ffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006700)={r2, r6, 0x25}, 0x10) write$FUSE_INIT(r2, &(0x7f0000006740)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x26, 0x3ff, 0x468000, 0x2, 0x4, 0x7, 0x401}}, 0x50) write$FUSE_BMAP(r6, &(0x7f0000006800)={0x18, 0xffffffffffffffda, r1, {0x8000}}, 0x18) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, r1, {{0x2, 0x9, 0xb9, 0xede, 0x843, 0x3, 0x6, 0x9}}}, 0x60) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002100)={0xa0, 0xffffffffffffffda, r1, {{0x2, 0x1, 0x6, 0x80008, 0x2, 0x8, {0x6, 0xc6a, 0x1000, 0x0, 0x1f, 0x800, 0xffff1868, 0xffffff67, 0x97, 0x4000, 0x3f, r7, r5, 0x6, 0x1}}, {0x0, 0x4}}}, 0xa0) 14:59:04 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x9, 0x200, 0x4, 0x8], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000100)) 14:59:04 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000001c0)=""/144, 0x90, &(0x7f0000000300)=""/156, 0x3, 0x2}}, 0x48) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000001c0)=""/144, 0x90, &(0x7f0000000300)=""/156, 0x3, 0x2}}, 0x48) (async) 14:59:04 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) pipe2$watch_queue(&(0x7f0000004400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000b40)={0x18}, 0x18) write$FUSE_STATFS(r3, &(0x7f00000021c0)={0x60, 0x0, r1, {{0x200, 0x3, 0xfffffffffffffff9, 0x2, 0x4, 0x2, 0x7c, 0x99e0}}}, 0x60) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000044c0)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) read$FUSE(r2, &(0x7f00000045c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000006600)={0x60, 0x0, r4, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x401, 0x32c}}}, 0x60) openat$cgroup_devices(r2, &(0x7f0000006680)='devices.allow\x00', 0x2, 0x0) pipe2$watch_queue(&(0x7f00000066c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006700)={r2, r6, 0x25}, 0x10) write$FUSE_INIT(r2, &(0x7f0000006740)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x26, 0x3ff, 0x468000, 0x2, 0x4, 0x7, 0x401}}, 0x50) write$FUSE_BMAP(r6, &(0x7f0000006800)={0x18, 0xffffffffffffffda, r1, {0x8000}}, 0x18) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, r1, {{0x2, 0x9, 0xb9, 0xede, 0x843, 0x3, 0x6, 0x9}}}, 0x60) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002100)={0xa0, 0xffffffffffffffda, r1, {{0x2, 0x1, 0x6, 0x80008, 0x2, 0x8, {0x6, 0xc6a, 0x1000, 0x0, 0x1f, 0x800, 0xffff1868, 0xffffff67, 0x97, 0x4000, 0x3f, r7, r5, 0x6, 0x1}}, {0x0, 0x4}}}, 0xa0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) (async) geteuid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) (async) pipe2$watch_queue(&(0x7f0000004400), 0x80) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (async) write$FUSE_WRITE(r3, &(0x7f0000000b40)={0x18}, 0x18) (async) write$FUSE_STATFS(r3, &(0x7f00000021c0)={0x60, 0x0, r1, {{0x200, 0x3, 0xfffffffffffffff9, 0x2, 0x4, 0x2, 0x7c, 0x99e0}}}, 0x60) (async) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000044c0)) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) (async) read$FUSE(r2, &(0x7f00000045c0)={0x2020}, 0x2020) (async) write$FUSE_STATFS(r2, &(0x7f0000006600)={0x60, 0x0, r4, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x401, 0x32c}}}, 0x60) (async) openat$cgroup_devices(r2, &(0x7f0000006680)='devices.allow\x00', 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f00000066c0), 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006700)={r2, r6, 0x25}, 0x10) (async) write$FUSE_INIT(r2, &(0x7f0000006740)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x26, 0x3ff, 0x468000, 0x2, 0x4, 0x7, 0x401}}, 0x50) (async) write$FUSE_BMAP(r6, &(0x7f0000006800)={0x18, 0xffffffffffffffda, r1, {0x8000}}, 0x18) (async) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, r1, {{0x2, 0x9, 0xb9, 0xede, 0x843, 0x3, 0x6, 0x9}}}, 0x60) (async) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) (async) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002100)={0xa0, 0xffffffffffffffda, r1, {{0x2, 0x1, 0x6, 0x80008, 0x2, 0x8, {0x6, 0xc6a, 0x1000, 0x0, 0x1f, 0x800, 0xffff1868, 0xffffff67, 0x97, 0x4000, 0x3f, r7, r5, 0x6, 0x1}}, {0x0, 0x4}}}, 0xa0) (async) 14:59:04 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x300}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:04 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) getrusage(0x1, &(0x7f0000000300)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000003c0)={@host, 0x1}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000000)=0x40, 0x0, 0x4) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) 14:59:04 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x9, 0x200, 0x4, 0x8], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000100)) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x9, 0x200, 0x4, 0x8], 0x5}) (async) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000100)) (async) 14:59:04 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$binder(&(0x7f000080b000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7c08, &(0x7f0000000300)={0x0, 0x62d9, 0x2, 0x1, 0x36b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c9a000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r1, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000000)=0x3, 0x0, 0x4) 14:59:04 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) pipe2$watch_queue(&(0x7f0000004400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000b40)={0x18}, 0x18) write$FUSE_STATFS(r3, &(0x7f00000021c0)={0x60, 0x0, r1, {{0x200, 0x3, 0xfffffffffffffff9, 0x2, 0x4, 0x2, 0x7c, 0x99e0}}}, 0x60) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000044c0)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) read$FUSE(r2, &(0x7f00000045c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000006600)={0x60, 0x0, r4, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x401, 0x32c}}}, 0x60) openat$cgroup_devices(r2, &(0x7f0000006680)='devices.allow\x00', 0x2, 0x0) pipe2$watch_queue(&(0x7f00000066c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006700)={r2, r6, 0x25}, 0x10) write$FUSE_INIT(r2, &(0x7f0000006740)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x26, 0x3ff, 0x468000, 0x2, 0x4, 0x7, 0x401}}, 0x50) write$FUSE_BMAP(r6, &(0x7f0000006800)={0x18, 0xffffffffffffffda, r1, {0x8000}}, 0x18) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, r1, {{0x2, 0x9, 0xb9, 0xede, 0x843, 0x3, 0x6, 0x9}}}, 0x60) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002100)={0xa0, 0xffffffffffffffda, r1, {{0x2, 0x1, 0x6, 0x80008, 0x2, 0x8, {0x6, 0xc6a, 0x1000, 0x0, 0x1f, 0x800, 0xffff1868, 0xffffff67, 0x97, 0x4000, 0x3f, r7, r5, 0x6, 0x1}}, {0x0, 0x4}}}, 0xa0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) (async) geteuid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) (async) pipe2$watch_queue(&(0x7f0000004400), 0x80) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (async) write$FUSE_WRITE(r3, &(0x7f0000000b40)={0x18}, 0x18) (async) write$FUSE_STATFS(r3, &(0x7f00000021c0)={0x60, 0x0, r1, {{0x200, 0x3, 0xfffffffffffffff9, 0x2, 0x4, 0x2, 0x7c, 0x99e0}}}, 0x60) (async) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000044c0)) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) (async) read$FUSE(r2, &(0x7f00000045c0)={0x2020}, 0x2020) (async) write$FUSE_STATFS(r2, &(0x7f0000006600)={0x60, 0x0, r4, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x401, 0x32c}}}, 0x60) (async) openat$cgroup_devices(r2, &(0x7f0000006680)='devices.allow\x00', 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f00000066c0), 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006700)={r2, r6, 0x25}, 0x10) (async) write$FUSE_INIT(r2, &(0x7f0000006740)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x26, 0x3ff, 0x468000, 0x2, 0x4, 0x7, 0x401}}, 0x50) (async) write$FUSE_BMAP(r6, &(0x7f0000006800)={0x18, 0xffffffffffffffda, r1, {0x8000}}, 0x18) (async) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, r1, {{0x2, 0x9, 0xb9, 0xede, 0x843, 0x3, 0x6, 0x9}}}, 0x60) (async) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) (async) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002100)={0xa0, 0xffffffffffffffda, r1, {{0x2, 0x1, 0x6, 0x80008, 0x2, 0x8, {0x6, 0xc6a, 0x1000, 0x0, 0x1f, 0x800, 0xffff1868, 0xffffff67, 0x97, 0x4000, 0x3f, r7, r5, 0x6, 0x1}}, {0x0, 0x4}}}, 0xa0) (async) 14:59:04 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) syz_io_uring_setup(0x2168, &(0x7f0000000040)={0x0, 0xc9c, 0x400, 0x3, 0x30, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 14:59:04 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) getrusage(0x1, &(0x7f0000000300)) (async, rerun: 64) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000003c0)={@host, 0x1}) (async, rerun: 64) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async, rerun: 64) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffe, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000000)=0x40, 0x0, 0x4) (async, rerun: 64) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) 14:59:04 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000001c0)=""/144, 0x90, &(0x7f0000000300)=""/156, 0x3, 0x2}}, 0x48) 14:59:04 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x402}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:04 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) getrusage(0x1, &(0x7f0000000300)) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000003c0)={@host, 0x1}) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async, rerun: 64) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async, rerun: 64) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffe, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000000)=0x40, 0x0, 0x4) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) 14:59:04 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) (async) syz_io_uring_setup(0x2168, &(0x7f0000000040)={0x0, 0xc9c, 0x400, 0x3, 0x30, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 14:59:04 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x9, 0x200, 0x4, 0x8], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000100)) 14:59:04 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000a60000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:04 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$binder(&(0x7f000080b000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7c08, &(0x7f0000000300)={0x0, 0x62d9, 0x2, 0x1, 0x36b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c9a000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r1, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, 0xfffffffffffffffe, 0x0) 14:59:04 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) (async) syz_io_uring_setup(0x2168, &(0x7f0000000040)={0x0, 0xc9c, 0x400, 0x3, 0x30, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 14:59:04 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:04 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x500}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:04 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000a60000/0x1000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:04 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x2000004, 0x10, r1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x1000, 0xae, 0xffffffff, 0x7]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x1) syz_io_uring_setup(0x3e8c, &(0x7f0000000140)={0x0, 0xb7ac, 0x8, 0x0, 0x53}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 14:59:05 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1efa, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:05 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$binder(&(0x7f000080b000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7c08, &(0x7f0000000300)={0x0, 0x62d9, 0x2, 0x1, 0x36b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c9a000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r1, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:05 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:05 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000a60000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:05 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x600}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:05 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x2000004, 0x10, r1, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x1000, 0xae, 0xffffffff, 0x7]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x1) syz_io_uring_setup(0x3e8c, &(0x7f0000000140)={0x0, 0xb7ac, 0x8, 0x0, 0x53}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 14:59:05 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1efa, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x1efa, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async) 14:59:05 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$binder(&(0x7f000080b000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7c08, &(0x7f0000000300)={0x0, 0x62d9, 0x2, 0x1, 0x36b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c9a000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r1, 0x0) 14:59:05 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:05 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="320b4273d18700b122f469a6ae095d6000000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf2503000000050005000000000008bb0000080002005d00000005000500010000000800040007000000050006001f00000005000600eb000000140011000000000000000000000000000000000100000000"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000180)={0x6114, 0x400, 0x5, 0x0, 0xcfcc, 0x6}) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r2}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = add_key(&(0x7f0000000b40)='cifs.spnego\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r3) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r4, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x2f) 14:59:05 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x700}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:05 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x2000004, 0x10, r1, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x1000, 0xae, 0xffffffff, 0x7]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x1) syz_io_uring_setup(0x3e8c, &(0x7f0000000140)={0x0, 0xb7ac, 0x8, 0x0, 0x53}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 14:59:05 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x3108, 0x200, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:05 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$binder(&(0x7f000080b000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7c08, &(0x7f0000000300)={0x0, 0x62d9, 0x2, 0x1, 0x36b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c9a000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, 0xffffffffffffffff, 0x0) 14:59:05 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1efa, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x1efa, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async) 14:59:05 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="320b4273d18700b122f469a6ae095d6000000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf2503000000050005000000000008bb0000080002005d00000005000500010000000800040007000000050006001f00000005000600eb000000140011000000000000000000000000000000000100000000"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000180)={0x6114, 0x400, 0x5, 0x0, 0xcfcc, 0x6}) (async) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r2}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) r3 = add_key(&(0x7f0000000b40)='cifs.spnego\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r3) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r4, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x2f) 14:59:05 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x900}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:05 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000b40)={0x18}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f00000000c0)={0x158, 0xfffffffffffffffe, 0x0, [{0x3, 0x81, 0x1, 0x3, '@'}, {0x3, 0x10100000, 0x2, 0x3, '*.'}, {0x0, 0x1, 0xa, 0x0, '/dev/cuse\x00'}, {0x6, 0xffffffffffffffff, 0x0, 0x254f}, {0x0, 0x800, 0x1, 0x6, '\x00'}, {0x2, 0x10000, 0x1, 0x9, '\x00'}, {0x1, 0x2, 0xa, 0x0, '/dev/cuse\x00'}, {0x1, 0x1, 0xa, 0x1, '/dev/cuse\x00'}, {0x1, 0x3, 0x0, 0xfffffffe}, {0x0, 0x4, 0x2, 0x3, '{['}]}, 0x158) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0xfffffffffffffff5, 0x0, {{0x2, 0x3, 0x20, 0x3, 0x200, 0x8, 0x4, 0x10000}}}, 0x60) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) pipe2$watch_queue(&(0x7f0000004400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, &(0x7f00000044c0)) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) read$FUSE(r4, &(0x7f00000045c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r4, &(0x7f0000006600)={0x60, 0x0, r5, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x401, 0x32c}}}, 0x60) openat$cgroup_devices(r4, &(0x7f0000006680)='devices.allow\x00', 0x2, 0x0) pipe2$watch_queue(&(0x7f00000066c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006700)={r4, r6, 0x25}, 0x10) write$FUSE_BMAP(r6, &(0x7f0000006800)={0x18, 0xffffffffffffffda, r3, {0x8000}}, 0x18) write$FUSE_BMAP(r0, &(0x7f0000000240)={0x18, 0x0, r3, {0x80000000}}, 0x18) 14:59:05 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x3108, 0x200, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:05 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000b40)={0x18}, 0x18) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f00000000c0)={0x158, 0xfffffffffffffffe, 0x0, [{0x3, 0x81, 0x1, 0x3, '@'}, {0x3, 0x10100000, 0x2, 0x3, '*.'}, {0x0, 0x1, 0xa, 0x0, '/dev/cuse\x00'}, {0x6, 0xffffffffffffffff, 0x0, 0x254f}, {0x0, 0x800, 0x1, 0x6, '\x00'}, {0x2, 0x10000, 0x1, 0x9, '\x00'}, {0x1, 0x2, 0xa, 0x0, '/dev/cuse\x00'}, {0x1, 0x1, 0xa, 0x1, '/dev/cuse\x00'}, {0x1, 0x3, 0x0, 0xfffffffe}, {0x0, 0x4, 0x2, 0x3, '{['}]}, 0x158) (async, rerun: 32) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0xfffffffffffffff5, 0x0, {{0x2, 0x3, 0x20, 0x3, 0x200, 0x8, 0x4, 0x10000}}}, 0x60) (rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) (async) pipe2$watch_queue(&(0x7f0000004400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, &(0x7f00000044c0)) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) read$FUSE(r4, &(0x7f00000045c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r4, &(0x7f0000006600)={0x60, 0x0, r5, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x401, 0x32c}}}, 0x60) openat$cgroup_devices(r4, &(0x7f0000006680)='devices.allow\x00', 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f00000066c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006700)={r4, r6, 0x25}, 0x10) write$FUSE_BMAP(r6, &(0x7f0000006800)={0x18, 0xffffffffffffffda, r3, {0x8000}}, 0x18) write$FUSE_BMAP(r0, &(0x7f0000000240)={0x18, 0x0, r3, {0x80000000}}, 0x18) 14:59:05 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="320b4273d18700b122f469a6ae095d6000000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf2503000000050005000000000008bb0000080002005d00000005000500010000000800040007000000050006001f00000005000600eb000000140011000000000000000000000000000000000100000000"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async, rerun: 64) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000180)={0x6114, 0x400, 0x5, 0x0, 0xcfcc, 0x6}) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r2}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = add_key(&(0x7f0000000b40)='cifs.spnego\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r3) (async) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r4, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x2f) 14:59:05 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$binder(&(0x7f000080b000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7c08, &(0x7f0000000300)={0x0, 0x62d9, 0x2, 0x1, 0x36b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c9a000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, 0xffffffffffffffff, 0x0) 14:59:05 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x402}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:05 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x3108, 0x200, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:05 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xa5a}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:05 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000b40)={0x18}, 0x18) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f00000000c0)={0x158, 0xfffffffffffffffe, 0x0, [{0x3, 0x81, 0x1, 0x3, '@'}, {0x3, 0x10100000, 0x2, 0x3, '*.'}, {0x0, 0x1, 0xa, 0x0, '/dev/cuse\x00'}, {0x6, 0xffffffffffffffff, 0x0, 0x254f}, {0x0, 0x800, 0x1, 0x6, '\x00'}, {0x2, 0x10000, 0x1, 0x9, '\x00'}, {0x1, 0x2, 0xa, 0x0, '/dev/cuse\x00'}, {0x1, 0x1, 0xa, 0x1, '/dev/cuse\x00'}, {0x1, 0x3, 0x0, 0xfffffffe}, {0x0, 0x4, 0x2, 0x3, '{['}]}, 0x158) (async) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0xfffffffffffffff5, 0x0, {{0x2, 0x3, 0x20, 0x3, 0x200, 0x8, 0x4, 0x10000}}}, 0x60) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) pipe2$watch_queue(&(0x7f0000004400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, &(0x7f00000044c0)) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) (async) read$FUSE(r4, &(0x7f00000045c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r4, &(0x7f0000006600)={0x60, 0x0, r5, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x401, 0x32c}}}, 0x60) (async, rerun: 32) openat$cgroup_devices(r4, &(0x7f0000006680)='devices.allow\x00', 0x2, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f00000066c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006700)={r4, r6, 0x25}, 0x10) write$FUSE_BMAP(r6, &(0x7f0000006800)={0x18, 0xffffffffffffffda, r3, {0x8000}}, 0x18) (async, rerun: 32) write$FUSE_BMAP(r0, &(0x7f0000000240)={0x18, 0x0, r3, {0x80000000}}, 0x18) (rerun: 32) 14:59:05 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$binder(&(0x7f000080b000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7c08, &(0x7f0000000300)={0x0, 0x62d9, 0x2, 0x1, 0x36b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c9a000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, 0xffffffffffffffff, 0x0) 14:59:05 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x37f, &(0x7f0000000000)={0x0, 0x742b, 0x80, 0x3, 0x262, 0x0, r0}, &(0x7f0000f2f000/0x4000)=nil, &(0x7f0000fd9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r2 = io_uring_setup(0x6378, &(0x7f0000000300)={0x0, 0x3f9f, 0x20, 0x1, 0x178, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f00009a7000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r2, 0x10000000) 14:59:05 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xaf3}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:05 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4b37, &(0x7f0000000000)={0x0, 0xffffffff, 0x800, 0x4, 0xffffffff}, &(0x7f0000cf1000/0xe000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:05 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f00000042c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), 0x0, {0x22}, &(0x7f0000000100)=""/72, 0x48, &(0x7f0000000180)=""/113, &(0x7f0000004280)=[0x0, 0xffffffffffffffff, 0x0, r1, 0x0], 0x5}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0xd, &(0x7f0000000080)='u,&#^*\x19\\([\\:\x00'}, 0x30) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2000001, 0x10, r0, 0x0) 14:59:06 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x402}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:06 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$binder(&(0x7f000080b000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7c08, &(0x7f0000000300)={0x0, 0x62d9, 0x2, 0x1, 0x36b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c9a000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r1, 0x0) 14:59:06 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async) r1 = syz_io_uring_setup(0x37f, &(0x7f0000000000)={0x0, 0x742b, 0x80, 0x3, 0x262, 0x0, r0}, &(0x7f0000f2f000/0x4000)=nil, &(0x7f0000fd9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r2 = io_uring_setup(0x6378, &(0x7f0000000300)={0x0, 0x3f9f, 0x20, 0x1, 0x178, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f00009a7000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r2, 0x10000000) 14:59:06 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4b37, &(0x7f0000000000)={0x0, 0xffffffff, 0x800, 0x4, 0xffffffff}, &(0x7f0000cf1000/0xe000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x4b37, &(0x7f0000000000)={0x0, 0xffffffff, 0x800, 0x4, 0xffffffff}, &(0x7f0000cf1000/0xe000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) 14:59:06 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f00000042c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), 0x0, {0x22}, &(0x7f0000000100)=""/72, 0x48, &(0x7f0000000180)=""/113, &(0x7f0000004280)=[0x0, 0xffffffffffffffff, 0x0, r1, 0x0], 0x5}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0xd, &(0x7f0000000080)='u,&#^*\x19\\([\\:\x00'}, 0x30) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2000001, 0x10, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) (async) syz_clone3(&(0x7f00000042c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), 0x0, {0x22}, &(0x7f0000000100)=""/72, 0x48, &(0x7f0000000180)=""/113, &(0x7f0000004280)=[0x0, 0xffffffffffffffff, 0x0, r1, 0x0], 0x5}, 0x58) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0xd, &(0x7f0000000080)='u,&#^*\x19\\([\\:\x00'}, 0x30) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2000001, 0x10, r0, 0x0) (async) 14:59:06 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xc00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:06 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f00000042c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), 0x0, {0x22}, &(0x7f0000000100)=""/72, 0x48, &(0x7f0000000180)=""/113, &(0x7f0000004280)=[0x0, 0xffffffffffffffff, 0x0, r1, 0x0], 0x5}, 0x58) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0xd, &(0x7f0000000080)='u,&#^*\x19\\([\\:\x00'}, 0x30) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2000001, 0x10, r0, 0x0) 14:59:06 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$binder(&(0x7f000080b000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7c08, &(0x7f0000000300)={0x0, 0x62d9, 0x2, 0x1, 0x36b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c9a000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r1, 0x0) 14:59:06 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async, rerun: 64) r1 = syz_io_uring_setup(0x37f, &(0x7f0000000000)={0x0, 0x742b, 0x80, 0x3, 0x262, 0x0, r0}, &(0x7f0000f2f000/0x4000)=nil, &(0x7f0000fd9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (rerun: 64) r2 = io_uring_setup(0x6378, &(0x7f0000000300)={0x0, 0x3f9f, 0x20, 0x1, 0x178, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f00009a7000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r2, 0x10000000) 14:59:06 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4b37, &(0x7f0000000000)={0x0, 0xffffffff, 0x800, 0x4, 0xffffffff}, &(0x7f0000cf1000/0xe000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x4b37, &(0x7f0000000000)={0x0, 0xffffffff, 0x800, 0x4, 0xffffffff}, &(0x7f0000cf1000/0xe000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) 14:59:06 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x37f, &(0x7f0000000000)={0x0, 0x742b, 0x80, 0x3, 0x262, 0x0, r0}, &(0x7f0000f2f000/0x4000)=nil, &(0x7f0000fd9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r2 = io_uring_setup(0x6378, &(0x7f0000000300)={0x0, 0x3f9f, 0x20, 0x1, 0x178, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f00009a7000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r2, 0x10000000) 14:59:06 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xd00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:06 executing program 0: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x24, 0x4) 14:59:06 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$binder(&(0x7f000080b000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:06 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xe00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:06 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x6, 0x7ff, 0x4, 0xffff}, 'syz1\x00', 0x37}) 14:59:06 executing program 0: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r1, 0x0) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x24, 0x4) 14:59:06 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:06 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x300}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:06 executing program 0: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x24, 0x4) 14:59:07 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) 14:59:07 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x6, 0x7ff, 0x4, 0xffff}, 'syz1\x00', 0x37}) 14:59:07 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xf00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:07 executing program 0: write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xff}, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000380), 0x2, 0x0) syz_io_uring_setup(0x4325, &(0x7f00000003c0)={0x0, 0x7f3d, 0x8, 0x3, 0x3e6, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r2, 0x2, 0x0, 0x7fff, 0x1, 0x1}, 0x101) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000500)='syz0\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0xfffffffffffffd79, &(0x7f0000000240)}}, 0x10) 14:59:07 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:07 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) getrusage(0x1, &(0x7f0000000300)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000003c0)={@host, 0x1}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000000)=0x40, 0x0, 0x4) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) 14:59:07 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:07 executing program 0: write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xff}, 0x2) (async, rerun: 64) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) openat$cgroup_type(r0, &(0x7f0000000380), 0x2, 0x0) (async) syz_io_uring_setup(0x4325, &(0x7f00000003c0)={0x0, 0x7f3d, 0x8, 0x3, 0x3e6, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r2, 0x2, 0x0, 0x7fff, 0x1, 0x1}, 0x101) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000500)='syz0\x00', 0x1ff) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0xfffffffffffffd79, &(0x7f0000000240)}}, 0x10) 14:59:07 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x6, 0x7ff, 0x4, 0xffff}, 'syz1\x00', 0x37}) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x6, 0x7ff, 0x4, 0xffff}, 'syz1\x00', 0x37}) (async) 14:59:07 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1073}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:07 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (rerun: 64) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) (async) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) 14:59:07 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:07 executing program 3: write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xff}, 0x2) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000380), 0x2, 0x0) syz_io_uring_setup(0x4325, &(0x7f00000003c0)={0x0, 0x7f3d, 0x8, 0x3, 0x3e6, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r2, 0x2, 0x0, 0x7fff, 0x1, 0x1}, 0x101) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000500)='syz0\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0xfffffffffffffd79, &(0x7f0000000240)}}, 0x10) 14:59:07 executing program 0: write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xff}, 0x2) (async) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000380), 0x2, 0x0) (async) syz_io_uring_setup(0x4325, &(0x7f00000003c0)={0x0, 0x7f3d, 0x8, 0x3, 0x3e6, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r2, 0x2, 0x0, 0x7fff, 0x1, 0x1}, 0x101) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0) (async) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x0) (async) mkdirat$cgroup(r3, &(0x7f0000000500)='syz0\x00', 0x1ff) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0xfffffffffffffd79, &(0x7f0000000240)}}, 0x10) 14:59:07 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:07 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1173}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:07 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x659c, &(0x7f0000000280)={0x0, 0x0, 0x400}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$KVM_VCPU(&(0x7f0000858000/0x1000)=nil, 0x930, 0x2, 0x110, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) 14:59:07 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) 14:59:07 executing program 2: r0 = syz_io_uring_setup(0x1ef6, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:07 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x2000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:07 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x2000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:07 executing program 2: r0 = syz_io_uring_setup(0x1ef6, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:07 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x659c, &(0x7f0000000280)={0x0, 0x0, 0x400}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) mmap$KVM_VCPU(&(0x7f0000858000/0x1000)=nil, 0x930, 0x2, 0x110, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) 14:59:07 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x11b2}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:07 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x1a8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) 14:59:07 executing program 2: r0 = syz_io_uring_setup(0x1ef6, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:07 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1173}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:07 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) syz_io_uring_setup(0x555c, &(0x7f0000000000)={0x0, 0x6f180d97, 0x8, 0x0, 0x3c9}, &(0x7f0000d29000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 14:59:08 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x1a8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) 14:59:08 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x11b3}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:08 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 32) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (rerun: 32) syz_io_uring_setup(0x659c, &(0x7f0000000280)={0x0, 0x0, 0x400}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) mmap$KVM_VCPU(&(0x7f0000858000/0x1000)=nil, 0x930, 0x2, 0x110, 0xffffffffffffffff, 0x0) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) 14:59:08 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:08 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:08 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x1a8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_complete(0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x1a8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) 14:59:08 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1200}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:08 executing program 0: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:08 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) syz_io_uring_setup(0x555c, &(0x7f0000000000)={0x0, 0x6f180d97, 0x8, 0x0, 0x3c9}, &(0x7f0000d29000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 14:59:08 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000300), &(0x7f0000000300)) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x6, 0x5, 0x7f], 0x3, 0x100800, 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x44ca, &(0x7f00000003c0)={0x0, 0xbc4c, 0x400, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee1000/0x4000)=nil, &(0x7f0000bba000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000140)) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 14:59:08 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:08 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) socketpair(0x1e, 0x80000, 0xd6, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r0, 0x0, &(0x7f00000035c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="ed29c10642143c086ab7c46571149585ca992c75849930d4f8bcc1314df3c830bf126a2ab0306519200e935d1b40d1c854b0b9932447f2dacd6eafd65bd2f9bde605ebc878522b26519b2b903b92517d0f1d167bbeadec1a593918a3ff85f795fb2f9fc0e794d66ac5cd3a8fc6b83d74093a8e7126c8bc72065c63bf6d26e51137b4acd7cfb2f4ec46fa29f3003b5748f00983e5a209099a4aa9a7ed60075a924ab6b073c92e", 0xa6}], 0x2, &(0x7f0000003600)=ANY=[@ANYBLOB="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"], 0x2168}, 0x0, 0x11}, 0x9149) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:08 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0xc0ff20}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:08 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:08 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x80ffff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:08 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:08 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1800}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:08 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) socketpair(0x1e, 0x80000, 0xd6, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r0, 0x0, &(0x7f00000035c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="ed29c10642143c086ab7c46571149585ca992c75849930d4f8bcc1314df3c830bf126a2ab0306519200e935d1b40d1c854b0b9932447f2dacd6eafd65bd2f9bde605ebc878522b26519b2b903b92517d0f1d167bbeadec1a593918a3ff85f795fb2f9fc0e794d66ac5cd3a8fc6b83d74093a8e7126c8bc72065c63bf6d26e51137b4acd7cfb2f4ec46fa29f3003b5748f00983e5a209099a4aa9a7ed60075a924ab6b073c92e", 0xa6}], 0x2, &(0x7f0000003600)=ANY=[@ANYBLOB="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"], 0x2168}, 0x0, 0x11}, 0x9149) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:08 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) (async) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000300), &(0x7f0000000300)) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x6, 0x5, 0x7f], 0x3, 0x100800, 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x44ca, &(0x7f00000003c0)={0x0, 0xbc4c, 0x400, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee1000/0x4000)=nil, &(0x7f0000bba000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000140)) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 14:59:08 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x100000f, 0x24111, r0, 0x0) 14:59:08 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000)) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) socketpair(0x1e, 0x80000, 0xd6, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r0, 0x0, &(0x7f00000035c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="f6d2dc05bbbe92f88d79718e9706a37e8705463ac6a436ba1e12eef32b76547a3b9a206bb0afc63118dfa843b15b12de8d4937de2fff449d07b6167207da10a52558ec0a798c34f26d84d1ff63eced0003125e854aae4a9f4b098d1ffa0042d900c8470b16e6ebc70b13684a5c99dc91a83ada2ea9cac811040653387aadc59f49ba13e09bde10b8a1276c5aeaa743943b4bb8e1a83cdbfe90ac7a522aa16a5aa087f5851d15d98a83a93e1c8e5fbf7be434c5dbe3dca0394438b18e32fd944d9a3e7c4c8f0f7329a66106a8a21c80364a993e4485372ca6ca3e2650f98e22ce5e61e2409f4dc673839b2e52f22282c9ee24a3890c5265ee15514d778c61fe9d60cd51b538513b8f511184e103f18914a1e7b1a9e9c3bd75ee205cfdf51e532da4e5b3fb00d743f26e2424c51755e1994369965a2198fac47fa04dc2f0176efa311c82778454b5e1041b5a08849784aa5cdfd96e0a183cae6b2427d0e2bf06ab66c1bd0651b2e85b5c2664a79d8c81d4461b444c3f6c814c0091eaea74b2807bff9219f75abee0c219b2185185671081c635eed6efbdb3dc86c1fe3d33f759dd1aca7e7c321dd65bc7f66059ea234deecf33b1dd4eca2845aaea3891d6e1a46277f3a1e37465fa22a419e28e70fa4921cbdbb471e5562fcc23af551b89907291adf8f59f3b5bbf66cc4031de46a48d1c84e2998fda4ceb9c0f5fa010822e3f5e454d3f90239b82dcaa43d13326d5bf33cc95f18beabb8157df9e0c8450adfcb229930f3c7cf6625ea918912937532c65d73e88043abf72b2e0cad0ca50014fa449dc9277005069a812f7e1ef93746cfc24e4b1519e0b118b50c6dc6a542a0a7a7c39e4942c9c11c928dcb2bed6853e8db0acfc84ab886c066d4b19901ef107bc6e6687f4fc059d9a2ca9d59b4687900dc4377149f69f5be77830241f2b960c35dab33f686223af216057c0622921f75df0794fc82a7dbc216554155a5a2cfc4db7173ec7c33a9234581235942ab2734d9d52214bad3d76ff28f8525c3b359a92dbdfbc5050f60fd1f38f0a3fc3cd25aedc66da9ddb175a4f1346925c80b0ff2ea47967b6a4b4d66f464e7c2e7042aa23920b28226dc4d5c6145cd20430ba225a7248e2819a5ee527b9e547afa0d0e3474b68d89473a99d2d9dd0688ab759218bc7b97e27510132f54e0e1cc3ecd2ca3dc9ed659fc9663e7ffa5f6f6e509111cdc9769aeaa3d99a639cd4a8e05cdd3eab622de2ce58e91200ea84daa8dd29b3e27364a8fc5bee7bda2a921031e5ff8b4a2604c0a88cf6ca1d3a796bc5b3b581c22a47aef59eab806003d338a9b7b0406915b32149819ed21b458828a32230cd5d1ead80a17a12d81848cafbb3e7db004269fb637e33458693c642fda947aa2e73e0b6497c098eff90b14049d8c34bb760c7c9b5ac0e03d39692f2cc3d361daa40785be20cbbb2732245739f7c7fcd9ece615556b581cdf980597ee0521015a4211734ee9d8867e679e0f7ea42fe7adbee3626b9c8d8c92a08d60e01d13f1361913f410714f0320f696dceaeae2f4576a56d604858743d9d4255ee1f9ff12c30108b087d893a4b43e9c2cb92954310c5dd62bb0185a625317a01a858f88e588f673e716a5fc5bb48bc187bae12fb0a8f8a20fb68e3bccea15ba4fb5c603234a4d527b97cc1f9f69fdc151c69ff3a20b1a6a6dc994d01af36d126e03e8dd3c12bbca2fa484de69268faf8f747fe2860be7e0a1a322c29e6194663625a19a5ee986fa8f0ef5f83d1dfb33c9bde4330d8b8f3aa51ff401b657677c0d660756ed0819113073117cfbe2434ee5354f55f2e7a9ab9c7230d8978d4d8765bcef9a87c1b55e5a01c1aef130151938f130a0584634174397f9bdafe660e7133532578980cb7cef27709bee89a1e98e04ec49e65c13ef81adee32b4a8223afff2a2e5e2f741a1ed417ed0d4aade491d11c90e19c4fc31bb32beb4d1012574595d0c350666a3726443c9be38b4cea604958f9c972a0dbd01706dd0862e9e58c8006666c1c9656449e23bae5eec3ef6ac0bf4833fd726dc28d5845283775993c848bb9914ced7a1c40c63d269c12d3a6cfc19a6b116d8eea85c9a137f892537fd3a02428dc4231e2b3178d1ba4c144d8749340193139be7469997c564eee1a2da86191f8b19ae33a59479dec9cc57a4af97f1725af3a96453450b2b6a1d96abc16f677252c8c99483a689d2062911ca3720eb6d5a9be8451491e506076a6c89490385bb533f743f7bdb5882ad98f184ebb0b177030f9d480839e850d927e2d10651e85e148a53999db269a969e6cc8974f7caafcfdfdd670758a98ba06cb076271242da685bd67f70950b352348af34e30d8ce3d2c55a05edf0d15650e9423f9611a970d2a03e01cd72bf61018cb56b43a2f36abe3c203b78df797f8823119de8a60b074640efd76401693916b213865cf19cfca572a4f351dc66c625816137bffc84ff3fb79acff54e48e5d80b4abcf2de59b2fb867632c4b97d35bbd00663f34d5c674be066078f02a9272f52a043796a89bb1aa5741bfd4a6484c236dec5a898653d9516cdd918e8236451f9cd16204151fd7e3aa96b37a66918439a9f57efe8cb3a46d18677540a9a2213f2ae36372d468336e26a295f7fdd1eea0504feeaf3179e8f1c10cdbb29b6e4332c66c80655a7db35ce35f01bce8b0126a77e323664925261753e3768c8f7aacbb585f96757c29b109c732a077a52bb2b942fc26a25550674ae32393d5e9cbfd002c2d044725b9fcce69fbfafbbb5641933b7b56de698d6520fee1d8ce7a05e2a666c2eafa1b414cc42729b1a22b64a3a4c367cd35926a36348f509472b9a9f8ae43765dd3f891c193d749c30532ecf04665402bd69452b8c50eac024f057cc21fac6b27fe7d08c4e62cc9edd03553cae88f6688c2503ae89e2474828511cde45ff614bb1c24f26546df56625a30ba2fd8721ba402293dfb1a158c4acb078136467d8169123ea6e5dd2c8cd10ebcfff0105a578cc504cd1ace5161fcdc95ea6db31a9b496ec75728238807412c65510f1d9c838277dc80a93ff52b99695a0812a3861a55321c1ecee59ca42d95dcf0f05384ecefced0325ca94cbeef56ffcf0442d191b731bac680611e64a7325bf65e7c2d3d9222cc0702a20802d6209551f4ae5bd3cad288658b63f66e566267340baeadc9340e28c1c70a2b1f3202557e982d981297a604d0978bd4ed30a1871eb78dd23cd8776b06bcc573f321eefb4304bc9d197b5b0c40357ac9c539fae7fefff3388bf587aff26dd2e4a2090463c7beeb20f435a2911a9112ee599148f27326fb737113836b17eddef2deab46e98e3ae48342498a9d58f5637d41d7e19e633f37acbdb63fd8b364eb3ea57cfba02ff51b1492ee3461b677720f1135a325e20ddb9f7525cfc1a0a894001995c363ab71abeffe879796b46454d6a9a500fbdf41bb980519e1e6c18ce74c12e5d638fe2f1b37e75fc43704a1834be1b6ed27ed6f5592c040e8aba3b8426dfa1743a09e2824e8ada2eca07f63e50109bfbfd0a8bc6b917e3a14f7af7ddf466dfae6dc14f0630d433fb138daca8e3dcb96d82d0838db29beb5edf66c1a7baf68c3196d851ee4bad683fd3168d425c16defdd453dd64037f3f8e4e97160335ba194b4ffc9a466b6238610c8fcb794fb95453569076b8153ee2ac80cc74e206282cc4bf2ea226971d0450c142dabc428b6e4dd33dad49f24af18dddc551e040f7f91dd5d6182eba2d3bc34479d9a91b52c75b24f6a1784819c543e6e49559be6929647700a4103f05a9149c226e787eb6374c67d9283e3c79300b0d592ce79e02074ad823225bf3d02175888cb9eb9731e20a1d6280e8a72c3ad649151d2f2e448be4bd795a18af1db2e0740d4c7404aaf267d95b0bcc4a86b257f6d4abf59119a7319c8e34c4286e7b05633c6941a837303d7d6cd687450fd1210e49483174d2d2296a7314a0a6ce1f070b377cd39df579a1e10cb014c214cf95005330add28988e852e39eb311402c6814a74d557a2b203fce90a77522feb31aed18f07e2b42e979ab402350494eb952f98a453230d9224536aaa78f4a54948b112d1f31fb84aa4e020389672b9a00a241d12d0e7ca487978db5c54bb77975a6b26b56f7e34bf30d97a0d563879b73fe658005b43f578db89ba9705b47504defc60af05da6696aa5d54b8760725111e9e09cbf54bbbb8011310c169d17cf341f00becb6dd5ef01ac1d1cb43231c60f80f1a08c3e20319ebe32de57140ff16abefa8e869c75ae0738a28065cabc33003bb33d29e9502b69b6ef90a9fe5489fc99617c0ade12d684a3bd506e89f5cb0c149148518cef9031a49841786dccaadca9c136bba3b34f79a3abd39f0eafac43999cf69180be6e7575f2eeba57caf4e17bd30c8531bc59c98e010d96e85956e9d69889c1e44ae4a06c4a3ecdd5fc349d88c9bb21f028cd1ac91d9898e32ca29477919e7f6b48da727e91df678ce65b285f3967e462b885ffc784280c20bdefda82368de4a6b1379f499e1e68fa927a47f4caea720bec6c1c3cd74dd007784ba10f32a0c742d904b73dd3729579bb63deefbf327cf04cb4d965e7492ad0ba43928898da57e6b09d4a3692ce950c5c0719e67586fa4aa759a605cee6ee8619b905f6d169070542bcea6f01cabe9233ec3e0d84d014c7fb577631da11ec9dce75ff85162b67921ff4d0a2064e4915a630a14539be778fc16b74ff2de25a177b7f8b50a70daab04ea5b742fea79fe98551f43a6e48ec229a6590120427a2d2c6360a54a84c5e3d78fc9746ead784ebf82a87f81fe0bb36b71d0e0aef6edf64940b3b98b0369ecff5a26efbd5ddad5b07ec3794dac24c41e4d1b2d562308278dd02c34d0686bd6e8dd8c5be683bad2f2f610ab7ab270c0fe99aa14a99c16ea2394bcd418f001cb2e51eb152d77ecd1a5c1cd6b23c41d2b2c77352b9415cd9b113bc1620c0dc30e9a4d44c671bbc94d24a3fea54e3efd23b22a39ae1d768221c97dff58f767b4b39a2250241bf3f3235d65798dc01c1b6ad6ead52bfaa893b20f345d61eaa4424d0838b68a73de0aef46d02950033e1893d811190fdbeba808aebb5b192e5c5eca7b16029b7cd74f66a18e62e85df3d9a206e45de59c364624c1c959da76798223c4e041c8fa2ae15f76cb2cf7bc0a31a61040d9044a759518ab6f44f2930616daad6f8c1a65c67dcac1f70b50cdf7bea420f6f461acf64ec4cf74b75d48b6c52fab05a57a5b41c985d7dbe7ea6598bc879b85766c6bbff23f686194793316d1b56f48a06fb7957975ad6d6d486fca0f0457fffd7defb6061e9ccf0946850bbad2b8d49f1f498a8e9b01c4c0b4f98b53ef97f949bd08f27ed42b214c220d2c8868372b1fd38f03062c496efc4b069f88727a5ce61e98f8f36ba818766cb7cc9049fb215eb36223002e694d2358551174461855ce15fe068c16947ff8b3dda9bc849cadb4823bc43b6ec81f5ac3729e01084016775e89ebc0b00131edcffeee632ecdd48a4e01481f6a6385a9322878c502d93c445f6a19f3be47d6c47e59738452a55e4af9692e06f07bb583988d7b7f13f164be7ff98a67f582b9ac16c0a8a3c38f7b6b244b25f4e71aefb75e41d779eed60507c5bdd56ff5e93880316e2a7c931664f9e51ae40eb1c211e015783fca3c2640294f65a58cc3b66126f84cd9b70e5f7eefbadac98cb69d604856f2a9cfd81fd401f54252b21b6c2df8911d65613ccd23543041c2c470cb3bccc6d57ded8702e23f", 0x1000}, {&(0x7f0000001380)="ed29c10642143c086ab7c46571149585ca992c75849930d4f8bcc1314df3c830bf126a2ab0306519200e935d1b40d1c854b0b9932447f2dacd6eafd65bd2f9bde605ebc878522b26519b2b903b92517d0f1d167bbeadec1a593918a3ff85f795fb2f9fc0e794d66ac5cd3a8fc6b83d74093a8e7126c8bc72065c63bf6d26e51137b4acd7cfb2f4ec46fa29f3003b5748f00983e5a209099a4aa9a7ed60075a924ab6b073c92e", 0xa6}], 0x2, &(0x7f0000003600)=ANY=[@ANYBLOB="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"], 0x2168}, 0x0, 0x11}, 0x9149) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:08 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x0, 0x24111, r0, 0x0) 14:59:08 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) (async) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000300), &(0x7f0000000300)) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x6, 0x5, 0x7f], 0x3, 0x100800, 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x44ca, &(0x7f00000003c0)={0x0, 0xbc4c, 0x400, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee1000/0x4000)=nil, &(0x7f0000bba000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000140)) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 14:59:08 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1e00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:08 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000300), &(0x7f0000000300)) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x6, 0x5, 0x7f], 0x3, 0x100800, 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x44ca, &(0x7f00000003c0)={0x0, 0xbc4c, 0x400, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee1000/0x4000)=nil, &(0x7f0000bba000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000140)) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 14:59:08 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000300), &(0x7f0000000300)) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x6, 0x5, 0x7f], 0x3, 0x100800, 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x44ca, &(0x7f00000003c0)={0x0, 0xbc4c, 0x400, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee1000/0x4000)=nil, &(0x7f0000bba000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000140)) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 14:59:08 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 14:59:08 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x1cc, &(0x7f0000000000)={0x0, 0x60cf, 0x200, 0x1, 0x28b}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000a41000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000300)=0x4, 0x0, 0x4) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, 0xfffffffffffffffe, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x10, 0x0, 0xffffffffffffff9c, &(0x7f0000000340), &(0x7f0000000440)='./file0\x00', 0x80}, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x0, 0x0, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}]}, 0x24}}, 0x8000) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7f, 0xc80, 0x7fff]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x73}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048081) 14:59:08 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_complete(0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000eac000/0x2000)=nil, 0x2000, 0x0, 0x40110, r0, 0x10000000) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:08 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 14:59:09 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_complete(0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000eac000/0x2000)=nil, 0x2000, 0x0, 0x40110, r0, 0x10000000) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:09 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1f00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:09 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)=0x0) (async) syz_io_uring_setup(0x1cc, &(0x7f0000000000)={0x0, 0x60cf, 0x200, 0x1, 0x28b}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000a41000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000300)=0x4, 0x0, 0x4) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, 0xfffffffffffffffe, 0x0) (async) syz_io_uring_submit(r2, r0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x10, 0x0, 0xffffffffffffff9c, &(0x7f0000000340), &(0x7f0000000440)='./file0\x00', 0x80}, 0x5) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x0, 0x0, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}]}, 0x24}}, 0x8000) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7f, 0xc80, 0x7fff]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x73}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048081) 14:59:09 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x2000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:09 executing program 2: r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 14:59:09 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1f00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:09 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) r0 = syz_io_uring_complete(0x0) syz_io_uring_complete(0x0) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000eac000/0x2000)=nil, 0x2000, 0x0, 0x40110, r0, 0x10000000) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:09 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x600000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:09 executing program 2: syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x0, 0x24111, 0xffffffffffffffff, 0x0) 14:59:09 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x2400}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:09 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x526c, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:09 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x1cc, &(0x7f0000000000)={0x0, 0x60cf, 0x200, 0x1, 0x28b}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000a41000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000300)=0x4, 0x0, 0x4) (async, rerun: 64) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) (rerun: 64) syz_io_uring_submit(r2, 0x0, 0xfffffffffffffffe, 0x0) (async) syz_io_uring_submit(r2, r0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x10, 0x0, 0xffffffffffffff9c, &(0x7f0000000340), &(0x7f0000000440)='./file0\x00', 0x80}, 0x5) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x0, 0x0, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}]}, 0x24}}, 0x8000) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7f, 0xc80, 0x7fff]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x73}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048081) 14:59:09 executing program 2: syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x0, 0x24111, 0xffffffffffffffff, 0x0) 14:59:09 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x526c, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x526c, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) 14:59:09 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x2a00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:09 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f0000000080)=0xa0000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) 14:59:09 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f0000000080)=0xa0000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) 14:59:09 executing program 2: syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0x0, 0x24111, 0xffffffffffffffff, 0x0) 14:59:09 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0xf30a}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:09 executing program 2: syz_io_uring_setup(0x509, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_complete(r0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2000c0, 0x0) io_uring_setup(0x7a93, &(0x7f0000000300)={0x0, 0x9e74, 0x1, 0x0, 0x2ef, 0x0, r1}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, 0xfffffffffffffffe, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x40010, r3, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x22104, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0x200, 0x9, 0x7, 0x1000}, 0x1, [0xa6e00000, 0x3000, 0x8, 0xfff, 0x40, 0xffff, 0x9, 0xfff, 0x8001, 0xfffffffa, 0x8, 0x5, 0x5, 0x3, 0x8001, 0x3, 0x24000000, 0x5000, 0x7f, 0x6, 0x6, 0x0, 0x401, 0x2, 0x800, 0xa2, 0x8000, 0x6, 0x3, 0x9, 0x1, 0x5, 0x1, 0xffffff00, 0x8a74, 0x1ff, 0x401, 0xc175, 0xfffffff9, 0x8, 0x2, 0x800, 0x5, 0xbe, 0x6, 0x6, 0x8001, 0x0, 0x2, 0x800, 0x2, 0x58, 0x5be, 0x2, 0x800, 0x3, 0x8, 0x1ff, 0x6, 0x5, 0xfffffff8, 0x8, 0x80, 0x80000000], [0x81a7, 0x2c, 0x7, 0x101, 0x5, 0x20, 0x1ff, 0x7, 0xffff, 0x0, 0x5, 0x7fff, 0x1, 0x100, 0x6, 0x0, 0x8, 0x1000, 0x0, 0x4, 0x400, 0x4, 0x1, 0x4, 0x6, 0x10001, 0x4, 0x5, 0x0, 0xf10, 0x45e, 0x1, 0x3f, 0x8, 0x0, 0xffffffc0, 0x2, 0x1, 0x5, 0xde7e, 0xffff, 0xffff, 0x4, 0x2, 0x9, 0x4c93, 0xff, 0x9, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x20, 0x8, 0x8, 0xfffffffe, 0x20, 0x6, 0x6c51, 0x40, 0x1f, 0x1, 0x5], [0x1ff, 0x0, 0xffff, 0x961, 0x94, 0x6, 0x0, 0x5, 0x20, 0x2, 0x20, 0x4695a14, 0x1f, 0x7, 0xc60b, 0x0, 0x36, 0x638, 0x8b, 0x8, 0x1f, 0x82, 0x9, 0x8, 0x3ff, 0x4, 0xfffffe01, 0xe47, 0xfffffffd, 0xfff, 0xde67, 0x1, 0x9, 0x1ff, 0x6, 0x5, 0x2, 0x7fff, 0x7, 0x9, 0x7268, 0x1, 0x7da8, 0x826, 0x1f, 0x1, 0xffffff01, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x6, 0x8, 0x0, 0x0, 0x91, 0xc1, 0x8, 0x0, 0x5, 0xffffffff, 0x2], [0x9, 0x8001, 0x1, 0x8001, 0x2, 0x2, 0x9, 0x2, 0xf8ab, 0x401, 0xfff, 0x400, 0x400, 0x0, 0x4, 0x7, 0x5, 0x6, 0x1f, 0x8000, 0x8, 0x7, 0x7c08, 0x2, 0x577, 0x80000000, 0x80000000, 0x0, 0x1, 0x8, 0x3b0, 0xe1, 0x2, 0x6, 0x8001, 0xfff, 0x27, 0x2, 0x200, 0x1e, 0xac, 0x200, 0x2, 0xde0, 0x4, 0x10000, 0x8, 0x8, 0x7, 0x2, 0x600, 0x7f, 0x7, 0x363c82d0, 0x3, 0x1, 0x2, 0x1, 0x9, 0x0, 0x8, 0x7, 0xfffffffa, 0x9]}, 0x45c) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}, 0xff) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:09 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x9100}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:09 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x3000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:09 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x526c, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x526c, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) 14:59:09 executing program 4: r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) r1 = io_uring_setup(0x6041, &(0x7f00000000c0)={0x0, 0x95ca, 0x10, 0x3, 0x3d3, 0x0, r0}) syz_io_uring_setup(0x1ef6, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x179, 0x0, r1}, &(0x7f0000f7e000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x6) 14:59:09 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x10bf, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x6fc5, &(0x7f0000000380)={0x0, 0x6ccb, 0x800, 0x3, 0x3d8, 0x0, r1}, &(0x7f000089c000/0x3000)=nil, &(0x7f0000d26000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8200}, 0x1}, 0x8a0712c) syz_io_uring_setup(0x11a5, &(0x7f0000000000)={0x0, 0x400c, 0x0, 0x1, 0x27}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000bb0000/0x8000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ec9000/0x4000)=nil, 0x4000, 0xe, 0x1}, 0x3) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:09 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x3600}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:09 executing program 4: r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) r1 = io_uring_setup(0x6041, &(0x7f00000000c0)={0x0, 0x95ca, 0x10, 0x3, 0x3d3, 0x0, r0}) syz_io_uring_setup(0x1ef6, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x179, 0x0, r1}, &(0x7f0000f7e000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) (async) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x6) 14:59:09 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef4, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x1, 0x214}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = syz_io_uring_setup(0x13d8, &(0x7f0000000000)={0x0, 0xee78, 0x40, 0x0, 0x3d9, 0x0, r0}, &(0x7f0000c45000/0x2000)=nil, &(0x7f0000ef2000/0x14000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) io_uring_setup(0x232a6, &(0x7f0000002740)={0x0, 0x85c4, 0x2, 0x1, 0x3a3, 0x0, r1}) pipe2$watch_queue(&(0x7f0000004400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f00000044c0)) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) read$FUSE(r3, &(0x7f00000045c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f0000006600)={0x60, 0x0, r4, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x401, 0x32c}}}, 0x60) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000006ac0)={0x20, 0x0, r4, {0x6, 0x0, 0x20, 0x1}}, 0x20) r5 = geteuid() r6 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002400)={0x328, 0x0, r4, [{{0x4, 0x0, 0x7fff, 0x80, 0x0, 0xcd5, {0x1, 0x3, 0x4, 0x5, 0x80000001, 0x10000, 0xffffffd7, 0x2, 0x4, 0x4000, 0xfff, 0xee01, 0x0, 0x7, 0x200}}, {0x3, 0xeed6, 0x0, 0xff}}, {{0x3, 0x2, 0x1, 0x80000001, 0x1ff, 0xfffffff8, {0x3, 0xf9, 0x81, 0x0, 0xf87, 0x6, 0x0, 0x101, 0x8000, 0xe000, 0x80, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2}}, {0x4, 0x1, 0x1, 0x5, '-'}}, {{0x6, 0x3, 0x4f, 0x6, 0x80000000, 0x9, {0x0, 0x200, 0x3, 0x100, 0x24, 0x0, 0x9, 0x3, 0x0, 0x2000, 0x1ff, 0xee00, 0xffffffffffffffff, 0x7, 0x8}}, {0x4, 0x7fff, 0x1, 0x6cf, '\x00'}}, {{0x5, 0x0, 0x4, 0x4, 0x1, 0x6, {0x6, 0x2, 0x2, 0x4, 0x4, 0x74, 0x7fff, 0x8000, 0x3, 0x6000, 0xb, r5, 0xee00, 0x9fa, 0x10}}, {0x3, 0x6, 0x7, 0x68b, '%]#-}}\\'}}, {{0x2, 0x0, 0xff, 0x9, 0x8, 0x5, {0x2, 0x20, 0x100000000, 0xffffffffffffffff, 0x400, 0x7, 0x7, 0x1, 0x4, 0x2000, 0x4, r6, r7, 0x9, 0x9}}, {0x4, 0x7, 0x1, 0x7, '\x00'}}]}, 0x328) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:09 executing program 2: syz_io_uring_setup(0x509, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_complete(r0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2000c0, 0x0) io_uring_setup(0x7a93, &(0x7f0000000300)={0x0, 0x9e74, 0x1, 0x0, 0x2ef, 0x0, r1}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, 0xfffffffffffffffe, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x40010, r3, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x22104, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0x200, 0x9, 0x7, 0x1000}, 0x1, [0xa6e00000, 0x3000, 0x8, 0xfff, 0x40, 0xffff, 0x9, 0xfff, 0x8001, 0xfffffffa, 0x8, 0x5, 0x5, 0x3, 0x8001, 0x3, 0x24000000, 0x5000, 0x7f, 0x6, 0x6, 0x0, 0x401, 0x2, 0x800, 0xa2, 0x8000, 0x6, 0x3, 0x9, 0x1, 0x5, 0x1, 0xffffff00, 0x8a74, 0x1ff, 0x401, 0xc175, 0xfffffff9, 0x8, 0x2, 0x800, 0x5, 0xbe, 0x6, 0x6, 0x8001, 0x0, 0x2, 0x800, 0x2, 0x58, 0x5be, 0x2, 0x800, 0x3, 0x8, 0x1ff, 0x6, 0x5, 0xfffffff8, 0x8, 0x80, 0x80000000], [0x81a7, 0x2c, 0x7, 0x101, 0x5, 0x20, 0x1ff, 0x7, 0xffff, 0x0, 0x5, 0x7fff, 0x1, 0x100, 0x6, 0x0, 0x8, 0x1000, 0x0, 0x4, 0x400, 0x4, 0x1, 0x4, 0x6, 0x10001, 0x4, 0x5, 0x0, 0xf10, 0x45e, 0x1, 0x3f, 0x8, 0x0, 0xffffffc0, 0x2, 0x1, 0x5, 0xde7e, 0xffff, 0xffff, 0x4, 0x2, 0x9, 0x4c93, 0xff, 0x9, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x20, 0x8, 0x8, 0xfffffffe, 0x20, 0x6, 0x6c51, 0x40, 0x1f, 0x1, 0x5], [0x1ff, 0x0, 0xffff, 0x961, 0x94, 0x6, 0x0, 0x5, 0x20, 0x2, 0x20, 0x4695a14, 0x1f, 0x7, 0xc60b, 0x0, 0x36, 0x638, 0x8b, 0x8, 0x1f, 0x82, 0x9, 0x8, 0x3ff, 0x4, 0xfffffe01, 0xe47, 0xfffffffd, 0xfff, 0xde67, 0x1, 0x9, 0x1ff, 0x6, 0x5, 0x2, 0x7fff, 0x7, 0x9, 0x7268, 0x1, 0x7da8, 0x826, 0x1f, 0x1, 0xffffff01, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x6, 0x8, 0x0, 0x0, 0x91, 0xc1, 0x8, 0x0, 0x5, 0xffffffff, 0x2], [0x9, 0x8001, 0x1, 0x8001, 0x2, 0x2, 0x9, 0x2, 0xf8ab, 0x401, 0xfff, 0x400, 0x400, 0x0, 0x4, 0x7, 0x5, 0x6, 0x1f, 0x8000, 0x8, 0x7, 0x7c08, 0x2, 0x577, 0x80000000, 0x80000000, 0x0, 0x1, 0x8, 0x3b0, 0xe1, 0x2, 0x6, 0x8001, 0xfff, 0x27, 0x2, 0x200, 0x1e, 0xac, 0x200, 0x2, 0xde0, 0x4, 0x10000, 0x8, 0x8, 0x7, 0x2, 0x600, 0x7f, 0x7, 0x363c82d0, 0x3, 0x1, 0x2, 0x1, 0x9, 0x0, 0x8, 0x7, 0xfffffffa, 0x9]}, 0x45c) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}, 0xff) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:10 executing program 4: r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) (async) r1 = io_uring_setup(0x6041, &(0x7f00000000c0)={0x0, 0x95ca, 0x10, 0x3, 0x3d3, 0x0, r0}) syz_io_uring_setup(0x1ef6, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x179, 0x0, r1}, &(0x7f0000f7e000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) (async) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x6) 14:59:10 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x3c00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:10 executing program 1: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000840)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) r6 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)=0x0) r9 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r6, r7, r7, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r4, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r9}}}, 0x28) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r10, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', r2, 0x0, 0x1}, 0x884d) r11 = syz_io_uring_complete(r3) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800)={0x0, r11}, 0x10) 14:59:10 executing program 2: syz_io_uring_setup(0x509, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_complete(r0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2000c0, 0x0) io_uring_setup(0x7a93, &(0x7f0000000300)={0x0, 0x9e74, 0x1, 0x0, 0x2ef, 0x0, r1}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, 0xfffffffffffffffe, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x40010, r3, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x22104, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0x200, 0x9, 0x7, 0x1000}, 0x1, [0xa6e00000, 0x3000, 0x8, 0xfff, 0x40, 0xffff, 0x9, 0xfff, 0x8001, 0xfffffffa, 0x8, 0x5, 0x5, 0x3, 0x8001, 0x3, 0x24000000, 0x5000, 0x7f, 0x6, 0x6, 0x0, 0x401, 0x2, 0x800, 0xa2, 0x8000, 0x6, 0x3, 0x9, 0x1, 0x5, 0x1, 0xffffff00, 0x8a74, 0x1ff, 0x401, 0xc175, 0xfffffff9, 0x8, 0x2, 0x800, 0x5, 0xbe, 0x6, 0x6, 0x8001, 0x0, 0x2, 0x800, 0x2, 0x58, 0x5be, 0x2, 0x800, 0x3, 0x8, 0x1ff, 0x6, 0x5, 0xfffffff8, 0x8, 0x80, 0x80000000], [0x81a7, 0x2c, 0x7, 0x101, 0x5, 0x20, 0x1ff, 0x7, 0xffff, 0x0, 0x5, 0x7fff, 0x1, 0x100, 0x6, 0x0, 0x8, 0x1000, 0x0, 0x4, 0x400, 0x4, 0x1, 0x4, 0x6, 0x10001, 0x4, 0x5, 0x0, 0xf10, 0x45e, 0x1, 0x3f, 0x8, 0x0, 0xffffffc0, 0x2, 0x1, 0x5, 0xde7e, 0xffff, 0xffff, 0x4, 0x2, 0x9, 0x4c93, 0xff, 0x9, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x20, 0x8, 0x8, 0xfffffffe, 0x20, 0x6, 0x6c51, 0x40, 0x1f, 0x1, 0x5], [0x1ff, 0x0, 0xffff, 0x961, 0x94, 0x6, 0x0, 0x5, 0x20, 0x2, 0x20, 0x4695a14, 0x1f, 0x7, 0xc60b, 0x0, 0x36, 0x638, 0x8b, 0x8, 0x1f, 0x82, 0x9, 0x8, 0x3ff, 0x4, 0xfffffe01, 0xe47, 0xfffffffd, 0xfff, 0xde67, 0x1, 0x9, 0x1ff, 0x6, 0x5, 0x2, 0x7fff, 0x7, 0x9, 0x7268, 0x1, 0x7da8, 0x826, 0x1f, 0x1, 0xffffff01, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x6, 0x8, 0x0, 0x0, 0x91, 0xc1, 0x8, 0x0, 0x5, 0xffffffff, 0x2], [0x9, 0x8001, 0x1, 0x8001, 0x2, 0x2, 0x9, 0x2, 0xf8ab, 0x401, 0xfff, 0x400, 0x400, 0x0, 0x4, 0x7, 0x5, 0x6, 0x1f, 0x8000, 0x8, 0x7, 0x7c08, 0x2, 0x577, 0x80000000, 0x80000000, 0x0, 0x1, 0x8, 0x3b0, 0xe1, 0x2, 0x6, 0x8001, 0xfff, 0x27, 0x2, 0x200, 0x1e, 0xac, 0x200, 0x2, 0xde0, 0x4, 0x10000, 0x8, 0x8, 0x7, 0x2, 0x600, 0x7f, 0x7, 0x363c82d0, 0x3, 0x1, 0x2, 0x1, 0x9, 0x0, 0x8, 0x7, 0xfffffffa, 0x9]}, 0x45c) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}, 0xff) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:10 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x2a00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:10 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f00000003c0)=0x1, 0x0, 0x4) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x200, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0x4}, 0xa) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000380)={&(0x7f0000000840)=[0x1, 0xffffffff, 0x662, 0x3f, 0x6, 0x9, 0x188, 0x4, 0x0, 0x0, 0x3, 0x80000001, 0x9, 0x2, 0xff, 0x0, 0x68d1, 0x4, 0x400, 0x401, 0x10000, 0x0, 0x2, 0x9, 0x7, 0xffffffff, 0x7f, 0x3, 0x27c, 0x200, 0x0, 0x1, 0x1f, 0x4, 0x80, 0x1, 0x9, 0xffffffff, 0x7fffffff, 0x1, 0x8, 0x0, 0x8, 0x6, 0x0, 0x2, 0x6, 0x6, 0x40, 0xfff, 0xfffffeff, 0x400, 0x800, 0x36000000, 0x7, 0x4, 0x7, 0x0, 0x21b1650d, 0x0, 0x7f, 0x401, 0x5, 0xfffffffa, 0x1, 0x3, 0x8, 0x7ff, 0xffff, 0x1, 0x101, 0x8, 0x37, 0xffffffff, 0x8cd, 0xb2ac, 0x1, 0x6, 0x101, 0xee4b, 0xfffffffa, 0x846, 0xffffffff, 0x7, 0x80000001, 0xd6, 0x823, 0x7ff, 0x1, 0x1ff, 0x5, 0x6, 0x8, 0x1, 0x20, 0x54c, 0x0, 0x400, 0xc000000, 0x1, 0xf2, 0xfffffff7, 0x7, 0x2, 0x13d0aee, 0x1, 0x2, 0x3, 0x1, 0x9, 0x26, 0x3, 0x8, 0xe2, 0x5, 0x1, 0x4, 0xdc3, 0x20, 0x3, 0x6bd, 0x793c, 0x2, 0x377d, 0x6, 0x1300000, 0x7, 0x5, 0x8ad, 0x4, 0xb9, 0x1f, 0x1, 0x7f, 0x81, 0x4, 0x2, 0x9, 0x2, 0x200, 0xd1, 0x7, 0x20, 0x8000, 0x2, 0x101, 0x3, 0x2, 0x73, 0x8, 0x9, 0x80000000, 0x1000, 0x3, 0x1, 0x90, 0x82, 0x0, 0x80, 0x79d, 0xb9, 0xffffffff, 0x6, 0x1, 0x6, 0x80000001, 0x3, 0x80000000, 0xfffff061, 0x7, 0x6508da3e, 0x2, 0x7fff, 0x92, 0x2934, 0x1, 0x7f, 0x2, 0x7f, 0x8e13, 0xf504, 0x8001, 0x6, 0xabb, 0x400, 0x9, 0x15b, 0x7, 0xfffffffb, 0x0, 0x2, 0x6673, 0x6, 0x0, 0xe2, 0x4, 0xd5, 0x3f, 0x0, 0x8, 0x7, 0x7, 0x0, 0x1, 0x0, 0x4, 0x81, 0x80000000, 0x2, 0x0, 0xfffff5b5, 0xfffff2bc, 0xb57b, 0xffff470d, 0x3, 0x8, 0x1ff, 0x8000, 0x9, 0x80000000, 0x200, 0x40, 0x0, 0x5, 0x20, 0x8, 0xfffffffd, 0x0, 0x7, 0x9, 0x7, 0x7ff, 0x8, 0x5, 0x133c, 0x4, 0x1ff, 0x9, 0x5, 0x1, 0x9, 0x6, 0x8, 0x7, 0x23dc4dbd, 0x8, 0x6, 0x3f, 0xfffffffe, 0xfff, 0x18268b6, 0x10001, 0x7f, 0xdbbb, 0x5, 0x2, 0x81, 0xa48, 0x8, 0x101, 0x7, 0x0, 0x6, 0x5, 0x4, 0x5, 0x6, 0x2, 0x9e3, 0x6, 0x0, 0x26e3, 0xffffffff, 0x5, 0x80000000, 0xfff, 0x3, 0xfffffffe, 0x5, 0x1f, 0x7, 0x7fffffff, 0x4f, 0x7, 0x2, 0x55, 0x8, 0x5, 0x1b, 0x8, 0xfcb, 0xab0f, 0x7fff, 0x401, 0x1a9, 0x2, 0x9, 0x6, 0xd1, 0x951, 0xfc, 0xfffeffff, 0x5, 0x1, 0x6, 0x2, 0x7, 0x6000, 0x2, 0x3, 0x80000000, 0xc3, 0xffff, 0xffff, 0x72, 0x5, 0x3a, 0x3f, 0x80000001, 0x9, 0x7, 0x1, 0x40, 0xfff, 0xffff, 0x4, 0x6, 0x2, 0x401, 0x8, 0x3, 0x7ff, 0x2, 0xffff8001, 0x24b, 0x6, 0x7044, 0x800, 0x2477, 0x8, 0x10001, 0x4, 0x0, 0x5, 0x3, 0x7, 0x7e6, 0x6, 0x45cf, 0x8, 0x8, 0x3, 0xc0, 0x4a, 0x5, 0x6, 0x4, 0x9, 0x6, 0xffffffff, 0x2, 0x1ff, 0x1f, 0x884, 0x6, 0xe1, 0x7ff, 0x4, 0x0, 0x6, 0x7, 0x1, 0x3, 0x5, 0x7, 0x609, 0x7fff, 0x5, 0x9, 0x800, 0x9, 0x7, 0x39f2, 0x10001, 0x80, 0x400, 0x1, 0x69e, 0x1992, 0x3, 0x1, 0x1, 0x3, 0xd3d1, 0xffffffff, 0x3, 0xfffffffb, 0x2, 0x134a0ad9, 0x9, 0x3, 0x29dca262, 0x3ff, 0x7e, 0x50, 0x0, 0xc1b, 0x200, 0x6, 0x1, 0x417a79ae, 0x2, 0x101, 0xb9, 0x100, 0x2d58, 0x85b2, 0x3ff, 0x3, 0x65, 0x7, 0x5, 0x101, 0x8a, 0x9, 0x8, 0x1, 0x400, 0xfffffffc, 0x0, 0x2, 0x3f, 0xffffffff, 0xdab4, 0x6, 0x9, 0xe721, 0x8001, 0x6, 0x8, 0x8, 0x7fff, 0x20, 0x3, 0x0, 0xf5, 0x3, 0x1, 0x3, 0xffffff80, 0x3, 0x10001, 0x3, 0x78a, 0x81, 0x5, 0x5, 0x5, 0x10000, 0x0, 0x40, 0xff, 0xa1, 0x6ed6b4b4, 0xfffffffe, 0x10001, 0x1, 0x51b2, 0x8001, 0x3, 0x5d, 0xb1be, 0x80000001, 0x8, 0x0, 0x7, 0x80000000, 0x7, 0x5, 0x20, 0x2, 0x3f, 0xfffffff7, 0x8001, 0x2, 0x5, 0xfffff000, 0x5, 0x9, 0x7fffffff, 0x3ff, 0xcb578bfc, 0x7fffffff, 0x8, 0x200, 0x400, 0x26, 0x10000, 0x2, 0x7fffffff, 0x54, 0x7, 0xfff, 0x4, 0x7, 0x7, 0x4, 0x80000001, 0x4, 0x7fff, 0x0, 0xfaa, 0x9, 0xa8b, 0x80000000, 0xb4, 0x7, 0x8, 0x9, 0x6, 0xd1e, 0xfffffffd, 0x6, 0x4, 0x10000, 0xb6, 0xd5, 0x3f, 0x7f, 0x7fffffff, 0x40000000, 0x9, 0x0, 0x7ff, 0x8, 0x1, 0x7, 0x5, 0x9, 0x9, 0x3ff, 0x7ff, 0x2, 0x3, 0x80, 0x1, 0x7, 0xfff, 0x4, 0x0, 0x3ff, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4, 0x74d, 0x7, 0x8000, 0x7, 0x400, 0x4, 0x3ff, 0x40, 0x7fff, 0x0, 0x8000, 0x2, 0x3ff, 0x401, 0x2, 0x9, 0x0, 0x8001, 0x3ff, 0xffffffff, 0x0, 0x704a, 0xfffffff8, 0x7f, 0x42, 0x1, 0x40, 0xdf09, 0xfffffff8, 0x3, 0x7, 0x0, 0x6, 0x0, 0x6, 0x3, 0x8001, 0x2, 0x1, 0x9b6, 0x9, 0x1d, 0x3ff, 0x1, 0x0, 0x6, 0x0, 0x9, 0x9, 0xfffffffb, 0x8, 0x7fff, 0x80000001, 0x0, 0x5, 0x5, 0x40, 0x6, 0x5, 0x9, 0xe120, 0xa4a, 0x214, 0x2, 0x52864966, 0x1, 0x4, 0x8, 0x8, 0xcd9, 0x80, 0x10001, 0xef3, 0x1, 0x1, 0x800, 0xff, 0x5, 0x0, 0x80000001, 0x57d0, 0xa4ed, 0x4, 0x2, 0x6, 0x0, 0x8001, 0x8, 0x20, 0x7fffffff, 0x1, 0x3, 0xfff, 0x9, 0x5, 0x7, 0x80000000, 0x8, 0x400, 0x7, 0x6, 0x9, 0xffffff01, 0xe9, 0x0, 0x7, 0x4, 0xd3f, 0x2, 0x2f1, 0x3, 0xffffffff, 0x80, 0x7, 0x1, 0x10001, 0xc85d, 0xfffffe01, 0x80000000, 0x76, 0x8, 0x4, 0x3, 0x1, 0x800, 0x200, 0x9, 0x1000, 0xb3a, 0x6f, 0xb06, 0xba81, 0x4, 0x8, 0x2, 0x8, 0x5, 0x5, 0xffffffff, 0x7ff, 0xcf3e, 0x9, 0x5, 0x1f, 0x282, 0x7fff, 0xe34, 0x8, 0x9, 0x4e1, 0x9, 0x5, 0x7, 0x40, 0x288, 0x101, 0x0, 0xb97, 0xe2c, 0x35, 0xffffffff, 0x1000, 0xffffff80, 0x8001, 0x6b, 0x178, 0x1, 0x7, 0x3ff, 0x1, 0x7, 0x20, 0x0, 0x0, 0x10000, 0x0, 0x5038, 0x3, 0x8, 0x7f, 0x0, 0x7, 0x6, 0xf9e, 0x2c, 0x1, 0x5, 0x3, 0xb64, 0x7f82, 0xcc, 0x401, 0x401, 0x7fffffff, 0x2d25, 0x4, 0x3, 0x8, 0x37f8e58c, 0xfffffffa, 0x7, 0x8001, 0x1000, 0xdb21, 0x6, 0x7, 0x4, 0x2, 0x1f, 0x0, 0x1, 0x6, 0x9, 0x6, 0x5, 0x10001, 0x0, 0xfffff000, 0x7fffffff, 0x4, 0x401, 0x0, 0x3, 0x7, 0x81, 0x8000, 0xfffffff7, 0x8001, 0x2, 0x80000000, 0x7fffffff, 0x1, 0x0, 0x8ee, 0x725, 0x1ff, 0x5, 0x4, 0x8000, 0x81, 0x101, 0x6, 0x6, 0x8, 0x80000001, 0x4, 0x80000000, 0x621, 0xe3fc, 0xe889, 0x0, 0x4, 0x80, 0x4, 0x8, 0x5, 0x401, 0x3, 0x5, 0x1, 0x800, 0x4, 0x401, 0xffffffff, 0x0, 0x100, 0x7fff, 0xfe, 0x10000, 0x8000, 0x7, 0x0, 0x3, 0x7, 0x1f0, 0x60a, 0xffff, 0x40, 0x10001, 0x18000000, 0xffff, 0xfffffffc, 0x25, 0x3, 0xe9, 0xffffffff, 0x9d, 0x7, 0x4a5, 0x130, 0x7, 0xfff, 0xffff8001, 0x7, 0x2, 0x3129, 0x6, 0x80, 0xfffffffa, 0x74, 0x5, 0x0, 0x7, 0x0, 0x5, 0x800, 0x0, 0x100, 0x797, 0xfff, 0x9, 0x2, 0x4, 0x7, 0x8f, 0x80, 0xd26, 0x0, 0x0, 0x3fffc, 0x3f, 0x75, 0xfff, 0x8, 0xffff6e72, 0x400, 0x4, 0x1, 0x9, 0x8, 0x101, 0x82, 0x1, 0x3, 0x101, 0x2, 0x80, 0x1, 0x87, 0x200, 0x10001, 0x8, 0xe6e, 0x7fff, 0x0, 0x0, 0x8, 0x7ff, 0xfff, 0x36, 0x0, 0xfff, 0x3, 0x3, 0x7fffffff, 0x9, 0x406a61d5, 0x3ff, 0x9, 0xfff, 0x1, 0x7, 0x0, 0x7fff, 0xffff0000, 0x1, 0x7, 0x1, 0x6, 0x400, 0x63c3e50f, 0x401, 0xbd, 0x3, 0x7fff, 0x5, 0x0, 0x80000001, 0xff, 0x0, 0x4d26, 0x80, 0x3a5, 0x7ff, 0xe8c, 0x0, 0x7f5, 0x101, 0x1, 0x800, 0xffff, 0x0, 0x6, 0x1, 0x508d, 0xfffffffe, 0x2, 0x0, 0x158, 0x8, 0x10001, 0x8, 0x20000, 0xec, 0x8, 0x3, 0x3, 0x400, 0x92c7, 0x8001, 0x2, 0x81, 0x10000, 0x6, 0xff, 0x80000001, 0x5, 0x5, 0x3, 0x3ff, 0x748, 0x7ff80000, 0x9, 0xfffffffa, 0x48, 0x6, 0x3, 0x7, 0xa7a, 0xfff, 0x3, 0x0, 0xfffffffb, 0x9, 0x2, 0x3ff, 0x1, 0xfffffff4, 0xe0, 0x0, 0x8001, 0x4, 0x6fa3, 0xffffffff, 0x3, 0xcd, 0x64, 0x1, 0x5, 0x101, 0xff, 0x8, 0x1000, 0x5, 0x1, 0xe8, 0x1, 0x2, 0x8000, 0x19c, 0x1, 0x9, 0x101, 0x3, 0x81, 0x4], 0x2, 0x400, 0x5}) syz_io_uring_setup(0xc0d, &(0x7f0000000300)={0x0, 0x6386, 0x0, 0x1, 0x65, 0x0, r0}, &(0x7f0000b49000/0x3000)=nil, &(0x7f0000f56000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 14:59:10 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x1e00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:10 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x3f00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:10 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f00000003c0)=0x1, 0x0, 0x4) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x200, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0x4}, 0xa) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000380)={&(0x7f0000000840)=[0x1, 0xffffffff, 0x662, 0x3f, 0x6, 0x9, 0x188, 0x4, 0x0, 0x0, 0x3, 0x80000001, 0x9, 0x2, 0xff, 0x0, 0x68d1, 0x4, 0x400, 0x401, 0x10000, 0x0, 0x2, 0x9, 0x7, 0xffffffff, 0x7f, 0x3, 0x27c, 0x200, 0x0, 0x1, 0x1f, 0x4, 0x80, 0x1, 0x9, 0xffffffff, 0x7fffffff, 0x1, 0x8, 0x0, 0x8, 0x6, 0x0, 0x2, 0x6, 0x6, 0x40, 0xfff, 0xfffffeff, 0x400, 0x800, 0x36000000, 0x7, 0x4, 0x7, 0x0, 0x21b1650d, 0x0, 0x7f, 0x401, 0x5, 0xfffffffa, 0x1, 0x3, 0x8, 0x7ff, 0xffff, 0x1, 0x101, 0x8, 0x37, 0xffffffff, 0x8cd, 0xb2ac, 0x1, 0x6, 0x101, 0xee4b, 0xfffffffa, 0x846, 0xffffffff, 0x7, 0x80000001, 0xd6, 0x823, 0x7ff, 0x1, 0x1ff, 0x5, 0x6, 0x8, 0x1, 0x20, 0x54c, 0x0, 0x400, 0xc000000, 0x1, 0xf2, 0xfffffff7, 0x7, 0x2, 0x13d0aee, 0x1, 0x2, 0x3, 0x1, 0x9, 0x26, 0x3, 0x8, 0xe2, 0x5, 0x1, 0x4, 0xdc3, 0x20, 0x3, 0x6bd, 0x793c, 0x2, 0x377d, 0x6, 0x1300000, 0x7, 0x5, 0x8ad, 0x4, 0xb9, 0x1f, 0x1, 0x7f, 0x81, 0x4, 0x2, 0x9, 0x2, 0x200, 0xd1, 0x7, 0x20, 0x8000, 0x2, 0x101, 0x3, 0x2, 0x73, 0x8, 0x9, 0x80000000, 0x1000, 0x3, 0x1, 0x90, 0x82, 0x0, 0x80, 0x79d, 0xb9, 0xffffffff, 0x6, 0x1, 0x6, 0x80000001, 0x3, 0x80000000, 0xfffff061, 0x7, 0x6508da3e, 0x2, 0x7fff, 0x92, 0x2934, 0x1, 0x7f, 0x2, 0x7f, 0x8e13, 0xf504, 0x8001, 0x6, 0xabb, 0x400, 0x9, 0x15b, 0x7, 0xfffffffb, 0x0, 0x2, 0x6673, 0x6, 0x0, 0xe2, 0x4, 0xd5, 0x3f, 0x0, 0x8, 0x7, 0x7, 0x0, 0x1, 0x0, 0x4, 0x81, 0x80000000, 0x2, 0x0, 0xfffff5b5, 0xfffff2bc, 0xb57b, 0xffff470d, 0x3, 0x8, 0x1ff, 0x8000, 0x9, 0x80000000, 0x200, 0x40, 0x0, 0x5, 0x20, 0x8, 0xfffffffd, 0x0, 0x7, 0x9, 0x7, 0x7ff, 0x8, 0x5, 0x133c, 0x4, 0x1ff, 0x9, 0x5, 0x1, 0x9, 0x6, 0x8, 0x7, 0x23dc4dbd, 0x8, 0x6, 0x3f, 0xfffffffe, 0xfff, 0x18268b6, 0x10001, 0x7f, 0xdbbb, 0x5, 0x2, 0x81, 0xa48, 0x8, 0x101, 0x7, 0x0, 0x6, 0x5, 0x4, 0x5, 0x6, 0x2, 0x9e3, 0x6, 0x0, 0x26e3, 0xffffffff, 0x5, 0x80000000, 0xfff, 0x3, 0xfffffffe, 0x5, 0x1f, 0x7, 0x7fffffff, 0x4f, 0x7, 0x2, 0x55, 0x8, 0x5, 0x1b, 0x8, 0xfcb, 0xab0f, 0x7fff, 0x401, 0x1a9, 0x2, 0x9, 0x6, 0xd1, 0x951, 0xfc, 0xfffeffff, 0x5, 0x1, 0x6, 0x2, 0x7, 0x6000, 0x2, 0x3, 0x80000000, 0xc3, 0xffff, 0xffff, 0x72, 0x5, 0x3a, 0x3f, 0x80000001, 0x9, 0x7, 0x1, 0x40, 0xfff, 0xffff, 0x4, 0x6, 0x2, 0x401, 0x8, 0x3, 0x7ff, 0x2, 0xffff8001, 0x24b, 0x6, 0x7044, 0x800, 0x2477, 0x8, 0x10001, 0x4, 0x0, 0x5, 0x3, 0x7, 0x7e6, 0x6, 0x45cf, 0x8, 0x8, 0x3, 0xc0, 0x4a, 0x5, 0x6, 0x4, 0x9, 0x6, 0xffffffff, 0x2, 0x1ff, 0x1f, 0x884, 0x6, 0xe1, 0x7ff, 0x4, 0x0, 0x6, 0x7, 0x1, 0x3, 0x5, 0x7, 0x609, 0x7fff, 0x5, 0x9, 0x800, 0x9, 0x7, 0x39f2, 0x10001, 0x80, 0x400, 0x1, 0x69e, 0x1992, 0x3, 0x1, 0x1, 0x3, 0xd3d1, 0xffffffff, 0x3, 0xfffffffb, 0x2, 0x134a0ad9, 0x9, 0x3, 0x29dca262, 0x3ff, 0x7e, 0x50, 0x0, 0xc1b, 0x200, 0x6, 0x1, 0x417a79ae, 0x2, 0x101, 0xb9, 0x100, 0x2d58, 0x85b2, 0x3ff, 0x3, 0x65, 0x7, 0x5, 0x101, 0x8a, 0x9, 0x8, 0x1, 0x400, 0xfffffffc, 0x0, 0x2, 0x3f, 0xffffffff, 0xdab4, 0x6, 0x9, 0xe721, 0x8001, 0x6, 0x8, 0x8, 0x7fff, 0x20, 0x3, 0x0, 0xf5, 0x3, 0x1, 0x3, 0xffffff80, 0x3, 0x10001, 0x3, 0x78a, 0x81, 0x5, 0x5, 0x5, 0x10000, 0x0, 0x40, 0xff, 0xa1, 0x6ed6b4b4, 0xfffffffe, 0x10001, 0x1, 0x51b2, 0x8001, 0x3, 0x5d, 0xb1be, 0x80000001, 0x8, 0x0, 0x7, 0x80000000, 0x7, 0x5, 0x20, 0x2, 0x3f, 0xfffffff7, 0x8001, 0x2, 0x5, 0xfffff000, 0x5, 0x9, 0x7fffffff, 0x3ff, 0xcb578bfc, 0x7fffffff, 0x8, 0x200, 0x400, 0x26, 0x10000, 0x2, 0x7fffffff, 0x54, 0x7, 0xfff, 0x4, 0x7, 0x7, 0x4, 0x80000001, 0x4, 0x7fff, 0x0, 0xfaa, 0x9, 0xa8b, 0x80000000, 0xb4, 0x7, 0x8, 0x9, 0x6, 0xd1e, 0xfffffffd, 0x6, 0x4, 0x10000, 0xb6, 0xd5, 0x3f, 0x7f, 0x7fffffff, 0x40000000, 0x9, 0x0, 0x7ff, 0x8, 0x1, 0x7, 0x5, 0x9, 0x9, 0x3ff, 0x7ff, 0x2, 0x3, 0x80, 0x1, 0x7, 0xfff, 0x4, 0x0, 0x3ff, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4, 0x74d, 0x7, 0x8000, 0x7, 0x400, 0x4, 0x3ff, 0x40, 0x7fff, 0x0, 0x8000, 0x2, 0x3ff, 0x401, 0x2, 0x9, 0x0, 0x8001, 0x3ff, 0xffffffff, 0x0, 0x704a, 0xfffffff8, 0x7f, 0x42, 0x1, 0x40, 0xdf09, 0xfffffff8, 0x3, 0x7, 0x0, 0x6, 0x0, 0x6, 0x3, 0x8001, 0x2, 0x1, 0x9b6, 0x9, 0x1d, 0x3ff, 0x1, 0x0, 0x6, 0x0, 0x9, 0x9, 0xfffffffb, 0x8, 0x7fff, 0x80000001, 0x0, 0x5, 0x5, 0x40, 0x6, 0x5, 0x9, 0xe120, 0xa4a, 0x214, 0x2, 0x52864966, 0x1, 0x4, 0x8, 0x8, 0xcd9, 0x80, 0x10001, 0xef3, 0x1, 0x1, 0x800, 0xff, 0x5, 0x0, 0x80000001, 0x57d0, 0xa4ed, 0x4, 0x2, 0x6, 0x0, 0x8001, 0x8, 0x20, 0x7fffffff, 0x1, 0x3, 0xfff, 0x9, 0x5, 0x7, 0x80000000, 0x8, 0x400, 0x7, 0x6, 0x9, 0xffffff01, 0xe9, 0x0, 0x7, 0x4, 0xd3f, 0x2, 0x2f1, 0x3, 0xffffffff, 0x80, 0x7, 0x1, 0x10001, 0xc85d, 0xfffffe01, 0x80000000, 0x76, 0x8, 0x4, 0x3, 0x1, 0x800, 0x200, 0x9, 0x1000, 0xb3a, 0x6f, 0xb06, 0xba81, 0x4, 0x8, 0x2, 0x8, 0x5, 0x5, 0xffffffff, 0x7ff, 0xcf3e, 0x9, 0x5, 0x1f, 0x282, 0x7fff, 0xe34, 0x8, 0x9, 0x4e1, 0x9, 0x5, 0x7, 0x40, 0x288, 0x101, 0x0, 0xb97, 0xe2c, 0x35, 0xffffffff, 0x1000, 0xffffff80, 0x8001, 0x6b, 0x178, 0x1, 0x7, 0x3ff, 0x1, 0x7, 0x20, 0x0, 0x0, 0x10000, 0x0, 0x5038, 0x3, 0x8, 0x7f, 0x0, 0x7, 0x6, 0xf9e, 0x2c, 0x1, 0x5, 0x3, 0xb64, 0x7f82, 0xcc, 0x401, 0x401, 0x7fffffff, 0x2d25, 0x4, 0x3, 0x8, 0x37f8e58c, 0xfffffffa, 0x7, 0x8001, 0x1000, 0xdb21, 0x6, 0x7, 0x4, 0x2, 0x1f, 0x0, 0x1, 0x6, 0x9, 0x6, 0x5, 0x10001, 0x0, 0xfffff000, 0x7fffffff, 0x4, 0x401, 0x0, 0x3, 0x7, 0x81, 0x8000, 0xfffffff7, 0x8001, 0x2, 0x80000000, 0x7fffffff, 0x1, 0x0, 0x8ee, 0x725, 0x1ff, 0x5, 0x4, 0x8000, 0x81, 0x101, 0x6, 0x6, 0x8, 0x80000001, 0x4, 0x80000000, 0x621, 0xe3fc, 0xe889, 0x0, 0x4, 0x80, 0x4, 0x8, 0x5, 0x401, 0x3, 0x5, 0x1, 0x800, 0x4, 0x401, 0xffffffff, 0x0, 0x100, 0x7fff, 0xfe, 0x10000, 0x8000, 0x7, 0x0, 0x3, 0x7, 0x1f0, 0x60a, 0xffff, 0x40, 0x10001, 0x18000000, 0xffff, 0xfffffffc, 0x25, 0x3, 0xe9, 0xffffffff, 0x9d, 0x7, 0x4a5, 0x130, 0x7, 0xfff, 0xffff8001, 0x7, 0x2, 0x3129, 0x6, 0x80, 0xfffffffa, 0x74, 0x5, 0x0, 0x7, 0x0, 0x5, 0x800, 0x0, 0x100, 0x797, 0xfff, 0x9, 0x2, 0x4, 0x7, 0x8f, 0x80, 0xd26, 0x0, 0x0, 0x3fffc, 0x3f, 0x75, 0xfff, 0x8, 0xffff6e72, 0x400, 0x4, 0x1, 0x9, 0x8, 0x101, 0x82, 0x1, 0x3, 0x101, 0x2, 0x80, 0x1, 0x87, 0x200, 0x10001, 0x8, 0xe6e, 0x7fff, 0x0, 0x0, 0x8, 0x7ff, 0xfff, 0x36, 0x0, 0xfff, 0x3, 0x3, 0x7fffffff, 0x9, 0x406a61d5, 0x3ff, 0x9, 0xfff, 0x1, 0x7, 0x0, 0x7fff, 0xffff0000, 0x1, 0x7, 0x1, 0x6, 0x400, 0x63c3e50f, 0x401, 0xbd, 0x3, 0x7fff, 0x5, 0x0, 0x80000001, 0xff, 0x0, 0x4d26, 0x80, 0x3a5, 0x7ff, 0xe8c, 0x0, 0x7f5, 0x101, 0x1, 0x800, 0xffff, 0x0, 0x6, 0x1, 0x508d, 0xfffffffe, 0x2, 0x0, 0x158, 0x8, 0x10001, 0x8, 0x20000, 0xec, 0x8, 0x3, 0x3, 0x400, 0x92c7, 0x8001, 0x2, 0x81, 0x10000, 0x6, 0xff, 0x80000001, 0x5, 0x5, 0x3, 0x3ff, 0x748, 0x7ff80000, 0x9, 0xfffffffa, 0x48, 0x6, 0x3, 0x7, 0xa7a, 0xfff, 0x3, 0x0, 0xfffffffb, 0x9, 0x2, 0x3ff, 0x1, 0xfffffff4, 0xe0, 0x0, 0x8001, 0x4, 0x6fa3, 0xffffffff, 0x3, 0xcd, 0x64, 0x1, 0x5, 0x101, 0xff, 0x8, 0x1000, 0x5, 0x1, 0xe8, 0x1, 0x2, 0x8000, 0x19c, 0x1, 0x9, 0x101, 0x3, 0x81, 0x4], 0x2, 0x400, 0x5}) syz_io_uring_setup(0xc0d, &(0x7f0000000300)={0x0, 0x6386, 0x0, 0x1, 0x65, 0x0, r0}, &(0x7f0000b49000/0x3000)=nil, &(0x7f0000f56000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f00000003c0)=0x1, 0x0, 0x4) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x200, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async) pipe2$watch_queue(&(0x7f0000000800), 0x80) (async) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) (async) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0x4}, 0xa) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000380)={&(0x7f0000000840)=[0x1, 0xffffffff, 0x662, 0x3f, 0x6, 0x9, 0x188, 0x4, 0x0, 0x0, 0x3, 0x80000001, 0x9, 0x2, 0xff, 0x0, 0x68d1, 0x4, 0x400, 0x401, 0x10000, 0x0, 0x2, 0x9, 0x7, 0xffffffff, 0x7f, 0x3, 0x27c, 0x200, 0x0, 0x1, 0x1f, 0x4, 0x80, 0x1, 0x9, 0xffffffff, 0x7fffffff, 0x1, 0x8, 0x0, 0x8, 0x6, 0x0, 0x2, 0x6, 0x6, 0x40, 0xfff, 0xfffffeff, 0x400, 0x800, 0x36000000, 0x7, 0x4, 0x7, 0x0, 0x21b1650d, 0x0, 0x7f, 0x401, 0x5, 0xfffffffa, 0x1, 0x3, 0x8, 0x7ff, 0xffff, 0x1, 0x101, 0x8, 0x37, 0xffffffff, 0x8cd, 0xb2ac, 0x1, 0x6, 0x101, 0xee4b, 0xfffffffa, 0x846, 0xffffffff, 0x7, 0x80000001, 0xd6, 0x823, 0x7ff, 0x1, 0x1ff, 0x5, 0x6, 0x8, 0x1, 0x20, 0x54c, 0x0, 0x400, 0xc000000, 0x1, 0xf2, 0xfffffff7, 0x7, 0x2, 0x13d0aee, 0x1, 0x2, 0x3, 0x1, 0x9, 0x26, 0x3, 0x8, 0xe2, 0x5, 0x1, 0x4, 0xdc3, 0x20, 0x3, 0x6bd, 0x793c, 0x2, 0x377d, 0x6, 0x1300000, 0x7, 0x5, 0x8ad, 0x4, 0xb9, 0x1f, 0x1, 0x7f, 0x81, 0x4, 0x2, 0x9, 0x2, 0x200, 0xd1, 0x7, 0x20, 0x8000, 0x2, 0x101, 0x3, 0x2, 0x73, 0x8, 0x9, 0x80000000, 0x1000, 0x3, 0x1, 0x90, 0x82, 0x0, 0x80, 0x79d, 0xb9, 0xffffffff, 0x6, 0x1, 0x6, 0x80000001, 0x3, 0x80000000, 0xfffff061, 0x7, 0x6508da3e, 0x2, 0x7fff, 0x92, 0x2934, 0x1, 0x7f, 0x2, 0x7f, 0x8e13, 0xf504, 0x8001, 0x6, 0xabb, 0x400, 0x9, 0x15b, 0x7, 0xfffffffb, 0x0, 0x2, 0x6673, 0x6, 0x0, 0xe2, 0x4, 0xd5, 0x3f, 0x0, 0x8, 0x7, 0x7, 0x0, 0x1, 0x0, 0x4, 0x81, 0x80000000, 0x2, 0x0, 0xfffff5b5, 0xfffff2bc, 0xb57b, 0xffff470d, 0x3, 0x8, 0x1ff, 0x8000, 0x9, 0x80000000, 0x200, 0x40, 0x0, 0x5, 0x20, 0x8, 0xfffffffd, 0x0, 0x7, 0x9, 0x7, 0x7ff, 0x8, 0x5, 0x133c, 0x4, 0x1ff, 0x9, 0x5, 0x1, 0x9, 0x6, 0x8, 0x7, 0x23dc4dbd, 0x8, 0x6, 0x3f, 0xfffffffe, 0xfff, 0x18268b6, 0x10001, 0x7f, 0xdbbb, 0x5, 0x2, 0x81, 0xa48, 0x8, 0x101, 0x7, 0x0, 0x6, 0x5, 0x4, 0x5, 0x6, 0x2, 0x9e3, 0x6, 0x0, 0x26e3, 0xffffffff, 0x5, 0x80000000, 0xfff, 0x3, 0xfffffffe, 0x5, 0x1f, 0x7, 0x7fffffff, 0x4f, 0x7, 0x2, 0x55, 0x8, 0x5, 0x1b, 0x8, 0xfcb, 0xab0f, 0x7fff, 0x401, 0x1a9, 0x2, 0x9, 0x6, 0xd1, 0x951, 0xfc, 0xfffeffff, 0x5, 0x1, 0x6, 0x2, 0x7, 0x6000, 0x2, 0x3, 0x80000000, 0xc3, 0xffff, 0xffff, 0x72, 0x5, 0x3a, 0x3f, 0x80000001, 0x9, 0x7, 0x1, 0x40, 0xfff, 0xffff, 0x4, 0x6, 0x2, 0x401, 0x8, 0x3, 0x7ff, 0x2, 0xffff8001, 0x24b, 0x6, 0x7044, 0x800, 0x2477, 0x8, 0x10001, 0x4, 0x0, 0x5, 0x3, 0x7, 0x7e6, 0x6, 0x45cf, 0x8, 0x8, 0x3, 0xc0, 0x4a, 0x5, 0x6, 0x4, 0x9, 0x6, 0xffffffff, 0x2, 0x1ff, 0x1f, 0x884, 0x6, 0xe1, 0x7ff, 0x4, 0x0, 0x6, 0x7, 0x1, 0x3, 0x5, 0x7, 0x609, 0x7fff, 0x5, 0x9, 0x800, 0x9, 0x7, 0x39f2, 0x10001, 0x80, 0x400, 0x1, 0x69e, 0x1992, 0x3, 0x1, 0x1, 0x3, 0xd3d1, 0xffffffff, 0x3, 0xfffffffb, 0x2, 0x134a0ad9, 0x9, 0x3, 0x29dca262, 0x3ff, 0x7e, 0x50, 0x0, 0xc1b, 0x200, 0x6, 0x1, 0x417a79ae, 0x2, 0x101, 0xb9, 0x100, 0x2d58, 0x85b2, 0x3ff, 0x3, 0x65, 0x7, 0x5, 0x101, 0x8a, 0x9, 0x8, 0x1, 0x400, 0xfffffffc, 0x0, 0x2, 0x3f, 0xffffffff, 0xdab4, 0x6, 0x9, 0xe721, 0x8001, 0x6, 0x8, 0x8, 0x7fff, 0x20, 0x3, 0x0, 0xf5, 0x3, 0x1, 0x3, 0xffffff80, 0x3, 0x10001, 0x3, 0x78a, 0x81, 0x5, 0x5, 0x5, 0x10000, 0x0, 0x40, 0xff, 0xa1, 0x6ed6b4b4, 0xfffffffe, 0x10001, 0x1, 0x51b2, 0x8001, 0x3, 0x5d, 0xb1be, 0x80000001, 0x8, 0x0, 0x7, 0x80000000, 0x7, 0x5, 0x20, 0x2, 0x3f, 0xfffffff7, 0x8001, 0x2, 0x5, 0xfffff000, 0x5, 0x9, 0x7fffffff, 0x3ff, 0xcb578bfc, 0x7fffffff, 0x8, 0x200, 0x400, 0x26, 0x10000, 0x2, 0x7fffffff, 0x54, 0x7, 0xfff, 0x4, 0x7, 0x7, 0x4, 0x80000001, 0x4, 0x7fff, 0x0, 0xfaa, 0x9, 0xa8b, 0x80000000, 0xb4, 0x7, 0x8, 0x9, 0x6, 0xd1e, 0xfffffffd, 0x6, 0x4, 0x10000, 0xb6, 0xd5, 0x3f, 0x7f, 0x7fffffff, 0x40000000, 0x9, 0x0, 0x7ff, 0x8, 0x1, 0x7, 0x5, 0x9, 0x9, 0x3ff, 0x7ff, 0x2, 0x3, 0x80, 0x1, 0x7, 0xfff, 0x4, 0x0, 0x3ff, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4, 0x74d, 0x7, 0x8000, 0x7, 0x400, 0x4, 0x3ff, 0x40, 0x7fff, 0x0, 0x8000, 0x2, 0x3ff, 0x401, 0x2, 0x9, 0x0, 0x8001, 0x3ff, 0xffffffff, 0x0, 0x704a, 0xfffffff8, 0x7f, 0x42, 0x1, 0x40, 0xdf09, 0xfffffff8, 0x3, 0x7, 0x0, 0x6, 0x0, 0x6, 0x3, 0x8001, 0x2, 0x1, 0x9b6, 0x9, 0x1d, 0x3ff, 0x1, 0x0, 0x6, 0x0, 0x9, 0x9, 0xfffffffb, 0x8, 0x7fff, 0x80000001, 0x0, 0x5, 0x5, 0x40, 0x6, 0x5, 0x9, 0xe120, 0xa4a, 0x214, 0x2, 0x52864966, 0x1, 0x4, 0x8, 0x8, 0xcd9, 0x80, 0x10001, 0xef3, 0x1, 0x1, 0x800, 0xff, 0x5, 0x0, 0x80000001, 0x57d0, 0xa4ed, 0x4, 0x2, 0x6, 0x0, 0x8001, 0x8, 0x20, 0x7fffffff, 0x1, 0x3, 0xfff, 0x9, 0x5, 0x7, 0x80000000, 0x8, 0x400, 0x7, 0x6, 0x9, 0xffffff01, 0xe9, 0x0, 0x7, 0x4, 0xd3f, 0x2, 0x2f1, 0x3, 0xffffffff, 0x80, 0x7, 0x1, 0x10001, 0xc85d, 0xfffffe01, 0x80000000, 0x76, 0x8, 0x4, 0x3, 0x1, 0x800, 0x200, 0x9, 0x1000, 0xb3a, 0x6f, 0xb06, 0xba81, 0x4, 0x8, 0x2, 0x8, 0x5, 0x5, 0xffffffff, 0x7ff, 0xcf3e, 0x9, 0x5, 0x1f, 0x282, 0x7fff, 0xe34, 0x8, 0x9, 0x4e1, 0x9, 0x5, 0x7, 0x40, 0x288, 0x101, 0x0, 0xb97, 0xe2c, 0x35, 0xffffffff, 0x1000, 0xffffff80, 0x8001, 0x6b, 0x178, 0x1, 0x7, 0x3ff, 0x1, 0x7, 0x20, 0x0, 0x0, 0x10000, 0x0, 0x5038, 0x3, 0x8, 0x7f, 0x0, 0x7, 0x6, 0xf9e, 0x2c, 0x1, 0x5, 0x3, 0xb64, 0x7f82, 0xcc, 0x401, 0x401, 0x7fffffff, 0x2d25, 0x4, 0x3, 0x8, 0x37f8e58c, 0xfffffffa, 0x7, 0x8001, 0x1000, 0xdb21, 0x6, 0x7, 0x4, 0x2, 0x1f, 0x0, 0x1, 0x6, 0x9, 0x6, 0x5, 0x10001, 0x0, 0xfffff000, 0x7fffffff, 0x4, 0x401, 0x0, 0x3, 0x7, 0x81, 0x8000, 0xfffffff7, 0x8001, 0x2, 0x80000000, 0x7fffffff, 0x1, 0x0, 0x8ee, 0x725, 0x1ff, 0x5, 0x4, 0x8000, 0x81, 0x101, 0x6, 0x6, 0x8, 0x80000001, 0x4, 0x80000000, 0x621, 0xe3fc, 0xe889, 0x0, 0x4, 0x80, 0x4, 0x8, 0x5, 0x401, 0x3, 0x5, 0x1, 0x800, 0x4, 0x401, 0xffffffff, 0x0, 0x100, 0x7fff, 0xfe, 0x10000, 0x8000, 0x7, 0x0, 0x3, 0x7, 0x1f0, 0x60a, 0xffff, 0x40, 0x10001, 0x18000000, 0xffff, 0xfffffffc, 0x25, 0x3, 0xe9, 0xffffffff, 0x9d, 0x7, 0x4a5, 0x130, 0x7, 0xfff, 0xffff8001, 0x7, 0x2, 0x3129, 0x6, 0x80, 0xfffffffa, 0x74, 0x5, 0x0, 0x7, 0x0, 0x5, 0x800, 0x0, 0x100, 0x797, 0xfff, 0x9, 0x2, 0x4, 0x7, 0x8f, 0x80, 0xd26, 0x0, 0x0, 0x3fffc, 0x3f, 0x75, 0xfff, 0x8, 0xffff6e72, 0x400, 0x4, 0x1, 0x9, 0x8, 0x101, 0x82, 0x1, 0x3, 0x101, 0x2, 0x80, 0x1, 0x87, 0x200, 0x10001, 0x8, 0xe6e, 0x7fff, 0x0, 0x0, 0x8, 0x7ff, 0xfff, 0x36, 0x0, 0xfff, 0x3, 0x3, 0x7fffffff, 0x9, 0x406a61d5, 0x3ff, 0x9, 0xfff, 0x1, 0x7, 0x0, 0x7fff, 0xffff0000, 0x1, 0x7, 0x1, 0x6, 0x400, 0x63c3e50f, 0x401, 0xbd, 0x3, 0x7fff, 0x5, 0x0, 0x80000001, 0xff, 0x0, 0x4d26, 0x80, 0x3a5, 0x7ff, 0xe8c, 0x0, 0x7f5, 0x101, 0x1, 0x800, 0xffff, 0x0, 0x6, 0x1, 0x508d, 0xfffffffe, 0x2, 0x0, 0x158, 0x8, 0x10001, 0x8, 0x20000, 0xec, 0x8, 0x3, 0x3, 0x400, 0x92c7, 0x8001, 0x2, 0x81, 0x10000, 0x6, 0xff, 0x80000001, 0x5, 0x5, 0x3, 0x3ff, 0x748, 0x7ff80000, 0x9, 0xfffffffa, 0x48, 0x6, 0x3, 0x7, 0xa7a, 0xfff, 0x3, 0x0, 0xfffffffb, 0x9, 0x2, 0x3ff, 0x1, 0xfffffff4, 0xe0, 0x0, 0x8001, 0x4, 0x6fa3, 0xffffffff, 0x3, 0xcd, 0x64, 0x1, 0x5, 0x101, 0xff, 0x8, 0x1000, 0x5, 0x1, 0xe8, 0x1, 0x2, 0x8000, 0x19c, 0x1, 0x9, 0x101, 0x3, 0x81, 0x4], 0x2, 0x400, 0x5}) (async) syz_io_uring_setup(0xc0d, &(0x7f0000000300)={0x0, 0x6386, 0x0, 0x1, 0x65, 0x0, r0}, &(0x7f0000b49000/0x3000)=nil, &(0x7f0000f56000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (async) 14:59:10 executing program 1: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000840)) (async, rerun: 64) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) (async, rerun: 32) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (rerun: 32) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) (async, rerun: 64) r6 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) (rerun: 64) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)=0x0) (async) r9 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r6, r7, r7, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r4, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r9}}}, 0x28) (async, rerun: 32) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r10, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', r2, 0x0, 0x1}, 0x884d) (async, rerun: 64) r11 = syz_io_uring_complete(r3) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800)={0x0, r11}, 0x10) 14:59:10 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000840)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) r6 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)=0x0) r9 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r6, r7, r7, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r4, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r9}}}, 0x28) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r10, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', r2, 0x0, 0x1}, 0x884d) r11 = syz_io_uring_complete(r3) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800)={0x0, r11}, 0x10) 14:59:10 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) r2 = io_uring_setup(0x3cd1, &(0x7f00000001c0)={0x0, 0x785, 0xcaa7a97cbc40c7ce, 0x2, 0x174, 0x0, r0}) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) 14:59:10 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x11b2}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:10 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x4000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:10 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f00000003c0)=0x1, 0x0, 0x4) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x200, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) (async, rerun: 32) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0x4}, 0xa) (async, rerun: 64) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) (rerun: 64) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000380)={&(0x7f0000000840)=[0x1, 0xffffffff, 0x662, 0x3f, 0x6, 0x9, 0x188, 0x4, 0x0, 0x0, 0x3, 0x80000001, 0x9, 0x2, 0xff, 0x0, 0x68d1, 0x4, 0x400, 0x401, 0x10000, 0x0, 0x2, 0x9, 0x7, 0xffffffff, 0x7f, 0x3, 0x27c, 0x200, 0x0, 0x1, 0x1f, 0x4, 0x80, 0x1, 0x9, 0xffffffff, 0x7fffffff, 0x1, 0x8, 0x0, 0x8, 0x6, 0x0, 0x2, 0x6, 0x6, 0x40, 0xfff, 0xfffffeff, 0x400, 0x800, 0x36000000, 0x7, 0x4, 0x7, 0x0, 0x21b1650d, 0x0, 0x7f, 0x401, 0x5, 0xfffffffa, 0x1, 0x3, 0x8, 0x7ff, 0xffff, 0x1, 0x101, 0x8, 0x37, 0xffffffff, 0x8cd, 0xb2ac, 0x1, 0x6, 0x101, 0xee4b, 0xfffffffa, 0x846, 0xffffffff, 0x7, 0x80000001, 0xd6, 0x823, 0x7ff, 0x1, 0x1ff, 0x5, 0x6, 0x8, 0x1, 0x20, 0x54c, 0x0, 0x400, 0xc000000, 0x1, 0xf2, 0xfffffff7, 0x7, 0x2, 0x13d0aee, 0x1, 0x2, 0x3, 0x1, 0x9, 0x26, 0x3, 0x8, 0xe2, 0x5, 0x1, 0x4, 0xdc3, 0x20, 0x3, 0x6bd, 0x793c, 0x2, 0x377d, 0x6, 0x1300000, 0x7, 0x5, 0x8ad, 0x4, 0xb9, 0x1f, 0x1, 0x7f, 0x81, 0x4, 0x2, 0x9, 0x2, 0x200, 0xd1, 0x7, 0x20, 0x8000, 0x2, 0x101, 0x3, 0x2, 0x73, 0x8, 0x9, 0x80000000, 0x1000, 0x3, 0x1, 0x90, 0x82, 0x0, 0x80, 0x79d, 0xb9, 0xffffffff, 0x6, 0x1, 0x6, 0x80000001, 0x3, 0x80000000, 0xfffff061, 0x7, 0x6508da3e, 0x2, 0x7fff, 0x92, 0x2934, 0x1, 0x7f, 0x2, 0x7f, 0x8e13, 0xf504, 0x8001, 0x6, 0xabb, 0x400, 0x9, 0x15b, 0x7, 0xfffffffb, 0x0, 0x2, 0x6673, 0x6, 0x0, 0xe2, 0x4, 0xd5, 0x3f, 0x0, 0x8, 0x7, 0x7, 0x0, 0x1, 0x0, 0x4, 0x81, 0x80000000, 0x2, 0x0, 0xfffff5b5, 0xfffff2bc, 0xb57b, 0xffff470d, 0x3, 0x8, 0x1ff, 0x8000, 0x9, 0x80000000, 0x200, 0x40, 0x0, 0x5, 0x20, 0x8, 0xfffffffd, 0x0, 0x7, 0x9, 0x7, 0x7ff, 0x8, 0x5, 0x133c, 0x4, 0x1ff, 0x9, 0x5, 0x1, 0x9, 0x6, 0x8, 0x7, 0x23dc4dbd, 0x8, 0x6, 0x3f, 0xfffffffe, 0xfff, 0x18268b6, 0x10001, 0x7f, 0xdbbb, 0x5, 0x2, 0x81, 0xa48, 0x8, 0x101, 0x7, 0x0, 0x6, 0x5, 0x4, 0x5, 0x6, 0x2, 0x9e3, 0x6, 0x0, 0x26e3, 0xffffffff, 0x5, 0x80000000, 0xfff, 0x3, 0xfffffffe, 0x5, 0x1f, 0x7, 0x7fffffff, 0x4f, 0x7, 0x2, 0x55, 0x8, 0x5, 0x1b, 0x8, 0xfcb, 0xab0f, 0x7fff, 0x401, 0x1a9, 0x2, 0x9, 0x6, 0xd1, 0x951, 0xfc, 0xfffeffff, 0x5, 0x1, 0x6, 0x2, 0x7, 0x6000, 0x2, 0x3, 0x80000000, 0xc3, 0xffff, 0xffff, 0x72, 0x5, 0x3a, 0x3f, 0x80000001, 0x9, 0x7, 0x1, 0x40, 0xfff, 0xffff, 0x4, 0x6, 0x2, 0x401, 0x8, 0x3, 0x7ff, 0x2, 0xffff8001, 0x24b, 0x6, 0x7044, 0x800, 0x2477, 0x8, 0x10001, 0x4, 0x0, 0x5, 0x3, 0x7, 0x7e6, 0x6, 0x45cf, 0x8, 0x8, 0x3, 0xc0, 0x4a, 0x5, 0x6, 0x4, 0x9, 0x6, 0xffffffff, 0x2, 0x1ff, 0x1f, 0x884, 0x6, 0xe1, 0x7ff, 0x4, 0x0, 0x6, 0x7, 0x1, 0x3, 0x5, 0x7, 0x609, 0x7fff, 0x5, 0x9, 0x800, 0x9, 0x7, 0x39f2, 0x10001, 0x80, 0x400, 0x1, 0x69e, 0x1992, 0x3, 0x1, 0x1, 0x3, 0xd3d1, 0xffffffff, 0x3, 0xfffffffb, 0x2, 0x134a0ad9, 0x9, 0x3, 0x29dca262, 0x3ff, 0x7e, 0x50, 0x0, 0xc1b, 0x200, 0x6, 0x1, 0x417a79ae, 0x2, 0x101, 0xb9, 0x100, 0x2d58, 0x85b2, 0x3ff, 0x3, 0x65, 0x7, 0x5, 0x101, 0x8a, 0x9, 0x8, 0x1, 0x400, 0xfffffffc, 0x0, 0x2, 0x3f, 0xffffffff, 0xdab4, 0x6, 0x9, 0xe721, 0x8001, 0x6, 0x8, 0x8, 0x7fff, 0x20, 0x3, 0x0, 0xf5, 0x3, 0x1, 0x3, 0xffffff80, 0x3, 0x10001, 0x3, 0x78a, 0x81, 0x5, 0x5, 0x5, 0x10000, 0x0, 0x40, 0xff, 0xa1, 0x6ed6b4b4, 0xfffffffe, 0x10001, 0x1, 0x51b2, 0x8001, 0x3, 0x5d, 0xb1be, 0x80000001, 0x8, 0x0, 0x7, 0x80000000, 0x7, 0x5, 0x20, 0x2, 0x3f, 0xfffffff7, 0x8001, 0x2, 0x5, 0xfffff000, 0x5, 0x9, 0x7fffffff, 0x3ff, 0xcb578bfc, 0x7fffffff, 0x8, 0x200, 0x400, 0x26, 0x10000, 0x2, 0x7fffffff, 0x54, 0x7, 0xfff, 0x4, 0x7, 0x7, 0x4, 0x80000001, 0x4, 0x7fff, 0x0, 0xfaa, 0x9, 0xa8b, 0x80000000, 0xb4, 0x7, 0x8, 0x9, 0x6, 0xd1e, 0xfffffffd, 0x6, 0x4, 0x10000, 0xb6, 0xd5, 0x3f, 0x7f, 0x7fffffff, 0x40000000, 0x9, 0x0, 0x7ff, 0x8, 0x1, 0x7, 0x5, 0x9, 0x9, 0x3ff, 0x7ff, 0x2, 0x3, 0x80, 0x1, 0x7, 0xfff, 0x4, 0x0, 0x3ff, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4, 0x74d, 0x7, 0x8000, 0x7, 0x400, 0x4, 0x3ff, 0x40, 0x7fff, 0x0, 0x8000, 0x2, 0x3ff, 0x401, 0x2, 0x9, 0x0, 0x8001, 0x3ff, 0xffffffff, 0x0, 0x704a, 0xfffffff8, 0x7f, 0x42, 0x1, 0x40, 0xdf09, 0xfffffff8, 0x3, 0x7, 0x0, 0x6, 0x0, 0x6, 0x3, 0x8001, 0x2, 0x1, 0x9b6, 0x9, 0x1d, 0x3ff, 0x1, 0x0, 0x6, 0x0, 0x9, 0x9, 0xfffffffb, 0x8, 0x7fff, 0x80000001, 0x0, 0x5, 0x5, 0x40, 0x6, 0x5, 0x9, 0xe120, 0xa4a, 0x214, 0x2, 0x52864966, 0x1, 0x4, 0x8, 0x8, 0xcd9, 0x80, 0x10001, 0xef3, 0x1, 0x1, 0x800, 0xff, 0x5, 0x0, 0x80000001, 0x57d0, 0xa4ed, 0x4, 0x2, 0x6, 0x0, 0x8001, 0x8, 0x20, 0x7fffffff, 0x1, 0x3, 0xfff, 0x9, 0x5, 0x7, 0x80000000, 0x8, 0x400, 0x7, 0x6, 0x9, 0xffffff01, 0xe9, 0x0, 0x7, 0x4, 0xd3f, 0x2, 0x2f1, 0x3, 0xffffffff, 0x80, 0x7, 0x1, 0x10001, 0xc85d, 0xfffffe01, 0x80000000, 0x76, 0x8, 0x4, 0x3, 0x1, 0x800, 0x200, 0x9, 0x1000, 0xb3a, 0x6f, 0xb06, 0xba81, 0x4, 0x8, 0x2, 0x8, 0x5, 0x5, 0xffffffff, 0x7ff, 0xcf3e, 0x9, 0x5, 0x1f, 0x282, 0x7fff, 0xe34, 0x8, 0x9, 0x4e1, 0x9, 0x5, 0x7, 0x40, 0x288, 0x101, 0x0, 0xb97, 0xe2c, 0x35, 0xffffffff, 0x1000, 0xffffff80, 0x8001, 0x6b, 0x178, 0x1, 0x7, 0x3ff, 0x1, 0x7, 0x20, 0x0, 0x0, 0x10000, 0x0, 0x5038, 0x3, 0x8, 0x7f, 0x0, 0x7, 0x6, 0xf9e, 0x2c, 0x1, 0x5, 0x3, 0xb64, 0x7f82, 0xcc, 0x401, 0x401, 0x7fffffff, 0x2d25, 0x4, 0x3, 0x8, 0x37f8e58c, 0xfffffffa, 0x7, 0x8001, 0x1000, 0xdb21, 0x6, 0x7, 0x4, 0x2, 0x1f, 0x0, 0x1, 0x6, 0x9, 0x6, 0x5, 0x10001, 0x0, 0xfffff000, 0x7fffffff, 0x4, 0x401, 0x0, 0x3, 0x7, 0x81, 0x8000, 0xfffffff7, 0x8001, 0x2, 0x80000000, 0x7fffffff, 0x1, 0x0, 0x8ee, 0x725, 0x1ff, 0x5, 0x4, 0x8000, 0x81, 0x101, 0x6, 0x6, 0x8, 0x80000001, 0x4, 0x80000000, 0x621, 0xe3fc, 0xe889, 0x0, 0x4, 0x80, 0x4, 0x8, 0x5, 0x401, 0x3, 0x5, 0x1, 0x800, 0x4, 0x401, 0xffffffff, 0x0, 0x100, 0x7fff, 0xfe, 0x10000, 0x8000, 0x7, 0x0, 0x3, 0x7, 0x1f0, 0x60a, 0xffff, 0x40, 0x10001, 0x18000000, 0xffff, 0xfffffffc, 0x25, 0x3, 0xe9, 0xffffffff, 0x9d, 0x7, 0x4a5, 0x130, 0x7, 0xfff, 0xffff8001, 0x7, 0x2, 0x3129, 0x6, 0x80, 0xfffffffa, 0x74, 0x5, 0x0, 0x7, 0x0, 0x5, 0x800, 0x0, 0x100, 0x797, 0xfff, 0x9, 0x2, 0x4, 0x7, 0x8f, 0x80, 0xd26, 0x0, 0x0, 0x3fffc, 0x3f, 0x75, 0xfff, 0x8, 0xffff6e72, 0x400, 0x4, 0x1, 0x9, 0x8, 0x101, 0x82, 0x1, 0x3, 0x101, 0x2, 0x80, 0x1, 0x87, 0x200, 0x10001, 0x8, 0xe6e, 0x7fff, 0x0, 0x0, 0x8, 0x7ff, 0xfff, 0x36, 0x0, 0xfff, 0x3, 0x3, 0x7fffffff, 0x9, 0x406a61d5, 0x3ff, 0x9, 0xfff, 0x1, 0x7, 0x0, 0x7fff, 0xffff0000, 0x1, 0x7, 0x1, 0x6, 0x400, 0x63c3e50f, 0x401, 0xbd, 0x3, 0x7fff, 0x5, 0x0, 0x80000001, 0xff, 0x0, 0x4d26, 0x80, 0x3a5, 0x7ff, 0xe8c, 0x0, 0x7f5, 0x101, 0x1, 0x800, 0xffff, 0x0, 0x6, 0x1, 0x508d, 0xfffffffe, 0x2, 0x0, 0x158, 0x8, 0x10001, 0x8, 0x20000, 0xec, 0x8, 0x3, 0x3, 0x400, 0x92c7, 0x8001, 0x2, 0x81, 0x10000, 0x6, 0xff, 0x80000001, 0x5, 0x5, 0x3, 0x3ff, 0x748, 0x7ff80000, 0x9, 0xfffffffa, 0x48, 0x6, 0x3, 0x7, 0xa7a, 0xfff, 0x3, 0x0, 0xfffffffb, 0x9, 0x2, 0x3ff, 0x1, 0xfffffff4, 0xe0, 0x0, 0x8001, 0x4, 0x6fa3, 0xffffffff, 0x3, 0xcd, 0x64, 0x1, 0x5, 0x101, 0xff, 0x8, 0x1000, 0x5, 0x1, 0xe8, 0x1, 0x2, 0x8000, 0x19c, 0x1, 0x9, 0x101, 0x3, 0x81, 0x4], 0x2, 0x400, 0x5}) (async) syz_io_uring_setup(0xc0d, &(0x7f0000000300)={0x0, 0x6386, 0x0, 0x1, 0x65, 0x0, r0}, &(0x7f0000b49000/0x3000)=nil, &(0x7f0000f56000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 14:59:10 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x1173}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:10 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x4200}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:10 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x1073}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:10 executing program 1: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000840)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) r6 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)=0x0) r9 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r6, r7, r7, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r4, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r9}}}, 0x28) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r10, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', r2, 0x0, 0x1}, 0x884d) r11 = syz_io_uring_complete(r3) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800)={0x0, r11}, 0x10) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) (async) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) (async) pipe2$watch_queue(&(0x7f0000000800), 0x80) (async) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (async) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (async) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) (async) syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340), {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) (async) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) (async) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r6, r7, r7, 0x0], 0x4, {r2}}, 0x58) (async) write$FUSE_LK(r4, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r9}}}, 0x28) (async) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) (async) pipe2$watch_queue(&(0x7f0000000800), 0x80) (async) sendmsg$SMC_PNETID_FLUSH(r10, 0x0, 0x0) (async) syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', r2, 0x0, 0x1}, 0x884d) (async) syz_io_uring_complete(r3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800)={0x0, r11}, 0x10) (async) 14:59:10 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000100)=[0x1, 0x1c6e, 0x80000000, 0xfffffffc, 0x7, 0x6], 0x6, 0x0, 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x7, &(0x7f0000000300)={0x0, 0x6854, 0x200, 0x3, 0x23d, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000df5000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000e52000/0x1000)=nil, 0x1000, 0x2, 0x13, r0, 0x0) 14:59:11 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x5a0a}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:11 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, r2, 0x10000000) 14:59:11 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000840)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) r6 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)=0x0) r9 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r6, r7, r7, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r4, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r9}}}, 0x28) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r10, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', r2, 0x0, 0x1}, 0x884d) r11 = syz_io_uring_complete(r3) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800)={0x0, r11}, 0x10) 14:59:11 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffe, 0x0) syz_io_uring_setup(0x76c6, &(0x7f0000000180)={0x0, 0xfffffc01, 0x400, 0x0, 0x5c, 0x0, r0}, &(0x7f0000ea5000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80c00) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x71, 0x0, r5}, 0x5) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300), 0x10, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x14, 0x0, @fd_index=0x6, 0x0, 0x0, 0x1, 0x4, 0x1, {0x0, 0x0, r6}}, 0x2) syz_io_uring_setup(0x52e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:11 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0xa5a}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:11 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, r2, 0x10000000) 14:59:11 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x6000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:11 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000851000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:11 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x600}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:11 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x7200}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:11 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x500}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:11 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, r2, 0x10000000) 14:59:11 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000851000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000851000/0x1000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) 14:59:11 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x7310}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:11 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000840)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) r6 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)=0x0) r9 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r6, r7, r7, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r4, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r9}}}, 0x28) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r10, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', r2, 0x0, 0x1}, 0x884d) r11 = syz_io_uring_complete(r3) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800)={0x0, r11}, 0x10) 14:59:11 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, r2, 0x10000000) 14:59:11 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000851000/0x1000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:11 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x7311}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:11 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x0, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4}, 0x1, 0x0, 0x0, 0x44004}, 0x2c008004) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x1000)=nil, 0x930, 0x4, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) 14:59:11 executing program 4: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) keyctl$get_security(0x11, 0x0, &(0x7f00000000c0)=""/12, 0xc) r2 = io_uring_setup(0x10bf, &(0x7f0000000180)) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x2a4040, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x14, 0x0, 0x0, 0x86a0d, &(0x7f0000000280)=[r5, r6, r0, r7, r8, r0, r8], 0x7}, 0x48) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r9, 0x0) 14:59:11 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x55cb, &(0x7f0000000000)={0x0, 0x7d70, 0x4, 0x1, 0x1d2, 0x0, r0}, &(0x7f0000dfb000/0x4000)=nil, &(0x7f000090c000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) r2 = io_uring_setup(0x10bf, &(0x7f0000000180)) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd_index=0x7, 0x1, 0x0, 0x3, 0x2}, 0x2) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x9) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:11 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:11 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x7670, &(0x7f0000000180)={0x0, 0xe72, 0x100, 0x2, 0x19, 0x0, r0}) 14:59:11 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x9100}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:11 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:12 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000840)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) r6 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)=0x0) r9 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r6, r7, r7, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r4, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r9}}}, 0x28) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r10, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', r2, 0x0, 0x1}, 0x884d) syz_io_uring_complete(r3) 14:59:12 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x7670, &(0x7f0000000180)={0x0, 0xe72, 0x100, 0x2, 0x19, 0x0, r0}) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_setup(0x7670, &(0x7f0000000180)={0x0, 0xe72, 0x100, 0x2, 0x19, 0x0, r0}) (async) 14:59:12 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xb211}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:12 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x36}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:12 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:12 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xb311}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:12 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x7670, &(0x7f0000000180)={0x0, 0xe72, 0x100, 0x2, 0x19, 0x0, r0}) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_setup(0x7670, &(0x7f0000000180)={0x0, 0xe72, 0x100, 0x2, 0x19, 0x0, r0}) (async) 14:59:12 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xf30a}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:12 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000840)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) r6 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)=0x0) r9 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r6, r7, r7, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r4, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r9}}}, 0x28) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r10, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', r2, 0x0, 0x1}, 0x884d) 14:59:12 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:12 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 1: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x11b6, &(0x7f0000000180)={0x0, 0x61ea, 0x4, 0x0, 0xce, 0x0, r0}, &(0x7f0000a39000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 14:59:12 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:12 executing program 1: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x11b6, &(0x7f0000000180)={0x0, 0x61ea, 0x4, 0x0, 0xce, 0x0, r0}, &(0x7f0000a39000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_setup(0x11b6, &(0x7f0000000180)={0x0, 0x61ea, 0x4, 0x0, 0xce, 0x0, r0}, &(0x7f0000a39000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) 14:59:12 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x0, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x40000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:12 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 14:59:12 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000b40)={0x18}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) r5 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) r7 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r5, r6, r6, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r3, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r7}}}, 0x28) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r8, 0x0, 0x0) 14:59:13 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:13 executing program 1: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_setup(0x11b6, &(0x7f0000000180)={0x0, 0x61ea, 0x4, 0x0, 0xce, 0x0, r0}, &(0x7f0000a39000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 14:59:13 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x100000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:13 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 1: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/151, &(0x7f0000000240)=0x97) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:13 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) io_uring_setup(0x15a5, &(0x7f00000001c0)={0x0, 0x3ff, 0x4, 0x0, 0x23a, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:13 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000b40)={0x18}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) r5 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) r7 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r5, r6, r6, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r3, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r7}}}, 0x28) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) pipe2$watch_queue(&(0x7f0000000800), 0x80) 14:59:13 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x200000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:13 executing program 1: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/151, &(0x7f0000000240)=0x97) (async) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:13 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:13 executing program 3: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/151, &(0x7f0000000240)=0x97) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:13 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x2000001, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x400000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:13 executing program 1: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/151, &(0x7f0000000240)=0x97) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2$watch_queue(&(0x7f0000000800), 0x80) (async) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/151, &(0x7f0000000240)=0x97) (async) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) 14:59:13 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x0, 0x50132, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:13 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x100000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:13 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000b40)={0x18}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000b40)={0x18}, 0x18) r5 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) r7 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r5, r6, r6, 0x0], 0x4, {r2}}, 0x58) write$FUSE_LK(r3, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r7}}}, 0x28) syz_io_uring_setup(0x2183, &(0x7f0000000600)={0x0, 0x97b5, 0x8, 0x2, 0x330, 0x0, r1}, &(0x7f0000b0a000/0x2000)=nil, &(0x7f0000a9b000/0x14000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:59:13 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x600000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:13 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x30}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:13 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:13 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x80ffff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:13 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000cf1000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 14:59:13 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r1 = io_uring_setup(0x4c4a, &(0x7f0000000480)={0x0, 0x56ba, 0x200, 0x2, 0x386, 0x0, r0}) io_uring_setup(0x7bcb, &(0x7f0000000500)={0x0, 0x34cb, 0x2, 0x3, 0x81, 0x0, r1}) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="5080870000001081", @ANYRES64=0x0, @ANYBLOB="06000000c6c880d9000000010000000001000000ff0100000000000000000000050000000000000005000000000000000700000002000000285c7b257b5e5c00"], 0x50) r2 = io_uring_setup(0x35ad, &(0x7f0000000200)={0x0, 0xd744, 0x0, 0x2, 0x3e6}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ab7000/0x4000)=nil, 0x4000, 0x3, 0x10010, r2, 0x0) r4 = io_uring_setup(0x10bf, &(0x7f0000000180)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000640)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0xa043, 0xca, 0xffffffc1, 0x1, {0x0, 0x9, 0x400, 0xfffffffffffffeff, 0xffffffffffffffff, 0x10001, 0x1, 0x1, 0x6, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf7e}}, {0x0, 0x8}}}, 0xa0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000004400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$CAPI_GET_ERRCODE(r8, 0x80024321, &(0x7f00000044c0)) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) read$FUSE(r8, &(0x7f00000045c0)={0x2020, 0x0, 0x0}, 0x2020) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x10010, 0xffffffffffffffff, 0x0) write$FUSE_STATFS(r8, &(0x7f0000006600)={0x60, 0x0, r9, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x401, 0x32c}}}, 0x60) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000006ac0)={0x20, 0x0, r9, {0x6, 0x0, 0x20, 0x1}}, 0x20) write$FUSE_WRITE(r7, &(0x7f0000000440)={0x18, 0x0, r9}, 0x18) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r10, &(0x7f0000000b40)={0x18}, 0x18) syz_io_uring_submit(r3, r6, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x10000, &(0x7f0000000340)=[r2, r2, r7, r2, r0, r10], 0x6}, 0x8) r11 = syz_io_uring_complete(r5) io_uring_setup(0x1aa3, &(0x7f00000003c0)={0x0, 0x7cff, 0x100, 0x0, 0x1ca, 0x0, r11}) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x80000000, 0xa1b], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r12, 0x28, 0x6, &(0x7f0000000600), 0x10) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:14 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x1e}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:14 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:14 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307, 0x0, r0}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:14 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xc0ff20}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:14 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000b40)={0x18}, 0x18) r4 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) r6 = syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r4, r5, r5, 0x0], 0x4, {r1}}, 0x58) write$FUSE_LK(r2, &(0x7f0000000a80)={0x28, 0x24, 0x0, {{0x9, 0x8001, 0x0, r6}}}, 0x28) 14:59:14 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:14 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:14 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0xf}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:14 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000300)="2bc58496086770caa9f21e5257eeb7ebc2de51b0d9147c76bd31d099bc09fb605a3e6f56ff2fb4ac6945c02c5efab092a6b7d0d736435874e053f9ac969f8064ee2b2d6c7e70cca6380705bce8f10635962b7c60234661be69f52a0e53fa163311df5c7db86bec0f3300c51423bed7ffc6711f715785ba594751f864bd27594aabd953e15f30fa101bfed2eb89e3ce79258624d330b236428603cd24bdbe257e58234ec37995ff04310da7ae6e55999c0ae60489d4519803d45d7a9c24ed49c7bc01520619456e2d", 0xc8) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x30, r0, 0x10000000) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) getsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000040), &(0x7f0000000100)=0x4) 14:59:14 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307, 0x0, r0}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:14 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x2000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:14 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:14 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000b40)={0x18}, 0x18) r4 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r4, r5, r5, 0x0], 0x4, {r1}}, 0x58) 14:59:14 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0xe}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:14 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:14 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x2040000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:14 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307, 0x0, r0}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:14 executing program 4: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:14 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x3000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:14 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)={0x0, 0x0, @d}, 0x18, 0xfffffffffffffffd) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:14 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000b40)={0x18}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) r3 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r3, r4, r4, 0x0], 0x4, {r0}}, 0x58) 14:59:14 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0xff0f002100000000) 14:59:14 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307, 0x0, r0}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:14 executing program 4: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:14 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x4000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:15 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0xff0f002100000000) 14:59:15 executing program 4: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:15 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307, 0x0, r0}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:15 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0xff0f002100000000) 14:59:15 executing program 0: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307, 0x0, r0}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:15 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x5000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:15 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000b40)={0x18}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) r3 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r3, r4, r4, 0x0], 0x4, {r0}}, 0x58) 14:59:15 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0xff0f002100000000) 14:59:15 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:15 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307, 0x0, r0}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:15 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x6000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:15 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0xff0f002100000000) 14:59:15 executing program 0: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307, 0x0, r0}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:15 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:15 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0xff0f002100000000) 14:59:15 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:15 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x7000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:15 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000b40)={0x18}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) r3 = syz_clone3(&(0x7f00000004c0)={0x5084000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x3b}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000440)=""/10, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[r3, r4, r4, 0x0], 0x4, {r0}}, 0x58) 14:59:15 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0xff0f002100000000) 14:59:15 executing program 0: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:15 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:15 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0xff0f002100000000) 14:59:15 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:15 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x8000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:15 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0xff0f002100000000) 14:59:15 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000b40)={0x18}, 0x18) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:15 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:15 executing program 4: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:15 executing program 0: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:15 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x9000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:15 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x10, r0, 0xff0f002100000000) 14:59:15 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307, 0x0, r0}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:15 executing program 0: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0xff0f002100000000) 14:59:16 executing program 4: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:16 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0xff0f002100000000) 14:59:16 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xc000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:16 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0xff0f002100000000) 14:59:16 executing program 4: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 0: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:16 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x9000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:16 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xd000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:16 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000b40)={0x18}, 0x18) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:16 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 1: syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:16 executing program 0: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xe000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:16 executing program 3: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 0: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 1: syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:16 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:16 executing program 0: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xf000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:16 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x6d66}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e3d000/0x4000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1b6b, &(0x7f0000000140), &(0x7f0000b0c000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:16 executing program 1: syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:16 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x10000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:16 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:16 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:16 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:16 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, 0x0, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 3: syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:17 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x12000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:17 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:17 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, 0x0, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:17 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:17 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, 0x0, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x18000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:17 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:17 executing program 1: syz_io_uring_setup(0x3fc, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:17 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1e000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:17 executing program 0: r0 = syz_io_uring_setup(0x4866, 0x0, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:17 executing program 1: syz_io_uring_setup(0x3fc, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:17 executing program 0: r0 = syz_io_uring_setup(0x4866, 0x0, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:17 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1f000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:17 executing program 0: r0 = syz_io_uring_setup(0x4866, 0x0, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 1: syz_io_uring_setup(0x3fc, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:17 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1fffefff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:17 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x9193, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:17 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:17 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:18 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:18 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, 0x0, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x1fffffff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:18 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:18 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, 0x0, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x132}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:18 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:18 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:18 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:18 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, 0x0, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x207fffff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:18 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:18 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, 0x0, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:18 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r0}}, 0x58) 14:59:18 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20812fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:18 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, 0x0, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:18 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:18 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, 0x0, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:18 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r0}}, 0x58) 14:59:18 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20894fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:18 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:18 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x132, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x0, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:19 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20925fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:19 executing program 2: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:19 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r0}}, 0x58) 14:59:19 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x4866, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r1}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:19 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20a9cfff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:19 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:19 executing program 2: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:19 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20aaffff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:19 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:19 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 2: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:19 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:19 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20b24fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:19 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:19 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 0: syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, 0x0, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:19 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20b49fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:19 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:19 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:19 executing program 0: syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, 0x0, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20d56fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:19 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:19 executing program 0: syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, 0x0, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:20 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:20 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:20 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:20 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:20 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20f56fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:20 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:20 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:20 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:20 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:20 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20f89fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:20 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:20 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:20 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:20 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:20 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20ffbfff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:20 executing program 0: syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:20 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:20 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:20 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:20 executing program 2: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:20 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x20ffc000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:20 executing program 0: syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 14:59:20 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:20 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:20 executing program 0: syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 14:59:20 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:20 executing program 2: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:20 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x210aafff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:20 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, 0x0, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:20 executing program 0: syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 14:59:21 executing program 3: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:21 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, 0x0, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:21 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, 0x0, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:21 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x24000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:21 executing program 0: syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), 0x0) 14:59:21 executing program 2: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:21 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, 0x0, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:21 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, 0x0, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:21 executing program 3: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:21 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x2a000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:21 executing program 0: syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), 0x0) 14:59:21 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:21 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:21 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, 0x0, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:21 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x30000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:21 executing program 0: syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), 0x0) 14:59:21 executing program 3: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:21 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:21 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:21 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x36000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:21 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:21 executing program 0: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:21 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:21 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x3c000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:21 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:21 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:21 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:21 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x3f000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:21 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:21 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:22 executing program 0: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, 0x0, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:22 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:22 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x42000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:22 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 14:59:22 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:22 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x47720fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:22 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 14:59:22 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:22 executing program 3: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 14:59:22 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x56a00fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:22 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x47720fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:22 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, &(0x7f0000000140)) 14:59:22 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), 0x0) 14:59:22 executing program 3: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x56a90fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:22 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, &(0x7f0000000140)) 14:59:22 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), 0x0) 14:59:22 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:22 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x56b00fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:22 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, &(0x7f0000000140)) 14:59:23 executing program 3: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300), &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), 0x0) 14:59:23 executing program 0: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) 14:59:23 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x56bfffff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:23 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x5a0a0000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:23 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x42000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:23 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) 14:59:23 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x72000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:23 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) 14:59:23 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x73100000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:23 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 1: syz_io_uring_setup(0x3fc, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180), &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:23 executing program 0: r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:23 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:23 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x73110000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:24 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:24 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x4866, &(0x7f0000000000), &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:24 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:24 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x91000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:24 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:24 executing program 1: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:24 executing program 4: r0 = syz_io_uring_setup(0x4866, 0x0, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000bc3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x560b, &(0x7f0000000300)={0x0, 0xc53a, 0x80, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ef7000/0x4000)=nil, &(0x7f0000e7f000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 14:59:24 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:24 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xb2110000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:24 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:24 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:24 executing program 1: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000880)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000db4000/0x8000)=nil, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) 14:59:24 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x15ed, &(0x7f0000000180)={0x0, 0x92e4, 0x40, 0x0, 0x307}, &(0x7f0000c5e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:24 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xb3110000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:24 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:24 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:24 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2c61, &(0x7f0000000180)={0x0, 0x1d45, 0x8, 0x2, 0x176, 0x0, r0}, &(0x7f0000f99000/0x2000)=nil, &(0x7f0000b5a000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000f7c000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x6, 0x4007, @fd_index=0x4, 0x5, 0x1ae7c000000, 0x41, 0x12, 0x0, {0x3}}, 0x4) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x111000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000f68000/0x2000)=nil, 0x2000, 0x2, 0x110, r3, 0x10000000) 14:59:24 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xf30a0000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:24 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x411, &(0x7f0000000000)={0x0, 0xcda6, 0x80, 0x2, 0x3a3, 0x0, r0}, &(0x7f0000ae8000/0x3000)=nil, &(0x7f0000d1b000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x4052e, &(0x7f0000000280)={0x0, 0xffffffff, 0x0, 0x0, 0x31, 0x0, r1}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:24 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:24 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) r1 = io_uring_setup(0x2c7b, &(0x7f0000000300)={0x0, 0x59e8, 0x40, 0x0, 0x34b, 0x0, r0}) syz_io_uring_setup(0xa81, &(0x7f0000000380)={0x0, 0x5eea, 0x229, 0x1, 0x10b, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) select(0x40, &(0x7f0000000000)={0x1, 0xed, 0x6, 0x4, 0x7, 0x4, 0x200, 0x40}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) syz_open_dev$char_usb(0xc, 0xb4, 0x4) 14:59:24 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:24 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xfeffffff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:24 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f00000042c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), 0x0, {0x22}, &(0x7f0000000100)=""/72, 0x48, &(0x7f0000000180)=""/113, &(0x7f0000004280)=[0x0, 0xffffffffffffffff, 0x0, r0, 0x0], 0x5}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000df8000/0x3000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) pipe2$watch_queue(&(0x7f0000004400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f00000044c0)) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) read$FUSE(r3, &(0x7f00000045c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f0000006600)={0x60, 0x0, r4, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x401, 0x32c}}}, 0x60) openat$cgroup_devices(r3, &(0x7f0000006680)='devices.allow\x00', 0x2, 0x0) pipe2$watch_queue(&(0x7f00000066c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006700)={r3, r5, 0x25}, 0x10) write$FUSE_INIT(r3, &(0x7f0000006740)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x26, 0x3ff, 0x468000, 0x2, 0x4, 0x7, 0x401}}, 0x50) write$FUSE_BMAP(r5, &(0x7f0000006800)={0x18, 0xffffffffffffffda, r2, {0x8000}}, 0x18) write$FUSE_INTERRUPT(r1, &(0x7f0000000200)={0x10, 0x0, r2}, 0x10) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) 14:59:24 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:24 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000868000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000000)=[{0x2, 0x2, {0x0, 0x1, 0x4}, {0x2, 0xff, 0x1}, 0x2, 0xfd}, {0x1, 0x0, {0x2, 0x0, 0xde8aec7cc8c386f4}, {0x6, 0xf0, 0x2}, 0xfd, 0xf3d8a81c1c1bb946}, {0x2, 0x1, {0x0, 0xff, 0x1}, {0x1, 0xff, 0x3}, 0x1, 0xff}], 0x60) 14:59:25 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:25 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) r1 = io_uring_setup(0x2c7b, &(0x7f0000000300)={0x0, 0x59e8, 0x40, 0x0, 0x34b, 0x0, r0}) syz_io_uring_setup(0xa81, &(0x7f0000000380)={0x0, 0x5eea, 0x229, 0x1, 0x10b, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) select(0x40, &(0x7f0000000000)={0x1, 0xed, 0x6, 0x4, 0x7, 0x4, 0x200, 0x40}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) syz_open_dev$char_usb(0xc, 0xb4, 0x4) 14:59:25 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff0f7247}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:25 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, &(0x7f0000000840)) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:25 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000868000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000000)=[{0x2, 0x2, {0x0, 0x1, 0x4}, {0x2, 0xff, 0x1}, 0x2, 0xfd}, {0x1, 0x0, {0x2, 0x0, 0xde8aec7cc8c386f4}, {0x6, 0xf0, 0x2}, 0xfd, 0xf3d8a81c1c1bb946}, {0x2, 0x1, {0x0, 0xff, 0x1}, {0x1, 0xff, 0x3}, 0x1, 0xff}], 0x60) 14:59:25 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:25 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff0fa056}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:25 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) r1 = io_uring_setup(0x2c7b, &(0x7f0000000300)={0x0, 0x59e8, 0x40, 0x0, 0x34b, 0x0, r0}) syz_io_uring_setup(0xa81, &(0x7f0000000380)={0x0, 0x5eea, 0x229, 0x1, 0x10b, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) select(0x40, &(0x7f0000000000)={0x1, 0xed, 0x6, 0x4, 0x7, 0x4, 0x200, 0x40}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) syz_open_dev$char_usb(0xc, 0xb4, 0x4) 14:59:25 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:25 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:25 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x1, 0x7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r1 = io_uring_setup(0x75e6, &(0x7f0000000300)={0x0, 0x4dfc, 0x20, 0x2, 0x287}) r2 = syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x20010, r1, 0x10000000) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240), 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000e34000/0x1000)=nil, 0x930, 0x5, 0x8010, r3, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:25 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x4d8d, &(0x7f0000000180)={0x0, 0x392b, 0x800, 0x3, 0x2c, 0x0, r0}, &(0x7f0000a49000/0x3000)=nil, &(0x7f0000b13000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 14:59:25 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff0fa956}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:25 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:25 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) r1 = io_uring_setup(0x2c7b, &(0x7f0000000300)={0x0, 0x59e8, 0x40, 0x0, 0x34b, 0x0, r0}) syz_io_uring_setup(0xa81, &(0x7f0000000380)={0x0, 0x5eea, 0x229, 0x1, 0x10b, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) select(0x40, &(0x7f0000000000)={0x1, 0xed, 0x6, 0x4, 0x7, 0x4, 0x200, 0x40}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) 14:59:25 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:25 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:25 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff0fb056}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:25 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffe, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x1000005, 0x4000110, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x20, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x181040, 0xc0, 0x2}, &(0x7f0000000100)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) r3 = io_uring_setup(0x664d, &(0x7f0000000300)={0x0, 0xa91e, 0x80, 0x1, 0x22b, 0x0, r0}) syz_io_uring_setup(0x1bf7, &(0x7f0000000380)={0x0, 0xfffffffd, 0x80, 0x0, 0xffffffff, 0x0, r3}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:25 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) io_uring_setup(0x2c7b, &(0x7f0000000300)={0x0, 0x59e8, 0x40, 0x0, 0x34b, 0x0, r0}) select(0x40, &(0x7f0000000000)={0x1, 0xed, 0x6, 0x4, 0x7, 0x4, 0x200, 0x40}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) 14:59:25 executing program 2: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:25 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:25 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff2f8120}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:26 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) select(0x40, &(0x7f0000000000)={0x1, 0xed, 0x6, 0x4, 0x7, 0x4, 0x200, 0x40}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) 14:59:26 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff4f8920}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:26 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) select(0x40, &(0x7f0000000000)={0x1, 0xed, 0x6, 0x4, 0x7, 0x4, 0x200, 0x40}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) 14:59:26 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff4fb220}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:26 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x1, 0xed, 0x6, 0x4, 0x7, 0x4, 0x200, 0x40}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) 14:59:26 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x880a, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x1, 0xed, 0x6, 0x4, 0x7, 0x4, 0x200, 0x40}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) 14:59:26 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff5f9220}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:26 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 1: select(0x40, &(0x7f0000000000)={0x1, 0xed, 0x6, 0x4, 0x7, 0x4, 0x200, 0x40}, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) 14:59:26 executing program 1: select(0x0, 0x0, &(0x7f0000000040)={0x2, 0x5, 0x2, 0x4, 0x8, 0x101, 0xd6, 0x8000000000000001}, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) 14:59:26 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff6fd520}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:26 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 1: select(0x0, 0x0, 0x0, &(0x7f0000000100)={0x4, 0x401, 0x3, 0xffffffffffffffb9, 0x7, 0x8000000000000001, 0xfffffffffffffffd, 0x80000000}, &(0x7f0000000200)={0x0, 0x2710}) 14:59:26 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:26 executing program 1: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) 14:59:26 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff6ff520}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:26 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:27 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x800, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:27 executing program 1: select(0x0, 0x0, 0x0, 0x0, 0x0) 14:59:27 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:27 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:27 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff9fb420}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:27 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:27 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:27 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:27 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xff9ff820}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:27 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:27 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x55f9, &(0x7f0000000180)={0x0, 0x3f09, 0x800, 0x3, 0x3b5}) 14:59:27 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:27 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:27 executing program 1: select(0x0, 0x0, 0x0, 0x0, 0x0) 14:59:27 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xffaf0a21}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:27 executing program 0: r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x773, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x400, 0x2aa, 0x0, r0}, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:27 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:27 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:27 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:28 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xffbfff20}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:28 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:28 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:28 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:28 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:28 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xffcfa920}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3450.524281][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.530653][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 14:59:28 executing program 1: select(0x0, 0x0, 0x0, 0x0, 0x0) 14:59:28 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:28 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:28 executing program 4: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:28 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xffefff1f}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:28 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:28 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xffff7f20}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:28 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 4: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xffff8000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:29 executing program 0: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 4: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xffffaa20}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:29 executing program 0: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xffffbf56}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:29 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:29 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:30 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xffffff1f}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:30 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:30 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:30 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xffefff1f}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:30 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:30 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:30 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0xfffffffe}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:30 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:30 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:30 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:30 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380), &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:30 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) syz_io_uring_setup(0xd54, &(0x7f0000000000)={0x0, 0x33c, 0x100, 0x0, 0x197, 0x0, r0}, &(0x7f0000828000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) r2 = io_uring_setup(0x10bf, &(0x7f0000000180)) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r6, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3, 0x4}}, 0x0, 0x0, 0x1}, 0x5) 14:59:30 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) write$capi20(r0, &(0x7f0000000100)={0x10, 0x8, 0x82, 0x83, 0x0, 0x2}, 0x10) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000200)) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1e76, &(0x7f0000000140)={0x0, 0xe1ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0xb0000) 14:59:30 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:30 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:30 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:30 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000240)={{@any, 0xffff}, 0x0, 0x1f, 0x3ca4, 0x7ff}) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, r0}, &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={0x0, 0x0, 0x1000}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'sha384\x00'}}, &(0x7f0000000240), &(0x7f0000000300)=""/4096) 14:59:30 executing program 4: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:30 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:30 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:30 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:30 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000240)={{@any, 0xffff}, 0x0, 0x1f, 0x3ca4, 0x7ff}) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, r0}, &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={0x0, 0x0, 0x1000}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'sha384\x00'}}, &(0x7f0000000240), &(0x7f0000000300)=""/4096) 14:59:30 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:30 executing program 4: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:31 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:31 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:31 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:31 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:31 executing program 4: r0 = syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:31 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:31 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:31 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000300)={0x0, 0x135a, 0x80, 0x4}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000100), 0x0, 0x4) r0 = syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x1000008, 0x40010, r0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00009b4000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x3, 0x4004, @fd_index=0x4, 0xbf4, &(0x7f0000000000)="aee3b8ea5e413eadda9cbeed2042ba", 0xf, 0x0, 0x1}, 0x7) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000080)={@host, 0x9}) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:31 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:31 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:31 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:31 executing program 1: write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5}, 0x2) syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:31 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:31 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:31 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:31 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:31 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0xa00000000000000, 0x11, r0, 0x0) 14:59:31 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x300}, &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) gettid() syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 14:59:31 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:31 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:31 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:31 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:31 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:31 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:32 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:32 executing program 1: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:32 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:32 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:32 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:32 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:32 executing program 2: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:32 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:32 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ebf000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) io_uring_setup(0x6ede, &(0x7f0000000000)={0x0, 0xa34b, 0x400, 0x2, 0x1f8, 0x0, r1}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) syz_io_uring_complete(r0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x2, 0x9, 0xfff, 0x4, 0x6, 0x3], 0x6, 0x80000}) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe2e0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4010004) 14:59:32 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:32 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:32 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:32 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) r0 = syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000cb7000/0x1000)=nil, 0x1000, 0xe, 0x4000810, r1, 0x0) syz_io_uring_setup(0x5548, &(0x7f0000000000)={0x0, 0x6797, 0x800, 0x0, 0x1d3, 0x0, r0}, &(0x7f000084d000/0x1000)=nil, &(0x7f0000d5b000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 14:59:32 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:32 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:32 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:32 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:32 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xd}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:32 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:32 executing program 2: syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f00000042c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), 0x0, {0x22}, &(0x7f0000000100)=""/72, 0x48, &(0x7f0000000180)=""/113, &(0x7f0000004280)=[0x0, 0xffffffffffffffff, 0x0, r0, 0x0], 0x5}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_clone3(&(0x7f00000042c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), 0x0, {0x22}, &(0x7f0000000100)=""/72, 0x48, &(0x7f0000000180)=""/113, &(0x7f0000004280)=[0x0, 0xffffffffffffffff, 0x0, r1, 0x0], 0x5}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f00000042c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), 0x0, {0x22}, &(0x7f0000000100)=""/72, 0x48, &(0x7f0000000180)=""/113, &(0x7f0000004280)=[0x0, 0xffffffffffffffff, 0x0, r3, 0x0], 0x5}, 0x58) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001480)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f00000014c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) r5 = gettid() r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001400)={0x144062100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x14}, &(0x7f0000000300)=""/177, 0xb1, &(0x7f00000003c0)=""/4096, &(0x7f0000000200)=[r0, r1, 0xffffffffffffffff, r3, 0xffffffffffffffff, r5, 0xffffffffffffffff], 0x7, {r6}}, 0x58) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000001540)={0x5, 0x0, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 14:59:32 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:32 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000300), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r0, 0x0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x0, 0x0, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}]}, 0x24}}, 0x8000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0xc6, 0x1ff, 0x7f, 0x9, 0x10001]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000180), 0x0, 0x4) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:32 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r1 = io_uring_setup(0x7aa2, &(0x7f0000000000)={0x0, 0xf0c9, 0x400, 0x1, 0x89, 0x0, r0}) syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x0, 0x100000, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:32 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xe}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:33 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:33 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:33 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:33 executing program 3: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0xfffffffffffffffe, 0x0, {0xdc04, 0x4, 0x0, 0x79}}, 0x20) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:33 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:33 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:33 executing program 0: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:33 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:33 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:33 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140)={0x0, 0x0, 0x10, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:33 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff8fce20}, &(0x7f0000bc8000/0x1000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:33 executing program 0: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:33 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:33 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:33 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:33 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x50e3, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000de0000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), 0x0) r1 = io_uring_setup(0x10bf, &(0x7f0000000180)) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f00008bc000/0x3000)=nil, 0x3000, 0x2, 0x40070, r0, 0x10000000) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r4, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r4, &(0x7f0000000000), r0}, 0x7fff) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:33 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x12}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:33 executing program 0: syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:33 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:33 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:33 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x18}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:33 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:33 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:33 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:33 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000b40)={0x18}, 0x18) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, r1, {0x8}}, 0x18) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f00000044c0)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000045c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000006600)={0x60, 0x0, r2, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x1, 0x9, 0x0, 0x32c}}}, 0x60) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000006ac0)={0x20, 0x0, 0x0, {0x6, 0x0, 0x20, 0x1}}, 0x20) pipe2$watch_queue(&(0x7f0000004400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000004500), &(0x7f0000004540)=0x4) read$FUSE(r3, &(0x7f00000045c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f0000006600)={0x60, 0x0, r4, {{0x10001, 0x5, 0x2, 0x8000000000000, 0x0, 0x9, 0x401, 0x32c}}}, 0x60) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000140)='0\x00', 0x2) syz_io_uring_setup(0x52e, &(0x7f0000000280)={0x0, 0x2}, &(0x7f0000bfb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x1ef6, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 14:59:34 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 14:59:34 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, 0xffffffffffffffff, 0x0) 14:59:34 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1e}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:34 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:34 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, 0xffffffffffffffff, 0x0) [ 3456.066899][T21013] FAULT_INJECTION: forcing a failure. [ 3456.066899][T21013] name fail_usercopy, interval 1, probability 0, space 0, times 0 14:59:34 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, 0xffffffffffffffff, 0x0) 14:59:34 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3456.162683][T21013] CPU: 0 PID: 21013 Comm: syz-executor.2 Not tainted 6.2.0-rc1-syzkaller #0 [ 3456.171444][T21013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3456.181542][T21013] Call Trace: [ 3456.184856][T21013] [ 3456.187830][T21013] dump_stack_lvl+0xd1/0x138 [ 3456.192509][T21013] should_fail_ex.cold+0x5/0xa [ 3456.197327][T21013] _copy_from_user+0x2e/0x170 [ 3456.202044][T21013] copy_clone_args_from_user+0x147/0x780 [ 3456.207714][T21013] ? __list_add_rcu+0xe0/0xe0 [ 3456.212417][T21013] ? ksys_write+0x210/0x250 [ 3456.216955][T21013] ? lock_downgrade+0x6e0/0x6e0 [ 3456.221831][T21013] __do_sys_clone3+0x8f/0x2e0 [ 3456.226538][T21013] ? __do_sys_clone+0x100/0x100 [ 3456.231410][T21013] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3456.237081][T21013] ? wait_for_completion_io_timeout+0x20/0x20 [ 3456.243206][T21013] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3456.249119][T21013] ? lockdep_hardirqs_on+0x7d/0x100 [ 3456.254335][T21013] do_syscall_64+0x39/0xb0 [ 3456.258778][T21013] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3456.264695][T21013] RIP: 0033:0x7f29db28c0a9 [ 3456.269144][T21013] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3456.288788][T21013] RSP: 002b:00007f29dc088038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3456.297227][T21013] RAX: ffffffffffffffda RBX: 00007f29db3abf80 RCX: 00007f29db28c0a9 [ 3456.305215][T21013] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f29dc088050 14:59:34 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:34 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 3456.313198][T21013] RBP: 00007f29dc0881d0 R08: 0000000000000000 R09: 0000000000000058 [ 3456.321185][T21013] R10: 00007f29dc088050 R11: 0000000000000246 R12: 0000000000000058 [ 3456.329169][T21013] R13: 00007f29db4cfb1f R14: 00007f29dc088300 R15: 0000000000022000 [ 3456.337172][T21013] 14:59:34 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:34 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x24}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:35 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:35 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:35 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:35 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2a}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:35 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:35 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 14:59:35 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) 14:59:35 executing program 0: syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3456.976573][T21044] FAULT_INJECTION: forcing a failure. [ 3456.976573][T21044] name failslab, interval 1, probability 0, space 0, times 0 14:59:35 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:35 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x30}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:35 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) 14:59:35 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:35 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, r0, 0x0) 14:59:35 executing program 0: syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:35 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x36}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3457.286638][T21044] CPU: 0 PID: 21044 Comm: syz-executor.2 Not tainted 6.2.0-rc1-syzkaller #0 [ 3457.295408][T21044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3457.305532][T21044] Call Trace: [ 3457.308844][T21044] [ 3457.311810][T21044] dump_stack_lvl+0xd1/0x138 [ 3457.316465][T21044] should_fail_ex.cold+0x5/0xa [ 3457.321303][T21044] ? copy_process+0x3aa/0x7520 [ 3457.326122][T21044] should_failslab+0x9/0x20 [ 3457.330695][T21044] kmem_cache_alloc_node+0x5c/0x460 [ 3457.335954][T21044] copy_process+0x3aa/0x7520 [ 3457.340602][T21044] ? find_held_lock+0x2d/0x110 [ 3457.345440][T21044] ? __might_fault+0xd9/0x180 [ 3457.350193][T21044] ? __cleanup_sighand+0xb0/0xb0 [ 3457.355202][T21044] ? _copy_from_user+0xfd/0x170 [ 3457.360122][T21044] kernel_clone+0xeb/0x990 [ 3457.364617][T21044] ? create_io_thread+0xf0/0xf0 [ 3457.369565][T21044] __do_sys_clone3+0x1cd/0x2e0 [ 3457.374386][T21044] ? __do_sys_clone+0x100/0x100 [ 3457.379286][T21044] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3457.385021][T21044] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3457.390966][T21044] ? lockdep_hardirqs_on+0x7d/0x100 [ 3457.396222][T21044] do_syscall_64+0x39/0xb0 [ 3457.400711][T21044] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3457.406658][T21044] RIP: 0033:0x7f29db28c0a9 [ 3457.411117][T21044] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 14:59:35 executing program 4: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 3457.430781][T21044] RSP: 002b:00007f29dc088038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3457.439247][T21044] RAX: ffffffffffffffda RBX: 00007f29db3abf80 RCX: 00007f29db28c0a9 [ 3457.447269][T21044] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f29dc088050 [ 3457.455286][T21044] RBP: 00007f29dc0881d0 R08: 0000000000000000 R09: 0000000000000058 [ 3457.463307][T21044] R10: 00007f29dc088050 R11: 0000000000000246 R12: 0000000000000058 [ 3457.471326][T21044] R13: 00007f29db4cfb1f R14: 00007f29dc088300 R15: 0000000000022000 [ 3457.479366][T21044] 14:59:35 executing program 0: syz_io_uring_setup(0x50a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:35 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x10, r0, 0x0) 14:59:35 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3c}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:35 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 14:59:35 executing program 1: r0 = syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3aa, 0x0, r0}, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:35 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x10, r0, 0x0) 14:59:35 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:35 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x10, r0, 0x0) 14:59:36 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3457.800638][T21085] FAULT_INJECTION: forcing a failure. [ 3457.800638][T21085] name failslab, interval 1, probability 0, space 0, times 0 14:59:36 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, 0xffffffffffffffff, 0x0) [ 3457.858162][T21085] CPU: 1 PID: 21085 Comm: syz-executor.2 Not tainted 6.2.0-rc1-syzkaller #0 [ 3457.866928][T21085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3457.877026][T21085] Call Trace: [ 3457.880333][T21085] [ 3457.883294][T21085] dump_stack_lvl+0xd1/0x138 [ 3457.888293][T21085] should_fail_ex.cold+0x5/0xa [ 3457.893124][T21085] ? prepare_creds+0x43/0x7b0 [ 3457.897861][T21085] should_failslab+0x9/0x20 [ 3457.902433][T21085] kmem_cache_alloc+0x5a/0x430 [ 3457.907250][T21085] ? __validate_process_creds+0x210/0x370 [ 3457.913044][T21085] prepare_creds+0x43/0x7b0 [ 3457.917616][T21085] copy_creds+0xa7/0xd50 [ 3457.921925][T21085] copy_process+0xd60/0x7520 [ 3457.926576][T21085] ? find_held_lock+0x2d/0x110 [ 3457.931407][T21085] ? __might_fault+0xd9/0x180 [ 3457.936146][T21085] ? __cleanup_sighand+0xb0/0xb0 [ 3457.941157][T21085] ? _copy_from_user+0xfd/0x170 [ 3457.946082][T21085] kernel_clone+0xeb/0x990 [ 3457.950552][T21085] ? create_io_thread+0xf0/0xf0 14:59:36 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, 0xffffffffffffffff, 0x0) [ 3457.955488][T21085] __do_sys_clone3+0x1cd/0x2e0 [ 3457.960308][T21085] ? __do_sys_clone+0x100/0x100 [ 3457.965218][T21085] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3457.970949][T21085] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3457.976895][T21085] ? lockdep_hardirqs_on+0x7d/0x100 [ 3457.982146][T21085] do_syscall_64+0x39/0xb0 [ 3457.986634][T21085] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3457.992576][T21085] RIP: 0033:0x7f29db28c0a9 14:59:36 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 3457.997043][T21085] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3458.016697][T21085] RSP: 002b:00007f29dc088038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3458.025165][T21085] RAX: ffffffffffffffda RBX: 00007f29db3abf80 RCX: 00007f29db28c0a9 [ 3458.033197][T21085] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f29dc088050 [ 3458.041220][T21085] RBP: 00007f29dc0881d0 R08: 0000000000000000 R09: 0000000000000058 [ 3458.049237][T21085] R10: 00007f29dc088050 R11: 0000000000000246 R12: 0000000000000058 14:59:36 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, 0xffffffffffffffff, 0x0) 14:59:36 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x42}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3458.057259][T21085] R13: 00007f29db4cfb1f R14: 00007f29dc088300 R15: 0000000000022000 [ 3458.065295][T21085] 14:59:36 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 14:59:36 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3c}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:36 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:36 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x60}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:36 executing program 1: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:36 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:36 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:36 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x72}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:36 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, &(0x7f00000005c0)) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 3458.535191][T21118] FAULT_INJECTION: forcing a failure. [ 3458.535191][T21118] name failslab, interval 1, probability 0, space 0, times 0 [ 3458.592598][T21118] CPU: 1 PID: 21118 Comm: syz-executor.2 Not tainted 6.2.0-rc1-syzkaller #0 [ 3458.601343][T21118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3458.611441][T21118] Call Trace: [ 3458.614751][T21118] [ 3458.617717][T21118] dump_stack_lvl+0xd1/0x138 [ 3458.622359][T21118] should_fail_ex.cold+0x5/0xa [ 3458.627187][T21118] ? alloc_vmap_area+0x16c/0x1ed0 [ 3458.632288][T21118] should_failslab+0x9/0x20 [ 3458.636849][T21118] kmem_cache_alloc_node+0x5c/0x460 [ 3458.642100][T21118] alloc_vmap_area+0x16c/0x1ed0 [ 3458.647028][T21118] ? free_vmap_area+0x1ab0/0x1ab0 [ 3458.652128][T21118] __get_vm_area_node+0x142/0x3f0 [ 3458.657224][T21118] __vmalloc_node_range+0x25b/0x13c0 [ 3458.662557][T21118] ? kernel_clone+0xeb/0x990 [ 3458.667234][T21118] ? kernel_clone+0xeb/0x990 [ 3458.671878][T21118] ? lock_downgrade+0x6e0/0x6e0 [ 3458.676778][T21118] ? vfree_atomic+0xe0/0xe0 [ 3458.681335][T21118] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3458.686945][T21118] ? trace_kmem_cache_alloc+0x35/0x100 [ 3458.692472][T21118] ? kernel_clone+0xeb/0x990 [ 3458.697118][T21118] copy_process+0x12d2/0x7520 [ 3458.701846][T21118] ? kernel_clone+0xeb/0x990 [ 3458.706485][T21118] ? find_held_lock+0x2d/0x110 [ 3458.711311][T21118] ? __might_fault+0xd9/0x180 [ 3458.716048][T21118] ? __cleanup_sighand+0xb0/0xb0 [ 3458.721046][T21118] ? _copy_from_user+0xfd/0x170 [ 3458.725961][T21118] kernel_clone+0xeb/0x990 [ 3458.730436][T21118] ? create_io_thread+0xf0/0xf0 [ 3458.735357][T21118] __do_sys_clone3+0x1cd/0x2e0 14:59:36 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x40200, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:36 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x18}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3458.740166][T21118] ? __do_sys_clone+0x100/0x100 [ 3458.745053][T21118] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3458.750776][T21118] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3458.756720][T21118] ? lockdep_hardirqs_on+0x7d/0x100 [ 3458.761971][T21118] do_syscall_64+0x39/0xb0 [ 3458.766451][T21118] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3458.772397][T21118] RIP: 0033:0x7f29db28c0a9 [ 3458.776850][T21118] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3458.796504][T21118] RSP: 002b:00007f29dc088038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3458.804969][T21118] RAX: ffffffffffffffda RBX: 00007f29db3abf80 RCX: 00007f29db28c0a9 [ 3458.812981][T21118] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f29dc088050 [ 3458.820989][T21118] RBP: 00007f29dc0881d0 R08: 0000000000000000 R09: 0000000000000058 [ 3458.828989][T21118] R10: 00007f29dc088050 R11: 0000000000000246 R12: 0000000000000058 14:59:37 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) (fail_nth: 1) [ 3458.837269][T21118] R13: 00007f29db4cfb1f R14: 00007f29dc088300 R15: 0000000000022000 [ 3458.845297][T21118] [ 3458.905920][T21130] FAULT_INJECTION: forcing a failure. [ 3458.905920][T21130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3458.972506][T21130] CPU: 0 PID: 21130 Comm: syz-executor.1 Not tainted 6.2.0-rc1-syzkaller #0 [ 3458.981264][T21130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3458.991357][T21130] Call Trace: [ 3458.994668][T21130] [ 3458.997627][T21130] dump_stack_lvl+0xd1/0x138 [ 3459.002265][T21130] should_fail_ex.cold+0x5/0xa [ 3459.007107][T21130] _copy_to_user+0x2e/0x150 [ 3459.011668][T21130] simple_read_from_buffer+0xd0/0x160 [ 3459.017104][T21130] proc_fail_nth_read+0x18b/0x220 [ 3459.022194][T21130] ? proc_fault_inject_read+0x220/0x220 [ 3459.027805][T21130] ? security_file_permission+0xaf/0xd0 [ 3459.033425][T21130] vfs_read+0x25b/0x930 [ 3459.037640][T21130] ? proc_fault_inject_read+0x220/0x220 [ 3459.043244][T21130] ? kernel_read+0x1c0/0x1c0 [ 3459.047890][T21130] ? __fget_files+0x26a/0x440 [ 3459.052626][T21130] ksys_read+0x12b/0x250 [ 3459.056907][T21130] ? vfs_write+0xdd0/0xdd0 [ 3459.061370][T21130] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3459.067312][T21130] do_syscall_64+0x39/0xb0 [ 3459.071782][T21130] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3459.077723][T21130] RIP: 0033:0x7f6205a3decc [ 3459.082182][T21130] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3459.101832][T21130] RSP: 002b:00007f620684a160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3459.110286][T21130] RAX: ffffffffffffffda RBX: 00007f6205babf80 RCX: 00007f6205a3decc [ 3459.118293][T21130] RDX: 000000000000000f RSI: 00007f620684a1e0 RDI: 0000000000000004 [ 3459.126385][T21130] RBP: 00007f620684a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3459.134389][T21130] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 3459.142394][T21130] R13: 00007f6205ccfb1f R14: 00007f620684a300 R15: 0000000000022000 [ 3459.150427][T21130] [ 3459.185677][T21118] syz-executor.2: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 3459.227172][T21118] CPU: 1 PID: 21118 Comm: syz-executor.2 Not tainted 6.2.0-rc1-syzkaller #0 [ 3459.235930][T21118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3459.246025][T21118] Call Trace: [ 3459.249330][T21118] [ 3459.252287][T21118] dump_stack_lvl+0xd1/0x138 [ 3459.256924][T21118] warn_alloc.cold+0x95/0x1a7 [ 3459.261643][T21118] ? zone_watermark_ok_safe+0x300/0x300 [ 3459.267237][T21118] ? slab_free_freelist_hook+0x8b/0x1c0 [ 3459.272860][T21118] ? __get_vm_area_node+0x297/0x3f0 [ 3459.278138][T21118] __vmalloc_node_range+0xe12/0x13c0 [ 3459.283492][T21118] ? kernel_clone+0xeb/0x990 [ 3459.288137][T21118] ? lock_downgrade+0x6e0/0x6e0 [ 3459.293029][T21118] ? vfree_atomic+0xe0/0xe0 [ 3459.297573][T21118] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3459.303261][T21118] ? trace_kmem_cache_alloc+0x35/0x100 [ 3459.308772][T21118] ? kernel_clone+0xeb/0x990 [ 3459.313403][T21118] copy_process+0x12d2/0x7520 [ 3459.318119][T21118] ? kernel_clone+0xeb/0x990 [ 3459.322749][T21118] ? find_held_lock+0x2d/0x110 [ 3459.327568][T21118] ? __might_fault+0xd9/0x180 [ 3459.332294][T21118] ? __cleanup_sighand+0xb0/0xb0 [ 3459.337308][T21118] ? _copy_from_user+0xfd/0x170 [ 3459.342213][T21118] kernel_clone+0xeb/0x990 [ 3459.346682][T21118] ? create_io_thread+0xf0/0xf0 [ 3459.351605][T21118] __do_sys_clone3+0x1cd/0x2e0 [ 3459.356417][T21118] ? __do_sys_clone+0x100/0x100 [ 3459.361305][T21118] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3459.367020][T21118] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3459.372951][T21118] ? lockdep_hardirqs_on+0x7d/0x100 [ 3459.378190][T21118] do_syscall_64+0x39/0xb0 [ 3459.382655][T21118] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3459.388583][T21118] RIP: 0033:0x7f29db28c0a9 [ 3459.393026][T21118] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3459.412671][T21118] RSP: 002b:00007f29dc088038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3459.421127][T21118] RAX: ffffffffffffffda RBX: 00007f29db3abf80 RCX: 00007f29db28c0a9 [ 3459.429138][T21118] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f29dc088050 [ 3459.437143][T21118] RBP: 00007f29dc0881d0 R08: 0000000000000000 R09: 0000000000000058 [ 3459.445148][T21118] R10: 00007f29dc088050 R11: 0000000000000246 R12: 0000000000000058 [ 3459.453160][T21118] R13: 00007f29db4cfb1f R14: 00007f29dc088300 R15: 0000000000022000 [ 3459.461183][T21118] [ 3459.475271][T21118] Mem-Info: [ 3459.492511][T21118] active_anon:15638 inactive_anon:28389 isolated_anon:0 [ 3459.492511][T21118] active_file:12434 inactive_file:488 isolated_file:0 [ 3459.492511][T21118] unevictable:768 dirty:0 writeback:0 [ 3459.492511][T21118] slab_reclaimable:21672 slab_unreclaimable:101181 [ 3459.492511][T21118] mapped:19547 shmem:16628 pagetables:505 [ 3459.492511][T21118] sec_pagetables:0 bounce:0 [ 3459.492511][T21118] kernel_misc_reclaimable:0 [ 3459.492511][T21118] free:1377887 free_pcp:10018 free_cma:0 [ 3459.559997][T21118] Node 0 active_anon:62552kB inactive_anon:113556kB active_file:49660kB inactive_file:1952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78188kB dirty:0kB writeback:0kB shmem:64976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12244kB pagetables:2020kB sec_pagetables:0kB all_unreclaimable? no [ 3459.593111][T21118] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3459.626779][T21118] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3459.654778][T21118] lowmem_reserve[]: 0 2619 2621 2621 2621 [ 3459.660609][T21118] Node 0 DMA32 free:1567768kB boost:0kB min:35456kB low:44320kB high:53184kB reserved_highatomic:0KB active_anon:62552kB inactive_anon:113556kB active_file:49660kB inactive_file:1952kB unevictable:1536kB writepending:0kB present:3129332kB managed:2686608kB mlocked:0kB bounce:0kB free_pcp:30204kB local_pcp:17616kB free_cma:0kB [ 3459.691810][T21118] lowmem_reserve[]: 0 0 1 1 1 [ 3459.697017][T21118] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1868kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 3459.724251][T21118] lowmem_reserve[]: 0 0 0 0 0 [ 3459.728971][T21118] Node 1 Normal free:3931732kB boost:0kB min:54424kB low:68028kB high:81632kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117612kB mlocked:0kB bounce:0kB free_pcp:14656kB local_pcp:9664kB free_cma:0kB [ 3459.759091][T21118] lowmem_reserve[]: 0 0 0 0 0 [ 3459.765086][T21118] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3459.778139][T21118] Node 0 DMA32: 962*4kB (UME) 1096*8kB (UME) 861*16kB (UME) 1430*32kB (UME) 1091*64kB (UME) 307*128kB (UME) 142*256kB (UME) 31*512kB (UME) 13*1024kB (ME) 3*2048kB (UM) 321*4096kB (UM) = 1567768kB [ 3459.797918][T21118] Node 0 Normal: 4*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 3459.812607][T21118] Node 1 Normal: 173*4kB (UME) 38*8kB (UE) 27*16kB (UE) 88*32kB (UME) 31*64kB (UME) 10*128kB (UE) 3*256kB (UE) 1*512kB (E) 1*1024kB (E) 1*2048kB (E) 957*4096kB (M) = 3931732kB [ 3459.830498][T21118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3459.840178][T21118] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3459.849593][T21118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 14:59:38 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:38 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x91}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:38 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:38 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:38 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:38 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) [ 3459.860049][T21118] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3459.869548][T21118] 29553 total pagecache pages [ 3459.874431][T21118] 0 pages in swap cache [ 3459.878697][T21118] Free swap = 0kB [ 3459.882799][T21118] Total swap = 0kB [ 3459.886613][T21118] 2097051 pages RAM [ 3459.890485][T21118] 0 pages HighMem/MovableOnly [ 3459.895293][T21118] 391689 pages reserved [ 3459.899506][T21118] 0 pages cma reserved 14:59:38 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x11, r0, 0x0) 14:59:38 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:38 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:38 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x204}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:38 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x4, 0x11, r0, 0x0) [ 3460.064190][T21143] FAULT_INJECTION: forcing a failure. [ 3460.064190][T21143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3460.123407][T21143] CPU: 1 PID: 21143 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3460.132186][T21143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3460.142287][T21143] Call Trace: [ 3460.145603][T21143] [ 3460.148565][T21143] dump_stack_lvl+0xd1/0x138 [ 3460.153213][T21143] should_fail_ex.cold+0x5/0xa [ 3460.158046][T21143] _copy_from_user+0x2e/0x170 [ 3460.162796][T21143] copy_clone_args_from_user+0x147/0x780 [ 3460.168497][T21143] ? __list_add_rcu+0xe0/0xe0 [ 3460.173237][T21143] ? ksys_write+0x210/0x250 [ 3460.177797][T21143] ? lock_downgrade+0x6e0/0x6e0 [ 3460.182708][T21143] __do_sys_clone3+0x8f/0x2e0 [ 3460.187442][T21143] ? __do_sys_clone+0x100/0x100 [ 3460.192359][T21143] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3460.198323][T21143] ? wait_for_completion_io_timeout+0x20/0x20 [ 3460.204478][T21143] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3460.210418][T21143] ? lockdep_hardirqs_on+0x7d/0x100 [ 3460.215663][T21143] do_syscall_64+0x39/0xb0 14:59:38 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3460.220144][T21143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3460.226086][T21143] RIP: 0033:0x7fb95928c0a9 [ 3460.230542][T21143] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3460.250198][T21143] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3460.258662][T21143] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3460.266681][T21143] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3460.274702][T21143] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3460.282724][T21143] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3460.290738][T21143] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3460.298773][T21143] 14:59:38 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x2, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:38 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:38 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x8, 0x11, r0, 0x0) 14:59:38 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:38 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:38 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 14:59:38 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0xa, 0x11, r0, 0x0) 14:59:38 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0xe, 0x11, r0, 0x0) [ 3460.577944][T21168] FAULT_INJECTION: forcing a failure. [ 3460.577944][T21168] name failslab, interval 1, probability 0, space 0, times 0 14:59:38 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x402}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3460.618201][T21168] CPU: 1 PID: 21168 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3460.627045][T21168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3460.637146][T21168] Call Trace: [ 3460.640442][T21168] [ 3460.643385][T21168] dump_stack_lvl+0xd1/0x138 [ 3460.648023][T21168] should_fail_ex.cold+0x5/0xa [ 3460.653439][T21168] ? copy_process+0x3aa/0x7520 [ 3460.658226][T21168] should_failslab+0x9/0x20 [ 3460.662755][T21168] kmem_cache_alloc_node+0x5c/0x460 [ 3460.667978][T21168] copy_process+0x3aa/0x7520 [ 3460.672607][T21168] ? find_held_lock+0x2d/0x110 [ 3460.677410][T21168] ? __might_fault+0xd9/0x180 [ 3460.682118][T21168] ? __cleanup_sighand+0xb0/0xb0 [ 3460.687096][T21168] ? _copy_from_user+0xfd/0x170 [ 3460.692091][T21168] kernel_clone+0xeb/0x990 [ 3460.696537][T21168] ? create_io_thread+0xf0/0xf0 [ 3460.701428][T21168] __do_sys_clone3+0x1cd/0x2e0 [ 3460.706216][T21168] ? __do_sys_clone+0x100/0x100 [ 3460.711083][T21168] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3460.716775][T21168] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3460.722694][T21168] ? lockdep_hardirqs_on+0x7d/0x100 [ 3460.727918][T21168] do_syscall_64+0x39/0xb0 [ 3460.732365][T21168] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3460.738282][T21168] RIP: 0033:0x7fb95928c0a9 [ 3460.742714][T21168] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 14:59:38 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x3, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:38 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 3460.762378][T21168] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3460.770822][T21168] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3460.778811][T21168] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3460.786881][T21168] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3460.794864][T21168] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3460.802852][T21168] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3460.810860][T21168] 14:59:39 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0xf, 0x11, r0, 0x0) 14:59:39 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:39 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x7, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:39 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x500}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:39 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x10, 0x11, r0, 0x0) 14:59:39 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:39 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 14:59:39 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x2) 14:59:39 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x8, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:39 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x600}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:39 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:39 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000740), {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:39 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x3) 14:59:39 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x9, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:39 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:39 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3461.357443][T21209] FAULT_INJECTION: forcing a failure. [ 3461.357443][T21209] name failslab, interval 1, probability 0, space 0, times 0 14:59:39 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0xd}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 14:59:39 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x4) [ 3461.459971][T21209] CPU: 0 PID: 21209 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3461.468921][T21209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3461.479022][T21209] Call Trace: [ 3461.482344][T21209] [ 3461.485403][T21209] dump_stack_lvl+0xd1/0x138 [ 3461.490065][T21209] should_fail_ex.cold+0x5/0xa [ 3461.494901][T21209] ? prepare_creds+0x43/0x7b0 [ 3461.499638][T21209] should_failslab+0x9/0x20 [ 3461.504203][T21209] kmem_cache_alloc+0x5a/0x430 [ 3461.509017][T21209] ? __validate_process_creds+0x210/0x370 [ 3461.514800][T21209] prepare_creds+0x43/0x7b0 [ 3461.519378][T21209] copy_creds+0xa7/0xd50 [ 3461.523690][T21209] copy_process+0xd60/0x7520 [ 3461.528339][T21209] ? find_held_lock+0x2d/0x110 [ 3461.533175][T21209] ? __might_fault+0xd9/0x180 [ 3461.537925][T21209] ? __cleanup_sighand+0xb0/0xb0 [ 3461.542934][T21209] ? _copy_from_user+0xfd/0x170 [ 3461.547857][T21209] kernel_clone+0xeb/0x990 [ 3461.552341][T21209] ? create_io_thread+0xf0/0xf0 [ 3461.557271][T21209] __do_sys_clone3+0x1cd/0x2e0 [ 3461.562176][T21209] ? __do_sys_clone+0x100/0x100 [ 3461.567083][T21209] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3461.572824][T21209] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3461.578788][T21209] ? lockdep_hardirqs_on+0x7d/0x100 [ 3461.584057][T21209] do_syscall_64+0x39/0xb0 [ 3461.588548][T21209] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.594501][T21209] RIP: 0033:0x7fb95928c0a9 [ 3461.598963][T21209] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3461.618625][T21209] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3461.627071][T21209] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3461.635061][T21209] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3461.643045][T21209] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3461.651051][T21209] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 14:59:39 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 14:59:39 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xe, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:39 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x900}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:39 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x5) 14:59:39 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:39 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000900)=""/151, 0x97, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 3461.659040][T21209] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3461.667064][T21209] 14:59:39 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x6) 14:59:39 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x11, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:40 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:40 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7) 14:59:40 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa5a}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:40 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 3462.003302][T21240] FAULT_INJECTION: forcing a failure. [ 3462.003302][T21240] name failslab, interval 1, probability 0, space 0, times 0 [ 3462.047960][T21240] CPU: 1 PID: 21240 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3462.056721][T21240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3462.066820][T21240] Call Trace: [ 3462.070131][T21240] [ 3462.073097][T21240] dump_stack_lvl+0xd1/0x138 [ 3462.077740][T21240] should_fail_ex.cold+0x5/0xa [ 3462.082570][T21240] ? alloc_vmap_area+0x16c/0x1ed0 [ 3462.087655][T21240] should_failslab+0x9/0x20 [ 3462.092213][T21240] kmem_cache_alloc_node+0x5c/0x460 [ 3462.097472][T21240] alloc_vmap_area+0x16c/0x1ed0 [ 3462.102397][T21240] ? free_vmap_area+0x1ab0/0x1ab0 [ 3462.107480][T21240] __get_vm_area_node+0x142/0x3f0 [ 3462.112568][T21240] __vmalloc_node_range+0x25b/0x13c0 [ 3462.117906][T21240] ? kernel_clone+0xeb/0x990 [ 3462.122569][T21240] ? kernel_clone+0xeb/0x990 [ 3462.127215][T21240] ? lock_downgrade+0x6e0/0x6e0 [ 3462.132121][T21240] ? vfree_atomic+0xe0/0xe0 [ 3462.136677][T21240] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3462.142377][T21240] ? trace_kmem_cache_alloc+0x35/0x100 [ 3462.147890][T21240] ? kernel_clone+0xeb/0x990 [ 3462.152533][T21240] copy_process+0x12d2/0x7520 [ 3462.157252][T21240] ? kernel_clone+0xeb/0x990 [ 3462.161880][T21240] ? find_held_lock+0x2d/0x110 [ 3462.166653][T21240] ? __might_fault+0xd9/0x180 [ 3462.171339][T21240] ? __cleanup_sighand+0xb0/0xb0 [ 3462.176307][T21240] ? _copy_from_user+0xfd/0x170 [ 3462.181206][T21240] kernel_clone+0xeb/0x990 [ 3462.185629][T21240] ? create_io_thread+0xf0/0xf0 [ 3462.190495][T21240] __do_sys_clone3+0x1cd/0x2e0 [ 3462.195297][T21240] ? __do_sys_clone+0x100/0x100 [ 3462.200181][T21240] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3462.205838][T21240] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3462.211750][T21240] ? lockdep_hardirqs_on+0x7d/0x100 [ 3462.216997][T21240] do_syscall_64+0x39/0xb0 [ 3462.221455][T21240] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3462.227348][T21240] RIP: 0033:0x7fb95928c0a9 [ 3462.231763][T21240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3462.251376][T21240] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3462.259967][T21240] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3462.267940][T21240] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3462.275924][T21240] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3462.283939][T21240] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 14:59:40 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) 14:59:40 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x8) 14:59:40 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:40 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xaf3}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:40 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:40 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 3462.291974][T21240] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3462.300030][T21240] 14:59:40 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x9) 14:59:40 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3462.449194][T21261] FAULT_INJECTION: forcing a failure. [ 3462.449194][T21261] name failslab, interval 1, probability 0, space 0, times 0 [ 3462.482543][T21261] CPU: 1 PID: 21261 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 14:59:40 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xa) [ 3462.491306][T21261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3462.501410][T21261] Call Trace: [ 3462.504818][T21261] [ 3462.507785][T21261] dump_stack_lvl+0xd1/0x138 [ 3462.512444][T21261] should_fail_ex.cold+0x5/0xa [ 3462.517287][T21261] should_failslab+0x9/0x20 [ 3462.521854][T21261] __kmem_cache_alloc_node+0x5b/0x430 [ 3462.527279][T21261] ? security_task_alloc+0x10f/0x250 [ 3462.532633][T21261] ? memset+0x24/0x50 [ 3462.536682][T21261] ? security_task_alloc+0x10f/0x250 [ 3462.542037][T21261] __kmalloc+0x4a/0xd0 14:59:40 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xe) 14:59:40 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3462.546191][T21261] security_task_alloc+0x10f/0x250 [ 3462.551372][T21261] copy_process+0x2431/0x7520 [ 3462.556125][T21261] ? find_held_lock+0x2d/0x110 [ 3462.560984][T21261] ? __cleanup_sighand+0xb0/0xb0 [ 3462.565987][T21261] ? _copy_from_user+0xfd/0x170 [ 3462.570909][T21261] kernel_clone+0xeb/0x990 [ 3462.575388][T21261] ? create_io_thread+0xf0/0xf0 [ 3462.580321][T21261] __do_sys_clone3+0x1cd/0x2e0 [ 3462.585146][T21261] ? __do_sys_clone+0x100/0x100 [ 3462.590047][T21261] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3462.595791][T21261] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3462.601740][T21261] ? lockdep_hardirqs_on+0x7d/0x100 [ 3462.606993][T21261] do_syscall_64+0x39/0xb0 [ 3462.611471][T21261] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3462.617590][T21261] RIP: 0033:0x7fb95928c0a9 [ 3462.622047][T21261] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3462.641706][T21261] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 14:59:40 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xd00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3462.650173][T21261] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3462.658189][T21261] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3462.666210][T21261] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3462.674253][T21261] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3462.682270][T21261] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3462.690309][T21261] 14:59:40 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) 14:59:40 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xf) 14:59:40 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:40 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:40 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:40 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xe00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:41 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x300) 14:59:41 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:41 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:41 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:41 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, 0x0, &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3462.966267][T21289] FAULT_INJECTION: forcing a failure. [ 3462.966267][T21289] name failslab, interval 1, probability 0, space 0, times 0 [ 3463.012197][T21289] CPU: 0 PID: 21289 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3463.020953][T21289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3463.031055][T21289] Call Trace: [ 3463.034365][T21289] [ 3463.037333][T21289] dump_stack_lvl+0xd1/0x138 [ 3463.041991][T21289] should_fail_ex.cold+0x5/0xa [ 3463.046816][T21289] ? dup_fd+0x8d/0xcb0 [ 3463.050931][T21289] should_failslab+0x9/0x20 [ 3463.055501][T21289] kmem_cache_alloc+0x5a/0x430 [ 3463.060319][T21289] dup_fd+0x8d/0xcb0 [ 3463.064261][T21289] ? trace_kmalloc+0x35/0x100 [ 3463.068995][T21289] ? apparmor_task_alloc+0x2bf/0x3b0 [ 3463.074344][T21289] ? bpf_lsm_task_alloc+0x9/0x10 [ 3463.079336][T21289] ? security_task_alloc+0xe4/0x250 [ 3463.084604][T21289] copy_process+0x24ea/0x7520 [ 3463.089341][T21289] ? find_held_lock+0x2d/0x110 [ 3463.094181][T21289] ? __cleanup_sighand+0xb0/0xb0 [ 3463.099194][T21289] ? _copy_from_user+0xfd/0x170 [ 3463.104117][T21289] kernel_clone+0xeb/0x990 [ 3463.108637][T21289] ? create_io_thread+0xf0/0xf0 [ 3463.113576][T21289] __do_sys_clone3+0x1cd/0x2e0 [ 3463.118400][T21289] ? __do_sys_clone+0x100/0x100 [ 3463.123304][T21289] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3463.129034][T21289] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3463.134996][T21289] ? lockdep_hardirqs_on+0x7d/0x100 [ 3463.140252][T21289] do_syscall_64+0x39/0xb0 [ 3463.144722][T21289] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3463.150663][T21289] RIP: 0033:0x7fb95928c0a9 [ 3463.155123][T21289] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3463.174778][T21289] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3463.183333][T21289] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3463.191325][T21289] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3463.199312][T21289] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 14:59:41 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x500) [ 3463.207295][T21289] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3463.215281][T21289] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3463.223286][T21289] 14:59:41 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 14:59:41 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1073}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:41 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x600) 14:59:41 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xe00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:41 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:41 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xa) 14:59:41 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x700) 14:59:41 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x9) 14:59:41 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xe13, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:41 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x900) 14:59:41 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1173}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3463.446248][T21315] FAULT_INJECTION: forcing a failure. [ 3463.446248][T21315] name failslab, interval 1, probability 0, space 0, times 0 [ 3463.517915][T21315] CPU: 1 PID: 21315 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3463.526679][T21315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3463.536786][T21315] Call Trace: [ 3463.540082][T21315] [ 3463.543113][T21315] dump_stack_lvl+0xd1/0x138 [ 3463.547739][T21315] should_fail_ex.cold+0x5/0xa [ 3463.552547][T21315] should_failslab+0x9/0x20 [ 3463.557087][T21315] __kmem_cache_alloc_node+0x5b/0x430 [ 3463.562495][T21315] ? alloc_fdtable+0xa5/0x2a0 [ 3463.567220][T21315] ? do_raw_spin_lock+0x124/0x2b0 [ 3463.572287][T21315] kmalloc_trace+0x26/0x60 [ 3463.576774][T21315] alloc_fdtable+0xa5/0x2a0 [ 3463.581299][T21315] dup_fd+0x722/0xcb0 [ 3463.585307][T21315] copy_process+0x24ea/0x7520 [ 3463.590009][T21315] ? find_held_lock+0x2d/0x110 [ 3463.594814][T21315] ? __cleanup_sighand+0xb0/0xb0 [ 3463.599808][T21315] ? _copy_from_user+0xfd/0x170 [ 3463.604692][T21315] kernel_clone+0xeb/0x990 [ 3463.609136][T21315] ? create_io_thread+0xf0/0xf0 [ 3463.614081][T21315] __do_sys_clone3+0x1cd/0x2e0 [ 3463.618866][T21315] ? __do_sys_clone+0x100/0x100 [ 3463.623740][T21315] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3463.629436][T21315] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3463.635354][T21315] ? lockdep_hardirqs_on+0x7d/0x100 [ 3463.640577][T21315] do_syscall_64+0x39/0xb0 [ 3463.645026][T21315] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3463.650938][T21315] RIP: 0033:0x7fb95928c0a9 [ 3463.655377][T21315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3463.675003][T21315] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3463.683435][T21315] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3463.691424][T21315] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3463.699410][T21315] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3463.707400][T21315] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 14:59:41 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xa00) 14:59:41 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000780)=""/103, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 3463.715382][T21315] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3463.723383][T21315] 14:59:42 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) 14:59:42 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:42 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:42 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xe00) 14:59:42 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x11b2}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:42 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xf00) 14:59:42 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:42 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x11b3}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:42 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:42 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1135, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:42 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x1000000) [ 3464.070039][T21342] FAULT_INJECTION: forcing a failure. [ 3464.070039][T21342] name failslab, interval 1, probability 0, space 0, times 0 [ 3464.116259][T21342] CPU: 1 PID: 21342 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3464.125023][T21342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3464.135118][T21342] Call Trace: [ 3464.138431][T21342] [ 3464.141396][T21342] dump_stack_lvl+0xd1/0x138 [ 3464.146043][T21342] should_fail_ex.cold+0x5/0xa [ 3464.150889][T21342] should_failslab+0x9/0x20 [ 3464.155464][T21342] __kmem_cache_alloc_node+0x5b/0x430 [ 3464.160891][T21342] ? kvmalloc_node+0xa2/0x1a0 [ 3464.165633][T21342] ? kvmalloc_node+0xa2/0x1a0 [ 3464.170373][T21342] __kmalloc_node+0x4d/0xd0 [ 3464.174937][T21342] kvmalloc_node+0xa2/0x1a0 [ 3464.179504][T21342] alloc_fdtable+0xf4/0x2a0 [ 3464.184060][T21342] dup_fd+0x722/0xcb0 [ 3464.188106][T21342] copy_process+0x24ea/0x7520 [ 3464.192839][T21342] ? find_held_lock+0x2d/0x110 [ 3464.197659][T21342] ? __cleanup_sighand+0xb0/0xb0 [ 3464.203415][T21342] ? _copy_from_user+0xfd/0x170 [ 3464.208302][T21342] kernel_clone+0xeb/0x990 [ 3464.212749][T21342] ? create_io_thread+0xf0/0xf0 [ 3464.217641][T21342] __do_sys_clone3+0x1cd/0x2e0 [ 3464.222428][T21342] ? __do_sys_clone+0x100/0x100 [ 3464.227315][T21342] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3464.233020][T21342] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3464.238937][T21342] ? lockdep_hardirqs_on+0x7d/0x100 [ 3464.244160][T21342] do_syscall_64+0x39/0xb0 [ 3464.248606][T21342] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3464.254520][T21342] RIP: 0033:0x7fb95928c0a9 [ 3464.258957][T21342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3464.278605][T21342] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3464.287090][T21342] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3464.295100][T21342] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3464.303102][T21342] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 14:59:42 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x2000000) [ 3464.311111][T21342] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3464.319113][T21342] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3464.327136][T21342] 14:59:42 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 14:59:42 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x113d, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:42 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x3000000) 14:59:42 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1200}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:42 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x4000000) 14:59:42 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x11b3}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:42 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) 14:59:42 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x12fb, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:42 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x5000000) [ 3464.581992][T21372] FAULT_INJECTION: forcing a failure. [ 3464.581992][T21372] name failslab, interval 1, probability 0, space 0, times 0 14:59:42 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(0x0, 0x0) [ 3464.640856][T21372] CPU: 0 PID: 21372 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3464.649631][T21372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3464.659727][T21372] Call Trace: [ 3464.663040][T21372] [ 3464.666015][T21372] dump_stack_lvl+0xd1/0x138 [ 3464.670673][T21372] should_fail_ex.cold+0x5/0xa [ 3464.675513][T21372] should_failslab+0x9/0x20 [ 3464.680089][T21372] __kmem_cache_alloc_node+0x5b/0x430 [ 3464.685526][T21372] ? kvmalloc_node+0xa2/0x1a0 14:59:42 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x12fd, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3464.690266][T21372] ? kvmalloc_node+0xa2/0x1a0 [ 3464.695000][T21372] __kmalloc_node+0x4d/0xd0 [ 3464.699628][T21372] kvmalloc_node+0xa2/0x1a0 [ 3464.704221][T21372] alloc_fdtable+0x160/0x2a0 [ 3464.708865][T21372] dup_fd+0x722/0xcb0 [ 3464.712908][T21372] copy_process+0x24ea/0x7520 [ 3464.717646][T21372] ? find_held_lock+0x2d/0x110 [ 3464.722495][T21372] ? __cleanup_sighand+0xb0/0xb0 [ 3464.727599][T21372] ? _copy_from_user+0xfd/0x170 [ 3464.732517][T21372] kernel_clone+0xeb/0x990 14:59:42 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, 0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3464.736995][T21372] ? create_io_thread+0xf0/0xf0 [ 3464.741923][T21372] __do_sys_clone3+0x1cd/0x2e0 [ 3464.746744][T21372] ? __do_sys_clone+0x100/0x100 [ 3464.751650][T21372] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3464.757395][T21372] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3464.763343][T21372] ? lockdep_hardirqs_on+0x7d/0x100 [ 3464.768594][T21372] do_syscall_64+0x39/0xb0 [ 3464.773072][T21372] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3464.779018][T21372] RIP: 0033:0x7fb95928c0a9 [ 3464.783469][T21372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3464.803155][T21372] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3464.811616][T21372] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3464.819635][T21372] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3464.827652][T21372] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3464.835860][T21372] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3464.843874][T21372] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3464.851909][T21372] 14:59:43 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x6000000) 14:59:43 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) 14:59:43 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:43 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1800}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:43 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:43 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x130e, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:43 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7000000) 14:59:43 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1e00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:43 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, 0x0, &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:43 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x8000000) [ 3465.086247][T21400] FAULT_INJECTION: forcing a failure. [ 3465.086247][T21400] name failslab, interval 1, probability 0, space 0, times 0 [ 3465.146665][T21400] CPU: 0 PID: 21400 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3465.155423][T21400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3465.165515][T21400] Call Trace: [ 3465.168834][T21400] [ 3465.171796][T21400] dump_stack_lvl+0xd1/0x138 [ 3465.176450][T21400] should_fail_ex.cold+0x5/0xa [ 3465.181288][T21400] ? copy_fs_struct+0x49/0x340 [ 3465.186110][T21400] should_failslab+0x9/0x20 [ 3465.190673][T21400] kmem_cache_alloc+0x5a/0x430 14:59:43 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) [ 3465.195507][T21400] copy_fs_struct+0x49/0x340 [ 3465.200161][T21400] copy_process+0x37c9/0x7520 [ 3465.204891][T21400] ? find_held_lock+0x2d/0x110 [ 3465.209728][T21400] ? __cleanup_sighand+0xb0/0xb0 [ 3465.214730][T21400] ? _copy_from_user+0xfd/0x170 [ 3465.219655][T21400] kernel_clone+0xeb/0x990 [ 3465.224132][T21400] ? create_io_thread+0xf0/0xf0 [ 3465.229067][T21400] __do_sys_clone3+0x1cd/0x2e0 [ 3465.234581][T21400] ? __do_sys_clone+0x100/0x100 [ 3465.239493][T21400] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3465.245314][T21400] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3465.251259][T21400] ? lockdep_hardirqs_on+0x7d/0x100 [ 3465.256519][T21400] do_syscall_64+0x39/0xb0 [ 3465.260999][T21400] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3465.266941][T21400] RIP: 0033:0x7fb95928c0a9 [ 3465.271406][T21400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3465.280563][T21413] FAULT_INJECTION: forcing a failure. [ 3465.280563][T21413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3465.291039][T21400] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3465.291075][T21400] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3465.291093][T21400] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3465.291110][T21400] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3465.291128][T21400] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 14:59:43 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 14:59:43 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1318, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3465.291145][T21400] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3465.291179][T21400] [ 3465.367396][T21413] CPU: 1 PID: 21413 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3465.376158][T21413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3465.386256][T21413] Call Trace: [ 3465.389571][T21413] [ 3465.392538][T21413] dump_stack_lvl+0xd1/0x138 [ 3465.397184][T21413] should_fail_ex.cold+0x5/0xa [ 3465.402022][T21413] _copy_from_user+0x2e/0x170 [ 3465.406781][T21413] copy_clone_args_from_user+0x147/0x780 [ 3465.412470][T21413] ? __list_add_rcu+0xe0/0xe0 [ 3465.417205][T21413] ? ksys_write+0x210/0x250 [ 3465.421759][T21413] ? lock_downgrade+0x6e0/0x6e0 [ 3465.426660][T21413] __do_sys_clone3+0x8f/0x2e0 [ 3465.431395][T21413] ? __do_sys_clone+0x100/0x100 [ 3465.436300][T21413] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3465.442002][T21413] ? wait_for_completion_io_timeout+0x20/0x20 [ 3465.448156][T21413] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3465.449658][T21420] FAULT_INJECTION: forcing a failure. [ 3465.449658][T21420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3465.454081][T21413] ? lockdep_hardirqs_on+0x7d/0x100 [ 3465.454121][T21413] do_syscall_64+0x39/0xb0 [ 3465.454159][T21413] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3465.454188][T21413] RIP: 0033:0x7ff440a8c0a9 [ 3465.454212][T21413] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3465.454240][T21413] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3465.454270][T21413] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3465.454290][T21413] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3465.454309][T21413] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3465.539918][T21413] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 14:59:43 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) 14:59:43 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x9000000) 14:59:43 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1f00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3465.547936][T21413] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3465.555968][T21413] [ 3465.559016][T21420] CPU: 0 PID: 21420 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller #0 [ 3465.567773][T21420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3465.577875][T21420] Call Trace: [ 3465.581193][T21420] [ 3465.584160][T21420] dump_stack_lvl+0xd1/0x138 [ 3465.588804][T21420] should_fail_ex.cold+0x5/0xa [ 3465.593637][T21420] _copy_from_user+0x2e/0x170 [ 3465.598377][T21420] copy_clone_args_from_user+0x147/0x780 [ 3465.604066][T21420] ? __list_add_rcu+0xe0/0xe0 [ 3465.608778][T21420] ? ksys_write+0x210/0x250 [ 3465.613327][T21420] ? lock_downgrade+0x6e0/0x6e0 [ 3465.618209][T21420] __do_sys_clone3+0x8f/0x2e0 [ 3465.622912][T21420] ? __do_sys_clone+0x100/0x100 [ 3465.627790][T21420] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3465.633552][T21420] ? wait_for_completion_io_timeout+0x20/0x20 [ 3465.639676][T21420] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3465.645594][T21420] ? lockdep_hardirqs_on+0x7d/0x100 [ 3465.650903][T21420] do_syscall_64+0x39/0xb0 [ 3465.655367][T21420] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3465.661285][T21420] RIP: 0033:0x7f955128c0a9 [ 3465.665714][T21420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3465.685359][T21420] RSP: 002b:00007f9551f85038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3465.693803][T21420] RAX: ffffffffffffffda RBX: 00007f95513abf80 RCX: 00007f955128c0a9 [ 3465.701788][T21420] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f9551f85050 [ 3465.709773][T21420] RBP: 00007f9551f851d0 R08: 0000000000000000 R09: 0000000000000058 [ 3465.717756][T21420] R10: 00007f9551f85050 R11: 0000000000000246 R12: 0000000000000058 [ 3465.725738][T21420] R13: 00007f95514cfb1f R14: 00007f9551f85300 R15: 0000000000022000 [ 3465.733740][T21420] 14:59:43 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 14:59:43 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 14:59:43 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x131a, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:44 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xa000000) 14:59:44 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xe000000) 14:59:44 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) 14:59:44 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:44 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1813, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3465.985216][T21437] FAULT_INJECTION: forcing a failure. [ 3465.985216][T21437] name failslab, interval 1, probability 0, space 0, times 0 [ 3466.018661][T21437] CPU: 0 PID: 21437 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 14:59:44 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2400}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3466.027424][T21437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3466.037519][T21437] Call Trace: [ 3466.040832][T21437] [ 3466.043799][T21437] dump_stack_lvl+0xd1/0x138 [ 3466.048449][T21437] should_fail_ex.cold+0x5/0xa [ 3466.053288][T21437] ? copy_process+0x3aa/0x7520 [ 3466.058108][T21437] should_failslab+0x9/0x20 [ 3466.062686][T21437] kmem_cache_alloc_node+0x5c/0x460 [ 3466.067957][T21437] copy_process+0x3aa/0x7520 [ 3466.072607][T21437] ? find_held_lock+0x2d/0x110 [ 3466.077440][T21437] ? __might_fault+0xd9/0x180 14:59:44 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1a13, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3466.082182][T21437] ? __cleanup_sighand+0xb0/0xb0 [ 3466.087190][T21437] ? _copy_from_user+0xfd/0x170 [ 3466.092117][T21437] kernel_clone+0xeb/0x990 [ 3466.096593][T21437] ? create_io_thread+0xf0/0xf0 [ 3466.101515][T21437] __do_sys_clone3+0x1cd/0x2e0 [ 3466.106349][T21437] ? __do_sys_clone+0x100/0x100 [ 3466.111254][T21437] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3466.116964][T21437] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3466.122884][T21437] ? lockdep_hardirqs_on+0x7d/0x100 [ 3466.128110][T21437] do_syscall_64+0x39/0xb0 [ 3466.132557][T21437] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.138469][T21437] RIP: 0033:0x7ff440a8c0a9 [ 3466.142899][T21437] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3466.162529][T21437] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3466.170961][T21437] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 14:59:44 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xf000000) 14:59:44 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) [ 3466.178956][T21437] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3466.187032][T21437] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3466.195014][T21437] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3466.203008][T21437] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3466.211009][T21437] [ 3466.219707][T21447] FAULT_INJECTION: forcing a failure. [ 3466.219707][T21447] name failslab, interval 1, probability 0, space 0, times 0 [ 3466.345121][T21453] FAULT_INJECTION: forcing a failure. [ 3466.345121][T21453] name failslab, interval 1, probability 0, space 0, times 0 [ 3466.359570][T21447] CPU: 1 PID: 21447 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller #0 [ 3466.368319][T21447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3466.378414][T21447] Call Trace: [ 3466.381723][T21447] [ 3466.384678][T21447] dump_stack_lvl+0xd1/0x138 [ 3466.389311][T21447] should_fail_ex.cold+0x5/0xa [ 3466.394131][T21447] ? copy_process+0x3aa/0x7520 [ 3466.398933][T21447] should_failslab+0x9/0x20 [ 3466.403479][T21447] kmem_cache_alloc_node+0x5c/0x460 [ 3466.408718][T21447] copy_process+0x3aa/0x7520 [ 3466.413347][T21447] ? find_held_lock+0x2d/0x110 [ 3466.418157][T21447] ? __might_fault+0xd9/0x180 [ 3466.422883][T21447] ? __cleanup_sighand+0xb0/0xb0 [ 3466.427869][T21447] ? _copy_from_user+0xfd/0x170 [ 3466.432769][T21447] kernel_clone+0xeb/0x990 [ 3466.437223][T21447] ? create_io_thread+0xf0/0xf0 [ 3466.442144][T21447] __do_sys_clone3+0x1cd/0x2e0 [ 3466.446962][T21447] ? __do_sys_clone+0x100/0x100 [ 3466.451853][T21447] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3466.457572][T21447] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3466.463500][T21447] ? lockdep_hardirqs_on+0x7d/0x100 [ 3466.468731][T21447] do_syscall_64+0x39/0xb0 [ 3466.473184][T21447] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.479108][T21447] RIP: 0033:0x7f955128c0a9 [ 3466.483543][T21447] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3466.503180][T21447] RSP: 002b:00007f9551f64038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3466.511622][T21447] RAX: ffffffffffffffda RBX: 00007f95513ac050 RCX: 00007f955128c0a9 [ 3466.519664][T21447] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f9551f64050 [ 3466.527664][T21447] RBP: 00007f9551f641d0 R08: 0000000000000000 R09: 0000000000000058 [ 3466.535660][T21447] R10: 00007f9551f64050 R11: 0000000000000246 R12: 0000000000000058 [ 3466.543659][T21447] R13: 00007f95514cfb1f R14: 00007f9551f64300 R15: 0000000000022000 [ 3466.551684][T21447] [ 3466.554722][T21453] CPU: 0 PID: 21453 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3466.563456][T21453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3466.573529][T21453] Call Trace: [ 3466.576822][T21453] [ 3466.579765][T21453] dump_stack_lvl+0xd1/0x138 [ 3466.584388][T21453] should_fail_ex.cold+0x5/0xa [ 3466.589192][T21453] ? copy_process+0x43a0/0x7520 [ 3466.594066][T21453] should_failslab+0x9/0x20 [ 3466.598620][T21453] kmem_cache_alloc+0x5a/0x430 [ 3466.603411][T21453] copy_process+0x43a0/0x7520 [ 3466.608118][T21453] ? find_held_lock+0x2d/0x110 [ 3466.612934][T21453] ? __cleanup_sighand+0xb0/0xb0 [ 3466.617904][T21453] ? _copy_from_user+0xfd/0x170 [ 3466.622790][T21453] kernel_clone+0xeb/0x990 [ 3466.627232][T21453] ? create_io_thread+0xf0/0xf0 [ 3466.632120][T21453] __do_sys_clone3+0x1cd/0x2e0 [ 3466.637340][T21453] ? __do_sys_clone+0x100/0x100 [ 3466.642209][T21453] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3466.647913][T21453] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3466.653825][T21453] ? lockdep_hardirqs_on+0x7d/0x100 [ 3466.659043][T21453] do_syscall_64+0x39/0xb0 [ 3466.663484][T21453] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3466.669416][T21453] RIP: 0033:0x7fb95928c0a9 [ 3466.673845][T21453] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3466.693473][T21453] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3466.701911][T21453] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3466.709892][T21453] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3466.717876][T21453] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3466.725862][T21453] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3466.733845][T21453] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3466.741850][T21453] 14:59:44 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:44 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 14:59:44 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x1fffefff) 14:59:44 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1f00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:44 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2a00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:44 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) 14:59:44 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x1fffffff) 14:59:45 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3466.899345][T21462] FAULT_INJECTION: forcing a failure. [ 3466.899345][T21462] name failslab, interval 1, probability 0, space 0, times 0 [ 3466.907959][T21466] FAULT_INJECTION: forcing a failure. [ 3466.907959][T21466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:59:45 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:45 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x20ffffff) [ 3466.952146][T21466] CPU: 0 PID: 21466 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3466.960904][T21466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3466.971001][T21466] Call Trace: [ 3466.974318][T21466] [ 3466.977284][T21466] dump_stack_lvl+0xd1/0x138 [ 3466.981928][T21466] should_fail_ex.cold+0x5/0xa [ 3466.986768][T21466] prepare_alloc_pages+0x178/0x570 [ 3466.991941][T21466] __alloc_pages+0x149/0x5b0 [ 3466.996578][T21466] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3467.003415][T21466] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 3467.009384][T21466] alloc_pages+0x1aa/0x270 [ 3467.013855][T21466] __get_free_pages+0xc/0x40 [ 3467.018492][T21466] pgd_alloc+0x29/0x260 [ 3467.022698][T21466] mm_init+0x63b/0xc10 [ 3467.026814][T21466] copy_process+0x43f6/0x7520 [ 3467.031550][T21466] ? find_held_lock+0x2d/0x110 [ 3467.036395][T21466] ? __cleanup_sighand+0xb0/0xb0 [ 3467.041405][T21466] ? _copy_from_user+0xfd/0x170 [ 3467.046317][T21466] kernel_clone+0xeb/0x990 14:59:45 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x21000fff) [ 3467.050775][T21466] ? create_io_thread+0xf0/0xf0 [ 3467.055681][T21466] __do_sys_clone3+0x1cd/0x2e0 [ 3467.060501][T21466] ? __do_sys_clone+0x100/0x100 [ 3467.065403][T21466] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3467.071124][T21466] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3467.077067][T21466] ? lockdep_hardirqs_on+0x7d/0x100 [ 3467.082317][T21466] do_syscall_64+0x39/0xb0 [ 3467.086801][T21466] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3467.092742][T21466] RIP: 0033:0x7fb95928c0a9 14:59:45 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3600}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3467.097182][T21466] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3467.116829][T21466] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3467.125295][T21466] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3467.133318][T21466] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3467.141338][T21466] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3467.149357][T21466] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3467.157384][T21466] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3467.166034][T21466] [ 3467.172254][T21462] CPU: 1 PID: 21462 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3467.180995][T21462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3467.191176][T21462] Call Trace: [ 3467.194475][T21462] [ 3467.197416][T21462] dump_stack_lvl+0xd1/0x138 [ 3467.202039][T21462] should_fail_ex.cold+0x5/0xa [ 3467.206841][T21462] ? prepare_creds+0x43/0x7b0 [ 3467.211550][T21462] should_failslab+0x9/0x20 [ 3467.216079][T21462] kmem_cache_alloc+0x5a/0x430 [ 3467.220865][T21462] ? __validate_process_creds+0x210/0x370 [ 3467.226618][T21462] prepare_creds+0x43/0x7b0 [ 3467.231155][T21462] copy_creds+0xa7/0xd50 [ 3467.235433][T21462] copy_process+0xd60/0x7520 [ 3467.240047][T21462] ? find_held_lock+0x2d/0x110 [ 3467.244847][T21462] ? __might_fault+0xd9/0x180 [ 3467.249562][T21462] ? __cleanup_sighand+0xb0/0xb0 [ 3467.254529][T21462] ? _copy_from_user+0xfd/0x170 [ 3467.259417][T21462] kernel_clone+0xeb/0x990 [ 3467.263862][T21462] ? create_io_thread+0xf0/0xf0 [ 3467.268750][T21462] __do_sys_clone3+0x1cd/0x2e0 [ 3467.273536][T21462] ? __do_sys_clone+0x100/0x100 [ 3467.278403][T21462] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3467.284094][T21462] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3467.290008][T21462] ? lockdep_hardirqs_on+0x7d/0x100 [ 3467.295224][T21462] do_syscall_64+0x39/0xb0 [ 3467.299670][T21462] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3467.305581][T21462] RIP: 0033:0x7ff440a8c0a9 [ 3467.310008][T21462] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3467.329632][T21462] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3467.338063][T21462] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3467.346047][T21462] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3467.354033][T21462] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3467.362019][T21462] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3467.370001][T21462] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3467.378000][T21462] 14:59:45 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xff0f0021) 14:59:45 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 14:59:45 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x2, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:45 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x3511, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:45 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) 14:59:45 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffefff1f) 14:59:45 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3c00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:45 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffffff1f) 14:59:45 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x3, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:45 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x3d11, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:45 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffffff20) [ 3467.671113][T21495] FAULT_INJECTION: forcing a failure. [ 3467.671113][T21495] name failslab, interval 1, probability 0, space 0, times 0 14:59:45 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3f00}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3467.756503][T21495] CPU: 1 PID: 21495 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3467.765275][T21495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3467.775466][T21495] Call Trace: [ 3467.778778][T21495] [ 3467.781749][T21495] dump_stack_lvl+0xd1/0x138 [ 3467.786398][T21495] should_fail_ex.cold+0x5/0xa [ 3467.791236][T21495] ? alloc_vmap_area+0x16c/0x1ed0 [ 3467.796331][T21495] should_failslab+0x9/0x20 [ 3467.800896][T21495] kmem_cache_alloc_node+0x5c/0x460 14:59:45 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x7, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3467.806151][T21495] alloc_vmap_area+0x16c/0x1ed0 [ 3467.811126][T21495] ? free_vmap_area+0x1ab0/0x1ab0 [ 3467.816242][T21495] __get_vm_area_node+0x142/0x3f0 [ 3467.821350][T21495] __vmalloc_node_range+0x25b/0x13c0 [ 3467.826695][T21495] ? kernel_clone+0xeb/0x990 [ 3467.831363][T21495] ? kernel_clone+0xeb/0x990 [ 3467.836027][T21495] ? lock_downgrade+0x6e0/0x6e0 [ 3467.840931][T21495] ? vfree_atomic+0xe0/0xe0 [ 3467.845482][T21495] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3467.851090][T21495] ? trace_kmem_cache_alloc+0x35/0x100 [ 3467.856611][T21495] ? kernel_clone+0xeb/0x990 [ 3467.861254][T21495] copy_process+0x12d2/0x7520 [ 3467.865985][T21495] ? kernel_clone+0xeb/0x990 [ 3467.870623][T21495] ? find_held_lock+0x2d/0x110 [ 3467.875447][T21495] ? __might_fault+0xd9/0x180 [ 3467.880179][T21495] ? __cleanup_sighand+0xb0/0xb0 [ 3467.885177][T21495] ? _copy_from_user+0xfd/0x170 [ 3467.890080][T21495] kernel_clone+0xeb/0x990 [ 3467.894541][T21495] ? create_io_thread+0xf0/0xf0 [ 3467.899465][T21495] __do_sys_clone3+0x1cd/0x2e0 [ 3467.904283][T21495] ? __do_sys_clone+0x100/0x100 [ 3467.909191][T21495] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3467.914923][T21495] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3467.920871][T21495] ? lockdep_hardirqs_on+0x7d/0x100 [ 3467.926130][T21495] do_syscall_64+0x39/0xb0 [ 3467.930609][T21495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3467.936550][T21495] RIP: 0033:0x7ff440a8c0a9 [ 3467.941015][T21495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3467.960656][T21495] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3467.969097][T21495] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3467.977108][T21495] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3467.985115][T21495] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3467.993120][T21495] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3468.001115][T21495] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3468.009111][T21495] 14:59:46 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) 14:59:46 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x8, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:46 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:46 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:46 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) 14:59:46 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x1b3171ffff) 14:59:46 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x555557285fff) 14:59:46 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x9, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:46 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4200}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:46 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) [ 3468.200321][T21520] FAULT_INJECTION: forcing a failure. [ 3468.200321][T21520] name failslab, interval 1, probability 0, space 0, times 0 [ 3468.249801][T21520] CPU: 1 PID: 21520 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3468.258564][T21520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3468.268659][T21520] Call Trace: [ 3468.272410][T21520] [ 3468.275468][T21520] dump_stack_lvl+0xd1/0x138 [ 3468.280128][T21520] should_fail_ex.cold+0x5/0xa [ 3468.284980][T21520] should_failslab+0x9/0x20 [ 3468.289552][T21520] __kmem_cache_alloc_node+0x5b/0x430 [ 3468.294974][T21520] ? security_task_alloc+0x10f/0x250 14:59:46 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xe, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3468.300328][T21520] ? memset+0x24/0x50 [ 3468.304385][T21520] ? security_task_alloc+0x10f/0x250 [ 3468.309740][T21520] __kmalloc+0x4a/0xd0 [ 3468.313882][T21520] security_task_alloc+0x10f/0x250 [ 3468.319067][T21520] copy_process+0x2431/0x7520 [ 3468.323809][T21520] ? find_held_lock+0x2d/0x110 [ 3468.328655][T21520] ? __cleanup_sighand+0xb0/0xb0 [ 3468.333655][T21520] ? _copy_from_user+0xfd/0x170 [ 3468.338576][T21520] kernel_clone+0xeb/0x990 [ 3468.343052][T21520] ? create_io_thread+0xf0/0xf0 14:59:46 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xfb12, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3468.347978][T21520] __do_sys_clone3+0x1cd/0x2e0 [ 3468.352797][T21520] ? __do_sys_clone+0x100/0x100 [ 3468.357700][T21520] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3468.363420][T21520] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3468.369382][T21520] ? lockdep_hardirqs_on+0x7d/0x100 [ 3468.374641][T21520] do_syscall_64+0x39/0xb0 [ 3468.379123][T21520] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3468.385069][T21520] RIP: 0033:0x7ff440a8c0a9 [ 3468.389526][T21520] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3468.409266][T21520] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3468.417733][T21520] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3468.425762][T21520] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3468.433776][T21520] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3468.441791][T21520] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3468.449807][T21520] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3468.457847][T21520] 14:59:46 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) 14:59:46 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5a0a}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:46 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x5555572a7fff) 14:59:46 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xfd12, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:46 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x11, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:46 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7f62045fefff) [ 3468.574200][T21533] FAULT_INJECTION: forcing a failure. [ 3468.574200][T21533] name failslab, interval 1, probability 0, space 0, times 0 [ 3468.614056][T21533] CPU: 0 PID: 21533 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3468.622815][T21533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3468.632908][T21533] Call Trace: [ 3468.636223][T21533] [ 3468.639193][T21533] dump_stack_lvl+0xd1/0x138 [ 3468.643845][T21533] should_fail_ex.cold+0x5/0xa [ 3468.648685][T21533] should_failslab+0x9/0x20 [ 3468.653266][T21533] __kmem_cache_alloc_node+0x5b/0x430 [ 3468.658695][T21533] ? security_prepare_creds+0x112/0x190 [ 3468.664318][T21533] ? security_prepare_creds+0x112/0x190 [ 3468.669938][T21533] __kmalloc+0x4a/0xd0 [ 3468.674072][T21533] security_prepare_creds+0x112/0x190 [ 3468.679514][T21533] prepare_creds+0x572/0x7b0 [ 3468.684166][T21533] copy_creds+0xa7/0xd50 [ 3468.688483][T21533] copy_process+0xd60/0x7520 [ 3468.693144][T21533] ? find_held_lock+0x2d/0x110 [ 3468.693381][T21544] FAULT_INJECTION: forcing a failure. [ 3468.693381][T21544] name failslab, interval 1, probability 0, space 0, times 0 [ 3468.697955][T21533] ? __might_fault+0xd9/0x180 [ 3468.698010][T21533] ? __cleanup_sighand+0xb0/0xb0 14:59:46 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7f62045fffff) 14:59:46 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3468.698052][T21533] ? _copy_from_user+0xfd/0x170 [ 3468.725204][T21533] kernel_clone+0xeb/0x990 [ 3468.729684][T21533] ? create_io_thread+0xf0/0xf0 [ 3468.734618][T21533] __do_sys_clone3+0x1cd/0x2e0 [ 3468.739437][T21533] ? __do_sys_clone+0x100/0x100 [ 3468.744333][T21533] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3468.750054][T21533] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3468.756005][T21533] ? lockdep_hardirqs_on+0x7d/0x100 [ 3468.761278][T21533] do_syscall_64+0x39/0xb0 [ 3468.765768][T21533] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3468.771714][T21533] RIP: 0033:0x7fb95928c0a9 [ 3468.776176][T21533] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3468.795839][T21533] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3468.804298][T21533] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3468.812309][T21533] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3468.820319][T21533] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3468.828327][T21533] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3468.836333][T21533] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3468.844360][T21533] [ 3468.849095][T21544] CPU: 1 PID: 21544 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3468.857834][T21544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3468.867925][T21544] Call Trace: [ 3468.871228][T21544] [ 3468.874170][T21544] dump_stack_lvl+0xd1/0x138 [ 3468.878798][T21544] should_fail_ex.cold+0x5/0xa [ 3468.883598][T21544] ? dup_fd+0x8d/0xcb0 [ 3468.887687][T21544] should_failslab+0x9/0x20 [ 3468.892240][T21544] kmem_cache_alloc+0x5a/0x430 [ 3468.897028][T21544] dup_fd+0x8d/0xcb0 [ 3468.900936][T21544] ? trace_kmalloc+0x35/0x100 [ 3468.905643][T21544] ? apparmor_task_alloc+0x2bf/0x3b0 [ 3468.910978][T21544] ? bpf_lsm_task_alloc+0x9/0x10 [ 3468.915941][T21544] ? security_task_alloc+0xe4/0x250 [ 3468.921174][T21544] copy_process+0x24ea/0x7520 [ 3468.925886][T21544] ? find_held_lock+0x2d/0x110 [ 3468.930748][T21544] ? __cleanup_sighand+0xb0/0xb0 [ 3468.935718][T21544] ? _copy_from_user+0xfd/0x170 [ 3468.940640][T21544] kernel_clone+0xeb/0x990 [ 3468.945099][T21544] ? create_io_thread+0xf0/0xf0 [ 3468.949991][T21544] __do_sys_clone3+0x1cd/0x2e0 [ 3468.954777][T21544] ? __do_sys_clone+0x100/0x100 [ 3468.959661][T21544] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3468.965352][T21544] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3468.971271][T21544] ? lockdep_hardirqs_on+0x7d/0x100 [ 3468.976511][T21544] do_syscall_64+0x39/0xb0 [ 3468.980963][T21544] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3468.986876][T21544] RIP: 0033:0x7ff440a8c0a9 [ 3468.991302][T21544] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3469.010935][T21544] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 14:59:47 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7f6204dfffff) [ 3469.019365][T21544] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3469.027347][T21544] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3469.035327][T21544] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3469.043311][T21544] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3469.051295][T21544] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3469.059306][T21544] 14:59:47 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) 14:59:47 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x361, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:47 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x20010, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:47 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 14:59:47 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:47 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7f6204ffffff) 14:59:47 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x20200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3469.281620][T21559] FAULT_INJECTION: forcing a failure. [ 3469.281620][T21559] name failslab, interval 1, probability 0, space 0, times 0 [ 3469.284488][T21561] FAULT_INJECTION: forcing a failure. [ 3469.284488][T21561] name failslab, interval 1, probability 0, space 0, times 0 14:59:47 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7f62051fffff) 14:59:47 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7f62053fffff) [ 3469.328039][T21559] CPU: 0 PID: 21559 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3469.336844][T21559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3469.346942][T21559] Call Trace: [ 3469.350260][T21559] [ 3469.353227][T21559] dump_stack_lvl+0xd1/0x138 [ 3469.357876][T21559] should_fail_ex.cold+0x5/0xa [ 3469.362708][T21559] should_failslab+0x9/0x20 [ 3469.367269][T21559] __kmem_cache_alloc_node+0x5b/0x430 [ 3469.372685][T21559] ? alloc_fdtable+0xa5/0x2a0 [ 3469.377404][T21559] ? do_raw_spin_lock+0x124/0x2b0 [ 3469.382476][T21559] kmalloc_trace+0x26/0x60 [ 3469.386953][T21559] alloc_fdtable+0xa5/0x2a0 [ 3469.391594][T21559] dup_fd+0x722/0xcb0 [ 3469.395633][T21559] copy_process+0x24ea/0x7520 [ 3469.400363][T21559] ? find_held_lock+0x2d/0x110 [ 3469.405197][T21559] ? __cleanup_sighand+0xb0/0xb0 [ 3469.410188][T21559] ? _copy_from_user+0xfd/0x170 [ 3469.415097][T21559] kernel_clone+0xeb/0x990 [ 3469.419560][T21559] ? create_io_thread+0xf0/0xf0 [ 3469.424471][T21559] __do_sys_clone3+0x1cd/0x2e0 [ 3469.429272][T21559] ? __do_sys_clone+0x100/0x100 [ 3469.434160][T21559] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3469.439882][T21559] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3469.445828][T21559] ? lockdep_hardirqs_on+0x7d/0x100 [ 3469.451088][T21559] do_syscall_64+0x39/0xb0 [ 3469.455554][T21559] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3469.461493][T21559] RIP: 0033:0x7ff440a8c0a9 14:59:47 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7200}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3469.465934][T21559] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3469.485587][T21559] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3469.494048][T21559] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3469.502063][T21559] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3469.510086][T21559] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3469.518099][T21559] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3469.526125][T21559] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3469.534151][T21559] [ 3469.540619][T21561] CPU: 1 PID: 21561 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3469.549362][T21561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3469.559458][T21561] Call Trace: [ 3469.562765][T21561] [ 3469.565713][T21561] dump_stack_lvl+0xd1/0x138 [ 3469.570338][T21561] should_fail_ex.cold+0x5/0xa [ 3469.575137][T21561] ? vm_area_dup+0x7d/0x380 [ 3469.579674][T21561] should_failslab+0x9/0x20 [ 3469.584206][T21561] kmem_cache_alloc+0x5a/0x430 [ 3469.588997][T21561] vm_area_dup+0x7d/0x380 [ 3469.593352][T21561] ? copy_page_range+0x1dfe/0x3b40 [ 3469.598506][T21561] ? mas_node_count_gfp+0x88/0x140 [ 3469.603677][T21561] ? mas_next_nentry+0x610/0xab0 [ 3469.608649][T21561] ? vm_area_alloc+0x100/0x100 [ 3469.613449][T21561] ? percpu_counter_add_batch+0xc1/0x180 [ 3469.619120][T21561] ? __vm_enough_memory+0x188/0x390 [ 3469.624342][T21561] ? security_vm_enough_memory_mm+0x89/0xb0 [ 3469.630266][T21561] dup_mmap+0x655/0x10b0 [ 3469.634540][T21561] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3469.639848][T21561] ? lock_downgrade+0x6e0/0x6e0 [ 3469.644725][T21561] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3469.650569][T21561] ? mm_init+0x8e0/0xc10 [ 3469.654851][T21561] copy_process+0x440f/0x7520 [ 3469.659551][T21561] ? find_held_lock+0x2d/0x110 [ 3469.664366][T21561] ? __cleanup_sighand+0xb0/0xb0 [ 3469.669333][T21561] ? _copy_from_user+0xfd/0x170 [ 3469.674218][T21561] kernel_clone+0xeb/0x990 [ 3469.678662][T21561] ? create_io_thread+0xf0/0xf0 [ 3469.683650][T21561] __do_sys_clone3+0x1cd/0x2e0 [ 3469.688495][T21561] ? __do_sys_clone+0x100/0x100 [ 3469.693370][T21561] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3469.699067][T21561] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3469.704982][T21561] ? lockdep_hardirqs_on+0x7d/0x100 [ 3469.710290][T21561] do_syscall_64+0x39/0xb0 [ 3469.714736][T21561] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3469.720648][T21561] RIP: 0033:0x7fb95928c0a9 [ 3469.725076][T21561] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3469.744701][T21561] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3469.753222][T21561] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3469.761207][T21561] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3469.769217][T21561] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 14:59:47 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x362, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3469.777202][T21561] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3469.785185][T21561] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3469.793190][T21561] 14:59:48 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7f62055fffff) 14:59:48 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) 14:59:48 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x80000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:48 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x363, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:48 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7f62059fffff) 14:59:48 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7310}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:48 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) 14:59:48 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7f6206829fff) [ 3470.070731][T21589] FAULT_INJECTION: forcing a failure. [ 3470.070731][T21589] name failslab, interval 1, probability 0, space 0, times 0 14:59:48 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:48 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:48 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) [ 3470.120057][T21589] CPU: 1 PID: 21589 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3470.128821][T21589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3470.138914][T21589] Call Trace: [ 3470.142223][T21589] [ 3470.145190][T21589] dump_stack_lvl+0xd1/0x138 [ 3470.150015][T21589] should_fail_ex.cold+0x5/0xa [ 3470.154853][T21589] should_failslab+0x9/0x20 [ 3470.159419][T21589] __kmem_cache_alloc_node+0x5b/0x430 [ 3470.164846][T21589] ? __vmalloc_node_range+0xa11/0x13c0 [ 3470.170361][T21589] ? __vmalloc_node_range+0xa11/0x13c0 [ 3470.175867][T21589] __kmalloc_node+0x4d/0xd0 [ 3470.180425][T21589] __vmalloc_node_range+0xa11/0x13c0 [ 3470.185788][T21589] ? kernel_clone+0xeb/0x990 [ 3470.190518][T21589] ? lock_downgrade+0x6e0/0x6e0 [ 3470.195417][T21589] ? vfree_atomic+0xe0/0xe0 [ 3470.199977][T21589] ? rcu_read_lock_sched_held+0x3e/0x70 [ 3470.205607][T21589] ? trace_kmem_cache_alloc+0x35/0x100 [ 3470.211142][T21589] ? kernel_clone+0xeb/0x990 [ 3470.215833][T21589] copy_process+0x12d2/0x7520 14:59:48 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3470.220567][T21589] ? kernel_clone+0xeb/0x990 [ 3470.225212][T21589] ? find_held_lock+0x2d/0x110 [ 3470.230045][T21589] ? __might_fault+0xd9/0x180 [ 3470.234785][T21589] ? __cleanup_sighand+0xb0/0xb0 [ 3470.239792][T21589] ? _copy_from_user+0xfd/0x170 [ 3470.244710][T21589] kernel_clone+0xeb/0x990 [ 3470.249183][T21589] ? create_io_thread+0xf0/0xf0 [ 3470.254109][T21589] __do_sys_clone3+0x1cd/0x2e0 [ 3470.258935][T21589] ? __do_sys_clone+0x100/0x100 [ 3470.263952][T21589] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3470.269684][T21589] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3470.275636][T21589] ? lockdep_hardirqs_on+0x7d/0x100 [ 3470.280894][T21589] do_syscall_64+0x39/0xb0 [ 3470.285386][T21589] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3470.291338][T21589] RIP: 0033:0x7ff440a8c0a9 [ 3470.295803][T21589] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 14:59:48 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:48 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xe00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:48 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7311}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3470.315462][T21589] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3470.323937][T21589] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3470.331957][T21589] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3470.339981][T21589] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3470.348171][T21589] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3470.356190][T21589] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3470.364349][T21589] 14:59:48 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x7fffffffffffe) 14:59:48 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 14:59:48 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x100000000000000) [ 3470.485032][T21605] FAULT_INJECTION: forcing a failure. [ 3470.485032][T21605] name failslab, interval 1, probability 0, space 0, times 0 [ 3470.547877][T21605] CPU: 0 PID: 21605 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3470.556651][T21605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3470.566748][T21605] Call Trace: [ 3470.570064][T21605] [ 3470.573035][T21605] dump_stack_lvl+0xd1/0x138 [ 3470.577689][T21605] should_fail_ex.cold+0x5/0xa [ 3470.582522][T21605] ? anon_vma_fork+0xe2/0x630 [ 3470.587267][T21605] should_failslab+0x9/0x20 [ 3470.591844][T21605] kmem_cache_alloc+0x5a/0x430 [ 3470.596755][T21605] anon_vma_fork+0xe2/0x630 [ 3470.601331][T21605] ? __vm_enough_memory+0x188/0x390 [ 3470.606642][T21605] dup_mmap+0xbb8/0x10b0 [ 3470.610958][T21605] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3470.616299][T21605] ? lock_downgrade+0x6e0/0x6e0 [ 3470.621217][T21605] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3470.627103][T21605] ? mm_init+0x8e0/0xc10 [ 3470.631406][T21605] copy_process+0x440f/0x7520 [ 3470.636145][T21605] ? find_held_lock+0x2d/0x110 [ 3470.641024][T21605] ? __cleanup_sighand+0xb0/0xb0 14:59:48 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9100}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:48 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xe13, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3470.646033][T21605] ? _copy_from_user+0xfd/0x170 [ 3470.650995][T21605] kernel_clone+0xeb/0x990 [ 3470.655554][T21605] ? create_io_thread+0xf0/0xf0 [ 3470.660486][T21605] __do_sys_clone3+0x1cd/0x2e0 [ 3470.665303][T21605] ? __do_sys_clone+0x100/0x100 [ 3470.670203][T21605] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3470.675942][T21605] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3470.681898][T21605] ? lockdep_hardirqs_on+0x7d/0x100 [ 3470.687154][T21605] do_syscall_64+0x39/0xb0 [ 3470.691630][T21605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3470.697577][T21605] RIP: 0033:0x7fb95928c0a9 [ 3470.702039][T21605] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3470.721697][T21605] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3470.730181][T21605] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3470.738196][T21605] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 14:59:48 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x200000000000000) 14:59:48 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3470.746213][T21605] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3470.754227][T21605] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3470.762238][T21605] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3470.770360][T21605] [ 3470.848247][T21625] FAULT_INJECTION: forcing a failure. [ 3470.848247][T21625] name failslab, interval 1, probability 0, space 0, times 0 [ 3470.879419][T21625] CPU: 0 PID: 21625 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3470.888183][T21625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3470.898280][T21625] Call Trace: [ 3470.901592][T21625] [ 3470.904560][T21625] dump_stack_lvl+0xd1/0x138 [ 3470.909211][T21625] should_fail_ex.cold+0x5/0xa [ 3470.914057][T21625] should_failslab+0x9/0x20 [ 3470.918628][T21625] __kmem_cache_alloc_node+0x5b/0x430 [ 3470.924061][T21625] ? kvmalloc_node+0xa2/0x1a0 [ 3470.928806][T21625] ? kvmalloc_node+0xa2/0x1a0 [ 3470.933550][T21625] __kmalloc_node+0x4d/0xd0 [ 3470.938245][T21625] kvmalloc_node+0xa2/0x1a0 [ 3470.942816][T21625] alloc_fdtable+0x160/0x2a0 [ 3470.947468][T21625] dup_fd+0x722/0xcb0 [ 3470.951518][T21625] copy_process+0x24ea/0x7520 [ 3470.956257][T21625] ? find_held_lock+0x2d/0x110 [ 3470.961106][T21625] ? __cleanup_sighand+0xb0/0xb0 [ 3470.966121][T21625] ? _copy_from_user+0xfd/0x170 [ 3470.971053][T21625] kernel_clone+0xeb/0x990 [ 3470.975621][T21625] ? create_io_thread+0xf0/0xf0 [ 3470.980534][T21625] __do_sys_clone3+0x1cd/0x2e0 [ 3470.985334][T21625] ? __do_sys_clone+0x100/0x100 [ 3470.990211][T21625] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3470.995906][T21625] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3471.001820][T21625] ? lockdep_hardirqs_on+0x7d/0x100 [ 3471.007039][T21625] do_syscall_64+0x39/0xb0 [ 3471.011483][T21625] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.017393][T21625] RIP: 0033:0x7ff440a8c0a9 [ 3471.021825][T21625] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3471.041469][T21625] RSP: 002b:00007ff43f5fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3471.049917][T21625] RAX: ffffffffffffffda RBX: 00007ff440bac050 RCX: 00007ff440a8c0a9 [ 3471.057900][T21625] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff43f5fe050 [ 3471.065885][T21625] RBP: 00007ff43f5fe1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3471.073874][T21625] R10: 00007ff43f5fe050 R11: 0000000000000246 R12: 0000000000000058 [ 3471.081861][T21625] R13: 00007ff440ccfb1f R14: 00007ff43f5fe300 R15: 0000000000022000 [ 3471.089860][T21625] 14:59:49 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:49 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb211}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:49 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x300000000000000) 14:59:49 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:49 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) 14:59:49 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) 14:59:49 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x400000000000000) 14:59:49 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x500000000000000) [ 3471.295912][T21637] FAULT_INJECTION: forcing a failure. [ 3471.295912][T21637] name failslab, interval 1, probability 0, space 0, times 0 [ 3471.327149][T21641] FAULT_INJECTION: forcing a failure. [ 3471.327149][T21641] name failslab, interval 1, probability 0, space 0, times 0 14:59:49 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb311}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:49 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x12ee, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3471.361000][T21637] CPU: 1 PID: 21637 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3471.369757][T21637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3471.379853][T21637] Call Trace: [ 3471.383164][T21637] [ 3471.386120][T21637] dump_stack_lvl+0xd1/0x138 [ 3471.390768][T21637] should_fail_ex.cold+0x5/0xa [ 3471.395597][T21637] ? copy_fs_struct+0x49/0x340 [ 3471.400421][T21637] should_failslab+0x9/0x20 [ 3471.404978][T21637] kmem_cache_alloc+0x5a/0x430 [ 3471.409798][T21637] copy_fs_struct+0x49/0x340 [ 3471.414449][T21637] copy_process+0x37c9/0x7520 [ 3471.419178][T21637] ? find_held_lock+0x2d/0x110 [ 3471.424015][T21637] ? __cleanup_sighand+0xb0/0xb0 [ 3471.429017][T21637] ? _copy_from_user+0xfd/0x170 [ 3471.433972][T21637] kernel_clone+0xeb/0x990 [ 3471.438444][T21637] ? create_io_thread+0xf0/0xf0 [ 3471.443366][T21637] __do_sys_clone3+0x1cd/0x2e0 [ 3471.448186][T21637] ? __do_sys_clone+0x100/0x100 [ 3471.453090][T21637] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3471.458826][T21637] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3471.464785][T21637] ? lockdep_hardirqs_on+0x7d/0x100 [ 3471.470039][T21637] do_syscall_64+0x39/0xb0 [ 3471.474597][T21637] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.480555][T21637] RIP: 0033:0x7ff440a8c0a9 [ 3471.485014][T21637] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 14:59:49 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x130e, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3471.504684][T21637] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3471.513265][T21637] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3471.521280][T21637] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3471.529295][T21637] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3471.537310][T21637] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3471.545320][T21637] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3471.553360][T21637] 14:59:49 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x7000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:49 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x600000000000000) [ 3471.582458][T21641] CPU: 1 PID: 21641 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3471.591220][T21641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3471.601315][T21641] Call Trace: [ 3471.604623][T21641] [ 3471.607586][T21641] dump_stack_lvl+0xd1/0x138 [ 3471.612236][T21641] should_fail_ex.cold+0x5/0xa [ 3471.617063][T21641] ? anon_vma_fork+0x1f1/0x630 [ 3471.621889][T21641] should_failslab+0x9/0x20 [ 3471.626458][T21641] kmem_cache_alloc+0x5a/0x430 [ 3471.631279][T21641] anon_vma_fork+0x1f1/0x630 [ 3471.635943][T21641] dup_mmap+0xbb8/0x10b0 [ 3471.640257][T21641] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3471.645589][T21641] ? lock_downgrade+0x6e0/0x6e0 [ 3471.650498][T21641] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3471.656383][T21641] ? mm_init+0x8e0/0xc10 [ 3471.660725][T21641] copy_process+0x440f/0x7520 [ 3471.665466][T21641] ? find_held_lock+0x2d/0x110 [ 3471.670312][T21641] ? __cleanup_sighand+0xb0/0xb0 [ 3471.675317][T21641] ? _copy_from_user+0xfd/0x170 [ 3471.680247][T21641] kernel_clone+0xeb/0x990 [ 3471.684742][T21641] ? create_io_thread+0xf0/0xf0 [ 3471.689664][T21641] __do_sys_clone3+0x1cd/0x2e0 [ 3471.694483][T21641] ? __do_sys_clone+0x100/0x100 [ 3471.699382][T21641] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3471.705127][T21641] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3471.711095][T21641] ? lockdep_hardirqs_on+0x7d/0x100 [ 3471.716346][T21641] do_syscall_64+0x39/0xb0 [ 3471.720823][T21641] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3471.726761][T21641] RIP: 0033:0x7fb95928c0a9 [ 3471.731211][T21641] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3471.750879][T21641] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3471.759347][T21641] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3471.767368][T21641] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3471.775387][T21641] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3471.783407][T21641] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3471.791439][T21641] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3471.799479][T21641] 14:59:50 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) 14:59:50 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf30a}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:50 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) 14:59:50 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x700000000000000) 14:59:50 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1846, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:50 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:50 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) 14:59:50 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x800000000000000) 14:59:50 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3472.019679][T21668] FAULT_INJECTION: forcing a failure. [ 3472.019679][T21668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3472.072597][T21668] CPU: 0 PID: 21668 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3472.081394][T21668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3472.091492][T21668] Call Trace: [ 3472.094804][T21668] [ 3472.097767][T21668] dump_stack_lvl+0xd1/0x138 [ 3472.102417][T21668] should_fail_ex.cold+0x5/0xa [ 3472.107251][T21668] prepare_alloc_pages+0x178/0x570 [ 3472.112511][T21668] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3472.118551][T21668] __alloc_pages+0x149/0x5b0 [ 3472.123200][T21668] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3472.130049][T21668] ? copy_page_range+0x1ff7/0x3b40 [ 3472.135328][T21668] alloc_pages+0x1aa/0x270 [ 3472.139792][T21668] get_zeroed_page+0x14/0x40 [ 3472.144427][T21668] __pud_alloc+0x3b/0x180 [ 3472.148823][T21668] copy_page_range+0x246b/0x3b40 [ 3472.148974][T21677] FAULT_INJECTION: forcing a failure. [ 3472.148974][T21677] name failslab, interval 1, probability 0, space 0, times 0 [ 3472.153807][T21668] ? mas_wr_modify+0x999/0x16d0 [ 3472.153871][T21668] ? mas_store+0x206/0x2e0 [ 3472.175786][T21668] ? handle_mm_fault+0x850/0x850 [ 3472.180804][T21668] ? anon_vma_fork+0xba/0x630 [ 3472.185554][T21668] dup_mmap+0xc10/0x10b0 [ 3472.189856][T21668] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3472.195192][T21668] ? lock_downgrade+0x6e0/0x6e0 [ 3472.200099][T21668] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3472.206154][T21668] ? mm_init+0x8e0/0xc10 [ 3472.210450][T21668] copy_process+0x440f/0x7520 [ 3472.215171][T21668] ? find_held_lock+0x2d/0x110 14:59:50 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x900000000000000) 14:59:50 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x186d, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3472.220004][T21668] ? __cleanup_sighand+0xb0/0xb0 [ 3472.224996][T21668] ? _copy_from_user+0xfd/0x170 [ 3472.229913][T21668] kernel_clone+0xeb/0x990 [ 3472.234818][T21668] ? create_io_thread+0xf0/0xf0 [ 3472.239740][T21668] __do_sys_clone3+0x1cd/0x2e0 [ 3472.244547][T21668] ? __do_sys_clone+0x100/0x100 [ 3472.249448][T21668] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3472.255179][T21668] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3472.261119][T21668] ? lockdep_hardirqs_on+0x7d/0x100 [ 3472.266389][T21668] do_syscall_64+0x39/0xb0 14:59:50 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x9000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3472.270871][T21668] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3472.276813][T21668] RIP: 0033:0x7fb95928c0a9 [ 3472.281260][T21668] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3472.300912][T21668] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3472.309377][T21668] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3472.317477][T21668] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3472.325509][T21668] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3472.333524][T21668] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3472.341540][T21668] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3472.349576][T21668] [ 3472.353724][T21677] CPU: 1 PID: 21677 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3472.362458][T21677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3472.372535][T21677] Call Trace: [ 3472.375823][T21677] [ 3472.378769][T21677] dump_stack_lvl+0xd1/0x138 [ 3472.383392][T21677] should_fail_ex.cold+0x5/0xa [ 3472.388191][T21677] ? copy_process+0x27d6/0x7520 [ 3472.393063][T21677] should_failslab+0x9/0x20 [ 3472.397591][T21677] kmem_cache_alloc+0x5a/0x430 [ 3472.402381][T21677] ? _raw_spin_unlock_irq+0x23/0x50 [ 3472.407611][T21677] copy_process+0x27d6/0x7520 [ 3472.412314][T21677] ? find_held_lock+0x2d/0x110 [ 3472.417124][T21677] ? __cleanup_sighand+0xb0/0xb0 [ 3472.422092][T21677] ? _copy_from_user+0xfd/0x170 [ 3472.426980][T21677] kernel_clone+0xeb/0x990 [ 3472.431423][T21677] ? create_io_thread+0xf0/0xf0 [ 3472.436312][T21677] __do_sys_clone3+0x1cd/0x2e0 [ 3472.441100][T21677] ? __do_sys_clone+0x100/0x100 [ 3472.445971][T21677] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3472.451750][T21677] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3472.457700][T21677] ? lockdep_hardirqs_on+0x7d/0x100 [ 3472.462949][T21677] do_syscall_64+0x39/0xb0 [ 3472.467414][T21677] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3472.473332][T21677] RIP: 0033:0x7ff440a8c0a9 [ 3472.477773][T21677] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3472.497400][T21677] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3472.505833][T21677] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3472.513818][T21677] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3472.521984][T21677] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3472.529975][T21677] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3472.537983][T21677] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3472.546074][T21677] 14:59:50 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) 14:59:50 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) 14:59:50 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xa00000000000000) [ 3472.659429][T21689] FAULT_INJECTION: forcing a failure. [ 3472.659429][T21689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3472.698246][T21689] CPU: 1 PID: 21689 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3472.706996][T21689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3472.717446][T21689] Call Trace: [ 3472.720758][T21689] [ 3472.723727][T21689] dump_stack_lvl+0xd1/0x138 [ 3472.728382][T21689] should_fail_ex.cold+0x5/0xa [ 3472.733217][T21689] prepare_alloc_pages+0x178/0x570 [ 3472.738385][T21689] __alloc_pages+0x149/0x5b0 [ 3472.743031][T21689] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3472.749855][T21689] ? find_held_lock+0x2d/0x110 [ 3472.754700][T21689] ? lock_downgrade+0x6e0/0x6e0 [ 3472.759591][T21689] ? do_raw_spin_lock+0x124/0x2b0 [ 3472.764676][T21689] alloc_pages+0x1aa/0x270 [ 3472.769151][T21689] __pmd_alloc+0x3f/0x5d0 [ 3472.773537][T21689] ? __pud_alloc+0xe4/0x180 [ 3472.778104][T21689] copy_page_range+0x2829/0x3b40 [ 3472.783146][T21689] ? mas_store+0x206/0x2e0 [ 3472.787607][T21689] ? handle_mm_fault+0x850/0x850 [ 3472.792623][T21689] ? anon_vma_fork+0xba/0x630 [ 3472.797363][T21689] dup_mmap+0xc10/0x10b0 [ 3472.801670][T21689] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3472.807018][T21689] ? lock_downgrade+0x6e0/0x6e0 [ 3472.811927][T21689] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3472.817808][T21689] ? mm_init+0x8e0/0xc10 [ 3472.822128][T21689] copy_process+0x440f/0x7520 [ 3472.826871][T21689] ? find_held_lock+0x2d/0x110 [ 3472.831726][T21689] ? __cleanup_sighand+0xb0/0xb0 [ 3472.836750][T21689] ? _copy_from_user+0xfd/0x170 [ 3472.841671][T21689] kernel_clone+0xeb/0x990 [ 3472.846156][T21689] ? create_io_thread+0xf0/0xf0 [ 3472.851362][T21689] __do_sys_clone3+0x1cd/0x2e0 [ 3472.856184][T21689] ? __do_sys_clone+0x100/0x100 [ 3472.861087][T21689] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3472.866840][T21689] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3472.872787][T21689] ? lockdep_hardirqs_on+0x7d/0x100 [ 3472.878048][T21689] do_syscall_64+0x39/0xb0 [ 3472.882530][T21689] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3472.888481][T21689] RIP: 0033:0x7fb95928c0a9 14:59:50 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xe00000000000000) 14:59:50 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xf00000000000000) 14:59:51 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x40000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:51 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xe000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3472.892950][T21689] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3472.912604][T21689] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3472.921096][T21689] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3472.929157][T21689] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3472.937174][T21689] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3472.945203][T21689] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 14:59:51 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1f00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3472.953221][T21689] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3472.961264][T21689] 14:59:51 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xfeffffffffff0700) 14:59:51 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x100000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3473.009201][T21694] FAULT_INJECTION: forcing a failure. [ 3473.009201][T21694] name failslab, interval 1, probability 0, space 0, times 0 [ 3473.074290][T21694] CPU: 1 PID: 21694 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3473.083050][T21694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3473.093143][T21694] Call Trace: [ 3473.096449][T21694] [ 3473.099416][T21694] dump_stack_lvl+0xd1/0x138 [ 3473.104063][T21694] should_fail_ex.cold+0x5/0xa [ 3473.108894][T21694] ? copy_process+0x43a0/0x7520 [ 3473.113799][T21694] should_failslab+0x9/0x20 [ 3473.118441][T21694] kmem_cache_alloc+0x5a/0x430 14:59:51 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) [ 3473.123254][T21694] copy_process+0x43a0/0x7520 [ 3473.127988][T21694] ? find_held_lock+0x2d/0x110 [ 3473.132824][T21694] ? __cleanup_sighand+0xb0/0xb0 [ 3473.137819][T21694] ? _copy_from_user+0xfd/0x170 [ 3473.142738][T21694] kernel_clone+0xeb/0x990 [ 3473.147206][T21694] ? create_io_thread+0xf0/0xf0 [ 3473.152303][T21694] __do_sys_clone3+0x1cd/0x2e0 [ 3473.157115][T21694] ? __do_sys_clone+0x100/0x100 [ 3473.162013][T21694] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3473.167765][T21694] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3473.173731][T21694] ? lockdep_hardirqs_on+0x7d/0x100 [ 3473.178976][T21694] do_syscall_64+0x39/0xb0 [ 3473.183456][T21694] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3473.189390][T21694] RIP: 0033:0x7ff440a8c0a9 [ 3473.193827][T21694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3473.213454][T21694] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 14:59:51 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3473.221892][T21694] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3473.229879][T21694] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3473.237863][T21694] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3473.245846][T21694] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3473.253922][T21694] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3473.262019][T21694] 14:59:51 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xff0f002100000000) 14:59:51 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) 14:59:51 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x200000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:51 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xe130000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:51 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xff5f285755550000) [ 3473.402221][T21716] FAULT_INJECTION: forcing a failure. [ 3473.402221][T21716] name failslab, interval 1, probability 0, space 0, times 0 [ 3473.427808][T21716] CPU: 1 PID: 21716 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3473.436564][T21716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3473.446657][T21716] Call Trace: [ 3473.449972][T21716] [ 3473.452936][T21716] dump_stack_lvl+0xd1/0x138 [ 3473.457582][T21716] should_fail_ex.cold+0x5/0xa [ 3473.462425][T21716] ? __pmd_alloc+0xc3/0x5d0 [ 3473.467005][T21716] should_failslab+0x9/0x20 [ 3473.471574][T21716] kmem_cache_alloc+0x5a/0x430 [ 3473.476402][T21716] __pmd_alloc+0xc3/0x5d0 [ 3473.480797][T21716] ? __pud_alloc+0xe4/0x180 [ 3473.485389][T21716] copy_page_range+0x2829/0x3b40 [ 3473.490455][T21716] ? mas_store+0x206/0x2e0 [ 3473.494935][T21716] ? handle_mm_fault+0x850/0x850 14:59:51 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xff7f2a5755550000) [ 3473.500049][T21716] ? anon_vma_fork+0xba/0x630 [ 3473.504803][T21716] dup_mmap+0xc10/0x10b0 [ 3473.506226][T21728] FAULT_INJECTION: forcing a failure. [ 3473.506226][T21728] name failslab, interval 1, probability 0, space 0, times 0 [ 3473.509085][T21716] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3473.509128][T21716] ? lock_downgrade+0x6e0/0x6e0 [ 3473.531918][T21716] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3473.537805][T21716] ? mm_init+0x8e0/0xc10 [ 3473.542117][T21716] copy_process+0x440f/0x7520 [ 3473.546863][T21716] ? find_held_lock+0x2d/0x110 14:59:51 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x10000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3473.551716][T21716] ? __cleanup_sighand+0xb0/0xb0 [ 3473.556724][T21716] ? _copy_from_user+0xfd/0x170 [ 3473.561639][T21716] kernel_clone+0xeb/0x990 [ 3473.566106][T21716] ? create_io_thread+0xf0/0xf0 [ 3473.571043][T21716] __do_sys_clone3+0x1cd/0x2e0 [ 3473.575863][T21716] ? __do_sys_clone+0x100/0x100 [ 3473.580760][T21716] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3473.586488][T21716] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3473.592424][T21716] ? lockdep_hardirqs_on+0x7d/0x100 [ 3473.597671][T21716] do_syscall_64+0x39/0xb0 14:59:51 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3473.602340][T21716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3473.608368][T21716] RIP: 0033:0x7fb95928c0a9 [ 3473.612837][T21716] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3473.632492][T21716] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3473.640959][T21716] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3473.648975][T21716] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3473.656988][T21716] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3473.665002][T21716] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3473.673015][T21716] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3473.681055][T21716] [ 3473.688653][T21728] CPU: 0 PID: 21728 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3473.697400][T21728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3473.707495][T21728] Call Trace: [ 3473.710808][T21728] [ 3473.713768][T21728] dump_stack_lvl+0xd1/0x138 [ 3473.718426][T21728] should_fail_ex.cold+0x5/0xa [ 3473.723260][T21728] ? copy_process+0x27d6/0x7520 [ 3473.728164][T21728] should_failslab+0x9/0x20 [ 3473.732723][T21728] kmem_cache_alloc+0x5a/0x430 [ 3473.737537][T21728] ? _raw_spin_unlock_irq+0x23/0x50 [ 3473.742803][T21728] copy_process+0x27d6/0x7520 [ 3473.747544][T21728] ? find_held_lock+0x2d/0x110 14:59:51 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) 14:59:51 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x11000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3473.752390][T21728] ? __cleanup_sighand+0xb0/0xb0 [ 3473.757392][T21728] ? _copy_from_user+0xfd/0x170 [ 3473.762315][T21728] kernel_clone+0xeb/0x990 [ 3473.766796][T21728] ? create_io_thread+0xf0/0xf0 [ 3473.771724][T21728] __do_sys_clone3+0x1cd/0x2e0 [ 3473.776550][T21728] ? __do_sys_clone+0x100/0x100 [ 3473.781458][T21728] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3473.787181][T21728] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3473.793104][T21728] ? lockdep_hardirqs_on+0x7d/0x100 [ 3473.798322][T21728] do_syscall_64+0x39/0xb0 [ 3473.802766][T21728] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3473.808769][T21728] RIP: 0033:0x7ff440a8c0a9 [ 3473.813205][T21728] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3473.832831][T21728] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3473.841266][T21728] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 14:59:52 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xff9f8206627f0000) [ 3473.849259][T21728] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3473.857245][T21728] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3473.865232][T21728] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3473.873221][T21728] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3473.881226][T21728] 14:59:52 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x400000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:52 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffef5f04627f0000) [ 3473.968352][T21745] FAULT_INJECTION: forcing a failure. [ 3473.968352][T21745] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3474.050413][T21745] CPU: 1 PID: 21745 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3474.059185][T21745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3474.069282][T21745] Call Trace: [ 3474.072599][T21745] [ 3474.075565][T21745] dump_stack_lvl+0xd1/0x138 [ 3474.080247][T21745] should_fail_ex.cold+0x5/0xa [ 3474.085094][T21745] prepare_alloc_pages+0x178/0x570 [ 3474.090273][T21745] ? mark_lock.part.0+0xee/0x1910 [ 3474.095358][T21745] __alloc_pages+0x149/0x5b0 [ 3474.100104][T21745] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3474.106968][T21745] ? find_held_lock+0x2d/0x110 [ 3474.111815][T21745] alloc_pages+0x1aa/0x270 [ 3474.116294][T21745] pte_alloc_one+0x1a/0x230 [ 3474.120871][T21745] __pte_alloc+0x6d/0x260 [ 3474.125273][T21745] ? pmd_install+0x160/0x160 [ 3474.129938][T21745] ? _raw_spin_unlock+0x28/0x40 [ 3474.134862][T21745] ? __pmd_alloc+0x30c/0x5d0 [ 3474.139527][T21745] copy_page_range+0x17a8/0x3b40 [ 3474.144579][T21745] ? mas_store+0x206/0x2e0 14:59:52 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) 14:59:52 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x4618, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:52 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffefff1f00000000) 14:59:52 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x18130000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:52 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x600000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:52 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffff1f05627f0000) [ 3474.149058][T21745] ? handle_mm_fault+0x850/0x850 [ 3474.154086][T21745] ? anon_vma_fork+0xba/0x630 [ 3474.158841][T21745] dup_mmap+0xc10/0x10b0 [ 3474.163156][T21745] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3474.168512][T21745] ? lock_downgrade+0x6e0/0x6e0 [ 3474.173436][T21745] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3474.179351][T21745] ? mm_init+0x8e0/0xc10 [ 3474.183664][T21745] copy_process+0x440f/0x7520 [ 3474.188408][T21745] ? find_held_lock+0x2d/0x110 [ 3474.193256][T21745] ? __cleanup_sighand+0xb0/0xb0 14:59:52 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x80ffff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3474.198268][T21745] ? _copy_from_user+0xfd/0x170 [ 3474.203202][T21745] kernel_clone+0xeb/0x990 [ 3474.207678][T21745] ? create_io_thread+0xf0/0xf0 [ 3474.212607][T21745] __do_sys_clone3+0x1cd/0x2e0 [ 3474.217423][T21745] ? __do_sys_clone+0x100/0x100 [ 3474.222327][T21745] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3474.228057][T21745] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3474.234029][T21745] ? lockdep_hardirqs_on+0x7d/0x100 [ 3474.239302][T21745] do_syscall_64+0x39/0xb0 [ 3474.243785][T21745] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3474.249737][T21745] RIP: 0033:0x7fb95928c0a9 [ 3474.254210][T21745] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3474.273874][T21745] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3474.282343][T21745] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3474.290366][T21745] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3474.298393][T21745] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3474.306411][T21745] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3474.314521][T21745] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3474.322564][T21745] 14:59:52 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffff3f05627f0000) 14:59:52 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1a130000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:52 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) 14:59:52 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc0ff20}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:52 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x6103, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:52 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) 14:59:52 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffff5f04627f0000) 14:59:52 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) 14:59:52 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x6203, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:52 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:52 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1f000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:52 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffff5f05627f0000) [ 3474.607738][T21780] FAULT_INJECTION: forcing a failure. [ 3474.607738][T21780] name failslab, interval 1, probability 0, space 0, times 0 [ 3474.689072][T21780] CPU: 1 PID: 21780 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3474.697831][T21780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3474.707935][T21780] Call Trace: [ 3474.711249][T21780] [ 3474.714224][T21780] dump_stack_lvl+0xd1/0x138 [ 3474.718891][T21780] should_fail_ex.cold+0x5/0xa [ 3474.723733][T21780] ? ptlock_alloc+0x21/0x70 [ 3474.728306][T21780] should_failslab+0x9/0x20 [ 3474.732885][T21780] kmem_cache_alloc+0x5a/0x430 14:59:52 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x6303, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3474.737731][T21780] ptlock_alloc+0x21/0x70 [ 3474.742139][T21780] pte_alloc_one+0x6c/0x230 [ 3474.746721][T21780] __pte_alloc+0x6d/0x260 [ 3474.751118][T21780] ? pmd_install+0x160/0x160 [ 3474.755781][T21780] ? _raw_spin_unlock+0x28/0x40 [ 3474.760708][T21780] ? __pmd_alloc+0x30c/0x5d0 [ 3474.765472][T21780] copy_page_range+0x17a8/0x3b40 [ 3474.770530][T21780] ? mas_store+0x206/0x2e0 [ 3474.775003][T21780] ? handle_mm_fault+0x850/0x850 [ 3474.780027][T21780] ? anon_vma_fork+0xba/0x630 [ 3474.784788][T21780] dup_mmap+0xc10/0x10b0 [ 3474.789109][T21780] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3474.794461][T21780] ? lock_downgrade+0x6e0/0x6e0 [ 3474.799380][T21780] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3474.805526][T21780] ? mm_init+0x8e0/0xc10 [ 3474.809840][T21780] copy_process+0x440f/0x7520 [ 3474.814579][T21780] ? find_held_lock+0x2d/0x110 [ 3474.819611][T21780] ? __cleanup_sighand+0xb0/0xb0 [ 3474.824631][T21780] ? _copy_from_user+0xfd/0x170 [ 3474.829561][T21780] kernel_clone+0xeb/0x990 [ 3474.834040][T21780] ? create_io_thread+0xf0/0xf0 [ 3474.838973][T21780] __do_sys_clone3+0x1cd/0x2e0 [ 3474.843798][T21780] ? __do_sys_clone+0x100/0x100 [ 3474.848709][T21780] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3474.854452][T21780] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3474.860403][T21780] ? lockdep_hardirqs_on+0x7d/0x100 [ 3474.865664][T21780] do_syscall_64+0x39/0xb0 [ 3474.870148][T21780] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3474.876095][T21780] RIP: 0033:0x7fb95928c0a9 [ 3474.880558][T21780] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3474.883309][T21785] FAULT_INJECTION: forcing a failure. [ 3474.883309][T21785] name failslab, interval 1, probability 0, space 0, times 0 [ 3474.900282][T21780] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3474.900319][T21780] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3474.900338][T21780] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 14:59:53 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) 14:59:53 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:53 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x6d18, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:53 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1fffefff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:53 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffff71311b000000) [ 3474.900357][T21780] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3474.900375][T21780] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3474.900393][T21780] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3474.900433][T21780] [ 3474.982763][T21785] CPU: 1 PID: 21785 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3474.991526][T21785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3475.001631][T21785] Call Trace: [ 3475.004967][T21785] [ 3475.007955][T21785] dump_stack_lvl+0xd1/0x138 [ 3475.012691][T21785] should_fail_ex.cold+0x5/0xa [ 3475.016939][T21797] FAULT_INJECTION: forcing a failure. [ 3475.016939][T21797] name failslab, interval 1, probability 0, space 0, times 0 [ 3475.017512][T21785] ? vm_area_dup+0x7d/0x380 [ 3475.017550][T21785] should_failslab+0x9/0x20 14:59:53 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x20000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3475.039333][T21785] kmem_cache_alloc+0x5a/0x430 [ 3475.044166][T21785] vm_area_dup+0x7d/0x380 [ 3475.048554][T21785] ? find_held_lock+0x2d/0x110 [ 3475.053393][T21785] ? kmem_cache_alloc_bulk+0x38e/0x840 [ 3475.058936][T21785] ? mas_next_nentry+0x610/0xab0 [ 3475.063944][T21785] ? vm_area_alloc+0x100/0x100 [ 3475.068786][T21785] ? mas_find+0x211/0xd10 [ 3475.073195][T21785] dup_mmap+0x655/0x10b0 [ 3475.077500][T21785] ? find_held_lock+0x2d/0x110 [ 3475.082335][T21785] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3475.087679][T21785] ? lock_downgrade+0x6e0/0x6e0 [ 3475.092595][T21785] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3475.098480][T21785] ? mm_init+0x8e0/0xc10 [ 3475.102784][T21785] copy_process+0x440f/0x7520 [ 3475.107519][T21785] ? find_held_lock+0x2d/0x110 [ 3475.112369][T21785] ? __cleanup_sighand+0xb0/0xb0 [ 3475.117370][T21785] ? _copy_from_user+0xfd/0x170 [ 3475.122292][T21785] kernel_clone+0xeb/0x990 [ 3475.126769][T21785] ? create_io_thread+0xf0/0xf0 [ 3475.131696][T21785] __do_sys_clone3+0x1cd/0x2e0 [ 3475.136511][T21785] ? __do_sys_clone+0x100/0x100 [ 3475.141409][T21785] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3475.147135][T21785] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3475.153089][T21785] ? lockdep_hardirqs_on+0x7d/0x100 [ 3475.158363][T21785] do_syscall_64+0x39/0xb0 [ 3475.162844][T21785] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3475.168790][T21785] RIP: 0033:0x7ff440a8c0a9 [ 3475.173251][T21785] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3475.192912][T21785] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3475.201468][T21785] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3475.209486][T21785] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3475.217498][T21785] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3475.225526][T21785] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3475.233545][T21785] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3475.241590][T21785] [ 3475.255188][T21797] CPU: 0 PID: 21797 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3475.263939][T21797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3475.274036][T21797] Call Trace: [ 3475.277354][T21797] [ 3475.280315][T21797] dump_stack_lvl+0xd1/0x138 [ 3475.284965][T21797] should_fail_ex.cold+0x5/0xa [ 3475.289803][T21797] ? copy_process+0x43a0/0x7520 [ 3475.294707][T21797] should_failslab+0x9/0x20 [ 3475.299268][T21797] kmem_cache_alloc+0x5a/0x430 [ 3475.304091][T21797] copy_process+0x43a0/0x7520 [ 3475.308816][T21797] ? find_held_lock+0x2d/0x110 [ 3475.313662][T21797] ? __cleanup_sighand+0xb0/0xb0 [ 3475.318678][T21797] ? _copy_from_user+0xfd/0x170 [ 3475.323591][T21797] kernel_clone+0xeb/0x990 [ 3475.328163][T21797] ? create_io_thread+0xf0/0xf0 [ 3475.333089][T21797] __do_sys_clone3+0x1cd/0x2e0 [ 3475.337922][T21797] ? __do_sys_clone+0x100/0x100 [ 3475.342829][T21797] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3475.348563][T21797] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3475.352337][T21811] FAULT_INJECTION: forcing a failure. [ 3475.352337][T21811] name failslab, interval 1, probability 0, space 0, times 0 [ 3475.354581][T21797] ? lockdep_hardirqs_on+0x7d/0x100 [ 3475.354632][T21797] do_syscall_64+0x39/0xb0 [ 3475.376881][T21797] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3475.382828][T21797] RIP: 0033:0x7fb95928c0a9 [ 3475.387276][T21797] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3475.406933][T21797] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3475.415395][T21797] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3475.423407][T21797] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3475.431412][T21797] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 14:59:53 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) 14:59:53 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xee12, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3475.439413][T21797] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3475.447404][T21797] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3475.455425][T21797] [ 3475.458459][T21811] CPU: 1 PID: 21811 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3475.467186][T21811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3475.477297][T21811] Call Trace: [ 3475.480606][T21811] [ 3475.483578][T21811] dump_stack_lvl+0xd1/0x138 [ 3475.488246][T21811] should_fail_ex.cold+0x5/0xa [ 3475.493060][T21811] should_failslab+0x9/0x20 [ 3475.497599][T21811] __kmem_cache_alloc_node+0x5b/0x430 [ 3475.502989][T21811] ? security_task_alloc+0x10f/0x250 [ 3475.508303][T21811] ? memset+0x24/0x50 [ 3475.512399][T21811] ? security_task_alloc+0x10f/0x250 [ 3475.517716][T21811] __kmalloc+0x4a/0xd0 [ 3475.521815][T21811] security_task_alloc+0x10f/0x250 [ 3475.527000][T21811] copy_process+0x2431/0x7520 [ 3475.531707][T21811] ? find_held_lock+0x2d/0x110 [ 3475.536539][T21811] ? __cleanup_sighand+0xb0/0xb0 [ 3475.541517][T21811] ? _copy_from_user+0xfd/0x170 [ 3475.546414][T21811] kernel_clone+0xeb/0x990 [ 3475.550859][T21811] ? create_io_thread+0xf0/0xf0 [ 3475.555758][T21811] __do_sys_clone3+0x1cd/0x2e0 [ 3475.560553][T21811] ? __do_sys_clone+0x100/0x100 [ 3475.565436][T21811] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3475.571132][T21811] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3475.577045][T21811] ? lockdep_hardirqs_on+0x7d/0x100 [ 3475.582267][T21811] do_syscall_64+0x39/0xb0 [ 3475.586712][T21811] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3475.592636][T21811] RIP: 0033:0x7ff440a8c0a9 [ 3475.597081][T21811] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3475.616728][T21811] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3475.625342][T21811] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3475.633330][T21811] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 14:59:53 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x20f7afff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:53 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffff9f05627f0000) [ 3475.641317][T21811] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3475.649298][T21811] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3475.657282][T21811] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3475.665283][T21811] 14:59:53 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2040000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:53 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x20010, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:53 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28) 14:59:53 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffffdf04627f0000) 14:59:53 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x35110000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:54 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x3d110000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:54 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffffff04627f0000) 14:59:54 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x20200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3475.994459][T21827] FAULT_INJECTION: forcing a failure. [ 3475.994459][T21827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3476.022771][T21827] CPU: 1 PID: 21827 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3476.031520][T21827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3476.041615][T21827] Call Trace: 14:59:54 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) 14:59:54 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffffff1f00000000) 14:59:54 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:54 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3476.044931][T21827] [ 3476.047889][T21827] dump_stack_lvl+0xd1/0x138 [ 3476.052532][T21827] should_fail_ex.cold+0x5/0xa [ 3476.058229][T21827] prepare_alloc_pages+0x178/0x570 [ 3476.063402][T21827] __alloc_pages+0x149/0x5b0 [ 3476.068047][T21827] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3476.074890][T21827] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 3476.080857][T21827] alloc_pages+0x1aa/0x270 [ 3476.085326][T21827] __get_free_pages+0xc/0x40 [ 3476.089961][T21827] pgd_alloc+0x29/0x260 [ 3476.094171][T21827] mm_init+0x63b/0xc10 [ 3476.098292][T21827] copy_process+0x43f6/0x7520 [ 3476.103023][T21827] ? find_held_lock+0x2d/0x110 [ 3476.107875][T21827] ? __cleanup_sighand+0xb0/0xb0 [ 3476.112877][T21827] ? _copy_from_user+0xfd/0x170 [ 3476.117803][T21827] kernel_clone+0xeb/0x990 [ 3476.122276][T21827] ? create_io_thread+0xf0/0xf0 [ 3476.127202][T21827] __do_sys_clone3+0x1cd/0x2e0 [ 3476.132031][T21827] ? __do_sys_clone+0x100/0x100 [ 3476.136945][T21827] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3476.142679][T21827] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3476.148634][T21827] ? lockdep_hardirqs_on+0x7d/0x100 [ 3476.153888][T21827] do_syscall_64+0x39/0xb0 [ 3476.158435][T21827] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3476.164469][T21827] RIP: 0033:0x7fb95928c0a9 [ 3476.168928][T21827] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3476.188594][T21827] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3476.197075][T21827] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3476.205093][T21827] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3476.213106][T21827] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3476.221101][T21827] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3476.229088][T21827] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3476.237093][T21827] 14:59:54 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:54 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0xffffff2000000000) 14:59:54 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29) 14:59:54 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x80000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:54 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) 14:59:54 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x1000)=nil, 0x930, 0x100000e, 0x12, r0, 0x0) 14:59:54 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:54 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x48800fff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:54 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x1000)=nil, 0x930, 0x100000e, 0x12, r0, 0x0) 14:59:54 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:54 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x1000)=nil, 0x930, 0x100000e, 0x12, r0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x1000)=nil, 0x930, 0x100000e, 0x12, r0, 0x0) (async) 14:59:54 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3476.589718][T21855] FAULT_INJECTION: forcing a failure. [ 3476.589718][T21855] name failslab, interval 1, probability 0, space 0, times 0 14:59:54 executing program 1: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000100)=""/75, 0x4b, &(0x7f0000000180)=""/33, 0x1}}, 0x48) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/96, &(0x7f00000000c0)=0x60) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x80010, r2, 0x0) [ 3476.656801][T21855] CPU: 0 PID: 21855 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3476.665561][T21855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3476.675662][T21855] Call Trace: [ 3476.678977][T21855] [ 3476.681947][T21855] dump_stack_lvl+0xd1/0x138 [ 3476.686604][T21855] should_fail_ex.cold+0x5/0xa [ 3476.691446][T21855] ? anon_vma_fork+0xe2/0x630 [ 3476.696181][T21855] should_failslab+0x9/0x20 [ 3476.700745][T21855] kmem_cache_alloc+0x5a/0x430 [ 3476.705572][T21855] anon_vma_fork+0xe2/0x630 [ 3476.710164][T21855] ? __vm_enough_memory+0x188/0x390 [ 3476.715436][T21855] dup_mmap+0xbb8/0x10b0 [ 3476.719739][T21855] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3476.725073][T21855] ? lock_downgrade+0x6e0/0x6e0 [ 3476.729976][T21855] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3476.735846][T21855] ? mm_init+0x8e0/0xc10 [ 3476.740141][T21855] copy_process+0x440f/0x7520 [ 3476.744866][T21855] ? find_held_lock+0x2d/0x110 [ 3476.749710][T21855] ? __cleanup_sighand+0xb0/0xb0 14:59:54 executing program 1: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000100)=""/75, 0x4b, &(0x7f0000000180)=""/33, 0x1}}, 0x48) (async, rerun: 64) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/96, &(0x7f00000000c0)=0x60) (async, rerun: 64) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x80010, r2, 0x0) [ 3476.754714][T21855] ? _copy_from_user+0xfd/0x170 [ 3476.759631][T21855] kernel_clone+0xeb/0x990 [ 3476.764107][T21855] ? create_io_thread+0xf0/0xf0 [ 3476.769033][T21855] __do_sys_clone3+0x1cd/0x2e0 [ 3476.773862][T21855] ? __do_sys_clone+0x100/0x100 [ 3476.778776][T21855] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3476.784536][T21855] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3476.790485][T21855] ? lockdep_hardirqs_on+0x7d/0x100 [ 3476.795749][T21855] do_syscall_64+0x39/0xb0 [ 3476.800231][T21855] entry_SYSCALL_64_after_hwframe+0x63/0xcd 14:59:54 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30) [ 3476.806174][T21855] RIP: 0033:0x7ff440a8c0a9 [ 3476.810644][T21855] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3476.830397][T21855] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3476.838869][T21855] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3476.846889][T21855] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 14:59:55 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3476.854911][T21855] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3476.862929][T21855] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3476.870946][T21855] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3476.878988][T21855] [ 3476.975068][T21882] FAULT_INJECTION: forcing a failure. [ 3476.975068][T21882] name failslab, interval 1, probability 0, space 0, times 0 [ 3476.988240][T21882] CPU: 0 PID: 21882 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3476.996971][T21882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3477.007075][T21882] Call Trace: [ 3477.010392][T21882] [ 3477.013361][T21882] dump_stack_lvl+0xd1/0x138 [ 3477.018007][T21882] should_fail_ex.cold+0x5/0xa [ 3477.022844][T21882] ? vm_area_dup+0x7d/0x380 [ 3477.027401][T21882] should_failslab+0x9/0x20 [ 3477.031968][T21882] kmem_cache_alloc+0x5a/0x430 [ 3477.036791][T21882] vm_area_dup+0x7d/0x380 [ 3477.041171][T21882] ? copy_page_range+0x1dfe/0x3b40 [ 3477.046373][T21882] ? mas_next_nentry+0x610/0xab0 [ 3477.051360][T21882] ? vm_area_alloc+0x100/0x100 [ 3477.056165][T21882] ? percpu_counter_add_batch+0xc1/0x180 [ 3477.061841][T21882] ? __vm_enough_memory+0x188/0x390 [ 3477.067069][T21882] ? security_vm_enough_memory_mm+0x89/0xb0 [ 3477.072997][T21882] dup_mmap+0x655/0x10b0 [ 3477.077275][T21882] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3477.082586][T21882] ? lock_downgrade+0x6e0/0x6e0 [ 3477.087463][T21882] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3477.093312][T21882] ? mm_init+0x8e0/0xc10 [ 3477.097588][T21882] copy_process+0x440f/0x7520 [ 3477.102296][T21882] ? find_held_lock+0x2d/0x110 [ 3477.107113][T21882] ? __cleanup_sighand+0xb0/0xb0 [ 3477.112083][T21882] ? _copy_from_user+0xfd/0x170 [ 3477.116976][T21882] kernel_clone+0xeb/0x990 [ 3477.121420][T21882] ? create_io_thread+0xf0/0xf0 [ 3477.126321][T21882] __do_sys_clone3+0x1cd/0x2e0 [ 3477.131121][T21882] ? __do_sys_clone+0x100/0x100 [ 3477.135992][T21882] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3477.141698][T21882] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3477.147618][T21882] ? lockdep_hardirqs_on+0x7d/0x100 [ 3477.152839][T21882] do_syscall_64+0x39/0xb0 [ 3477.157286][T21882] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3477.163206][T21882] RIP: 0033:0x7fb95928c0a9 [ 3477.167638][T21882] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3477.187268][T21882] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3477.195703][T21882] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3477.203690][T21882] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3477.211681][T21882] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3477.219668][T21882] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3477.227656][T21882] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3477.235663][T21882] 14:59:55 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) 14:59:55 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x489fffff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:55 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:55 executing program 1: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000100)=""/75, 0x4b, &(0x7f0000000180)=""/33, 0x1}}, 0x48) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/96, &(0x7f00000000c0)=0x60) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x80010, r2, 0x0) pipe2$watch_queue(&(0x7f0000000800), 0x80) (async) pipe2$watch_queue(&(0x7f0000000800), 0x80) (async) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) (async) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000100)=""/75, 0x4b, &(0x7f0000000180)=""/33, 0x1}}, 0x48) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/96, &(0x7f00000000c0)=0x60) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x80010, r2, 0x0) (async) 14:59:55 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:55 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31) 14:59:55 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:55 executing program 1: syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="b098ae7c6b409945205d31106b26099b3a9f9cb9d39ea15a074605acaf0ab3382bb1951fbf8f0e7fabc98e25ec184389e4959a3b83f381706f9f2f9cd663de871d2269178f514b9d", 0x0, 0x48) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x26281, 0x0) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7f}}, 0x18) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x100010, r2, 0x0) 14:59:55 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x48af6fff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:55 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32) 14:59:55 executing program 1: syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="b098ae7c6b409945205d31106b26099b3a9f9cb9d39ea15a074605acaf0ab3382bb1951fbf8f0e7fabc98e25ec184389e4959a3b83f381706f9f2f9cd663de871d2269178f514b9d", 0x0, 0x48) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x26281, 0x0) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7f}}, 0x18) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x100010, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="b098ae7c6b409945205d31106b26099b3a9f9cb9d39ea15a074605acaf0ab3382bb1951fbf8f0e7fabc98e25ec184389e4959a3b83f381706f9f2f9cd663de871d2269178f514b9d", 0x0, 0x48) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x26281, 0x0) (async) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7f}}, 0x18) (async) pipe2$watch_queue(&(0x7f0000000800), 0x80) (async) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000040)='io.bfq.weight\x00', 0x2, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x100010, r2, 0x0) (async) 14:59:55 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3477.707464][T21909] FAULT_INJECTION: forcing a failure. [ 3477.707464][T21909] name failslab, interval 1, probability 0, space 0, times 0 [ 3477.740355][T21909] CPU: 0 PID: 21909 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3477.749123][T21909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3477.759229][T21909] Call Trace: [ 3477.762544][T21909] [ 3477.765511][T21909] dump_stack_lvl+0xd1/0x138 [ 3477.770155][T21909] should_fail_ex.cold+0x5/0xa [ 3477.775005][T21909] should_failslab+0x9/0x20 [ 3477.779043][T21914] FAULT_INJECTION: forcing a failure. [ 3477.779043][T21914] name failslab, interval 1, probability 0, space 0, times 0 [ 3477.779544][T21909] __kmem_cache_alloc_node+0x5b/0x430 [ 3477.797639][T21909] ? alloc_fdtable+0xa5/0x2a0 [ 3477.802359][T21909] ? do_raw_spin_lock+0x124/0x2b0 [ 3477.807526][T21909] kmalloc_trace+0x26/0x60 [ 3477.812007][T21909] alloc_fdtable+0xa5/0x2a0 [ 3477.816652][T21909] dup_fd+0x722/0xcb0 [ 3477.820718][T21909] copy_process+0x24ea/0x7520 [ 3477.825464][T21909] ? find_held_lock+0x2d/0x110 [ 3477.830316][T21909] ? __cleanup_sighand+0xb0/0xb0 [ 3477.835337][T21909] ? _copy_from_user+0xfd/0x170 [ 3477.840261][T21909] kernel_clone+0xeb/0x990 [ 3477.844744][T21909] ? create_io_thread+0xf0/0xf0 [ 3477.849661][T21909] __do_sys_clone3+0x1cd/0x2e0 [ 3477.854469][T21909] ? __do_sys_clone+0x100/0x100 [ 3477.859370][T21909] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3477.865081][T21909] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3477.871014][T21909] ? lockdep_hardirqs_on+0x7d/0x100 [ 3477.876255][T21909] do_syscall_64+0x39/0xb0 [ 3477.880715][T21909] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3477.886640][T21909] RIP: 0033:0x7ff440a8c0a9 [ 3477.891089][T21909] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3477.910746][T21909] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3477.919214][T21909] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3477.927218][T21909] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3477.935218][T21909] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3477.943213][T21909] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3477.951221][T21909] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3477.959243][T21909] [ 3477.971325][T21914] CPU: 0 PID: 21914 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3477.980068][T21914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3477.990151][T21914] Call Trace: [ 3477.993446][T21914] [ 3477.996391][T21914] dump_stack_lvl+0xd1/0x138 [ 3478.001017][T21914] should_fail_ex.cold+0x5/0xa [ 3478.005820][T21914] ? anon_vma_fork+0xe2/0x630 [ 3478.010542][T21914] should_failslab+0x9/0x20 [ 3478.015073][T21914] kmem_cache_alloc+0x5a/0x430 [ 3478.019863][T21914] anon_vma_fork+0xe2/0x630 [ 3478.024492][T21914] ? __vm_enough_memory+0x188/0x390 [ 3478.029737][T21914] dup_mmap+0xbb8/0x10b0 [ 3478.034028][T21914] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3478.039339][T21914] ? lock_downgrade+0x6e0/0x6e0 [ 3478.044219][T21914] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3478.050066][T21914] ? mm_init+0x8e0/0xc10 [ 3478.054338][T21914] copy_process+0x440f/0x7520 [ 3478.059039][T21914] ? find_held_lock+0x2d/0x110 [ 3478.063850][T21914] ? __cleanup_sighand+0xb0/0xb0 [ 3478.068821][T21914] ? _copy_from_user+0xfd/0x170 [ 3478.073711][T21914] kernel_clone+0xeb/0x990 [ 3478.078155][T21914] ? create_io_thread+0xf0/0xf0 [ 3478.083051][T21914] __do_sys_clone3+0x1cd/0x2e0 [ 3478.087841][T21914] ? __do_sys_clone+0x100/0x100 [ 3478.092717][T21914] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3478.098420][T21914] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3478.104341][T21914] ? lockdep_hardirqs_on+0x7d/0x100 [ 3478.109561][T21914] do_syscall_64+0x39/0xb0 [ 3478.114008][T21914] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3478.119924][T21914] RIP: 0033:0x7fb95928c0a9 [ 3478.124354][T21914] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3478.143980][T21914] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3478.152415][T21914] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3478.160403][T21914] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3478.168389][T21914] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3478.176465][T21914] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3478.184537][T21914] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3478.192543][T21914] 14:59:56 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) 14:59:56 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:56 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x48b20fff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:56 executing program 1: syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="b098ae7c6b409945205d31106b26099b3a9f9cb9d39ea15a074605acaf0ab3382bb1951fbf8f0e7fabc98e25ec184389e4959a3b83f381706f9f2f9cd663de871d2269178f514b9d", 0x0, 0x48) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x26281, 0x0) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7f}}, 0x18) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SMC_PNETID_FLUSH(r1, 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000040)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2, 0x100010, r2, 0x0) 14:59:56 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:56 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x8, 0x11, r0, 0x0) 14:59:56 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33) 14:59:56 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x4be00fff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:56 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xd000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:56 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x8, 0x11, r0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x8, 0x11, r0, 0x0) (async) 14:59:56 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x7000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3478.496829][T21928] FAULT_INJECTION: forcing a failure. [ 3478.496829][T21928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3478.540800][T21933] FAULT_INJECTION: forcing a failure. [ 3478.540800][T21933] name failslab, interval 1, probability 0, space 0, times 0 [ 3478.577681][T21928] CPU: 0 PID: 21928 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 14:59:56 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x8, 0x11, r0, 0x0) [ 3478.586444][T21928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3478.596537][T21928] Call Trace: [ 3478.599862][T21928] [ 3478.602832][T21928] dump_stack_lvl+0xd1/0x138 [ 3478.607483][T21928] should_fail_ex.cold+0x5/0xa [ 3478.612321][T21928] prepare_alloc_pages+0x178/0x570 [ 3478.617494][T21928] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3478.623534][T21928] __alloc_pages+0x149/0x5b0 [ 3478.628184][T21928] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3478.635033][T21928] ? copy_page_range+0x1ff7/0x3b40 [ 3478.641176][T21928] alloc_pages+0x1aa/0x270 [ 3478.645653][T21928] get_zeroed_page+0x14/0x40 [ 3478.650310][T21928] __pud_alloc+0x3b/0x180 [ 3478.654719][T21928] copy_page_range+0x246b/0x3b40 [ 3478.659727][T21928] ? mas_wr_modify+0x999/0x16d0 [ 3478.664656][T21928] ? mas_store+0x206/0x2e0 [ 3478.669121][T21928] ? handle_mm_fault+0x850/0x850 [ 3478.674146][T21928] ? anon_vma_fork+0xba/0x630 [ 3478.678896][T21928] dup_mmap+0xc10/0x10b0 [ 3478.683203][T21928] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3478.688545][T21928] ? lock_downgrade+0x6e0/0x6e0 [ 3478.693460][T21928] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3478.699344][T21928] ? mm_init+0x8e0/0xc10 [ 3478.703649][T21928] copy_process+0x440f/0x7520 [ 3478.708461][T21928] ? find_held_lock+0x2d/0x110 [ 3478.713306][T21928] ? __cleanup_sighand+0xb0/0xb0 [ 3478.718312][T21928] ? _copy_from_user+0xfd/0x170 [ 3478.723221][T21928] kernel_clone+0xeb/0x990 [ 3478.727782][T21928] ? create_io_thread+0xf0/0xf0 [ 3478.732713][T21928] __do_sys_clone3+0x1cd/0x2e0 [ 3478.737532][T21928] ? __do_sys_clone+0x100/0x100 [ 3478.742433][T21928] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3478.748157][T21928] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3478.754103][T21928] ? lockdep_hardirqs_on+0x7d/0x100 [ 3478.759337][T21928] do_syscall_64+0x39/0xb0 [ 3478.763797][T21928] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3478.769720][T21928] RIP: 0033:0x7ff440a8c0a9 [ 3478.774159][T21928] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3478.793810][T21928] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3478.802536][T21928] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3478.810536][T21928] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3478.818534][T21928] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3478.826964][T21928] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3478.834965][T21928] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3478.843001][T21928] [ 3478.850865][T21933] CPU: 1 PID: 21933 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3478.859630][T21933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3478.869730][T21933] Call Trace: [ 3478.873046][T21933] [ 3478.876005][T21933] dump_stack_lvl+0xd1/0x138 [ 3478.880644][T21933] should_fail_ex.cold+0x5/0xa [ 3478.885476][T21933] ? anon_vma_fork+0xe2/0x630 [ 3478.890199][T21933] should_failslab+0x9/0x20 [ 3478.894748][T21933] kmem_cache_alloc+0x5a/0x430 [ 3478.899562][T21933] anon_vma_fork+0xe2/0x630 [ 3478.904120][T21933] ? __vm_enough_memory+0x188/0x390 [ 3478.909380][T21933] dup_mmap+0xbb8/0x10b0 [ 3478.913678][T21933] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3478.919002][T21933] ? lock_downgrade+0x6e0/0x6e0 [ 3478.923908][T21933] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3478.931785][T21933] ? mm_init+0x8e0/0xc10 [ 3478.936084][T21933] copy_process+0x440f/0x7520 [ 3478.940802][T21933] ? find_held_lock+0x2d/0x110 [ 3478.946166][T21933] ? __cleanup_sighand+0xb0/0xb0 [ 3478.951246][T21933] ? _copy_from_user+0xfd/0x170 [ 3478.956157][T21933] kernel_clone+0xeb/0x990 [ 3478.960622][T21933] ? create_io_thread+0xf0/0xf0 [ 3478.965979][T21933] __do_sys_clone3+0x1cd/0x2e0 [ 3478.970877][T21933] ? __do_sys_clone+0x100/0x100 [ 3478.975767][T21933] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3478.981589][T21933] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3478.987528][T21933] ? lockdep_hardirqs_on+0x7d/0x100 [ 3478.992765][T21933] do_syscall_64+0x39/0xb0 [ 3478.997228][T21933] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3479.003156][T21933] RIP: 0033:0x7fb95928c0a9 [ 3479.007603][T21933] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3479.027251][T21933] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3479.035693][T21933] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3479.043769][T21933] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3479.051756][T21933] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3479.059838][T21933] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3479.067827][T21933] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3479.075835][T21933] 14:59:57 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) 14:59:57 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xe000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:57 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:57 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x480100, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14:59:57 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x4bf20fff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:57 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x480100, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14:59:57 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34) 14:59:57 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x9000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:57 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x559d2fff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:57 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x480100, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14:59:57 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3479.297723][T21955] FAULT_INJECTION: forcing a failure. [ 3479.297723][T21955] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3479.370787][T21959] FAULT_INJECTION: forcing a failure. [ 3479.370787][T21959] name failslab, interval 1, probability 0, space 0, times 0 [ 3479.398406][T21959] CPU: 0 PID: 21959 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3479.407170][T21959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3479.417271][T21959] Call Trace: [ 3479.420585][T21959] [ 3479.423550][T21959] dump_stack_lvl+0xd1/0x138 [ 3479.428203][T21959] should_fail_ex.cold+0x5/0xa [ 3479.433049][T21959] ? anon_vma_fork+0x1f1/0x630 [ 3479.437878][T21959] should_failslab+0x9/0x20 [ 3479.442443][T21959] kmem_cache_alloc+0x5a/0x430 [ 3479.447352][T21959] anon_vma_fork+0x1f1/0x630 [ 3479.452016][T21959] dup_mmap+0xbb8/0x10b0 [ 3479.456318][T21959] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3479.461641][T21959] ? lock_downgrade+0x6e0/0x6e0 [ 3479.466534][T21959] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3479.472417][T21959] ? mm_init+0x8e0/0xc10 [ 3479.476686][T21959] copy_process+0x440f/0x7520 [ 3479.481386][T21959] ? find_held_lock+0x2d/0x110 [ 3479.486205][T21959] ? __cleanup_sighand+0xb0/0xb0 [ 3479.491172][T21959] ? _copy_from_user+0xfd/0x170 [ 3479.496078][T21959] kernel_clone+0xeb/0x990 [ 3479.500551][T21959] ? create_io_thread+0xf0/0xf0 [ 3479.505467][T21959] __do_sys_clone3+0x1cd/0x2e0 [ 3479.510264][T21959] ? __do_sys_clone+0x100/0x100 [ 3479.515138][T21959] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3479.520852][T21959] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3479.526779][T21959] ? lockdep_hardirqs_on+0x7d/0x100 [ 3479.532003][T21959] do_syscall_64+0x39/0xb0 [ 3479.536447][T21959] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3479.542359][T21959] RIP: 0033:0x7fb95928c0a9 [ 3479.546788][T21959] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 14:59:57 executing program 1: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) [ 3479.566420][T21959] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3479.574850][T21959] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3479.582920][T21959] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3479.590904][T21959] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3479.598885][T21959] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3479.606873][T21959] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3479.614878][T21959] [ 3479.622233][T21955] CPU: 1 PID: 21955 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3479.630984][T21955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3479.641079][T21955] Call Trace: [ 3479.644390][T21955] [ 3479.647353][T21955] dump_stack_lvl+0xd1/0x138 [ 3479.651998][T21955] should_fail_ex.cold+0x5/0xa [ 3479.656838][T21955] prepare_alloc_pages+0x178/0x570 [ 3479.662014][T21955] __alloc_pages+0x149/0x5b0 [ 3479.666665][T21955] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3479.673489][T21955] ? find_held_lock+0x2d/0x110 [ 3479.678337][T21955] ? lock_downgrade+0x6e0/0x6e0 [ 3479.683240][T21955] ? do_raw_spin_lock+0x124/0x2b0 [ 3479.688332][T21955] alloc_pages+0x1aa/0x270 [ 3479.692811][T21955] __pmd_alloc+0x3f/0x5d0 [ 3479.697207][T21955] ? __pud_alloc+0xe4/0x180 [ 3479.701779][T21955] copy_page_range+0x2829/0x3b40 [ 3479.706826][T21955] ? mas_store+0x206/0x2e0 [ 3479.711304][T21955] ? handle_mm_fault+0x850/0x850 [ 3479.716338][T21955] ? anon_vma_fork+0xba/0x630 [ 3479.721077][T21955] dup_mmap+0xc10/0x10b0 [ 3479.725389][T21955] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3479.730735][T21955] ? lock_downgrade+0x6e0/0x6e0 [ 3479.735644][T21955] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3479.741517][T21955] ? mm_init+0x8e0/0xc10 [ 3479.745815][T21955] copy_process+0x440f/0x7520 [ 3479.750541][T21955] ? find_held_lock+0x2d/0x110 [ 3479.755377][T21955] ? __cleanup_sighand+0xb0/0xb0 [ 3479.760379][T21955] ? _copy_from_user+0xfd/0x170 [ 3479.765327][T21955] kernel_clone+0xeb/0x990 [ 3479.769794][T21955] ? create_io_thread+0xf0/0xf0 [ 3479.774717][T21955] __do_sys_clone3+0x1cd/0x2e0 [ 3479.779612][T21955] ? __do_sys_clone+0x100/0x100 [ 3479.784503][T21955] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3479.790240][T21955] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3479.796195][T21955] ? lockdep_hardirqs_on+0x7d/0x100 [ 3479.801465][T21955] do_syscall_64+0x39/0xb0 [ 3479.805941][T21955] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3479.811886][T21955] RIP: 0033:0x7ff440a8c0a9 [ 3479.816333][T21955] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3479.835991][T21955] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3479.844456][T21955] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3479.852453][T21955] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3479.860458][T21955] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 14:59:58 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) 14:59:58 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x559fffff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:58 executing program 1: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:58 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:58 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xe000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3479.868465][T21955] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3479.876472][T21955] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3479.884501][T21955] 14:59:58 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35) 14:59:58 executing program 1: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:58 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x8ad80fff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:58 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x12000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:58 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4010, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x10000000, 0x5, 0x3, 0x1, 0x1}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x4, 0x80010, r0, 0x0) [ 3480.093258][T21984] FAULT_INJECTION: forcing a failure. [ 3480.093258][T21984] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3480.126367][T21983] FAULT_INJECTION: forcing a failure. [ 3480.126367][T21983] name failslab, interval 1, probability 0, space 0, times 0 [ 3480.161204][T21984] CPU: 1 PID: 21984 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3480.169998][T21984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3480.180099][T21984] Call Trace: [ 3480.183408][T21984] [ 3480.186368][T21984] dump_stack_lvl+0xd1/0x138 [ 3480.191028][T21984] should_fail_ex.cold+0x5/0xa [ 3480.195864][T21984] prepare_alloc_pages+0x178/0x570 [ 3480.201042][T21984] __alloc_pages+0x149/0x5b0 [ 3480.205704][T21984] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3480.212550][T21984] alloc_pages+0x1aa/0x270 [ 3480.217016][T21984] pte_alloc_one+0x1a/0x230 [ 3480.221583][T21984] __pte_alloc+0x6d/0x260 [ 3480.225970][T21984] ? pmd_install+0x160/0x160 [ 3480.230621][T21984] copy_page_range+0x17a8/0x3b40 [ 3480.235657][T21984] ? mas_store+0x206/0x2e0 [ 3480.240120][T21984] ? handle_mm_fault+0x850/0x850 [ 3480.245126][T21984] ? up_write+0x1b0/0x520 [ 3480.249505][T21984] dup_mmap+0xc10/0x10b0 [ 3480.253801][T21984] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3480.259130][T21984] ? lock_downgrade+0x6e0/0x6e0 [ 3480.264049][T21984] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3480.269936][T21984] ? mm_init+0x8e0/0xc10 [ 3480.274243][T21984] copy_process+0x440f/0x7520 [ 3480.278981][T21984] ? find_held_lock+0x2d/0x110 [ 3480.283822][T21984] ? __cleanup_sighand+0xb0/0xb0 [ 3480.288821][T21984] ? _copy_from_user+0xfd/0x170 [ 3480.293744][T21984] kernel_clone+0xeb/0x990 [ 3480.298216][T21984] ? create_io_thread+0xf0/0xf0 [ 3480.303173][T21984] __do_sys_clone3+0x1cd/0x2e0 [ 3480.307994][T21984] ? __do_sys_clone+0x100/0x100 [ 3480.312891][T21984] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3480.318619][T21984] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3480.324646][T21984] ? lockdep_hardirqs_on+0x7d/0x100 [ 3480.329896][T21984] do_syscall_64+0x39/0xb0 [ 3480.334378][T21984] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3480.340328][T21984] RIP: 0033:0x7fb95928c0a9 14:59:58 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4010, 0xffffffffffffffff, 0x0) (async) write$rfkill(r0, &(0x7f0000000040)={0x10000000, 0x5, 0x3, 0x1, 0x1}, 0x8) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x4, 0x80010, r0, 0x0) 14:59:58 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4010, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x10000000, 0x5, 0x3, 0x1, 0x1}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x4, 0x80010, r0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4010, 0xffffffffffffffff, 0x0) (async) write$rfkill(r0, &(0x7f0000000040)={0x10000000, 0x5, 0x3, 0x1, 0x1}, 0x8) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x4, 0x80010, r0, 0x0) (async) [ 3480.344871][T21984] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3480.364527][T21984] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3480.372995][T21984] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3480.381006][T21984] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3480.389017][T21984] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3480.397028][T21984] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3480.405041][T21984] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3480.413181][T21984] [ 3480.416235][T21983] CPU: 0 PID: 21983 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3480.425038][T21983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3480.435129][T21983] Call Trace: [ 3480.438435][T21983] [ 3480.441398][T21983] dump_stack_lvl+0xd1/0x138 [ 3480.446053][T21983] should_fail_ex.cold+0x5/0xa [ 3480.450888][T21983] ? copy_process+0x2655/0x7520 [ 3480.455804][T21983] should_failslab+0x9/0x20 [ 3480.460370][T21983] kmem_cache_alloc+0x5a/0x430 [ 3480.465185][T21983] ? _raw_spin_unlock+0x28/0x40 [ 3480.470101][T21983] copy_process+0x2655/0x7520 [ 3480.474833][T21983] ? find_held_lock+0x2d/0x110 [ 3480.479667][T21983] ? __cleanup_sighand+0xb0/0xb0 [ 3480.484654][T21983] ? _copy_from_user+0xfd/0x170 [ 3480.489569][T21983] kernel_clone+0xeb/0x990 [ 3480.494012][T21983] ? create_io_thread+0xf0/0xf0 [ 3480.498902][T21983] __do_sys_clone3+0x1cd/0x2e0 [ 3480.503692][T21983] ? __do_sys_clone+0x100/0x100 [ 3480.508571][T21983] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3480.514270][T21983] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3480.520194][T21983] ? lockdep_hardirqs_on+0x7d/0x100 [ 3480.525417][T21983] do_syscall_64+0x39/0xb0 [ 3480.529869][T21983] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3480.535874][T21983] RIP: 0033:0x7ff440a8c0a9 [ 3480.540305][T21983] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3480.559941][T21983] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3480.568811][T21983] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3480.576798][T21983] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3480.584782][T21983] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3480.592770][T21983] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3480.600754][T21983] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3480.608758][T21983] 14:59:58 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) 14:59:58 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xe130000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:58 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x8ad92fff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:58 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x18000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:58 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36) 14:59:58 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) 14:59:58 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) 14:59:59 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xf0ffffff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:59 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x10000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3480.839958][T22010] FAULT_INJECTION: forcing a failure. [ 3480.839958][T22010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:59:59 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) [ 3480.907472][T22016] FAULT_INJECTION: forcing a failure. [ 3480.907472][T22016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3480.924239][T22010] CPU: 0 PID: 22010 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3480.933001][T22010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3480.943086][T22010] Call Trace: [ 3480.946396][T22010] [ 3480.949361][T22010] dump_stack_lvl+0xd1/0x138 [ 3480.954013][T22010] should_fail_ex.cold+0x5/0xa [ 3480.958854][T22010] prepare_alloc_pages+0x178/0x570 [ 3480.964042][T22010] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3480.970153][T22010] __alloc_pages+0x149/0x5b0 [ 3480.974823][T22010] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3480.981744][T22010] ? copy_page_range+0x1ff7/0x3b40 [ 3480.986915][T22010] alloc_pages+0x1aa/0x270 [ 3480.991390][T22010] get_zeroed_page+0x14/0x40 [ 3480.996182][T22010] __pud_alloc+0x3b/0x180 [ 3481.000578][T22010] copy_page_range+0x246b/0x3b40 [ 3481.005590][T22010] ? mas_wr_modify+0x999/0x16d0 [ 3481.010525][T22010] ? mas_store+0x206/0x2e0 [ 3481.014992][T22010] ? handle_mm_fault+0x850/0x850 [ 3481.020014][T22010] ? anon_vma_fork+0xba/0x630 [ 3481.024763][T22010] dup_mmap+0xc10/0x10b0 [ 3481.029065][T22010] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3481.034400][T22010] ? lock_downgrade+0x6e0/0x6e0 [ 3481.039305][T22010] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3481.045177][T22010] ? mm_init+0x8e0/0xc10 [ 3481.049470][T22010] copy_process+0x440f/0x7520 14:59:59 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:59 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xf5ffffff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3481.054199][T22010] ? find_held_lock+0x2d/0x110 [ 3481.059038][T22010] ? __cleanup_sighand+0xb0/0xb0 [ 3481.064031][T22010] ? _copy_from_user+0xfd/0x170 [ 3481.068942][T22010] kernel_clone+0xeb/0x990 [ 3481.073395][T22010] ? create_io_thread+0xf0/0xf0 [ 3481.078319][T22010] __do_sys_clone3+0x1cd/0x2e0 [ 3481.083141][T22010] ? __do_sys_clone+0x100/0x100 [ 3481.088042][T22010] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3481.093783][T22010] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3481.099736][T22010] ? lockdep_hardirqs_on+0x7d/0x100 [ 3481.104986][T22010] do_syscall_64+0x39/0xb0 [ 3481.109448][T22010] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3481.115385][T22010] RIP: 0033:0x7fb95928c0a9 [ 3481.119875][T22010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3481.139534][T22010] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3481.147993][T22010] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3481.156015][T22010] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3481.164020][T22010] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3481.172020][T22010] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3481.180020][T22010] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3481.188052][T22010] [ 3481.191095][T22016] CPU: 1 PID: 22016 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3481.199834][T22016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3481.209919][T22016] Call Trace: [ 3481.213215][T22016] [ 3481.216165][T22016] dump_stack_lvl+0xd1/0x138 [ 3481.220790][T22016] should_fail_ex.cold+0x5/0xa [ 3481.225621][T22016] prepare_alloc_pages+0x178/0x570 [ 3481.230762][T22016] ? mark_lock.part.0+0xee/0x1910 [ 3481.235835][T22016] __alloc_pages+0x149/0x5b0 [ 3481.240465][T22016] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3481.247267][T22016] ? find_held_lock+0x2d/0x110 [ 3481.252163][T22016] alloc_pages+0x1aa/0x270 [ 3481.256604][T22016] pte_alloc_one+0x1a/0x230 [ 3481.261139][T22016] __pte_alloc+0x6d/0x260 [ 3481.265507][T22016] ? pmd_install+0x160/0x160 [ 3481.270130][T22016] ? _raw_spin_unlock+0x28/0x40 [ 3481.275005][T22016] ? __pmd_alloc+0x30c/0x5d0 [ 3481.279628][T22016] copy_page_range+0x17a8/0x3b40 [ 3481.284638][T22016] ? mas_store+0x206/0x2e0 [ 3481.289074][T22016] ? handle_mm_fault+0x850/0x850 [ 3481.294057][T22016] ? anon_vma_fork+0xba/0x630 [ 3481.298801][T22016] dup_mmap+0xc10/0x10b0 [ 3481.303077][T22016] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3481.308390][T22016] ? lock_downgrade+0x6e0/0x6e0 [ 3481.313271][T22016] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3481.319119][T22016] ? mm_init+0x8e0/0xc10 [ 3481.323384][T22016] copy_process+0x440f/0x7520 [ 3481.328084][T22016] ? find_held_lock+0x2d/0x110 [ 3481.332899][T22016] ? __cleanup_sighand+0xb0/0xb0 [ 3481.337867][T22016] ? _copy_from_user+0xfd/0x170 [ 3481.342762][T22016] kernel_clone+0xeb/0x990 [ 3481.347202][T22016] ? create_io_thread+0xf0/0xf0 [ 3481.352095][T22016] __do_sys_clone3+0x1cd/0x2e0 [ 3481.356886][T22016] ? __do_sys_clone+0x100/0x100 [ 3481.361758][T22016] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3481.367453][T22016] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3481.373367][T22016] ? lockdep_hardirqs_on+0x7d/0x100 [ 3481.378588][T22016] do_syscall_64+0x39/0xb0 [ 3481.383037][T22016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3481.388949][T22016] RIP: 0033:0x7ff440a8c0a9 [ 3481.393377][T22016] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3481.413176][T22016] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3481.421640][T22016] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3481.429633][T22016] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3481.437622][T22016] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3481.445604][T22016] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3481.453588][T22016] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3481.461596][T22016] 14:59:59 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) 14:59:59 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x11000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:59 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:59 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1e000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:59:59 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37) 14:59:59 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xfb120000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:59 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 14:59:59 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1f000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:59 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000b40)={0x18}, 0x18) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r1, 0x0) 14:59:59 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1f000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3481.689027][T22042] FAULT_INJECTION: forcing a failure. [ 3481.689027][T22042] name failslab, interval 1, probability 0, space 0, times 0 [ 3481.746434][T22042] CPU: 0 PID: 22042 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3481.755196][T22042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3481.765288][T22042] Call Trace: [ 3481.768602][T22042] [ 3481.771578][T22042] dump_stack_lvl+0xd1/0x138 [ 3481.776229][T22042] should_fail_ex.cold+0x5/0xa [ 3481.781058][T22042] ? copy_process+0x43a0/0x7520 [ 3481.785959][T22042] should_failslab+0x9/0x20 [ 3481.790521][T22042] kmem_cache_alloc+0x5a/0x430 [ 3481.795340][T22042] copy_process+0x43a0/0x7520 [ 3481.800070][T22042] ? find_held_lock+0x2d/0x110 [ 3481.804904][T22042] ? __cleanup_sighand+0xb0/0xb0 [ 3481.809897][T22042] ? _copy_from_user+0xfd/0x170 [ 3481.814806][T22042] kernel_clone+0xeb/0x990 [ 3481.819287][T22042] ? create_io_thread+0xf0/0xf0 [ 3481.824211][T22042] __do_sys_clone3+0x1cd/0x2e0 [ 3481.829028][T22042] ? __do_sys_clone+0x100/0x100 [ 3481.833929][T22042] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3481.839656][T22042] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3481.845597][T22042] ? lockdep_hardirqs_on+0x7d/0x100 [ 3481.850852][T22042] do_syscall_64+0x39/0xb0 [ 3481.855420][T22042] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3481.861351][T22042] RIP: 0033:0x7ff440a8c0a9 [ 3481.865785][T22042] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3481.885419][T22042] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3481.893854][T22042] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3481.901839][T22042] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3481.909821][T22042] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3481.918542][T22042] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3481.926535][T22042] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3481.934575][T22042] 15:00:00 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1fffefff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 15:00:00 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000b40)={0x18}, 0x18) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r1, 0x0) [ 3482.112609][T22057] FAULT_INJECTION: forcing a failure. [ 3482.112609][T22057] name failslab, interval 1, probability 0, space 0, times 0 [ 3482.150491][T22057] CPU: 1 PID: 22057 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3482.159252][T22057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3482.169343][T22057] Call Trace: [ 3482.172645][T22057] [ 3482.175618][T22057] dump_stack_lvl+0xd1/0x138 [ 3482.180273][T22057] should_fail_ex.cold+0x5/0xa [ 3482.185107][T22057] ? __pmd_alloc+0xc3/0x5d0 [ 3482.189658][T22057] should_failslab+0x9/0x20 [ 3482.194203][T22057] kmem_cache_alloc+0x5a/0x430 [ 3482.199018][T22057] __pmd_alloc+0xc3/0x5d0 [ 3482.203391][T22057] ? __pud_alloc+0xe4/0x180 [ 3482.207954][T22057] copy_page_range+0x2829/0x3b40 [ 3482.212993][T22057] ? mas_store+0x206/0x2e0 [ 3482.217444][T22057] ? handle_mm_fault+0x850/0x850 [ 3482.222447][T22057] ? anon_vma_fork+0xba/0x630 [ 3482.227183][T22057] dup_mmap+0xc10/0x10b0 [ 3482.231508][T22057] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3482.236856][T22057] ? lock_downgrade+0x6e0/0x6e0 [ 3482.241736][T22057] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3482.247607][T22057] ? mm_init+0x8e0/0xc10 [ 3482.251915][T22057] copy_process+0x440f/0x7520 [ 3482.256637][T22057] ? find_held_lock+0x2d/0x110 [ 3482.261457][T22057] ? __cleanup_sighand+0xb0/0xb0 [ 3482.266427][T22057] ? _copy_from_user+0xfd/0x170 [ 3482.271317][T22057] kernel_clone+0xeb/0x990 [ 3482.275758][T22057] ? create_io_thread+0xf0/0xf0 [ 3482.280651][T22057] __do_sys_clone3+0x1cd/0x2e0 [ 3482.285443][T22057] ? __do_sys_clone+0x100/0x100 [ 3482.290317][T22057] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3482.296026][T22057] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3482.301946][T22057] ? lockdep_hardirqs_on+0x7d/0x100 [ 3482.307166][T22057] do_syscall_64+0x39/0xb0 [ 3482.311612][T22057] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3482.317526][T22057] RIP: 0033:0x7fb95928c0a9 [ 3482.321968][T22057] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3482.341591][T22057] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3482.350031][T22057] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 15:00:00 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) 15:00:00 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xfbffffff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:00:00 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x1fffefff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:00:00 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000b40)={0x18}, 0x18) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (async) write$FUSE_WRITE(r0, &(0x7f0000000b40)={0x18}, 0x18) (async) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r1, 0x0) (async) [ 3482.358015][T22057] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 [ 3482.366002][T22057] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3482.373987][T22057] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3482.381978][T22057] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3482.390075][T22057] 15:00:00 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38) 15:00:00 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1fffffff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 15:00:00 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) [ 3482.517774][T22066] FAULT_INJECTION: forcing a failure. [ 3482.517774][T22066] name failslab, interval 1, probability 0, space 0, times 0 [ 3482.568483][T22066] CPU: 1 PID: 22066 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3482.577325][T22066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3482.587417][T22066] Call Trace: [ 3482.590730][T22066] [ 3482.593692][T22066] dump_stack_lvl+0xd1/0x138 [ 3482.598334][T22066] should_fail_ex.cold+0x5/0xa [ 3482.603166][T22066] ? copy_process+0x43a0/0x7520 [ 3482.608060][T22066] should_failslab+0x9/0x20 [ 3482.612708][T22066] kmem_cache_alloc+0x5a/0x430 [ 3482.617528][T22066] copy_process+0x43a0/0x7520 [ 3482.622264][T22066] ? find_held_lock+0x2d/0x110 [ 3482.627110][T22066] ? __cleanup_sighand+0xb0/0xb0 [ 3482.632115][T22066] ? _copy_from_user+0xfd/0x170 [ 3482.637037][T22066] kernel_clone+0xeb/0x990 [ 3482.641512][T22066] ? create_io_thread+0xf0/0xf0 [ 3482.644652][T22076] FAULT_INJECTION: forcing a failure. [ 3482.644652][T22076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3482.646414][T22066] __do_sys_clone3+0x1cd/0x2e0 [ 3482.664420][T22066] ? __do_sys_clone+0x100/0x100 [ 3482.669329][T22066] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3482.675060][T22066] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3482.681007][T22066] ? lockdep_hardirqs_on+0x7d/0x100 [ 3482.686262][T22066] do_syscall_64+0x39/0xb0 [ 3482.690727][T22066] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3482.696659][T22066] RIP: 0033:0x7ff440a8c0a9 [ 3482.701117][T22066] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3482.720784][T22066] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3482.729246][T22066] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3482.737262][T22066] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3482.745274][T22066] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3482.753288][T22066] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3482.761383][T22066] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 15:00:00 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x20000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:00:00 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xfd120000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:00:00 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 15:00:00 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xff0f8048, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3482.769413][T22066] [ 3482.772490][T22076] CPU: 0 PID: 22076 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3482.781219][T22076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3482.791307][T22076] Call Trace: [ 3482.794613][T22076] [ 3482.797568][T22076] dump_stack_lvl+0xd1/0x138 [ 3482.802208][T22076] should_fail_ex.cold+0x5/0xa [ 3482.807034][T22076] prepare_alloc_pages+0x178/0x570 [ 3482.812192][T22076] ? mark_lock.part.0+0xee/0x1910 [ 3482.817244][T22076] __alloc_pages+0x149/0x5b0 [ 3482.821858][T22076] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3482.828657][T22076] ? find_held_lock+0x2d/0x110 [ 3482.833463][T22076] alloc_pages+0x1aa/0x270 [ 3482.837901][T22076] pte_alloc_one+0x1a/0x230 [ 3482.842432][T22076] __pte_alloc+0x6d/0x260 [ 3482.846786][T22076] ? pmd_install+0x160/0x160 [ 3482.851424][T22076] ? _raw_spin_unlock+0x28/0x40 [ 3482.856319][T22076] ? __pmd_alloc+0x30c/0x5d0 [ 3482.860950][T22076] copy_page_range+0x17a8/0x3b40 [ 3482.865942][T22076] ? mas_store+0x206/0x2e0 [ 3482.870374][T22076] ? handle_mm_fault+0x850/0x850 [ 3482.875392][T22076] ? anon_vma_fork+0xba/0x630 [ 3482.880102][T22076] dup_mmap+0xc10/0x10b0 [ 3482.884405][T22076] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3482.889807][T22076] ? lock_downgrade+0x6e0/0x6e0 [ 3482.894680][T22076] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3482.900521][T22076] ? mm_init+0x8e0/0xc10 [ 3482.904788][T22076] copy_process+0x440f/0x7520 [ 3482.909487][T22076] ? find_held_lock+0x2d/0x110 [ 3482.914292][T22076] ? __cleanup_sighand+0xb0/0xb0 [ 3482.919257][T22076] ? _copy_from_user+0xfd/0x170 [ 3482.924151][T22076] kernel_clone+0xeb/0x990 [ 3482.928593][T22076] ? create_io_thread+0xf0/0xf0 [ 3482.933482][T22076] __do_sys_clone3+0x1cd/0x2e0 [ 3482.938264][T22076] ? __do_sys_clone+0x100/0x100 [ 3482.943159][T22076] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3482.948851][T22076] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3482.954762][T22076] ? lockdep_hardirqs_on+0x7d/0x100 [ 3482.960160][T22076] do_syscall_64+0x39/0xb0 [ 3482.964602][T22076] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3482.970528][T22076] RIP: 0033:0x7fb95928c0a9 [ 3482.974957][T22076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3482.994579][T22076] RSP: 002b:00007fb959fca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3483.003012][T22076] RAX: ffffffffffffffda RBX: 00007fb9593abf80 RCX: 00007fb95928c0a9 [ 3483.011005][T22076] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fca050 15:00:01 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) [ 3483.018987][T22076] RBP: 00007fb959fca1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3483.026989][T22076] R10: 00007fb959fca050 R11: 0000000000000246 R12: 0000000000000058 [ 3483.034982][T22076] R13: 00007fb9594cfb1f R14: 00007fb959fca300 R15: 0000000000022000 [ 3483.042984][T22076] 15:00:01 executing program 4: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28) 15:00:01 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x20f7afff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:00:01 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x207fffff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 15:00:01 executing program 3: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39) 15:00:01 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r0, 0x0) 15:00:01 executing program 1: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x24) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r1, 0x0) r3 = add_key(&(0x7f0000000b40)='cifs.spnego\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r3) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xe4) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000040)="2b71744b6ef81d590d24177780d6634b24b9332df31d52af", 0x0, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x1d2d04194b397e6e, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r6, &(0x7f0000000b40)={0x18}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x12c, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/247, 0xf7, 0x1, 0x30}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x1}, @increfs, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/98, 0x62, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/75, 0x4b, 0x1, 0x1c}, @fda={0x66646185, 0x2, 0x1, 0x1f}}, &(0x7f0000000500)={0x0, 0x28, 0x50}}, 0x400}, @acquire_done={0x40106309, 0x1}, @decrefs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@handle={0x73682a85, 0x1101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/109, 0x6d, 0x0, 0x23}, @fda={0x66646185, 0x8, 0x2, 0x39}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}}], 0x1b, 0x0, &(0x7f0000000300)="5e6cfc475355d5f16c1d0355ee5a899e6920609b4e2a8042a28211"}) keyctl$negate(0xd, r3, 0x1, r3) 15:00:01 executing program 2: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0xff0fb248, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:00:01 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3483.316456][T22099] FAULT_INJECTION: forcing a failure. [ 3483.316456][T22099] name fail_page_alloc, interval 1, probability 0, space 0, times 0 15:00:01 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20812fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3483.365228][T22102] FAULT_INJECTION: forcing a failure. [ 3483.365228][T22102] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3483.383448][T22099] CPU: 1 PID: 22099 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3483.392192][T22099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3483.402403][T22099] Call Trace: [ 3483.405791][T22099] [ 3483.408751][T22099] dump_stack_lvl+0xd1/0x138 [ 3483.413398][T22099] should_fail_ex.cold+0x5/0xa [ 3483.418244][T22099] prepare_alloc_pages+0x178/0x570 [ 3483.423429][T22099] __alloc_pages+0x149/0x5b0 [ 3483.428086][T22099] ? x86_has_pat_wp+0x80/0x80 [ 3483.432810][T22099] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3483.439657][T22099] ? arch_io_reserve_memtype_wc+0xa0/0xa0 [ 3483.445446][T22099] alloc_pages+0x1aa/0x270 [ 3483.449912][T22099] pte_alloc_one+0x1a/0x230 [ 3483.454472][T22099] __pte_alloc+0x6d/0x260 [ 3483.458861][T22099] ? pmd_install+0x160/0x160 [ 3483.463538][T22099] copy_page_range+0x17a8/0x3b40 [ 3483.468585][T22099] ? mas_store+0x206/0x2e0 [ 3483.473044][T22099] ? handle_mm_fault+0x850/0x850 [ 3483.478057][T22099] ? up_write+0x1b0/0x520 [ 3483.482447][T22099] dup_mmap+0xc10/0x10b0 [ 3483.486761][T22099] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3483.492096][T22099] ? lock_downgrade+0x6e0/0x6e0 [ 3483.497013][T22099] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3483.502905][T22099] ? mm_init+0x8e0/0xc10 [ 3483.507207][T22099] copy_process+0x440f/0x7520 15:00:01 executing program 5: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000a1f000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x52e, &(0x7f0000000280), &(0x7f0000a9d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0xca2, &(0x7f0000000480)={0x0, 0x559a}, &(0x7f0000b25000/0x1000)=nil, &(0x7f0000857000/0xe000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6277, &(0x7f0000000000), &(0x7f0000f8a000/0x2000)=nil, &(0x7f0000d57000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x34a4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20894fff}, &(0x7f0000895000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 3483.511939][T22099] ? find_held_lock+0x2d/0x110 [ 3483.516783][T22099] ? __cleanup_sighand+0xb0/0xb0 [ 3483.521790][T22099] ? _copy_from_user+0xfd/0x170 [ 3483.526710][T22099] kernel_clone+0xeb/0x990 [ 3483.531188][T22099] ? create_io_thread+0xf0/0xf0 [ 3483.536114][T22099] __do_sys_clone3+0x1cd/0x2e0 [ 3483.540935][T22099] ? __do_sys_clone+0x100/0x100 [ 3483.545832][T22099] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3483.551568][T22099] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3483.557517][T22099] ? lockdep_hardirqs_on+0x7d/0x100 [ 3483.562774][T22099] do_syscall_64+0x39/0xb0 [ 3483.567248][T22099] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3483.573189][T22099] RIP: 0033:0x7ff440a8c0a9 [ 3483.577645][T22099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3483.597343][T22099] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3483.605985][T22099] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 15:00:01 executing program 0: syz_io_uring_setup(0x50a, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x44ca, &(0x7f0000000000), &(0x7f000099b000/0x4000)=nil, &(0x7f0000891000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000540), &(0x7f0000f7b000/0x3000)=nil, &(0x7f0000863000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_clone3(&(0x7f0000000a00)={0x46180000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3483.614006][T22099] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3483.622019][T22099] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3483.630045][T22099] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3483.638058][T22099] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3483.646091][T22099] [ 3483.649140][T22102] CPU: 0 PID: 22102 Comm: syz-executor.3 Not tainted 6.2.0-rc1-syzkaller #0 [ 3483.657868][T22102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3483.667510][T22099] ------------[ cut here ]------------ [ 3483.667936][T22102] Call Trace: [ 3483.667948][T22102] [ 3483.667961][T22102] dump_stack_lvl+0xd1/0x138 [ 3483.679137][T22099] WARNING: CPU: 1 PID: 22099 at arch/x86/mm/pat/memtype.c:1060 untrack_pfn+0x24b/0x290 [ 3483.679658][T22102] should_fail_ex.cold+0x5/0xa [ 3483.684491][T22099] Modules linked in: [ 3483.693930][T22102] prepare_alloc_pages+0x178/0x570 [ 3483.693976][T22102] ? mark_lock.part.0+0xee/0x1910 [ 3483.694008][T22102] __alloc_pages+0x149/0x5b0 [ 3483.694043][T22102] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 3483.698961][T22099] [ 3483.702694][T22102] ? find_held_lock+0x2d/0x110 [ 3483.702765][T22102] alloc_pages+0x1aa/0x270 [ 3483.707999][T22099] CPU: 1 PID: 22099 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3483.712868][T22102] pte_alloc_one+0x1a/0x230 [ 3483.712910][T22102] __pte_alloc+0x6d/0x260 [ 3483.712949][T22102] ? pmd_install+0x160/0x160 [ 3483.712987][T22102] ? _raw_spin_unlock+0x28/0x40 [ 3483.725053][T22099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3483.726619][T22102] ? __pmd_alloc+0x30c/0x5d0 [ 3483.726671][T22102] copy_page_range+0x17a8/0x3b40 [ 3483.732715][T22099] RIP: 0010:untrack_pfn+0x24b/0x290 [ 3483.735889][T22102] ? mas_store+0x206/0x2e0 [ 3483.735923][T22102] ? handle_mm_fault+0x850/0x850 [ 3483.797082][T22102] ? anon_vma_fork+0xba/0x630 [ 3483.801806][T22102] dup_mmap+0xc10/0x10b0 [ 3483.806085][T22102] ? replace_mm_exe_file+0x4b0/0x4b0 [ 3483.811391][T22102] ? lock_downgrade+0x6e0/0x6e0 [ 3483.816271][T22102] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3483.822115][T22102] ? mm_init+0x8e0/0xc10 [ 3483.826398][T22102] copy_process+0x440f/0x7520 [ 3483.831101][T22102] ? find_held_lock+0x2d/0x110 [ 3483.835919][T22102] ? __cleanup_sighand+0xb0/0xb0 [ 3483.840896][T22102] ? _copy_from_user+0xfd/0x170 [ 3483.845785][T22102] kernel_clone+0xeb/0x990 [ 3483.850225][T22102] ? create_io_thread+0xf0/0xf0 [ 3483.855119][T22102] __do_sys_clone3+0x1cd/0x2e0 [ 3483.859908][T22102] ? __do_sys_clone+0x100/0x100 [ 3483.864780][T22102] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3483.870476][T22102] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3483.876396][T22102] ? lockdep_hardirqs_on+0x7d/0x100 [ 3483.881615][T22102] do_syscall_64+0x39/0xb0 [ 3483.886063][T22102] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3483.891978][T22102] RIP: 0033:0x7fb95928c0a9 [ 3483.896405][T22102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 15:00:01 executing program 1: pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)) (async) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) (async) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x24) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x3, 0x11, r1, 0x0) r3 = add_key(&(0x7f0000000b40)='cifs.spnego\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r3) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xe4) (async) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000040)="2b71744b6ef81d590d24177780d6634b24b9332df31d52af", 0x0, 0x18) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000b40)={0x18}, 0x18) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x1d2d04194b397e6e, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$FUSE_WRITE(r6, &(0x7f0000000b40)={0x18}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x12c, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/247, 0xf7, 0x1, 0x30}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x1}, @increfs, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/98, 0x62, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/75, 0x4b, 0x1, 0x1c}, @fda={0x66646185, 0x2, 0x1, 0x1f}}, &(0x7f0000000500)={0x0, 0x28, 0x50}}, 0x400}, @acquire_done={0x40106309, 0x1}, @decrefs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@handle={0x73682a85, 0x1101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/109, 0x6d, 0x0, 0x23}, @fda={0x66646185, 0x8, 0x2, 0x39}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}}], 0x1b, 0x0, &(0x7f0000000300)="5e6cfc475355d5f16c1d0355ee5a899e6920609b4e2a8042a28211"}) keyctl$negate(0xd, r3, 0x1, r3) [ 3483.916031][T22102] RSP: 002b:00007fb959fa9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3483.924465][T22102] RAX: ffffffffffffffda RBX: 00007fb9593ac050 RCX: 00007fb95928c0a9 [ 3483.932448][T22102] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb959fa9050 [ 3483.940431][T22102] RBP: 00007fb959fa91d0 R08: 0000000000000000 R09: 0000000000000058 [ 3483.948413][T22102] R10: 00007fb959fa9050 R11: 0000000000000246 R12: 0000000000000058 [ 3483.956409][T22102] R13: 00007fb9594cfb1f R14: 00007fb959fa9300 R15: 0000000000022000 [ 3483.964413][T22102] [ 3483.996341][T22099] Code: 85 6c ff ff ff e8 b5 fb 46 00 4c 89 ee 4c 89 e7 e8 1a e2 ff ff e8 a5 fb 46 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 95 fb 46 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 36 03 95 00 e9 98 fe ff ff e8 dc [ 3484.056713][T22099] RSP: 0018:ffffc90015dbf6a8 EFLAGS: 00010246 [ 3484.076097][T22099] RAX: 0000000000040000 RBX: ffff888026e40c40 RCX: ffffc9000c9b9000 [ 3484.112659][T22099] RDX: 0000000000040000 RSI: ffffffff813a56ab RDI: 0000000000000005 [ 3484.146052][T22099] RBP: 1ffff92002bb7ed5 R08: 0000000000000005 R09: 0000000000000000 [ 3484.154608][T22099] R10: 00000000ffffffea R11: 0000000000000000 R12: 00000000ffffffea [ 3484.163103][T22099] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888026e40c60 [ 3484.171416][T22099] FS: 00007ff44171a700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 3484.180632][T22099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3484.187609][T22099] CR2: 00007fb959385058 CR3: 000000003dc6b000 CR4: 00000000003506f0 [ 3484.195807][T22099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3484.204204][T22099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3484.212293][T22099] Call Trace: [ 3484.217150][T22099] [ 3484.220203][T22099] ? track_pfn_insert+0x150/0x150 [ 3484.225679][T22099] ? mas_find+0x211/0xd10 [ 3484.232372][T22099] ? uprobe_munmap+0x20/0x550 [ 3484.237365][T22099] unmap_single_vma+0x1b4/0x2a0 [ 3484.242345][T22099] unmap_vmas+0x226/0x370 [ 3484.246939][T22099] ? unmap_single_vma+0x2a0/0x2a0 [ 3484.252201][T22099] ? find_held_lock+0x2d/0x110 [ 3484.257200][T22099] ? lock_downgrade+0x6e0/0x6e0 [ 3484.262189][T22099] exit_mmap+0x18d/0x7b0 [ 3484.266646][T22099] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 3484.272906][T22099] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3484.278868][T22099] __mmput+0x128/0x4c0 [ 3484.283133][T22099] mmput+0x60/0x70 [ 3484.286990][T22099] copy_process+0x4623/0x7520 [ 3484.291810][T22099] ? find_held_lock+0x2d/0x110 [ 3484.296887][T22099] ? __cleanup_sighand+0xb0/0xb0 [ 3484.301977][T22099] ? _copy_from_user+0xfd/0x170 [ 3484.307068][T22099] kernel_clone+0xeb/0x990 [ 3484.311652][T22099] ? create_io_thread+0xf0/0xf0 [ 3484.316943][T22099] __do_sys_clone3+0x1cd/0x2e0 [ 3484.321782][T22099] ? __do_sys_clone+0x100/0x100 [ 3484.330974][T22099] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3484.337351][T22099] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3484.343603][T22099] ? lockdep_hardirqs_on+0x7d/0x100 [ 3484.348945][T22099] do_syscall_64+0x39/0xb0 [ 3484.353918][T22099] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3484.359879][T22099] RIP: 0033:0x7ff440a8c0a9 [ 3484.364858][T22099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3484.384918][T22099] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3484.393725][T22099] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3484.401786][T22099] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3484.410253][T22099] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3484.418638][T22099] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3484.427224][T22099] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3484.439154][T22099] [ 3484.442280][T22099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3484.449594][T22099] CPU: 1 PID: 22099 Comm: syz-executor.4 Not tainted 6.2.0-rc1-syzkaller #0 [ 3484.458313][T22099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3484.468384][T22099] Call Trace: [ 3484.471678][T22099] [ 3484.474619][T22099] dump_stack_lvl+0xd1/0x138 [ 3484.479242][T22099] panic+0x2cc/0x626 [ 3484.483293][T22099] ? panic_print_sys_info.part.0+0x110/0x110 [ 3484.489318][T22099] ? untrack_pfn+0x24b/0x290 [ 3484.493931][T22099] check_panic_on_warn.cold+0x19/0x35 [ 3484.499332][T22099] __warn+0xf2/0x1a0 [ 3484.503251][T22099] ? untrack_pfn+0x24b/0x290 [ 3484.507863][T22099] report_bug+0x1c0/0x210 [ 3484.512304][T22099] handle_bug+0x3c/0x70 [ 3484.516488][T22099] exc_invalid_op+0x18/0x50 [ 3484.521022][T22099] asm_exc_invalid_op+0x1a/0x20 [ 3484.525890][T22099] RIP: 0010:untrack_pfn+0x24b/0x290 [ 3484.531112][T22099] Code: 85 6c ff ff ff e8 b5 fb 46 00 4c 89 ee 4c 89 e7 e8 1a e2 ff ff e8 a5 fb 46 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 95 fb 46 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 36 03 95 00 e9 98 fe ff ff e8 dc [ 3484.550928][T22099] RSP: 0018:ffffc90015dbf6a8 EFLAGS: 00010246 [ 3484.557026][T22099] RAX: 0000000000040000 RBX: ffff888026e40c40 RCX: ffffc9000c9b9000 [ 3484.565015][T22099] RDX: 0000000000040000 RSI: ffffffff813a56ab RDI: 0000000000000005 [ 3484.573028][T22099] RBP: 1ffff92002bb7ed5 R08: 0000000000000005 R09: 0000000000000000 [ 3484.581011][T22099] R10: 00000000ffffffea R11: 0000000000000000 R12: 00000000ffffffea [ 3484.588995][T22099] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888026e40c60 [ 3484.596989][T22099] ? untrack_pfn+0x24b/0x290 [ 3484.601608][T22099] ? untrack_pfn+0x24b/0x290 [ 3484.606217][T22099] ? track_pfn_insert+0x150/0x150 [ 3484.611264][T22099] ? mas_find+0x211/0xd10 [ 3484.615608][T22099] ? uprobe_munmap+0x20/0x550 [ 3484.620317][T22099] unmap_single_vma+0x1b4/0x2a0 [ 3484.625200][T22099] unmap_vmas+0x226/0x370 [ 3484.629558][T22099] ? unmap_single_vma+0x2a0/0x2a0 [ 3484.634604][T22099] ? find_held_lock+0x2d/0x110 [ 3484.639405][T22099] ? lock_downgrade+0x6e0/0x6e0 [ 3484.644290][T22099] exit_mmap+0x18d/0x7b0 [ 3484.648556][T22099] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 3484.654579][T22099] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3484.660418][T22099] __mmput+0x128/0x4c0 [ 3484.664506][T22099] mmput+0x60/0x70 [ 3484.668244][T22099] copy_process+0x4623/0x7520 [ 3484.672942][T22099] ? find_held_lock+0x2d/0x110 [ 3484.677748][T22099] ? __cleanup_sighand+0xb0/0xb0 [ 3484.682717][T22099] ? _copy_from_user+0xfd/0x170 [ 3484.687603][T22099] kernel_clone+0xeb/0x990 [ 3484.692042][T22099] ? create_io_thread+0xf0/0xf0 [ 3484.696930][T22099] __do_sys_clone3+0x1cd/0x2e0 [ 3484.701718][T22099] ? __do_sys_clone+0x100/0x100 [ 3484.706588][T22099] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 3484.712279][T22099] ? syscall_enter_from_user_mode+0x26/0xb0 [ 3484.718195][T22099] ? lockdep_hardirqs_on+0x7d/0x100 [ 3484.723413][T22099] do_syscall_64+0x39/0xb0 [ 3484.727860][T22099] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3484.733771][T22099] RIP: 0033:0x7ff440a8c0a9 [ 3484.738205][T22099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3484.757829][T22099] RSP: 002b:00007ff44171a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3484.766261][T22099] RAX: ffffffffffffffda RBX: 00007ff440babf80 RCX: 00007ff440a8c0a9 [ 3484.774244][T22099] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ff44171a050 [ 3484.782227][T22099] RBP: 00007ff44171a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 3484.790207][T22099] R10: 00007ff44171a050 R11: 0000000000000246 R12: 0000000000000058 [ 3484.798193][T22099] R13: 00007ff440ccfb1f R14: 00007ff44171a300 R15: 0000000000022000 [ 3484.806194][T22099] [ 3484.809365][T22099] Kernel Offset: disabled [ 3484.813853][T22099] Rebooting in 86400 seconds..