57:41 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 91) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:57:41 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) socketpair(0x1e, 0x4, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) 19:57:41 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x8, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) [ 2375.638198] FAULT_INJECTION: forcing a failure. [ 2375.638198] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2375.640316] CPU: 0 PID: 12379 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2375.641506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2375.642940] Call Trace: [ 2375.643397] dump_stack+0x107/0x167 [ 2375.644020] should_fail.cold+0x5/0xa [ 2375.644676] __alloc_pages_nodemask+0x182/0x600 [ 2375.645482] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2375.646519] ? lock_downgrade+0x6d0/0x6d0 [ 2375.647228] ? lock_acquire+0x197/0x470 [ 2375.647924] alloc_pages_vma+0xbb/0x410 [ 2375.648609] shmem_alloc_page+0x10f/0x1e0 [ 2375.649318] ? shmem_init_inode+0x20/0x20 [ 2375.650053] ? percpu_counter_add_batch+0x8b/0x140 [ 2375.650897] ? __vm_enough_memory+0x184/0x360 [ 2375.651668] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2375.652594] ? shmem_unuse_inode+0xf60/0xf60 [ 2375.653369] shmem_file_read_iter+0x2a6/0xbb0 [ 2375.654163] ? shmem_get_link+0x440/0x440 [ 2375.654884] ? inode_has_perm+0x171/0x1d0 [ 2375.655606] ? iov_iter_pipe+0xf1/0x2a0 [ 2375.656354] generic_file_splice_read+0x455/0x6d0 [ 2375.657185] ? pipe_to_user+0x170/0x170 [ 2375.657887] ? fsnotify_perm.part.0+0x22d/0x620 [ 2375.658697] ? security_file_permission+0xb1/0xe0 [ 2375.659532] ? pipe_to_user+0x170/0x170 [ 2375.660218] do_splice_to+0x10e/0x160 [ 2375.660876] splice_direct_to_actor+0x2fe/0x980 [ 2375.661684] ? pipe_to_sendpage+0x380/0x380 [ 2375.662436] ? do_splice_to+0x160/0x160 [ 2375.663118] ? security_file_permission+0xb1/0xe0 [ 2375.663955] do_splice_direct+0x1c4/0x290 [ 2375.664669] ? splice_direct_to_actor+0x980/0x980 [ 2375.665507] ? security_file_permission+0xb1/0xe0 [ 2375.666353] vfs_copy_file_range+0x4f8/0x13c0 [ 2375.667134] ? generic_file_rw_checks+0x240/0x240 [ 2375.667990] __do_sys_copy_file_range+0x193/0x420 [ 2375.668830] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2375.669659] ? ksys_write+0x1a9/0x260 [ 2375.670331] ? __ia32_sys_read+0xb0/0xb0 [ 2375.671047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2375.671962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2375.672859] do_syscall_64+0x33/0x40 [ 2375.673567] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2375.674479] RIP: 0033:0x7f1d53837b19 [ 2375.675137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2375.678348] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2375.679675] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2375.680916] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2375.682173] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2375.683430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2375.684694] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:57:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x900, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:57:55 executing program 4: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x9, "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"}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) 19:57:55 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 92) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:57:55 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x541e, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:57:55 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$KDADDIO(r1, 0x4b34, 0xffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) 19:57:55 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x8, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:57:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4000) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0xff7f, 0x42b}, {0x3, 0xffff}, {0xff80, 0x101}, {0x8000, 0x4}]}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x10001, 0x80000001, 0x4, 0xfff, 0xe, "4e708c502bbf190d774d2dbafaa26c2a858e53"}) listen(r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x0, 0x2, 0x4000000000b7}) ioctl$VT_RESIZEX(r4, 0x4b68, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000040)=0x9) 19:57:55 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x822, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2389.328142] FAULT_INJECTION: forcing a failure. [ 2389.328142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2389.331243] CPU: 1 PID: 12405 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2389.332814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2389.334660] Call Trace: [ 2389.335235] dump_stack+0x107/0x167 [ 2389.336029] should_fail.cold+0x5/0xa [ 2389.336858] __alloc_pages_nodemask+0x182/0x600 [ 2389.337866] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2389.339177] ? lock_downgrade+0x6d0/0x6d0 [ 2389.340089] ? lock_acquire+0x197/0x470 [ 2389.340966] alloc_pages_vma+0xbb/0x410 [ 2389.341845] shmem_alloc_page+0x10f/0x1e0 [ 2389.342749] ? shmem_init_inode+0x20/0x20 [ 2389.343674] ? percpu_counter_add_batch+0x8b/0x140 [ 2389.344767] ? __vm_enough_memory+0x184/0x360 [ 2389.345752] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2389.346938] ? shmem_unuse_inode+0xf60/0xf60 [ 2389.347902] shmem_file_read_iter+0x2a6/0xbb0 [ 2389.348897] ? shmem_get_link+0x440/0x440 [ 2389.349792] ? inode_has_perm+0x171/0x1d0 [ 2389.350698] ? iov_iter_pipe+0xf1/0x2a0 [ 2389.351565] generic_file_splice_read+0x455/0x6d0 [ 2389.352621] ? pipe_to_user+0x170/0x170 [ 2389.353490] ? fsnotify_perm.part.0+0x22d/0x620 [ 2389.354539] ? security_file_permission+0xb1/0xe0 [ 2389.355584] ? pipe_to_user+0x170/0x170 [ 2389.356443] do_splice_to+0x10e/0x160 [ 2389.357323] splice_direct_to_actor+0x2fe/0x980 [ 2389.358354] ? pipe_to_sendpage+0x380/0x380 [ 2389.359303] ? do_splice_to+0x160/0x160 [ 2389.360164] ? security_file_permission+0xb1/0xe0 [ 2389.361220] do_splice_direct+0x1c4/0x290 [ 2389.362133] ? splice_direct_to_actor+0x980/0x980 [ 2389.363201] ? security_file_permission+0xb1/0xe0 [ 2389.364318] vfs_copy_file_range+0x4f8/0x13c0 [ 2389.365303] ? generic_file_rw_checks+0x240/0x240 19:57:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/efivars', 0x24b40, 0x51) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000100)={0x81, 0x5, 0x7, 0x2000005, 0xd, "32eb4a75ff605de0d87f5ab23a68501af6fe1b"}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000000)="f3a828b982b22e4171121a0e3b8f3daf437f0127ba31c0b14819dcbad0786bf3b7731deac1653584754f8d5f4bfe0a6cc993a5d86d287a72699fa511056510131ba1d2b690875cd3a074c65c59bebfa986b246ccc3473680710c58a2a02ebdbd277051e2e42bbd83b66c2f8f6beaf772beab716b83cb90abebc47f8675342d251fe893f9ced657a99803f3c8f4e1d11a2324827038482ddf0249") [ 2389.366385] __do_sys_copy_file_range+0x193/0x420 [ 2389.367680] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2389.368747] ? ksys_write+0x1a9/0x260 [ 2389.369610] ? __ia32_sys_read+0xb0/0xb0 [ 2389.370548] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2389.371728] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2389.372890] do_syscall_64+0x33/0x40 [ 2389.373727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2389.374889] RIP: 0033:0x7f1d53837b19 19:57:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2389.375728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2389.379964] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2389.381673] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2389.383295] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2389.383307] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2389.383319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2389.383330] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:58:07 executing program 4: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) 19:58:07 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 93) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:58:07 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:58:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x2) 19:58:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x90a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:58:07 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5421, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:58:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='syz', r1) 19:58:07 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x82c, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2401.570972] FAULT_INJECTION: forcing a failure. 19:58:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$VT_RESIZEX(r5, 0x4b68, 0x0) [ 2401.570972] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2401.574082] CPU: 0 PID: 12446 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2401.575546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2401.577283] Call Trace: [ 2401.577836] dump_stack+0x107/0x167 [ 2401.578598] should_fail.cold+0x5/0xa [ 2401.579407] __alloc_pages_nodemask+0x182/0x600 [ 2401.580383] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2401.581637] ? lock_downgrade+0x6d0/0x6d0 [ 2401.582502] ? lock_acquire+0x197/0x470 [ 2401.583357] alloc_pages_vma+0xbb/0x410 [ 2401.584192] shmem_alloc_page+0x10f/0x1e0 [ 2401.585062] ? shmem_init_inode+0x20/0x20 [ 2401.585950] ? percpu_counter_add_batch+0x8b/0x140 [ 2401.586995] ? __vm_enough_memory+0x184/0x360 [ 2401.587936] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2401.589066] ? shmem_unuse_inode+0xf60/0xf60 [ 2401.590002] shmem_file_read_iter+0x2a6/0xbb0 [ 2401.590961] ? shmem_get_link+0x440/0x440 [ 2401.591825] ? inode_has_perm+0x171/0x1d0 [ 2401.592692] ? iov_iter_pipe+0xf1/0x2a0 [ 2401.593531] generic_file_splice_read+0x455/0x6d0 [ 2401.594537] ? pipe_to_user+0x170/0x170 [ 2401.595393] ? fsnotify_perm.part.0+0x22d/0x620 [ 2401.596372] ? security_file_permission+0xb1/0xe0 [ 2401.597386] ? pipe_to_user+0x170/0x170 [ 2401.598223] do_splice_to+0x10e/0x160 [ 2401.599025] splice_direct_to_actor+0x2fe/0x980 [ 2401.600002] ? pipe_to_sendpage+0x380/0x380 [ 2401.600906] ? do_splice_to+0x160/0x160 [ 2401.601734] ? security_file_permission+0xb1/0xe0 [ 2401.602754] do_splice_direct+0x1c4/0x290 [ 2401.603667] ? splice_direct_to_actor+0x980/0x980 [ 2401.604804] ? security_file_permission+0xb1/0xe0 [ 2401.605821] vfs_copy_file_range+0x4f8/0x13c0 [ 2401.606777] ? generic_file_rw_checks+0x240/0x240 [ 2401.607815] __do_sys_copy_file_range+0x193/0x420 [ 2401.608836] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2401.609832] ? ksys_write+0x1a9/0x260 [ 2401.610636] ? __ia32_sys_read+0xb0/0xb0 [ 2401.611496] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2401.612619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2401.613743] do_syscall_64+0x33/0x40 [ 2401.614523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2401.615612] RIP: 0033:0x7f1d53837b19 [ 2401.616396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2401.620288] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2401.621890] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2401.623399] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2401.624899] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2401.626400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2401.627905] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:58:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x910, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:58:07 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10408010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000021) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/6) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0xfffffff8, 0x80000001}) ioctl$TIOCCONS(r1, 0x541d) 19:58:07 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x832, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:58:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x916, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:58:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSIG(r0, 0x40045436, 0x1f) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:58:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000001600)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/238, 0xee}, {&(0x7f00000001c0)=""/110, 0x6e}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000100020001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}, 0x2) sendmsg$nl_netfilter(r1, &(0x7f00000015c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001580)={&(0x7f0000000400)={0x114c, 0xa, 0xb, 0x801, 0x70bd26, 0x25dfdbfe, {0x1, 0x0, 0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}, @nested={0x112e, 0x57, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x60, 0x0, 0x0, @pid=r2}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x5, 0x4e, 0x0, 0x0, @str='\x00'}, @generic="9ae174bd446ccd2ca7a457d12ceab88959ae3fc54641c741538bb76114b5a0edc35d6d39b8ffb28c4cad6d945102538a80aba9b6cd6dc6e64d5606a334c3c4e9d02424ef1724a48df643e51458784d0cd4035139594d91626b990eee14bf11f3d54d9076a87690361dfbd1820c8ebe8e7ad15ccb09fbf354691379f51e31373ff45a818ca6aa42c5036339de2363027ca6a11d6d4fa6c9403c799e91de0723db359009b8bc4a761ac2390a164db3a26d17242f795d062e3272d157489e0b8fe6615f439fbd89fa8989d87686166e0bb78d69f7eadb4e92e9762d559834fd305ae6b8c87dbada7306c3db35e344bff8401d30ba820f7b4adff0de6c2f05f9614bb09bbbc1f1ea6042f85b9e93a0aaad440eb58ffed21694acd0283fc2aa3c59b7421ce7077c3d3bd7853470305c09020a560e857062084d6f9129251030fbddc91a30fbaaf0a97f1de80f303706baae30ec4633a7b846923914ed72c79ced1c7f96c9f8c149de8933d72fdd791e225d80d6a8d14067bd834a6e5fa24f3fc1b977634c511b9783f6a6fecd07b0c899267224ef1afe8f7ed4f50ba759b3868533b28409131780df8619e8a3dd3a3d102a5d770fef560e6956ff0e28fb0729f126b6599efe8b0dc918e718c6d86c54f1c08b26db653f7f706cc0fd4e3f12205c4e8c27a00caabe50893879d7e215d9d1c24d4c4fe876b904d3aea0413b27df1d84a3bcc5d471c98a7619e6c9364ac74369b0f3ab6db01b3d08ba873093d1fb20b59b79b924a50d0ed83af964a624071acc3b78427090ff62df13dbd08dd56827dc846681446b8a382d7627037d79d3eb7617d18aa4da79d95cd6ed625b23cfa645491160047814857239dd6bbe9fb15477752dd68e3f02111fdcbf8f90f12ebe1020dd44e28a401a4acff7dcf3f451924b39220c021f895d6a44fc04713c738c83f69649df3123340bca38f1bbb12bd39107b5d6426c641141f1b2f692f1f94f03ffab078597cd9fa074fbdfab0895e87fa087b56a0886001e81fb92bcf79e8b31b4e6a8670beac2367024372d637622d9f42e440e5c508891c6b11869c01cfdacf7dd5607a5c12f1e96e8aa5889da818a9cc7ec3f3177f8bce9eb3d11d555572acb0f364a2a3916c69292feb7a93f06d7420471a300f3a0f84f674ffcda223774b3f440c02a6a7269a3ef10b4d1956068f9b5210354e7d4181e5593328272353626b28c4b95c5da1b55328cf6fbcd7deb53ffa05fd68ea83243611d2e69db0a0cba9215dd0b7d3ee9a4102fc0edfb31c9662f63b545938e89dcf91dec23ef2f5c65691eb7f3c9087a53532c3b78f622bd6f3dcaf09778b56d20b8abb8589f475228d1ae978c4aed4519219070b01457cfdaa77c48ed5550e90fd39d2eebc94e5fe2edd9d1018c7da71c4f03428491c4fd56a300a6f789beb742177deab3e9aad45dfe415c8f3cd7a179698e52a6d0475a2307cdac160e182e2cbfe3b1827a0138e43bc6774cfb8fe0d4afc4aa65c716e250a67476c99ba6d6c4e1d211d7058d93fee3111b62517dd872264964d5abe584c102ddb7792f3e2109e42b3793ee190324bf8992cdde5eeefee78bdef9c5dce629d2203c67d2ce94a385c55df11c8218640d23466ce466e22ba707413584a84684fc02a6dd6d5c52c4759e042814d7b530e774ce407dc004b1df7696c00e66472def0df931cc25de67b5ae4f0b1e3c6bcfd04142041debee4b8b774a6aad16bd80fe5fed9a9e6ac904a8b2819f6f2477ad1f89068807a020e1ebc792807e148782eff0f95a5ef6c1a320c13fb51114bb949f8332ca2b9589ef33d32f16867ab18a3441aec0a17ec95470fc804cf6d447052a8d6479b6af8c2a0c6aeb476af9a2bf9aa5cefe4d1910db666bbb48f1f8cac9f80d80608cd117fbfb0e3588f9de82c143f16e6ceae243898a900a81d357dc62170a8278a94dd409b33cb4121579b5cb11feba09c69a47d93bf9613450f0a7f6601c4b767d996026a13d6e9cf8f3c41dd5b024390cddb54a7ba3e2646df95b3bc5bd2d104fd60041d42a6f9a897dd16b51ebc8b51596de5a4412f809f5458cf9ba3ba2be0be87b11f4acaa1c8809906a702f17d0ad4f2e4f68bae12674b9d05095dc6b6ad8870fda34689f7cd0398ba710d4cf9916917c19fed8eb81afda79f1a0a6e3c263d94915d05c3935d7cf84f85e901aaa7f99b5429aeb2bce5dd8a38238cbcef9aee697ebe4e0ad94a3c5aeef81737abaca9fbe60c83b55b595cadb8f996ba65a7cf43560dfa9ef4c0dee4e6ec99f05091f43132e79e5c11e32ce3c80039f80aa448b5bad18dc36dbc82d7ae32fc3219191d87a94ed65be2e134d5df091884bb599a66ff69ee65f284a33404d6bd7e6e61d545d42f9b314742a8cf2a82ff11275b7e54fdc94e0798d49f1ba5d187d375d4f71dfe56c0cbd5eb38da191f4e4b9a7130395c6e5230cbee5dc6f5e1af7a3758c9f8b01d6519dc69fa16d9d8eb69cfc37907bd657a9f065cebb3ecd533bb9d8c72a4c84783891b4548669721cdf144c591b425c8f9598fae7f60869fe99d8b0e84241ffc420675771439e543aa09538956ee441b9e556d8e41b59a2e225656c6477eb409d667f1cb91b73ce7988fb815aea81a9275abbd4c91d4ccb7f92c605513e9856211e5f0161c982edf1fb6a319fa9334601a8fb4799e45970c1b16021280ee0cba998292daf0f33a571943dd7401d0286fed8ac2927b50df796608798cfaa82d661592e502014fd395beb3772b7345058502f3b0e53ac4d36999d5efd57fa6fd96c9e624ce52554d1689bf5e0aa247a9322211ed3d76958b28faeee7f415bddd1bf46575dae8dd2cf7b656d210eedc62d3e45ee96ba64be434db2f0a8daeddbf779390d5d5f29f7038a814c09afc76c20aee7d21a3125f1bb5ee59529e33875876e889e8e3f74f0c2a5a158e398635335ab6e3cf06101ad0e8452714387c3be4cfb9b0ccb91b56bef7e4d903ef473521fa93ce34f5644c384a248211213d703808112dc6aae430eed72635529df9a5368b25a5336d0e5c1e17e0ca6e9ca55ebce322c7759203d67923c8fab0e08c0f9c4ab562dccf35efeb518eb4e0777fe7dcac1548d42f30345a6633cbb038d040a617f51a63c3e6e83c6d860f557b6cb63c93e124e6edd902d50d61947a289b3a787b6a3792b7a60098395892c87b825b867f9e14f3120355aea3bdb648725b1517bb71f6fa190efda3da6614b8b756b30bfe153b91922ad0cee346027a78e29ca6fd7f3c7564f19870f80c1de9c7a8facd92c6c4686a7d3b6e59f188ca92d79fe5baa7a46836aaed30ab94817e583246429874935db92cf9e3cc4204fa9d3039916f6ec01db86d082be2b3826576940f8ca583af137d6bfb7df63b6947b2e553392151a0cc460b7ac0d874a133d6c209a17881ab2c47a6e3afc8213443b58ae96a5b388055b7579df49b7a2fc0f86f300962a2a73e6e8662c773d146da8f1f8a7a4257d28575f40cfc53929420c41265b2c7fde530806c15c74c242919500e91264713a5ae7523600ef02363b70b0697e5120e0d0293aad067a17d3616ca4bbabb740a60a77e72d2df04bc3743331a887b3d5e66f8fb68e283529ded403c0c5c481ef1d620dc670e3a58b925e7fa2fd03360d3a40ac7ca3ebf0ab76a289c0f522cefa4b3f1defff8646948d97ce040a4abea201d7f5103d7e4f70276925d34952a36f75dff0405112eceeb5c92997aefa134f034960047dd30d407741d51ed661a6b22b54225dc87b16c4f9e078b3a4dda21ab3a84c38507952aedf2eaca1bf554586c50b13c6287dbe4ef356ccff17fb9240c0539711e0695e9648e1f082d812a9d30d7aca2babeacfbf5e27807ff57829b701e7d79a6e2d41288e5321a7958e0d86d21523eec7a2db81692c5ceaecb74491e8937b25b9c93d7fad454330aa2d2aa84dadc38839631f6666dad86a22856d0ccee9fe7a2cd4902c06c601383c0907047c23aefe395401961e368acf238e02933d8b3f9df3c1b9bfd335e7324985bada8765ba0d8627807ad7fd5aae795d1caf497d60534aeac222f915bd7f558601dd11a368e4eb7b25b1bcb2df91030933f6288f029d4c3f474d165c5752611ed207175a997a8c8d54cf1e14bc64cbaf8e13f8b1fbf514ae1b2e51a20df1b200881d613713fa0c5b329ac5c5b1d106e9dd8ebba19de3656442df9d9d2acf992df17f419bda67949f9496bc9f4a307aa36ae3c445518ae28b4e8654da56d6b3888e44c4c5488e477bb48c3ccbbf4141ad172839978f9228c424eec5a4850b81916bcd974409f5040381df7bbccb36304058551c34952ab5b1a034d30fccd012c7abeb3526483e4af10eba6f130827936888e55884296f5bae174428b33774e188003cee24dd769ee2c3f0fb43e550b19ba69aabb0a06813013f53db43a2165a309dc3bac0648e813a3585962d476507095be84ca159f60d21a40485bf72a55684f8505836557281f1cad9ab95fe5556982b0c47c4d73c657d38ca71a7d4b1879aa9d95316a1fb7c5b42a8c61fa7173c71a28af4564851795bcb5904eb98fb23a958536eace1eef65153f7a8c634d9caad7df5c9a2a0583aa1df0cd792be219121569638e6a21905f94f4766cd8dfab455a241ec10fe98089a2994bae86c7e978733dd334d5eb810e712184591a49c0614d22b212e56ea5e629ac9c16b3fa449da1466d0e66040148471ff5b548fc2493c7eacd20cc1b66b8b1a9c0d90ba9eb6a1ef5bfb7b72f112362f8171849e232b261ae9d0694a973fdc6171353e74907edb43f4476f39d9cb3267a52eb3aec49cc83c6cacb83b916311673b4b9865836f0e0dd80bfb9f924b0eb8c33a108f9634581835dc98d348333bb19d0f92c748db1072b27101d15d64e6f710c8cc554e0fa34af356b46aebe63e7d3cbe839ffd9e3d4fb42d5d3b33cc9e0d870ce47d9b0457a081e2714a2d2d3d9f6954001995f79db49450621d2de68f70fe2094f68ad01f354e4834dcb7c72027a0ea73bf40fa3c720478000a0af43a35ef5a6bba73687415ef7fd130c31c52c6afb570613dc9f89314c7fc95ea89f2f857680c9cb947b4bdd8ab217042cb630ac6d9b12b424ad88042711a9b093120175668cdd2fc4bceca28f38b0e9bb53724f425f68f1fb497f3b12ed95e4e9ac0bbdd2e0175a4d0d6315f29dc99ee8b6b663bb5fb84c18b47b37192f5f7858371ccd64f54c0f9ecf7f3655c346afa406352e0777184701f3495065aba0f722bf72cace1f5e379e482aa1e63126ae55fa33ad2536ae2b07ead6704b4bb42eb261bc3146905e9a606fa269b558654485571a292477f89d420fda8f9b737e4cb1ff8174bfe53556f2e23a9fb58279f82aa1e5ae2a5f5467e247af98865e92f58120ac9edc0928bfbb19dc6675ac1518466bf9439dbf266de1cc0c7849c61c027146f4a6f76ea492bea46ed5cb66754d08b69fed0e9272d2edb9d4af5bf4e3a753c1bab709466acdf98ec196d5370b3a4a35bb5d13fd54b69837facfe7551431e82c74f6a86c993953387c315e084c3bdb0348a7d486da5be7ee43c0146891dae73fd6ac28f44bdcefd0af3867e54ac63119d0dd96709f2779adb53efe1cf257d316fe4c4641595b096391e656fa4514f4e8c6861ea558561552776f28d9deb3518c6496985022f7e78bb1913bdf04ca6fd8d570facce8958b414d23197f519a0560d34dda3d615bd2c383384928b7f1706d09526dec69c317fa1d61bfd2a850369a12e22aefb4355226e6d4f3dcfd516979046", @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="e68eed64b4d89e6f8f8041c89edb3dbfd3943a5ffc671f64e0b1fd4d10ec92299c05029663bc95e453a7a71c0bf0926e5e7ba7ded84b0f3df948b4de996f2bcfa6145f71497705dae7075d8dc79b8a11756e4dafa98bf389e527ed733cbde823b6cce9117dc34474bb8707a67e4c65a01a5ddd8329f475a639063d456404477af06adab456640abaf3354a478aeb4c3fcef3ec100a69966360f9553786879fcf278b77a17e01fe650ac3bac52b2cac08b476d017c964a6636dc87550a87a2f6601ef5903a9edac4f284634f2c23e8d3ea1fdab0f337d761bc13f80b32abf3a2e670fe4a7a473828d90abc1028973210a7fbafc315aa4"]}]}, 0x114c}, 0x1, 0x0, 0x0, 0x40}, 0x20000044) 19:58:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2, 0x1b0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r1, 0xa72db000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x1, 0x6, 0x4, 0x8, 0x8, "e4b80352fa476385"}) 19:58:20 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 94) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:58:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:58:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x3}, {0x5, 0x81}]}, 0x14, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) 19:58:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x91f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:58:20 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5422, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:58:20 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:58:20 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x838, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:58:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x2, r8, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x180, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x180}}, 0x4000800) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SETVESABLANK(r9, 0x541c, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000006c0)={r10, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00dbdf250a00000010000280040004040000000000000000"], 0x24}}, 0x4000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x1e, 0x13, 0xf3, &(0x7f0000000000)="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"}) 19:58:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x4000) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) [ 2414.712098] FAULT_INJECTION: forcing a failure. [ 2414.712098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2414.715111] CPU: 0 PID: 12504 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2414.716617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2414.718401] Call Trace: [ 2414.718960] dump_stack+0x107/0x167 [ 2414.719761] should_fail.cold+0x5/0xa [ 2414.720565] __alloc_pages_nodemask+0x182/0x600 [ 2414.721655] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2414.723276] ? lock_downgrade+0x6d0/0x6d0 [ 2414.724296] ? lock_acquire+0x197/0x470 [ 2414.725171] alloc_pages_vma+0xbb/0x410 [ 2414.726028] shmem_alloc_page+0x10f/0x1e0 [ 2414.726918] ? shmem_init_inode+0x20/0x20 [ 2414.727889] ? percpu_counter_add_batch+0x8b/0x140 [ 2414.728912] ? __vm_enough_memory+0x184/0x360 [ 2414.729863] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2414.730999] ? shmem_unuse_inode+0xf60/0xf60 [ 2414.732114] shmem_file_read_iter+0x2a6/0xbb0 [ 2414.733203] ? shmem_get_link+0x440/0x440 [ 2414.734087] ? inode_has_perm+0x171/0x1d0 [ 2414.734966] ? iov_iter_pipe+0xf1/0x2a0 [ 2414.735831] generic_file_splice_read+0x455/0x6d0 [ 2414.736849] ? pipe_to_user+0x170/0x170 [ 2414.737721] ? fsnotify_perm.part.0+0x22d/0x620 [ 2414.738701] ? security_file_permission+0xb1/0xe0 [ 2414.739721] ? pipe_to_user+0x170/0x170 [ 2414.740551] do_splice_to+0x10e/0x160 [ 2414.741405] splice_direct_to_actor+0x2fe/0x980 [ 2414.742380] ? pipe_to_sendpage+0x380/0x380 [ 2414.743322] ? do_splice_to+0x160/0x160 [ 2414.744175] ? security_file_permission+0xb1/0xe0 [ 2414.745210] do_splice_direct+0x1c4/0x290 [ 2414.746090] ? splice_direct_to_actor+0x980/0x980 [ 2414.747128] ? security_file_permission+0xb1/0xe0 [ 2414.748410] vfs_copy_file_range+0x4f8/0x13c0 [ 2414.749441] ? generic_file_rw_checks+0x240/0x240 [ 2414.750497] __do_sys_copy_file_range+0x193/0x420 [ 2414.751559] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2414.752542] ? ksys_write+0x1a9/0x260 [ 2414.753336] ? __ia32_sys_read+0xb0/0xb0 [ 2414.754183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2414.755280] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2414.756359] do_syscall_64+0x33/0x40 [ 2414.757126] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2414.758199] RIP: 0033:0x7f1d53837b19 [ 2414.758970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2414.762826] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2414.764422] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2414.766079] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2414.767748] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2414.769279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2414.770804] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:58:20 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:58:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x924, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:58:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:58:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x81, 0xfff, 0x7}) 19:58:20 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5423, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:58:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCCONS(r0, 0x541d) 19:58:20 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 95) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2414.924915] FAULT_INJECTION: forcing a failure. [ 2414.924915] name failslab, interval 1, probability 0, space 0, times 0 [ 2414.926542] CPU: 1 PID: 12540 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2414.927347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2414.928281] Call Trace: [ 2414.928587] dump_stack+0x107/0x167 [ 2414.929006] should_fail.cold+0x5/0xa [ 2414.929436] ? iter_file_splice_write+0x165/0xc90 [ 2414.929988] should_failslab+0x5/0x20 [ 2414.930417] __kmalloc+0x72/0x390 [ 2414.930815] iter_file_splice_write+0x165/0xc90 [ 2414.931342] ? shmem_get_link+0x440/0x440 [ 2414.931816] ? generic_splice_sendpage+0x140/0x140 [ 2414.932363] ? pipe_to_user+0x170/0x170 [ 2414.932817] ? security_file_permission+0xb1/0xe0 [ 2414.933356] ? generic_splice_sendpage+0x140/0x140 [ 2414.933911] direct_splice_actor+0x10f/0x170 [ 2414.934407] splice_direct_to_actor+0x387/0x980 [ 2414.934934] ? pipe_to_sendpage+0x380/0x380 [ 2414.935429] ? do_splice_to+0x160/0x160 [ 2414.935874] ? security_file_permission+0xb1/0xe0 [ 2414.936423] do_splice_direct+0x1c4/0x290 [ 2414.936894] ? splice_direct_to_actor+0x980/0x980 [ 2414.937487] ? security_file_permission+0xb1/0xe0 [ 2414.938041] vfs_copy_file_range+0x4f8/0x13c0 [ 2414.938553] ? generic_file_rw_checks+0x240/0x240 [ 2414.939113] __do_sys_copy_file_range+0x193/0x420 [ 2414.939669] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2414.940205] ? ksys_write+0x1a9/0x260 [ 2414.940633] ? __ia32_sys_read+0xb0/0xb0 [ 2414.941091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2414.941680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2414.942263] do_syscall_64+0x33/0x40 [ 2414.942684] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2414.943264] RIP: 0033:0x7f1d53837b19 [ 2414.943682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2414.945753] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2414.946615] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2414.947421] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2414.948220] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2414.949030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2414.949842] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:58:20 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x401}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$VT_RESIZEX(r4, 0x4b68, 0x0) 19:58:20 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x841, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:58:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x92a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:58:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x47}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x4}], "0fd51d6de20b2d58"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 19:58:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r2, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @loopback, 0x7ff}, 0x1c) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000000)=""/122) 19:58:20 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 96) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2415.120865] FAULT_INJECTION: forcing a failure. [ 2415.120865] name failslab, interval 1, probability 0, space 0, times 0 [ 2415.122311] CPU: 1 PID: 12570 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2415.123099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2415.124053] Call Trace: [ 2415.124361] dump_stack+0x107/0x167 [ 2415.124773] should_fail.cold+0x5/0xa [ 2415.125202] ? create_object.isra.0+0x3a/0xa20 [ 2415.125721] should_failslab+0x5/0x20 [ 2415.126155] kmem_cache_alloc+0x5b/0x310 [ 2415.126625] ? igrab+0xc0/0xc0 [ 2415.127011] create_object.isra.0+0x3a/0xa20 [ 2415.127517] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2415.128095] __kmalloc+0x16e/0x390 [ 2415.128503] iter_file_splice_write+0x165/0xc90 [ 2415.129026] ? shmem_get_link+0x440/0x440 [ 2415.129504] ? generic_splice_sendpage+0x140/0x140 [ 2415.130055] ? pipe_to_user+0x170/0x170 [ 2415.130532] ? security_file_permission+0xb1/0xe0 [ 2415.131087] ? generic_splice_sendpage+0x140/0x140 [ 2415.131647] direct_splice_actor+0x10f/0x170 [ 2415.132146] splice_direct_to_actor+0x387/0x980 [ 2415.132678] ? pipe_to_sendpage+0x380/0x380 [ 2415.133164] ? do_splice_to+0x160/0x160 [ 2415.133613] ? security_file_permission+0xb1/0xe0 [ 2415.134160] do_splice_direct+0x1c4/0x290 [ 2415.134627] ? splice_direct_to_actor+0x980/0x980 [ 2415.135180] ? security_file_permission+0xb1/0xe0 [ 2415.135757] vfs_copy_file_range+0x4f8/0x13c0 [ 2415.136267] ? generic_file_rw_checks+0x240/0x240 [ 2415.136825] __do_sys_copy_file_range+0x193/0x420 [ 2415.137375] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2415.137916] ? ksys_write+0x1a9/0x260 [ 2415.138347] ? __ia32_sys_read+0xb0/0xb0 [ 2415.138806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2415.139411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.139992] do_syscall_64+0x33/0x40 [ 2415.140414] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2415.140993] RIP: 0033:0x7f1d53837b19 [ 2415.141418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2415.143506] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2415.144365] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2415.145172] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2415.145980] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2415.146782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2415.147591] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:58:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x932, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:58:20 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 19:58:20 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0xc, 0x34, 0x0, 0x1, [@typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:58:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:58:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:58:20 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x846, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:58:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x5) 19:58:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/49) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x20040080}, 0x814) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000540)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) r3 = socket$inet(0x2, 0x1, 0xffff) sendmsg$inet6(r1, &(0x7f00000007c0)={&(0x7f0000000580)={0xa, 0x4e20, 0x6, @mcast1, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000005c0)="32c6395e477cbd7001ef0b6f09aa4e283176e5ac05be9cae229207b068179d86b24fc37ac9050d99aef0680c44ed8f6b7febf964d4c5a48282bf2ae76b5af2f8e30d768f6df6cc52bbb64000a2db35972ad4767b299c", 0x56}, {&(0x7f0000000640)="9f4b6380ff8371805920a54e50cd99b2a7592ae2bea5215ccab2c97d0b49f76c55c1c3e320af680a249e5825d9a1609324c0a58e8523f115bebc15cb18ae82e20e6a6ecb68b31992fef4bc814f845096b06712c2a4ac56281ecd2deb599c0e166853bb99aee51aba4e", 0x69}, {&(0x7f00000006c0)="1029357c3d8e205b80e17c84da72c8adba7ce75b34767b497a5a00c60b06546112bee767af918165893f522997dcf3a15a0716e91c7c540e6810bb272da178b21c0e005936", 0x45}], 0x3, &(0x7f0000000780)}, 0x4000810) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000500)={0x50000010}) write$bt_hci(r2, &(0x7f0000000480)={0x1, @le_set_ext_adv_enable={{0x2039, 0x47}, {0xb5, 0x4, "50edf45e58baf2850465af8bf8b54094307f91a9ade0f5573876a70010bed2e656f05a968a7acd2f4604bfc9d94e2236fb71c0a19b83d0c1f1ad62f8efacd6f59cc4e265c1"}}}, 0x4b) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x402002, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x5, 0x37}, {0x9, 0x1}, {0x1ff, 0xee}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x40, 0x80000000}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000140)) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:58:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x6f6a, 0xb, "0c3376d22d28356a89862a1f0e2c3142dcb679"}) 19:58:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 19:58:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x943, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:58:32 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0xc, 0x34, 0x0, 0x1, [@typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:58:32 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 97) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:58:32 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x84c, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:58:32 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5424, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 2426.516804] FAULT_INJECTION: forcing a failure. [ 2426.516804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2426.519790] CPU: 0 PID: 12615 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2426.521439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2426.523395] Call Trace: [ 2426.524031] dump_stack+0x107/0x167 [ 2426.525008] should_fail.cold+0x5/0xa [ 2426.525911] __alloc_pages_nodemask+0x182/0x600 [ 2426.527009] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2426.528446] ? lock_downgrade+0x6d0/0x6d0 [ 2426.529427] ? lock_acquire+0x197/0x470 [ 2426.530382] alloc_pages_vma+0xbb/0x410 [ 2426.531333] shmem_alloc_page+0x10f/0x1e0 [ 2426.532325] ? shmem_init_inode+0x20/0x20 [ 2426.533331] ? percpu_counter_add_batch+0x8b/0x140 [ 2426.534488] ? __vm_enough_memory+0x184/0x360 [ 2426.535558] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2426.536836] ? shmem_unuse_inode+0xf60/0xf60 [ 2426.537877] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2426.539078] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2426.540315] shmem_write_begin+0xf7/0x1d0 [ 2426.541314] generic_perform_write+0x20a/0x4f0 [ 2426.542404] ? __mnt_drop_write_file+0x9/0x70 [ 2426.543457] ? page_cache_prev_miss+0x310/0x310 [ 2426.544577] ? evict_inodes+0x470/0x470 [ 2426.545512] ? generic_write_checks+0x2ad/0x390 [ 2426.546616] __generic_file_write_iter+0x39d/0x5d0 [ 2426.547791] generic_file_write_iter+0xdb/0x230 [ 2426.548887] do_iter_readv_writev+0x476/0x750 [ 2426.549951] ? new_sync_write+0x660/0x660 [ 2426.550995] ? selinux_file_permission+0x92/0x520 [ 2426.552154] ? security_file_permission+0xb1/0xe0 [ 2426.553314] do_iter_write+0x191/0x700 [ 2426.554233] ? trace_hardirqs_on+0x5b/0x180 [ 2426.555262] vfs_iter_write+0x70/0xa0 [ 2426.556187] iter_file_splice_write+0x726/0xc90 [ 2426.557310] ? generic_splice_sendpage+0x140/0x140 [ 2426.558492] ? security_file_permission+0xb1/0xe0 [ 2426.559637] ? generic_splice_sendpage+0x140/0x140 [ 2426.560784] direct_splice_actor+0x10f/0x170 [ 2426.561817] splice_direct_to_actor+0x387/0x980 [ 2426.562912] ? pipe_to_sendpage+0x380/0x380 [ 2426.563948] ? do_splice_to+0x160/0x160 [ 2426.564885] ? security_file_permission+0xb1/0xe0 [ 2426.566023] do_splice_direct+0x1c4/0x290 [ 2426.566993] ? splice_direct_to_actor+0x980/0x980 [ 2426.568154] ? security_file_permission+0xb1/0xe0 [ 2426.569308] vfs_copy_file_range+0x4f8/0x13c0 [ 2426.570371] ? generic_file_rw_checks+0x240/0x240 [ 2426.571525] __do_sys_copy_file_range+0x193/0x420 [ 2426.572683] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2426.573790] ? ksys_write+0x1a9/0x260 [ 2426.574684] ? __ia32_sys_read+0xb0/0xb0 [ 2426.575657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2426.576887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2426.578106] do_syscall_64+0x33/0x40 [ 2426.578981] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2426.580198] RIP: 0033:0x7f1d53837b19 [ 2426.581074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2426.585412] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2426.587190] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2426.588887] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2426.590567] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2426.592246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2426.593934] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:58:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)) r1 = timerfd_create(0x1, 0x800) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x9b, &(0x7f0000000000)="f6153b6882a1bdbfbca8285ba70ad99b13f46a16fc2d4af12a095c924d74157537b5987536d9a75879a999501c192e24666c0eaf74a0d3991a395cd9365c947ca01dd686a1cc3519bc095b205b25a148ea2397a14468ab00aa2140d57b74a5bcfa69c6088b876eaa85ed5eec2a39fd3e590d980baf3c18df3d59095eda98370fd6c5d9243e08b0498ebcd2cfa1c821bfe4a1caa6217f7429ca0156", 0xc5, 0x0, &(0x7f00000000c0)="cb36976be58a8b47648987af5402443d734d07efa88fabb7fd2d75249c3f1ea6149902b468b08c6c5b16628df7c67ea3b00ddcdbcfd0161450aeaa63a7c697a27b4c65d58480ce5db60af02235e9aad144149a1c5480872f58e8555ea92898407032890e86ba03da72365be013f33807b9036213e90df00be8f8919ebcc213737abac51dad625bcfa5d9c8a29b1e1a393b3924d0ddd422d051472d4bfcb45e0a59be798ac11fa443f9081b4aab2448594ab8a6266b40b51c5d1f3d01e06a7699b4c4561e89"}) timerfd_gettime(r1, &(0x7f00000002c0)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240)="a2108b246a2cb7065f62a3346c8ffed2", 0x10) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) timerfd_gettime(r3, &(0x7f0000000340)) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000300)) dup2(r1, r2) 19:58:48 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x854, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:58:48 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0xc, 0x34, 0x0, 0x1, [@typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:58:48 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 98) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:58:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fsmount(r0, 0x0, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1300, 0x0) splice(r2, &(0x7f0000000080)=0x9, r3, &(0x7f0000000100)=0xa16b, 0x7dae, 0x9) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x10001, 0x5, 0x1, 0xb8a, 0x0, "a04fe4ce4905c398abc4909f7c257bcf26cafe", 0x5, 0x100}) 19:58:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000002480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002440)={&(0x7f0000000100)={0x233c, 0x17, 0x300, 0x70bd27, 0x25dfdbfe, {0x2}, [@nested={0x1172, 0x90, 0x0, 0x1, [@generic="f40343352e4d9cf360699b1aff7d43b58ef627e9e217dd70305da802d5ca50fa9b94d5282b71d597ab353a047960d884827e72e0432a28a4eb7508e7c6805b9e8d54c40e899b843dbde4aad25a0e94bc767c6d6a6b0f0cc5d365b8594088a9bf40174188c7f7f18f22a17c1f19d7eebd25dcb22e897b5bdc562b02bd77b2c1e451e0f32175b4049ab11104365a048f4f571cd6e8c70ad0579e0db13a11cd786c742930c16f025f1bc721d8c6", @typed={0x8, 0x1d, 0x0, 0x0, @uid=r1}, @generic="48fb25d297f4ccb3f60965b37691f4915a3d0c7240d21d200c50e1356c0a3cfb68c9731dad771a02d5eca7c958c7669230623b7b42d49f36ae7a13599a97680f9353bf11a5291c7c4375be1e9a30d02c807b5a9f3625b375ece175edefe01cceeec422aca684c33f95468356cd6a7cc9969dd0ca41b9b49a9c684ccebf8d15713b036049974efc6edf6bb8b4870d1f17e1eed7d2dbe9f5f6998d23c71eeb805a273467cb3de40ee955cb", @generic="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", @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x6a, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @nested={0x174, 0x52, 0x0, 0x1, [@generic="def27d985a61ac91460338d564e9b0c84f132dd0de879f0f1b686c729771c9530135a8f7e2016b28ee65ab2ac6ff7ef043042fb869af5f269a7f9ce9a6a47c89a4d685d592979c616a2d917b330f87deaf7929f642cfa6e16ffa555c9d7f2bfbab65d89dc8315a645e3adbaab7797b5d376c13ce49290eb7c2569bfab62f5a38d82fff3da3c9d1105f8a2212bafbf4c02a765a648dc2a246f7a68ce1dd6d09de7d442cc54dbe6f9d5371b392f37eb16d6110a08de5f9c86d74bbf114961b9db97af456118b3f61eadee14068660f41458c5f8d37f9e2b701", @generic="7f9bf15cf9f05f624e4adaa4cc9744749cbc8a46fc4d30b081caf338d6326cd8ee1e4e26bc616d82920773eba4480dc12a5bfdd1c68b78bc24fa37b9295b642051cc9698c031ee26b19532c3a222478d8c825357041c9d46f5691e3eed3e86b88a7511a39569895af948b028afd508beab70caa32ae9257a1a6d33adbe7e6b79d7cfe7064ac67b467bdb1e914e9a24b9", @typed={0x8, 0xc, 0x0, 0x0, @str='[(]\x00'}]}, @generic="00e6bb31a097fad6a457a4436c7fa8a00afccb8a0375301768043baeac3ac3464868e587b5357198ed0873bf20fd959192276c5204fbe6894052", @nested={0x1004, 0x5f, 0x0, 0x1, [@generic="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"]}]}, 0x233c}, 0x1, 0x0, 0x0, 0xc029b63250246a5e}, 0x20000000) 19:58:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) read(r2, &(0x7f0000000040)=""/4096, 0x1000) 19:58:48 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5425, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:58:48 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x94d, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2442.908894] FAULT_INJECTION: forcing a failure. [ 2442.908894] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2442.911564] CPU: 0 PID: 12639 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2442.913040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2442.914769] Call Trace: [ 2442.915330] dump_stack+0x107/0x167 [ 2442.916097] should_fail.cold+0x5/0xa [ 2442.916917] __alloc_pages_nodemask+0x182/0x600 [ 2442.917899] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2442.919149] ? lock_downgrade+0x6d0/0x6d0 [ 2442.920017] ? lock_acquire+0x197/0x470 [ 2442.920872] alloc_pages_vma+0xbb/0x410 [ 2442.921747] shmem_alloc_page+0x10f/0x1e0 [ 2442.922614] ? shmem_init_inode+0x20/0x20 [ 2442.923509] ? percpu_counter_add_batch+0x8b/0x140 [ 2442.924566] ? __vm_enough_memory+0x184/0x360 [ 2442.925516] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2442.926644] ? shmem_unuse_inode+0xf60/0xf60 [ 2442.927566] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2442.928702] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2442.928729] shmem_write_begin+0xf7/0x1d0 [ 2442.928753] generic_perform_write+0x20a/0x4f0 [ 2442.928783] ? __mnt_drop_write_file+0x9/0x70 [ 2442.928799] ? page_cache_prev_miss+0x310/0x310 [ 2442.928816] ? evict_inodes+0x470/0x470 [ 2442.928833] ? generic_write_checks+0x2ad/0x390 [ 2442.928858] __generic_file_write_iter+0x39d/0x5d0 [ 2442.928882] generic_file_write_iter+0xdb/0x230 [ 2442.928906] do_iter_readv_writev+0x476/0x750 [ 2442.928928] ? new_sync_write+0x660/0x660 [ 2442.928946] ? selinux_file_permission+0x92/0x520 [ 2442.928967] ? security_file_permission+0xb1/0xe0 [ 2442.928995] do_iter_write+0x191/0x700 [ 2442.929015] ? trace_hardirqs_on+0x5b/0x180 [ 2442.929041] vfs_iter_write+0x70/0xa0 [ 2442.929062] iter_file_splice_write+0x726/0xc90 [ 2442.929095] ? generic_splice_sendpage+0x140/0x140 [ 2442.929130] ? security_file_permission+0xb1/0xe0 [ 2442.929151] ? generic_splice_sendpage+0x140/0x140 [ 2442.929171] direct_splice_actor+0x10f/0x170 19:58:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x401, 0x7, 0x6, 0x5, 0x95, "aa2063b72e7b434b0ae161d2f7e318c683e2ba", 0x8, 0x1}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2442.929192] splice_direct_to_actor+0x387/0x980 [ 2442.929215] ? pipe_to_sendpage+0x380/0x380 [ 2442.929237] ? do_splice_to+0x160/0x160 [ 2442.929252] ? security_file_permission+0xb1/0xe0 [ 2442.929279] do_splice_direct+0x1c4/0x290 [ 2442.929297] ? splice_direct_to_actor+0x980/0x980 [ 2442.929322] ? security_file_permission+0xb1/0xe0 [ 2442.929351] vfs_copy_file_range+0x4f8/0x13c0 [ 2442.929374] ? generic_file_rw_checks+0x240/0x240 [ 2442.929415] __do_sys_copy_file_range+0x193/0x420 [ 2442.929435] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2442.929451] ? ksys_write+0x1a9/0x260 [ 2442.929470] ? __ia32_sys_read+0xb0/0xb0 [ 2442.929492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2442.929511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2442.929531] do_syscall_64+0x33/0x40 [ 2442.929549] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2442.929561] RIP: 0033:0x7f1d53837b19 [ 2442.929579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2442.929619] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2442.929639] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2442.929649] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2442.929660] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2442.929692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2442.929703] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:59:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xde, 0x408, 0x5, 0x4, 0x1d, "f600000700"}) listen(r1, 0x0) r3 = syz_io_uring_setup(0x4ebb, &(0x7f0000001780), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0xffffffffffffffff, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x201e, &(0x7f0000000100)={0x0, 0xeb5f, 0x2, 0x0, 0x1f5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r9}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x2, 0x3, 0xe156, 0x400}) 19:59:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x953, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:59:03 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5427, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:03 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 99) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:59:03 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x865, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:59:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000b80)) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002800)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000500)=""/60, 0x3c}, {&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000600)=""/19, 0x13}, {&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000000740)=""/229, 0xe5}], 0xa, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a00)=""/23, 0x17}, {&(0x7f0000000a40)=""/216, 0xd8}], 0x2, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c0000008000000001000000020000000c15308d5690e7efdb40dbe5388d790313a0e6a8a863d88332d8ba4f8e09bcf7022f62a026d5d1b68ef670dafab32178345caef1267200bdd9b19617145d189f259b92732dfad2874103468f70459a06eeff36a852d327f7c53ebeed0b99f3a220bd9b912c5d2e24c2780bbde1aa930782c1dd649bf5841ea43a81e83648dee1d0d9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c40)=""/152, 0x98}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/24, 0x18}, {&(0x7f0000001d40)=""/141, 0x8d}], 0x4}}, {{&(0x7f0000001e40)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/150, 0x96}], 0x1, &(0x7f0000001fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002700)=[{&(0x7f00000020c0)=""/157, 0x9d}, {&(0x7f0000002180)=""/227, 0xe3}, {&(0x7f0000002280)=""/254, 0xfe}, {&(0x7f0000002380)=""/173, 0xad}, {&(0x7f0000002440)=""/171, 0xab}, {&(0x7f0000002b80)=""/221, 0xdd}, {&(0x7f0000002600)=""/226, 0xe2}], 0x7, &(0x7f0000002780)}}], 0x5, 0x102, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002940)={0x1ac, 0x17, 0x200, 0x70bd2a, 0x25dfdbfe, {0x9}, [@typed={0x14, 0x10, 0x0, 0x0, @ipv6=@local}, @generic="c21065b67a921a5f0659884d3d2046cedf3fb14882eaf46b766b7d55bfea44afce735930122dbe6f9b3fccb9e630248c4f86938d08", @typed={0x8, 0x2b, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x14, 0x79, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid}, @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="7c748a5ffb635e31cc34716f49233f02a598aa", @generic="bb829389122fdc5d195e709f133f1ae2bcf8567aa0ceef70aa0fe3b3a31166a47513397ab765b4ed248e702a56b3ffbe628ff3a6e2f55f756b88dd691f1e0a16b3f2a179a5cbc4938270a5ad8329116ccc41965a17761a5f98e1", @generic="448db76d36384b628f3aa1549177a6c8b1f148b576f1f4bfdf09d4e8aab406fcf927e22244e175313012010d7a272e7c1f78f6b01f904393e278a4f3ab2ebf50e46527c4013481f59729248636c13b239a5f8c336d835fdc7d1e62d42fa917e75c27d0cd8a567d3923fda577453d4d644179882ff6b96e125692598c853988138ce86dc8dbd68935c7d867377ee4f52fd2b0378ef2927fc482f3d151f645896202d8289bfc1b4083fed5222a23f0c0e5950f847c6794c8237b2711", @typed={0x8, 0x1e, 0x0, 0x0, @u32=0x722b}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x240000c0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x10000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000002500)={0x2, 0x3, 0x4}) [ 2457.721202] FAULT_INJECTION: forcing a failure. [ 2457.721202] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2457.724193] CPU: 0 PID: 12682 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2457.725760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2457.727675] Call Trace: [ 2457.728279] dump_stack+0x107/0x167 [ 2457.729119] should_fail.cold+0x5/0xa [ 2457.729999] __alloc_pages_nodemask+0x182/0x600 [ 2457.731074] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2457.732426] ? lock_downgrade+0x6d0/0x6d0 [ 2457.733385] ? lock_acquire+0x197/0x470 [ 2457.733424] alloc_pages_vma+0xbb/0x410 19:59:03 executing program 4: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"/5008], 0x1390}, 0x1, 0x0, 0x0, 0x84}, 0x4000801) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x1c) 19:59:03 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) [ 2457.733451] shmem_alloc_page+0x10f/0x1e0 [ 2457.733471] ? shmem_init_inode+0x20/0x20 [ 2457.733517] ? percpu_counter_add_batch+0x8b/0x140 [ 2457.733542] ? __vm_enough_memory+0x184/0x360 [ 2457.733569] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2457.733610] ? shmem_unuse_inode+0xf60/0xf60 [ 2457.733635] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2457.733652] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2457.733682] shmem_write_begin+0xf7/0x1d0 19:59:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) [ 2457.733707] generic_perform_write+0x20a/0x4f0 [ 2457.733739] ? page_cache_prev_miss+0x310/0x310 19:59:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x959, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2457.733758] ? evict_inodes+0x470/0x470 [ 2457.733778] ? generic_write_checks+0x2ad/0x390 [ 2457.733806] __generic_file_write_iter+0x39d/0x5d0 [ 2457.733833] generic_file_write_iter+0xdb/0x230 [ 2457.733860] do_iter_readv_writev+0x476/0x750 19:59:03 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x86f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2457.733885] ? new_sync_write+0x660/0x660 [ 2457.733904] ? selinux_file_permission+0x92/0x520 [ 2457.733929] ? security_file_permission+0xb1/0xe0 [ 2457.733960] do_iter_write+0x191/0x700 [ 2457.733983] ? trace_hardirqs_on+0x5b/0x180 [ 2457.734012] vfs_iter_write+0x70/0xa0 [ 2457.734036] iter_file_splice_write+0x726/0xc90 [ 2457.734073] ? generic_splice_sendpage+0x140/0x140 [ 2457.734112] ? security_file_permission+0xb1/0xe0 [ 2457.734137] ? generic_splice_sendpage+0x140/0x140 [ 2457.734159] direct_splice_actor+0x10f/0x170 [ 2457.734183] splice_direct_to_actor+0x387/0x980 [ 2457.734266] ? pipe_to_sendpage+0x380/0x380 [ 2457.734292] ? do_splice_to+0x160/0x160 [ 2457.734310] ? security_file_permission+0xb1/0xe0 [ 2457.734339] do_splice_direct+0x1c4/0x290 [ 2457.734360] ? splice_direct_to_actor+0x980/0x980 [ 2457.734387] ? security_file_permission+0xb1/0xe0 [ 2457.734415] vfs_copy_file_range+0x4f8/0x13c0 [ 2457.734442] ? generic_file_rw_checks+0x240/0x240 19:59:03 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 100) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2457.734487] __do_sys_copy_file_range+0x193/0x420 [ 2457.734509] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2457.734528] ? ksys_write+0x1a9/0x260 [ 2457.734549] ? __ia32_sys_read+0xb0/0xb0 [ 2457.734575] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2457.734596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.734619] do_syscall_64+0x33/0x40 [ 2457.734639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2457.734652] RIP: 0033:0x7f1d53837b19 [ 2457.734672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:59:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x962, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) [ 2457.734683] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 19:59:03 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5428, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) [ 2457.734705] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2457.734716] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2457.734728] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2457.734739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.734751] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:59:03 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x875, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) [ 2458.104988] FAULT_INJECTION: forcing a failure. [ 2458.104988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2458.105012] CPU: 0 PID: 12715 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 2458.105022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.105028] Call Trace: [ 2458.105052] dump_stack+0x107/0x167 [ 2458.105073] should_fail.cold+0x5/0xa [ 2458.105099] __alloc_pages_nodemask+0x182/0x600 [ 2458.105124] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2458.105142] ? lock_downgrade+0x6d0/0x6d0 [ 2458.105161] ? lock_acquire+0x197/0x470 [ 2458.105198] alloc_pages_vma+0xbb/0x410 [ 2458.105224] shmem_alloc_page+0x10f/0x1e0 [ 2458.105243] ? shmem_init_inode+0x20/0x20 [ 2458.105296] ? percpu_counter_add_batch+0x8b/0x140 [ 2458.105320] ? __vm_enough_memory+0x184/0x360 [ 2458.105346] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2458.105385] ? shmem_unuse_inode+0xf60/0xf60 [ 2458.105408] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2458.105425] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2458.105454] shmem_write_begin+0xf7/0x1d0 [ 2458.105478] generic_perform_write+0x20a/0x4f0 [ 2458.105509] ? __mnt_drop_write_file+0x9/0x70 [ 2458.105527] ? page_cache_prev_miss+0x310/0x310 [ 2458.105611] ? evict_inodes+0x470/0x470 [ 2458.105632] ? generic_write_checks+0x2ad/0x390 [ 2458.105659] __generic_file_write_iter+0x39d/0x5d0 [ 2458.105685] generic_file_write_iter+0xdb/0x230 [ 2458.105712] do_iter_readv_writev+0x476/0x750 [ 2458.105736] ? new_sync_write+0x660/0x660 [ 2458.105755] ? selinux_file_permission+0x92/0x520 [ 2458.105778] ? security_file_permission+0xb1/0xe0 [ 2458.105808] do_iter_write+0x191/0x700 19:59:04 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) [ 2458.105830] ? trace_hardirqs_on+0x5b/0x180 [ 2458.105858] vfs_iter_write+0x70/0xa0 [ 2458.105880] iter_file_splice_write+0x726/0xc90 [ 2458.105921] ? generic_splice_sendpage+0x140/0x140 [ 2458.105960] ? security_file_permission+0xb1/0xe0 [ 2458.105983] ? generic_splice_sendpage+0x140/0x140 [ 2458.106005] direct_splice_actor+0x10f/0x170 [ 2458.106028] splice_direct_to_actor+0x387/0x980 [ 2458.106053] ? pipe_to_sendpage+0x380/0x380 [ 2458.106076] ? do_splice_to+0x160/0x160 [ 2458.106093] ? security_file_permission+0xb1/0xe0 [ 2458.106122] do_splice_direct+0x1c4/0x290 [ 2458.106141] ? splice_direct_to_actor+0x980/0x980 [ 2458.106167] ? security_file_permission+0xb1/0xe0 [ 2458.106194] vfs_copy_file_range+0x4f8/0x13c0 [ 2458.106220] ? generic_file_rw_checks+0x240/0x240 [ 2458.106263] __do_sys_copy_file_range+0x193/0x420 [ 2458.106285] ? vfs_copy_file_range+0x13c0/0x13c0 [ 2458.106302] ? ksys_write+0x1a9/0x260 [ 2458.106322] ? __ia32_sys_read+0xb0/0xb0 [ 2458.106347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2458.106366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2458.106388] do_syscall_64+0x33/0x40 [ 2458.106407] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.106420] RIP: 0033:0x7f1d53837b19 [ 2458.106438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.106448] RSP: 002b:00007f1d50dad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2458.106469] RAX: ffffffffffffffda RBX: 00007f1d5394af60 RCX: 00007f1d53837b19 [ 2458.106480] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2458.106491] RBP: 00007f1d50dad1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2458.106501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2458.106512] R13: 00007ffe25ee602f R14: 00007f1d50dad300 R15: 0000000000022000 19:59:18 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:59:18 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x87b, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:59:18 executing program 1: ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:59:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0x8, r2, &(0x7f0000000100)=0x4, 0x1, 0x4) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x8, 0x5, 0x5}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) dup(r3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:59:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x967, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:59:19 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5429, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:19 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000002, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:59:19 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x220001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0x0) r1 = syz_io_uring_setup(0x4ebb, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x80000d6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0xffffffffffffffff, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000700), 0x6}, 0x40005, 0x800000080, 0x10001, 0x6, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r6, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r8, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r10}}, 0x81) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4004, @fd_index=0x3, 0x4, 0x0, 0x0, 0xa, 0x0, {0x2, r10}}, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000003, 0x10, r0, 0xaa480000) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r11, 0x4b68, 0x0) 19:59:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r2 = syz_io_uring_setup(0x7e80, &(0x7f0000000000)={0x0, 0x73ba, 0x8, 0x0, 0x1d9}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000140)={0x2, 0x3, 0x2}) 19:59:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:59:19 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5421, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x96d, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:59:19 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x884, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:59:19 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:59:19 executing program 1: stat(&(0x7f0000000580)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = fcntl$getown(0xffffffffffffffff, 0x9) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x1, 0xee01, 0xee00, r0, r1, 0x127, 0x6}, 0x0, 0x0, 0x7f, 0x8, 0x3, 0x1, 0x2, 0x5, 0x8001, 0x1000, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4b68, 0x0) 19:59:19 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000003, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:59:19 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5437, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x975, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:59:34 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x889, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:59:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89900) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x5, 0xffffffff, 0x1ff, 0x20000, 0x40, "9ea2ef4941641659743a62afd7f28d3b018e91", 0x8, 0x3}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x3, 0x180c, 0x8dd, 0xfffffff7, 0x20, "e73032f8e7d58aec8976a2557c5c855bc9873d", 0x1fd, 0x8}) 19:59:34 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5441, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:34 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000004, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:59:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x9c, 0x6, 0x3, 0x3e, 0x13, 0x382, 0x40, 0xec, 0x6, 0x0, 0x38, 0x2, 0x9, 0xbe09, 0x4df}, [{0x60000000, 0x6c9, 0xffffffffffffda4f, 0x200, 0x3, 0xff, 0x0, 0x4}, {0x7, 0xfffffffd, 0x1, 0x3, 0xff, 0x3, 0xfffffffffffffff8, 0x9}], "7b9b598530fd2fbb4edafdc54f08d29ee22b6210def3d14c5dd7a7713cb94b95b73b8e604cc6278d051f1d79a8e9e5487108360383c9b047aa6b192f6b58750fbafda11bafa4ce9daa8ee5db04ca3145ae324263cb44bf4d120ec4f1542ca4ded24215bab27c6cba021cd886c218a43a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\ab']) fcntl$dupfd(r0, 0x406, r1) 19:59:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x986, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:59:34 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:59:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000c40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000180)={0xa58, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x48, 0x9, 0x4, 0x3, 0x16, 0x636e5c78a4ce0c4c, 0x0, 0x0, 0x1b, 0x6c, 0x30, 0x16, 0x1c, 0x60, 0x24, 0x1b, 0x30]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x60, 0x30, 0x5, 0x12, 0x16, 0x78fce0fc49fdb314, 0xc, 0x16, 0x12, 0x6, 0x36, 0x5, 0x5, 0x6c, 0x24, 0x24, 0x24, 0x4, 0xc, 0xa0540f49cf30b00, 0x1, 0x2]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x5, 0x0, 0x5, 0xffff, 0x0, 0xfee]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe329, 0x20, 0x1ff, 0xce, 0x5, 0x0, 0x1ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x8, 0x6, 0x7f, 0x3, 0x401, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x36, 0x8, 0x80, 0x2, 0x8d, 0x2, 0x8000, 0xe89]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0xfffd, 0x9, 0xff, 0x800, 0xfffa, 0x81]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x48, 0x12]}]}]}, @NL80211_ATTR_TX_RATES={0x32c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x1, 0x0, 0x5, 0x5, 0x7, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x8, 0x400, 0xff, 0x2, 0x7f, 0x101]}}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x24, 0x4, 0x16, 0x5, 0x24, 0x4, 0x2, 0x5, 0x16, 0x6c, 0x6c, 0x1, 0x36, 0x18, 0x6, 0x16, 0xc, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x1ff, 0xffe0, 0xc9, 0x5, 0x800, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1678, 0xd82, 0x5, 0x2, 0x1, 0xff90, 0x942, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xef6, 0x9, 0xfffe, 0x1, 0x6, 0x101, 0x1f, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x312, 0x2, 0x2, 0xcda4, 0x6, 0x7, 0x2, 0xb937]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1}, {0x6, 0x6}, {0x4, 0x8}, {0x3, 0x5}, {}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x9}, {0x7, 0x6}, {0x0, 0x1}, {0x7}, {0x2, 0x3}, {0x1}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x2}, {0x7, 0xa}, {0x6, 0x7}, {0x4, 0x4}, {0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0x4}, {0x5, 0x2}, {0x3, 0x1}, {0x7, 0x2}, {0x4, 0x5}, {0x5, 0xa}, {0x2, 0x7}, {0x2, 0xa}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x1}, {0x3, 0x7}, {0x1}, {0x1, 0xa}, {0x3, 0xa}, {0x3, 0x9}, {0x7, 0xa}, {0x5, 0x3}, {0x0, 0x4}, {0x6, 0x2}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x7}, {0x4}, {}, {0x1, 0x2}, {0x6, 0x9}, {0x3, 0x2}, {0x0, 0x9}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8000, 0x2, 0x5, 0x6, 0xd3, 0x7, 0x6]}}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0xa}, {0x5, 0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x7, 0x9}, {0x3, 0x9}, {0x5, 0x9}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x4}, {}, {0x0, 0x6}, {0x3, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x8}, {0x3, 0x1}, {0x5, 0x5}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x1}, {0x6, 0x9}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0x6}, {0x5, 0x7}, {0x4, 0x8}, {0x2}, {0x4, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x5}, {0x1, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x6, 0x4}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x5, 0x5, 0xd6d4, 0x6, 0x6, 0x9, 0xfff]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x2}, {0x3, 0x6}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0x7}, {0x2, 0x7}, {0x1}, {}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x7647, 0x40, 0x1, 0x5, 0x9, 0x2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x6, 0x7, 0x4000, 0x2, 0x7ff, 0x1]}}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0x7}, {0x0, 0x6}, {0x6, 0x8}, {0x6, 0xa}, {0x6, 0x5}, {0x2}, {0x7, 0x1}, {0x2, 0xa}, {0x5, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x4}, {0x2}, {0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x3}, {0x4}, {0x4, 0x3}, {0x4, 0x2}, {0x7, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x5}, {0x5, 0x8}, {0x6, 0x3}, {0x2, 0x1}, {0x3, 0x9}, {0x5}, {0x1, 0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x6, 0x6}, {0x0, 0x4}, {}, {0x4, 0x8}, {}, {0x5, 0x4}, {0x6, 0x7}, {0x5, 0x5}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x6}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x4}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x5}, {0x4}, {}, {0x2, 0x1}, {0x6, 0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0x6, 0x8000, 0x101, 0x40, 0x7f, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x1, 0x60, 0x16, 0x60, 0x3, 0x5, 0x16, 0x3, 0x36, 0x5, 0x2, 0x12, 0x0, 0x24]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x8}, {0x4}, {0x1, 0x5}, {0x4, 0x6}, {0x7, 0x5}, {0x4}, {0x7, 0xa}, {0x2, 0x5}, {0x3, 0x6}, {0x0, 0x8}, {0x1}, {0x3, 0xa}, {0x7, 0x5}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x5, 0x4}, {0x3, 0x4}, {0x5, 0x2}, {0x6, 0x7}, {0x2}, {0x2, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x6c, 0x1, 0xb, 0x6, 0x7a03f6bae3f06c11, 0x1, 0x30, 0x6c]}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3c, 0x18, 0x18, 0x1b, 0xb, 0x36, 0x1b, 0x1, 0xb, 0xd, 0xc, 0x36, 0x16, 0x5, 0x6, 0x60, 0x4, 0x9, 0x4, 0x5, 0x18, 0xc, 0x38, 0xa7857f6334505df6, 0x32, 0x2, 0x24, 0x2, 0x4]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0xc, 0x2, 0x3, 0x3, 0xb, 0x30, 0x5, 0x36, 0x60, 0x6c, 0x7984583e02180e24, 0x6, 0x30, 0x48, 0x12, 0x36, 0x9, 0x30, 0x1b, 0x36, 0x6c, 0x2]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x36, 0x6c, 0x3, 0x16, 0x5, 0x6c, 0x16, 0x1, 0x0, 0x4, 0x48, 0x36, 0x3, 0x6, 0x24, 0x24, 0x30, 0x12, 0xd, 0x6, 0x6c, 0x4, 0x12, 0x48, 0xc, 0x48, 0x60, 0x3, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xfff, 0x2, 0x3, 0x3, 0x3, 0x3fe0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0xe, 0x7, 0x9, 0x5, 0x12, 0x18, 0x48, 0x24, 0x30, 0x60, 0x24, 0x16]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x36]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x24, 0x1b, 0x60, 0x1, 0x9, 0x3, 0x2, 0xc, 0x0, 0x1, 0x1, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x400, 0x400, 0x2, 0xcbd, 0x7, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4000, 0xff, 0x4, 0xfc, 0xff, 0x33, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x6a, 0xc, 0x6c, 0xc, 0x24, 0xb, 0xc, 0xb, 0x1, 0xc, 0x4, 0x12, 0xb, 0x18, 0x4, 0x48, 0x4, 0x60, 0x36, 0x12, 0x9, 0x9, 0x36, 0x24, 0x0, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x36, 0x30, 0xb, 0x6, 0x36, 0x48, 0x24, 0x48, 0xb, 0x5, 0x5, 0x24]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x1b, 0x6c, 0x6]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x7b, 0x5, 0x2, 0x36, 0x3, 0x30, 0x24, 0x2, 0x1, 0x0, 0x18, 0x60, 0x4, 0x18, 0x2]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x1, 0x16, 0x3, 0x16]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x3, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x5}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x6}, {0x2, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0x4}, {0x7, 0x4}, {0x7}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x9}, {}, {0x4}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x2, 0x4}, {0x0, 0x8}, {0x2, 0x5}, {0x1, 0x9}, {0x5}, {0x2, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x4}, {0x6, 0xa}, {0x5, 0xa}, {0x6, 0x9}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x2, 0x6, 0x5, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0x5, 0x3a36, 0xfff, 0xfff, 0x6, 0xf4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x30, 0x4, 0x40, 0x4, 0x4, 0x18, 0x60, 0x60, 0x48, 0x1b, 0x24, 0x9, 0x36, 0x6c]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x12, 0x60, 0x6c, 0x35, 0xc, 0xe, 0xb, 0x48, 0x16, 0x6c, 0x6c, 0x16, 0x3, 0x48, 0x6c, 0x6, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf39b, 0x9b2, 0x2, 0xff, 0x8, 0x2c23, 0x0, 0x84f]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x0]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x30, 0x6, 0x64, 0x60, 0x6, 0x48, 0x48, 0x2, 0x4, 0x3, 0x1b, 0x36, 0x18, 0x48, 0x12, 0x1, 0x16, 0x4, 0x2, 0x6c, 0x9, 0x4, 0x60]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0x4}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x8}, {0x1, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x6, 0x8}, {0x6, 0x2}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x6}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x9}, {0x5, 0xa}, {0x6, 0x7}, {0x2, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x6}, {0x0, 0x6}, {0x7, 0x3}, {0x7}, {0x4, 0x3}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x56, 0x8000, 0xc26, 0x9b, 0x0, 0x702, 0xd5]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x4, 0x48, 0x9]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x16, 0x60, 0x9, 0x12, 0x1e, 0x5, 0xb, 0x3, 0x3, 0xb, 0x30, 0x1b, 0x6, 0xb, 0x24, 0xc, 0xc, 0x1, 0x6, 0x48, 0x19, 0xf, 0x18, 0x30, 0x6, 0x5, 0x24, 0x1b, 0xc, 0x1]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x3}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x9}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x1}, {0x5, 0xa}, {0x4, 0x9}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x264, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x1b, 0x60, 0x30, 0xc, 0x4, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x6c, 0x1, 0x48, 0x30, 0x3, 0x60, 0x1b, 0x1, 0x2, 0x24, 0xb, 0x18, 0x6c, 0xc0, 0x1, 0x4, 0x4, 0xb, 0x18, 0x2, 0x9, 0x16]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x6c, 0x16, 0x48, 0x6c, 0xb, 0x30, 0x30, 0x5, 0x6, 0x18, 0x6, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x400, 0x8, 0x7, 0xd0, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x60, 0x0, 0x15, 0x9, 0x2, 0x36, 0x9, 0x60, 0x24, 0x30, 0x4, 0x16, 0x60, 0x4, 0x3, 0x16, 0x48, 0x3, 0x60, 0x48, 0x0, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe29, 0x8001, 0x3, 0x7, 0x800, 0x48, 0xb2, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x0, 0x12, 0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x35, 0x24, 0x30, 0xc, 0xc, 0x60, 0x24, 0x60, 0x1b, 0x9, 0x5, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0xa}, {0x6, 0x4}, {0x7, 0x8}, {0x1}, {0x1, 0x4}, {0x2, 0x4}, {0x1}, {0x5, 0x6}, {0x6, 0x3}, {0x4, 0xa}, {0x7, 0x9}, {0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x8}, {0x7, 0xa}, {0x5}, {0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x4, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x1, 0x4}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x3, 0x2}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x2, 0x1b, 0x60, 0x12, 0x18, 0x9, 0x30, 0x12, 0x2, 0x4, 0x4, 0x18, 0x3, 0x48, 0x48]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x9}, {0x1, 0x2}, {0x1}, {0x7, 0xa}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0x9}, {0x3, 0x1}, {0x5, 0x9}, {0x4, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x9}, {0x5}, {0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0xa}, {0x5, 0xa}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0xff81, 0x9, 0x8, 0x61, 0x80, 0x3]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{}, {0x6, 0x9}, {0x4, 0x3}, {0x3, 0x3}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x8}, {0x6, 0x8}, {0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x0, 0x5}, {0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x6}, {0x4, 0x4}, {0x6, 0x8}, {0x3, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x5, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x5, 0xa}, {0x2, 0x6}, {0x2, 0x9}, {0x5, 0x4}, {}, {0x2, 0x3}, {0x7, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x6, 0x8}, {0x7, 0x6}, {0x5, 0x9}, {0x7, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x34c0, 0x8, 0x101, 0x1, 0x8, 0x1f60, 0x20, 0x8a]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffe, 0x9, 0xfffd, 0x400, 0x8000, 0xfffe, 0x7]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0x5}, {0x2, 0x3}, {0x2, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x2}, {0x6, 0x9}, {0x3, 0x6}, {0x4, 0x8}, {0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5, 0x8}, {}, {0x5, 0x4}, {0x0, 0x3}, {0x5}, {0x0, 0x6}, {0x7, 0x9}, {0x3, 0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x7}, {0x2, 0x5}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x2}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x0, 0x1, 0x3ff, 0x4b, 0x2, 0x20, 0x141]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x7, 0x81, 0x9, 0xfffd, 0x1400, 0x1f, 0x101]}}]}]}, @NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0xfbd9, 0x3, 0x6, 0xfff8, 0x28, 0xb394]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x1a, 0x9, 0x18, 0x9, 0x24, 0x2d, 0x12, 0x24]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0xa}, {0x7, 0x2}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x7}, {0x4}, {0x0, 0x6}, {0x5, 0x8}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x2, 0x9}, {0x2}, {0x0, 0x2}, {0x6, 0x8}, {0x3, 0x2}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x4, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x81, 0x1, 0x800, 0xfffd, 0x1, 0xe73e]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x9, 0x4, 0x3, 0x60, 0x30, 0x9, 0x60, 0x5, 0x22]}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x2}, {0x1, 0x6}, {0x0, 0x9}, {}, {0x2}, {0x6, 0x7}, {0x7, 0x5}, {0x4, 0x5}, {}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x4, 0xa}, {0x5}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x7}, {0x6, 0x5}, {0x7, 0x2}, {0x7, 0x7}, {0x3, 0x2}, {0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x4}, {0x4, 0x1}, {}, {0x5, 0x2}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x7}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0x6}, {0x1}, {0x6, 0x3}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x7}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x3}, {0x6, 0x6}, {0x7, 0x4}, {0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0x7}, {0x3, 0x8}, {0x5, 0x4}, {0x6}, {0x0, 0x9}, {0x5, 0x7}, {0x5, 0xa}, {0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x401, 0x2, 0x0, 0x9, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0xff7f, 0x0, 0x3, 0xfff, 0x0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff9, 0xffff, 0xfa, 0xfffb, 0x4, 0xfe00, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x3, 0x24, 0x30, 0x6c, 0x18, 0x6, 0x1b]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x24, 0x1, 0x1b, 0xc, 0x18, 0x60, 0x35, 0x0, 0x5, 0x9, 0x5, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x3f, 0x6ff, 0xfff, 0xa760, 0x9, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x400, 0xff, 0x1ff, 0x8, 0xfffd, 0x2, 0x6f]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x1}, {0x7, 0x9}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x8}, {0x4, 0x2}, {0x6, 0x1}, {0x2}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0x2}, {0x5, 0x9}, {0x5, 0x8}, {0x7, 0x7}, {0x3}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0xa}, {0x7}, {0x6, 0x2}, {0x7, 0x1}, {0x1}, {0x4, 0x2}, {}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0x4}, {0x3, 0xa}, {0x5, 0x4}, {0x5}, {0x4, 0x3}, {0x7, 0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x3}, {0x6, 0xa}, {0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x2}, {0x0, 0x9}]}]}]}]}, 0xa58}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/160}) 19:59:34 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000014d1d6e497e77a1e7691f36719d3d6717a6b8d3ce5a4c35b12a3e10f6d619167ca1249a00bafe67712838facf3e2f008fa98691a92f9d37404d0c3d3a6da4e937f1abbadb8472979cda9f2c704a6f71ada35184a468e14275204cb18b9653cffe7dead7983d6a2770af0764b25f891c0984cc08b2246f98f2dce4abf5168892b19cb89248b04559aaf55d0f50956e91b0baf7464d7000"/166, @ANYRES32=r0, @ANYBLOB="1f003a7da812226466df6144653000"]) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:59:34 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:59:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x990, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:59:34 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x88f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:59:34 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5450, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:34 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:35 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000005, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:59:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x9c, 0x6, 0x3, 0x3e, 0x13, 0x382, 0x40, 0xec, 0x6, 0x0, 0x38, 0x2, 0x9, 0xbe09, 0x4df}, [{0x60000000, 0x6c9, 0xffffffffffffda4f, 0x200, 0x3, 0xff, 0x0, 0x4}, {0x7, 0xfffffffd, 0x1, 0x3, 0xff, 0x3, 0xfffffffffffffff8, 0x9}], "7b9b598530fd2fbb4edafdc54f08d29ee22b6210def3d14c5dd7a7713cb94b95b73b8e604cc6278d051f1d79a8e9e5487108360383c9b047aa6b192f6b58750fbafda11bafa4ce9daa8ee5db04ca3145ae324263cb44bf4d120ec4f1542ca4ded24215bab27c6cba021cd886c218a43a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\ab']) fcntl$dupfd(r0, 0x406, r1) 19:59:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x897, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:59:50 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5451, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:50 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000006, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 19:59:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x996, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:59:50 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 19:59:50 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x1, 0x4, 0xc, "3e97a9af5a8188c2320b783266ea9ca2c11c2a4c522a93b6a7d3625ddca7c748add87a878ee1c2d894c8e63a5c4108d77c7c9e79a1b2ec61275ca8c9c0a19cc8", "a87eb0a9b113791852771e9dc53440a77e78005baff0d16055bd4b4649eb75f395307c2337e926b3010559a742e06ebcbc7c5d08178c36174a14f01c84f0e1d7", "83e3dd50b88bea05e094caa2bd88bb4b495ee90c345994b878dbf200cfebbdeb", [0x3, 0x80]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x1d, 0x1, 0x0, 0x0, {0x2}, [@nested={0xa, 0x1, 0x0, 0x1, [@generic="9fffc90ffe94"]}]}, 0x20}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000700)={{r3}, r4, 0x14, @unused=[0xfffffffffffffffe, 0xfffffffffffffffc, 0x7, 0x9], @name="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"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000001c0)={{r1}, r4, 0x18, @inherit={0x78, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000060000000000000004010000000000000800000000000000120000000000000008000000000000000600000000000000f093224500000000a458000000000000570000000000000007000000000000000100000000000000050000000000000000000000000000000500000000000000"]}, @name="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"}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000100)) 19:59:50 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:59:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x99c, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 19:59:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x4) 19:59:50 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5452, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 19:59:50 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) 19:59:50 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x240000, 0xd3) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 19:59:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8a8, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 19:59:50 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000007, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 20:00:03 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x545d, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:03 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) 20:00:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x40, 0x1000, 0x1f, 0x4, 0x14, "e2402dad07ebab7d"}) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) 20:00:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x9a5, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:03 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:03 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000008, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 20:00:03 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8b2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 20:00:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x9c, 0x6, 0x3, 0x3e, 0x13, 0x382, 0x40, 0xec, 0x6, 0x0, 0x38, 0x2, 0x9, 0xbe09, 0x4df}, [{0x60000000, 0x6c9, 0xffffffffffffda4f, 0x200, 0x3, 0xff, 0x0, 0x4}, {0x7, 0xfffffffd, 0x1, 0x3, 0xff, 0x3, 0xfffffffffffffff8, 0x9}], "7b9b598530fd2fbb4edafdc54f08d29ee22b6210def3d14c5dd7a7713cb94b95b73b8e604cc6278d051f1d79a8e9e5487108360383c9b047aa6b192f6b58750fbafda11bafa4ce9daa8ee5db04ca3145ae324263cb44bf4d120ec4f1542ca4ded24215bab27c6cba021cd886c218a43a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\ab']) fcntl$dupfd(r0, 0x406, r1) 20:00:03 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:04 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:00:04 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000009, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 20:00:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x9aa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:04 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8b8, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 20:00:04 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5460, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:04 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:17 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:17 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8be, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 20:00:17 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:17 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x30000000a, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 20:00:17 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) 20:00:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x9b0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:17 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 20:00:17 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x40049409, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x9b8, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:17 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x40086602, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:17 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8c7, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 20:00:17 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x9e1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:17 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x30000000b, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 20:00:17 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8cc, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 20:00:17 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x40087602, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:17 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x9eb, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:17 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:17 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) 20:00:17 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8d2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 20:00:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x9f1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:30 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4020940d, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:30 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x30000000c, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 20:00:30 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x8da, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 20:00:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x79e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 20:00:30 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) 20:00:30 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:30 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 20:00:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x9f7, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x884, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:30 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40000, 0x40, 0x8}, 0x18) dup(r1) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000080601030000000000000000030000090900020073797a32000000000900020073797a320000000005000100070000000900020073797ae231000000000900020073797a32000000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000002c0), &(0x7f0000000300)=0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000180)) [ 2545.009964] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2545.020194] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2545.036948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=13112 comm=syz-executor.1 20:00:44 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5418, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 20:00:44 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0xa00, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:44 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:44 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x80045432, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:44 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x900, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 20:00:44 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x5410, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:44 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x30000000d, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 20:00:44 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x20, 0xffff, 0x10001, 0x1, 0xc, "790110bfb94df33efc0bbcf8a27d4270becb07"}) 20:00:45 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x540e, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0xa05, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 20:00:45 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x90a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x222080, 0x0) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x100000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000000000000000000000000000000000000000000000000000000000000000000005158f8d8353e0eb574e026e1d1bf206eefc021f105e63586bd566018f8da95b879a53b14994d72e1ca75e4836f2f4e3f0c5f3c52589480f9e0a7e4631f90318ad62e537da6035a4a6e1614bd8f217c85f673cfff30c83bca11748a6801e899370d89dc7d19a017e1b8782ecc83e36caea4de5c9575566262bae7143708cbe0d9514461a9252d5e46e8e3ea7319fd96bc19b5cd604a589449b778a80adc17e1d351fd1449e253571beeda5e737617"]}) 20:00:45 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9739d", 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8000008000) copy_file_range(r0, &(0x7f00000001c0)=0x1800000000, 0xffffffffffffffff, &(0x7f0000000200)=0x20, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x30000000e, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1], 0x6) 20:00:45 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x80045440, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:45 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b68, 0x0) fcntl$dupfd(r2, 0x406, r0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3a, 0x100}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x23, 0x312, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@nested={0x14, 0xc, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x10, 0x34, 0x0, 0x1, [@typed={0x4, 0x39}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r1, &(0x7f0000000080)) 20:00:45 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x540d, 0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x24000842) timer_gettime(r0, &(0x7f0000000080)) 20:00:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/13]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0xa0b, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/pci_hotplug', 0x82102, 0x102) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) VM DIAGNOSIS: 20:05:53 Registers: info registers vcpu 0 RAX=ffffffff8125ae68 RBX=ffff88800e1d0948 RCX=0000000000000014 RDX=ffff88800e1d09a8 RSI=1ffff11001c3a132 RDI=ffff88800e1d09a8 RBP=0000000000000000 RSP=ffff888048507690 R8 =0000000000000000 R9 =0000000000000000 R10=000000000000000a R11=0000000000000001 R12=ffff88800e1d0000 R13=ffff88800e1d0998 R14=ffffffff84ff9960 R15=0000000000000002 RIP=ffffffff8126e7a1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fad81255700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555e49e12678 CR3=000000004a754000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=746f72702f6374652f00656372000a23 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=3270682820262620294c4c554e203d21 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff810f2900 RBX=ffffffff84c92ba0 RCX=ffffffff8110034d RDX=1ffffffff0992575 RSI=0000000000000000 RDI=00000000000000b0 RBP=ffff888008987da0 RSP=ffff88806cf09fe0 R8 =0000000000000001 R9 =ffff88806cf27b0f R10=ffffed100d9e4f61 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff810f2908 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb7a314a010 CR3=0000000017dbe000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004188e6cac0000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000