)='./file0\x00', 0x200800, &(0x7f0000000040)={[{@pqnoenforce}]}, 0x4, 0x95d1, &(0x7f00000096c0)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x600}], 0x1, 0x1400, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x600}], 0x1, 0x1400, 0x0, 0x0) [ 592.397061][ T5228] udevd[5228]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory 17:16:37 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) [ 592.639219][ T9683] loop3: detected capacity change from 0 to 2048 [ 592.802841][ T9683] Alternate GPT is invalid, using primary GPT. [ 592.809745][ T9683] loop3: p2 p3 p7 17:16:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x180, 0x7, 0x0, 0x1}, 0x48) 17:16:38 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f00000001c0)=""/136, 0x18, 0x88, 0x1}, 0x20) [ 593.417683][ T5121] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 593.442149][ T5121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.480061][ T5121] usb 5-1: Product: syz [ 593.496848][ T5121] usb 5-1: Manufacturer: syz [ 593.516423][ T5121] usb 5-1: SerialNumber: syz [ 593.553879][ T5228] udevd[5228]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 593.608345][ T5121] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 593.708064][ T5228] udevd[5228]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 593.778536][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 593.786973][ T8281] udevd[8281]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 593.810595][ T5228] udevd[5228]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 593.983825][ T7663] udevd[7663]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 593.994755][ T5228] udevd[5228]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 593.997048][ T8281] udevd[8281]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 594.156041][ T8281] udevd[8281]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 594.277573][ T5046] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 594.466730][ T5156] usb 5-1: USB disconnect, device number 5 [ 594.639580][ T27] audit: type=1800 audit(1685985399.566:149): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1944 res=0 errno=0 [ 594.675917][ T27] audit: type=1800 audit(1685985399.596:150): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1944 res=0 errno=0 17:16:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @mcast2, @loopback}) 17:16:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x87000000, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/136, 0x1a, 0x88, 0x1}, 0x20) 17:16:40 executing program 3: syz_io_uring_setup(0x176f, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000938000/0x3000)=nil, &(0x7f0000000080), 0x0) r0 = io_uring_setup(0x41f4, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000938000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_setup(0x1d74, &(0x7f00000003c0), &(0x7f0000939000/0x2000)=nil, &(0x7f0000939000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000002c0)) 17:16:40 executing program 5: r0 = io_uring_setup(0x73b2, &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000937000/0x3000)=nil, 0x7fffdf6c8000, 0x0, 0x11, r0, 0x10000000) 17:16:40 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000080)={[{0x3d, 0x4e00, "0ab8bfac1659d496c7ff9d63d5cba21936475b1ccd0b8b2c8bd0ec0f701cc7c979c4403fbac7b24ed9c5e4b18816bf73aa4c5b947a26b2476ab02f9441"}]}) 17:16:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/77, 0x4d}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001300)="d9bb4848d1f276f8f6dd73973dbd8750c550639103e13d879142c46c19714c4d70463204593c9e5f53ac5a8bdfacce21d9c8388051e1d81814dca6673ef8c39c210a8a25a1002a5e007b21a640", 0x4d}], 0x1}, 0x0) [ 595.367612][ T5046] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 595.377568][ T5046] ath9k_htc: Failed to initialize the device [ 595.387826][ T5156] usb 5-1: ath9k_htc: USB layer deinitialized 17:16:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x80fe, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @local}, 0x1c) 17:16:40 executing program 1: syz_io_uring_setup(0x7185, &(0x7f0000000180), &(0x7f0000937000/0x3000)=nil, &(0x7f0000936000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) 17:16:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0xc854, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 17:16:40 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7f) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 17:16:40 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xcb, 0x12, 0x13, 0x10, 0x67b, 0x4bb, 0x8745, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x44, 0x99, 0x9c, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "d9b30fabeee248"}]}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 3: bpf$BPF_BTF_LOAD(0x15, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 17:16:40 executing program 5: r0 = socket(0x2, 0xa, 0x0) bind$bt_sco(r0, 0x0, 0x0) 17:16:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x11, &(0x7f0000000040)=@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@mcast2]}, 0x18) 17:16:40 executing program 0: r0 = io_uring_setup(0x73b2, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x5, 0x0, 0x0) 17:16:40 executing program 1: r0 = io_uring_setup(0x41f4, &(0x7f0000000100)) syz_io_uring_setup(0x7185, &(0x7f0000000180), &(0x7f0000937000/0x3000)=nil, &(0x7f0000936000/0x3000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000938000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0x8000000) [ 595.734830][ T9722] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 595.798326][ T5156] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 595.967540][ T5111] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 596.207425][ T5111] usb 3-1: Using ep0 maxpacket: 16 [ 596.318128][ T5156] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 596.327472][ T5111] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 596.335637][ T5111] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 596.345041][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.353988][ T5111] usb 3-1: config 0 has no interface number 1 [ 596.360415][ T5156] usb 5-1: Product: syz [ 596.364579][ T5156] usb 5-1: Manufacturer: syz [ 596.369828][ T5111] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 596.380835][ T5156] usb 5-1: SerialNumber: syz [ 596.395705][ T5111] usb 3-1: config 0 interface 217 altsetting 179 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 596.410112][ T5111] usb 3-1: config 0 interface 217 has no altsetting 0 [ 596.428168][ T5156] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 596.567664][ T5111] usb 3-1: New USB device found, idVendor=067b, idProduct=04bb, bcdDevice=87.45 [ 596.576753][ T5111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.584967][ T5111] usb 3-1: Product: syz [ 596.589489][ T5111] usb 3-1: Manufacturer: syz [ 596.594081][ T5111] usb 3-1: SerialNumber: syz [ 596.608749][ T5111] usb 3-1: config 0 descriptor?? [ 596.650994][ T5111] pl2303 3-1:0.0: required endpoints missing [ 596.878612][ T5111] pl2303 3-1:0.217: required endpoints missing [ 596.886940][ T5111] usb 3-1: USB disconnect, device number 7 [ 597.017421][ T5156] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 597.469977][ T5111] usb 5-1: USB disconnect, device number 6 17:16:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001300)={@private0, @private0, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b20000}) 17:16:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private}}}}) 17:16:42 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000940), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40086602, &(0x7f0000000000)) 17:16:42 executing program 5: r0 = io_uring_setup(0x73b2, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000003e80)={0x1, 0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x0}, 0x20) 17:16:42 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@private2, @mcast1, [], [], 'veth0_to_batadv\x00', 'ipvlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 17:16:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000d40)={@dev, @local, @remote, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x1000004}) 17:16:42 executing program 2: r0 = io_uring_setup(0x73b2, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xd, 0x0, 0x0) 17:16:42 executing program 0: r0 = io_uring_setup(0x41f4, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000938000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x8000000) r1 = io_uring_setup(0x73b2, &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000937000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) [ 598.029754][ T9736] x_tables: duplicate underflow at hook 3 17:16:43 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={0x0, 0x0, 0xc}, 0x10) 17:16:43 executing program 3: syz_clone3(0x0, 0x0) getpid() syz_open_procfs$namespace(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000030c0)={0x18, 0x2, &(0x7f0000002ec0)=@raw=[@map_fd], &(0x7f0000002f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 598.077413][ T5156] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 598.084642][ T5156] ath9k_htc: Failed to initialize the device 17:16:43 executing program 5: sched_rr_get_interval(0x0, &(0x7f0000002940)) 17:16:43 executing program 4: add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="9c", 0x1, 0xffffffffffffffff) [ 598.132205][ T5111] usb 5-1: ath9k_htc: USB layer deinitialized 17:16:43 executing program 1: io_setup(0x1, &(0x7f0000000080)=0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xd0}]) 17:16:43 executing program 2: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) lchown(&(0x7f0000000280)='./bus\x00', 0xee01, 0xffffffffffffffff) 17:16:43 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x13, 0x0, 0xc2}}) 17:16:43 executing program 5: syz_clone(0x8081000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) 17:16:43 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x20000, 0x0) 17:16:43 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5418, &(0x7f00000000c0)) [ 598.336074][ T9756] loop2: detected capacity change from 0 to 512 17:16:43 executing program 0: mkdir(0x0, 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(0x0, 0x0, 0xada66a977c02d739) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000527c0)={0x0, [], 0x0, "7f5e9afa2b43b8"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000100), 0x40000c4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x840, &(0x7f0000002040)=ANY=[@ANYBLOB="696f636861727365743d6d61636761656c69632c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c636865636b3d7374727463742c576e695f786c6174653d302c757365667267652c747a3d5554432c64656275672c55686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c756e695f786c61740200312c726f6469722c756e695f786c6174653d312c696f636861727365743d6173636901000000695f786c6174653d302c646d61736b3d30303030303030303030303030303030303230303030302c696f636861727365743d63703836302c7569643e8ff114c3cf76f2f557813a6c020fec797decc6c57bd0f2c1c6fa80b1835f983d8c91e4893bcc9ab613559491367a09e2f5855c49a841a93ef8b50b6b629a020a90861805afad5c29d5fca09a4a65a263a1792b225ebcdab116a408cffcf55c8aeffdb3446e843e2116cf1545b18b274bf2f0ae77615f8a436eea793d59d60bbb221804b79be52c29e260f87b2abd35054d5014f6bdfcfd92cf28916f1af4bcfe0a4649e56cce463519c04ed2658f710c46bca9d3b35a663546990f8ee68b5a274dda1ea0eec49a46fcd3f5dfd145a822e1c4be274f0990ba53fe33c5e9f6abda129841ba5d761704dc39b7dcff030000b10264063ecb8ad908712f23194f972914e37b0d7e58e5be704c884b7e1289e26a2d5c1c459d4b2aa833b19ce07d2d4637d0a14d6507aac0840d36ea49b68685c34323a08949b79abe296e03b348f4a0d8b98ddb8d1be28e6311e79488f61424c16bb3f70c7e97f8efe66f671b546947d27dc29d100f535dd9ce93745d30dfc45cc26cc3616e4370ea77db9b16fa9526af1a95dd20076ed12fa22908d4b0916645f2adbe22a1c3b424af7318adf0caae8ad021f17841f86904ffd04e5f9333312849eed58a8e0606a5aba90e3be5d26bed93d17c4b560660e9ae36bc61ffffff7f00000000e66c30f0043d780049b75c7406c1ae03920f4dc21ff6be21e25c0848f7317aba33a4b2bb7be1d15fc1f4b3dc20f6f5007bdf88357908c24a2ac091a1828010cd3e33ff009a81782f648cf5fc45db00000000009a", @ANYRESDEC=0xee00, @ANYRESDEC=r4], 0xff, 0x20e, &(0x7f0000000400)="$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") 17:16:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000280)="95de22e0adc0cafa94ea4fb6fc39586608735f5ca2bbbad42b32eb79de61c994c8e2e18c23f37e5124e339d6e4f40bf6f6ec1e769fe38e44904d39f9560704fe89c35295819a2cf20a1827863680a2664a044d5040985303f7dd13454ac60d84aa19cb5c3310e8042cc4ad4ba3d6d60d6f38b40965afd6161dda119a9b92038b1279727a121435fc04806bbe5cb0ed7956e3a4e8d59d20a84f7502d6590ca3c4d51f6cf6ba1739b8aa8c7f45f9c3f8ca0e1fec0729723236dbabf399ae4c6231c2e01f", 0xc3, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 17:16:43 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x12a, &(0x7f0000000280)={{0x12, 0x1, 0x400, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x118, 0x2, 0x1, 0x1, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, 'tFo'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x401, 0xe, 0x5}, {0x6, 0x24, 0x1a, 0x400, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1f, 0xd4, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x1, 0x2}, @mdlm_detail={0x81, 0x24, 0x13, 0x0, "6df6e15ece78ac0133615d7eb80fa9e19f1739ac85314a9b7f1d46f9e8e34b179c980d7fbb2efe659221c472777cd2db090b8f298ec71b3c307e0bd574687e04e889783edc40ae5ac2d627d0d26e9a922feaee72609766f2fc1652e5da05d074f90fe8aabefe165af04ec12f4d8960abfc25d4f30d1df2f33bf734063b"}, @country_functional={0x6, 0x24, 0x7, 0x40, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7f, 0x5, 0x6}, @mdlm_detail={0x1c, 0x24, 0x13, 0x7, "96625be8e83a72ab2a414edb9e422a2d3e06fbec6aab5325"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xdd, 0x9, 0x73}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x20, 0x1, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xff, 0x31, 0x0, 0x40, 0x6}, 0x5a, &(0x7f0000000180)={0x5, 0xf, 0x5a, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x5, 0x0, 0x3a, [0xf, 0xff000f, 0xc000]}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x101, 0xf000, 0x85}, @wireless={0xb, 0x10, 0x1, 0x8, 0x29, 0x5, 0x9, 0x3f, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x6, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x100, 0xf000, 0x6, [0x30, 0xff30, 0xffc0f0, 0x3f00]}]}, 0x1, [{0x25, &(0x7f0000000200)=@string={0x25, 0x3, "a1bd978b228bfb04c1873a32b40cbdb66d5d92b3f3cbba94c5f9af22ca1b4f79e5cb2f"}}]}) 17:16:43 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x10d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb, 0x2, 0x1, 0x0, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 't'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0xe}, {0x6, 0x24, 0x1a, 0x400, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1f, 0xd4, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x3, 0x1, 0x2}, @mdlm_detail={0x7e, 0x24, 0x13, 0x0, "6df6e15ece78ac0133615d7eb80fa9e19f1739ac85314a9b7f1d46f9e8e34b179c980d7fbb2efe659221c472777cd2db090b8f298ec71b3c307e0bd574687e04e889783edc40ae5ac2d627d0d26e9a922feaee72609766f2fc1652e5da05d074f90fe8aabefe165af04ec12f4d8960abfc25d4f30d1df2f33bf7"}, @country_functional={0x6}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x5, 0x6}, @mdlm_detail={0x4, 0x24, 0x13, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x73}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x20, 0x1, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xff, 0x0, 0x0, 0x0, 0x6}, 0x35, &(0x7f0000000180)={0x5, 0xf, 0x35, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x5, 0x0, 0x3a, [0xff000f]}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x101, 0xf000, 0x85}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, [0xff30, 0x0]}]}}) ustat(0x5, &(0x7f0000000580)) [ 598.454616][ T9756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.468058][ T9756] ext4 filesystem being mounted at /root/syzkaller-testdir2572332819/syzkaller.saqqB5/245/file0 supports timestamps until 2038-01-19 (0x7fffffff) 17:16:43 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x1010) 17:16:43 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[], 0x6) 17:16:43 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000440)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 17:16:43 executing program 3: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socket(0x0, 0x0, 0x0) lchown(&(0x7f0000000280)='./bus\x00', 0xee01, 0xffffffffffffffff) 17:16:43 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) [ 598.857445][ T5111] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 598.873989][ T5059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.897961][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 598.910624][ T9787] loop3: detected capacity change from 0 to 512 17:16:43 executing program 2: semget$private(0x0, 0x4, 0x101) [ 599.007061][ T9787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.097433][ T5111] usb 5-1: Using ep0 maxpacket: 16 [ 599.105198][ T9787] ext4 filesystem being mounted at /root/syzkaller-testdir291276752/syzkaller.25IjIm/265/file0 supports timestamps until 2038-01-19 (0x7fffffff) 17:16:44 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) bind$inet6(r1, &(0x7f0000000280)={0x1c, 0x1c}, 0x1c) [ 599.147948][ T26] usb 2-1: Using ep0 maxpacket: 16 17:16:44 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x11e, &(0x7f0000000280)={{0x12, 0x1, 0x400, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10c, 0x2, 0x1, 0x1, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, 'tFo'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x401, 0xe, 0x5}, {0x6, 0x24, 0x1a, 0x400, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1f, 0xd4, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x3, 0x1, 0x2}, @mdlm_detail={0x81, 0x24, 0x13, 0x0, "6df6e15ece78ac0133615d7eb80fa9e19f1739ac85314a9b7f1d46f9e8e34b179c980d7fbb2efe659221c472777cd2db090b8f298ec71b3c307e0bd574687e04e889783edc40ae5ac2d627d0d26e9a922feaee72609766f2fc1652e5da05d074f90fe8aabefe165af04ec12f4d8960abfc25d4f30d1df2f33bf734063b"}, @country_functional={0x6, 0x24, 0x7, 0x40, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7f, 0x5, 0x6}, @mdlm_detail={0x10, 0x24, 0x13, 0x7, "96625be8e83a72ab2a414edb"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xdd, 0x9, 0x73}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x20, 0x1, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xff, 0x31, 0x4, 0x40, 0x6}, 0x5a, &(0x7f0000000180)={0x5, 0xf, 0x5a, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x5, 0x0, 0x3a, [0xf, 0xff000f, 0xc000]}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x101, 0xf000, 0x85}, @wireless={0xb, 0x10, 0x1, 0x8, 0x29, 0x5, 0x9, 0x3f, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x6, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x100, 0xf000, 0x6, [0x30, 0xff30, 0xffc0f0, 0x3f00]}]}, 0x1, [{0x25, &(0x7f0000000200)=@string={0x25, 0x3, "a1bd978b228bfb04c1873a32b40cbdb66d5d92b3f3cbba94c5f9af22ca1b4f79e5cb2f"}}]}) ustat(0x5, &(0x7f0000000580)) [ 599.217741][ T5111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.262632][ T5111] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.314872][ T5111] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 599.330822][ T5111] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 599.349905][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 599.364674][ T5055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.371458][ T26] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 599.402469][ T26] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 599.538266][ T5111] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.551154][ T5111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.564480][ T5111] usb 5-1: Product: syz [ 599.572299][ T5111] usb 5-1: Manufacturer: syz [ 599.577132][ T5111] usb 5-1: SerialNumber: syz [ 599.587519][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.596610][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.624937][ T26] usb 2-1: Product: syz [ 599.627360][ T5046] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 599.636926][ T26] usb 2-1: Manufacturer: syz [ 599.642051][ T26] usb 2-1: SerialNumber: syz [ 599.668941][ T5111] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 599.675798][ T5111] cdc_ncm 5-1:1.0: bind() failure [ 599.696659][ T5111] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 599.703980][ T5111] cdc_ncm 5-1:1.1: bind() failure 17:16:44 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:16:44 executing program 3: fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) [ 599.873626][ T5111] usb 5-1: USB disconnect, device number 7 [ 599.887813][ T5046] usb 6-1: Using ep0 maxpacket: 16 [ 599.928440][ T26] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 599.935296][ T26] cdc_ncm 2-1:1.0: bind() failure [ 599.947089][ T26] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 599.954592][ T26] cdc_ncm 2-1:1.1: bind() failure [ 599.979640][ T26] usb 2-1: USB disconnect, device number 5 [ 600.127451][ T6907] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 600.148296][ T5046] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 600.159551][ T5046] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 600.169906][ T5046] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 17:16:45 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x6) 17:16:45 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1d, r2}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x45a, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d2493508eff4eb25"}}, 0x48}}, 0x0) 17:16:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:16:45 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x4204, r0, 0x0, 0xffeffffffffeffff) [ 600.349369][ T5046] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.358564][ T5046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.366567][ T5046] usb 6-1: Product: syz [ 600.370911][ T6907] usb 1-1: Using ep0 maxpacket: 16 [ 600.376167][ T5046] usb 6-1: Manufacturer: syz [ 600.380902][ T5046] usb 6-1: SerialNumber: syz 17:16:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004800)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 17:16:45 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}, {@utf8}]}, 0x1, 0x21e, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 17:16:45 executing program 1: r0 = getuid() r1 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x120c081, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYBLOB="46c4f939e26575a9ac4d4aacca51947a072a3a57bc14ba47a6cd3df774dacb707d32ba901a7dc603dc064c104d36f271f94c89faffa42f20ee29a6885a685c25ebe0579d0f90b436cd12bf050b585cc6e4b1ba2ae73131a05c936173d0a98fa4aa71703da141405137fd38b967f2cf", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="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", @ANYRES8=r0], 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000005580)=ANY=[@ANYRES8=r1, @ANYBLOB="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", @ANYRES16, @ANYRES64, @ANYRES64=r0, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="01e676f4fc1904efc297a3baa083d7d53048014c357835f5618ea0569b8944d9cc29d417b108e6d8429e763c6f76637cfd7d7491fe31362d2af6bcf176cfa249a2b36a99ee6b5542c22763a067eb2ac09c5078d612c0133ef8a8f40074a8e540e5b262ac889ea44bc2a2bf39dd3ddfd962da624b3b25a036d7e94664086a77f49d81cf9630794a2a15d9e3042b", @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0xff0f, {}, {}, @quote={{0x1e}}}], 0x1c) [ 600.490950][ T6907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.547687][ T6907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.570910][ T6907] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 17:16:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) [ 600.611252][ T9820] loop3: detected capacity change from 0 to 256 [ 600.617965][ T6907] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 17:16:45 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 600.652461][ T6907] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 600.669321][ T5046] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 600.677067][ T5046] cdc_ncm 6-1:1.0: bind() failure [ 600.730584][ T5046] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 600.741814][ T6907] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 600.776715][ T5046] cdc_ncm 6-1:1.1: bind() failure [ 600.799141][ T5046] usb 6-1: USB disconnect, device number 7 [ 600.891405][ T9821] loop1: detected capacity change from 0 to 8192 [ 600.937703][ T6907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.952319][ T6907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.961278][ T6907] usb 1-1: Product: syz [ 600.961295][ T9821] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 600.965467][ T6907] usb 1-1: Manufacturer: syz [ 600.965491][ T6907] usb 1-1: SerialNumber: syz [ 600.988733][ T9821] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 600.998138][ T9821] REISERFS (device loop1): using ordered data mode [ 601.004659][ T9821] reiserfs: using flush barriers [ 601.011443][ T9821] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 601.030863][ T9821] REISERFS (device loop1): checking transaction log (loop1) [ 601.040307][ T9821] REISERFS (device loop1): Using r5 hash to sort names [ 601.050895][ T9821] reiserfs: enabling write barrier flush mode [ 601.087356][ T9821] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. 17:16:46 executing program 5: readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 601.297632][ T6907] cdc_ncm 1-1:1.0: bind() failure [ 601.307025][ T6907] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 601.320776][ T6907] cdc_ncm 1-1:1.1: bind() failure [ 601.342496][ T6907] usb 1-1: USB disconnect, device number 35 17:16:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="9db068222fe2502110b225a04980845d3e1b2352", 0x14}], 0x1) 17:16:46 executing program 2: fchmodat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x0) 17:16:46 executing program 4: renameat(0xffffffffffffffff, &(0x7f0000000440)='./file3\x00', 0xffffffffffffffff, 0x0) 17:16:46 executing program 3: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fchmodat(r0, &(0x7f00000005c0)='./file1\x00', 0x0) 17:16:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="9db068222fe2502110b225a04980845d3e1b4d", 0x13}], 0x1) 17:16:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000880)=[{&(0x7f00000004c0)="1204a58844d99d382eeeb32a917efee12aa7e4be15edf6b2c802d4be17c27f169882802853419bb0cd3368", 0x2b}, {&(0x7f0000000840)="50b5971f5a9b40", 0x7}], 0x2) 17:16:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x9a17, 0x0, 0x0, 0x0, "f998f6de5e658e07"}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="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", 0xfe}], 0x1) 17:16:46 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000003440)=ANY=[@ANYBLOB="0180c2000000caffd8b8d7bb080045"], 0x0) 17:16:47 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1011c2, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee00, 0x0) 17:16:47 executing program 5: syz_mount_image$ntfs(&(0x7f000001ec80), &(0x7f000001ecc0)='./file0\x00', 0x84, &(0x7f000001ed00), 0x1, 0x1ec6a, &(0x7f000001ed40)="$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") 17:16:47 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo\x00') getdents(r0, &(0x7f0000000100)=""/232, 0xe8) 17:16:47 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c9040, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x600, 0x0) 17:16:47 executing program 2: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 17:16:47 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0xa040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x2800c0, 0x10) 17:16:47 executing program 4: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 17:16:47 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/81) 17:16:47 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x282203, 0x0) 17:16:47 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) 17:16:47 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) 17:16:47 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/81) 17:16:47 executing program 0: openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) [ 602.417012][ T9852] loop5: detected capacity change from 0 to 4096 [ 602.486981][ T9852] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 602.516500][ T9852] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 602.590815][ T9852] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. 17:16:47 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/81) 17:16:47 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001900), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 17:16:47 executing program 0: mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/59) 17:16:47 executing program 4: socketpair(0x0, 0x40007, 0x0, 0x0) 17:16:47 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x610402, 0x0) 17:16:47 executing program 1: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) 17:16:47 executing program 1: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 17:16:47 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) 17:16:47 executing program 4: shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 17:16:47 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/81) 17:16:47 executing program 2: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) 17:16:47 executing program 5: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 17:16:47 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) accept$packet(r0, 0x0, 0x0) 17:16:47 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8040, 0x80) 17:16:47 executing program 3: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) 17:16:47 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x188040, 0xc5) 17:16:47 executing program 4: pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0) 17:16:47 executing program 5: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x5) 17:16:48 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1cb042, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee00, 0x1000) 17:16:48 executing program 1: setxattr$incfs_metadata(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x0) 17:16:48 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1011c0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x4, &(0x7f0000000040)) 17:16:48 executing program 3: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 17:16:48 executing program 2: open$dir(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) 17:16:48 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1011c0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200) 17:16:48 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4c) 17:16:48 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1011c0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4, 0x1200) 17:16:48 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x7bd602, 0x0) 17:16:48 executing program 3: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 17:16:48 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cb042, 0x88) 17:16:48 executing program 5: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xc1051, r0, 0x0) 17:16:48 executing program 0: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 17:16:48 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1011c0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x200, &(0x7f0000000040)) 17:16:48 executing program 3: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, 0x0, 0x0) 17:16:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000001440), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0x541b, 0x0) 17:16:48 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0044308, &(0x7f0000000040)=0x1000000) 17:16:48 executing program 5: io_setup(0x7f, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="c16d8f613712d5b4796b7570387a81c2ac23928f39087ece8adc81a70f3aeb6cdd4c4511e0d81690bebf8f3a34497dfd884f7d76a119cc203e3d612a09fda84ae0602c6860ad71b6260a", 0xfffffdfe}]) 17:16:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKSECTGET(r0, 0x5385, &(0x7f00000000c0)) 17:16:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="8796483f4801946455640fedf204dcbcbe9d91c63c61f064ec055a62d9ef5a39c7324012118cc1037b92081d510110506e51509fc0caa7c728edbe2a5ead985351d7f5363e7b9619278740c3194fe8352b45c238812ef8", 0x57, 0x40}]) 17:16:48 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) memfd_secret(0x80000) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000800)) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f00000002c0), 0x3f) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x680c80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@getqdisc={0x28, 0x26, 0xa15, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2}, {0xfff2}, {0xa}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x19]}, 0x8, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000b80)=ANY=[@ANYBLOB="40000000000041a2e085886f4afa597dfd830e10cec42e29df9ab20e8974d8e6830b9ef2395b6ea048517389de776a57a8af0ae8d2889b326de4294a6781eb972e2ff52721aff80ade9cdcd7ded138bf2af0cb6a7578010066b399273108f9843b82140a66b419ff03000000000000b7c879ab603ead90a957ca71d5c06a48f2c7379ff61aa1f6f4706665311b6d071ecef45d96da2e42221b0385b55e2d5c3b183b26448ceb6f9fe7cbda123a1ea22b073a8de1d4cd21b0ffe1d9417fb9a78365e5cb7e7d26425c6e901ad3ba152c82eee74cc492f279a1e5438f917fc8773a23176cdfba86b089dabea8e015387aa36026f6cb8c821dc986c708000000000000002c06106dbaa8fdcc57a548dd12882fb5fbf12bb62e2acfe8f2dde5eb4a2ccc5ec03c64fe7394d576e1db4f2401e84b1ee3c14dfb6aa626368d62d0af3679f25e0de2faa8ebef1f0a483ba8908a75186ef711f02e6962dc5e99c0f9e54d636a9b9c7df100ebcc615ba6b02a8d2af1bd7fcbad0f8408500922e1668cf3bb747142ab2faeab"], 0x18) 17:16:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0x42}}, 0x0) 17:16:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3ff}}}}, 0x30}}, 0x0) 17:16:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf2501000000000000000b80"], 0x28}}, 0x0) 17:16:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000001440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={0x0}) 17:16:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{0x0}}}, 0x1c}}, 0x0) 17:16:48 executing program 2: r0 = socket(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 17:16:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x3}}}, 0x1c}}, 0x0) 17:16:48 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) write$capi20_data(r0, 0x0, 0x0) 17:16:49 executing program 5: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000007c0)=ANY=[@ANYBLOB="70716e6f656e666f7263652c00752bb6a96d3c1f298d2453c6242f1c605a545bfe19020000003c57a7d16eb1c9669c019035768922c3f5d62044c9d4c6b6bb86653394c15a6f922f669da8636143f443d359146a9c338dd73e5c48445a1ebb8cbc320000000000000095771579956faf5e7ec9e263559cf4700652903ce0f0b565439970b6c53b377eadec2f9220531955c2a7f2fb0bea3570b62ee3e67c2fd6ca16cf638f197bd70ae7b38055bf69c0d0c749cc757fd43c5af97e7855f270c273302e7b68f395eebea99a37f340a1"], 0x4, 0x95d1, &(0x7f00000096c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b"], 0x30}}, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) r5 = open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x8000) ioctl$FS_IOC_FSSETXATTR(r5, 0x4020940d, &(0x7f0000000000)={0x4}) r6 = open(&(0x7f0000002000)='./bus\x00', 0x14f942, 0x0) r7 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x1000000201004) open(0x0, 0x40300, 0x0) 17:16:49 executing program 3: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000007c0)=ANY=[@ANYBLOB="70716e6f656e666f7263652c00752bb6a96d3c1f298d2453c6242f1c605a545bfe19020000003c57a7d16eb1c9669c019035768922c3f5d62044c9d4c6b6bb86653394c15a6f922f669da8636143f443d359146a9c338dd73e5c48445a1ebb8cbc320000000000000095771579956faf5e7ec9e263559cf4700652903ce0f0b565439970b6c53b377eadec2f9220531955c2a7f2fb0bea3570b62ee3e67c2fd6ca16cf638f197bd70ae7b38055bf69c0d0c749cc757fd43c5af97e7855f270c273302e7b68f395eebea99a37f340a1"], 0x4, 0x95d1, &(0x7f00000096c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) open(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x8000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x4020940d, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x40300, 0x0) 17:16:49 executing program 0: io_setup(0x7f, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="c16d8f613712d5b4796b7570387a81c29b", 0x11}]) 17:16:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0xeffdffffffffffff}]) 17:16:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 17:16:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x2271) 17:16:49 executing program 4: io_setup(0x7f, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="c1", 0x1}]) 17:16:49 executing program 1: syz_open_dev$vivid(0xffffffffffffffff, 0x0, 0x2) 17:16:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)) 17:16:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81000000000000000000010000000000000009"], 0x30}}, 0x0) 17:16:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 17:16:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x1275) [ 605.197168][ T9979] loop3: detected capacity change from 0 to 32768 [ 605.224149][ T9982] loop5: detected capacity change from 0 to 32768 [ 605.244680][ T9979] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 605.261361][ T9982] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 605.332349][ T9982] XFS (loop5): Ending clean mount [ 605.342845][ T9979] XFS (loop3): Ending clean mount [ 605.360943][ T9979] XFS (loop3): Quotacheck needed: Please wait. [ 605.366137][ T9982] XFS (loop5): Quotacheck needed: Please wait. [ 605.450118][ T9982] XFS (loop5): Quotacheck: Done. [ 605.455149][ T9979] XFS (loop3): Quotacheck: Done. [ 605.571409][ T9982] __nla_validate_parse: 5 callbacks suppressed [ 605.571431][ T9982] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 605.615853][ T27] audit: type=1804 audit(1685985410.536:151): pid=10012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir291276752/syzkaller.25IjIm/281/file0/bus" dev="loop3" ino=9290 res=1 errno=0 [ 605.655093][ T27] audit: type=1800 audit(1685985410.576:152): pid=10013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="loop5" ino=9287 res=0 errno=0 [ 605.687383][ T27] audit: type=1804 audit(1685985410.606:153): pid=10012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir291276752/syzkaller.25IjIm/281/file0/bus" dev="loop3" ino=9290 res=1 errno=0 [ 605.783963][ T27] audit: type=1804 audit(1685985410.696:154): pid=10013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2313863721/syzkaller.Abi3xZ/283/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 605.804766][ T9979] syz-executor.3 (9979) used greatest stack depth: 22472 bytes left [ 605.888090][ T5055] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 17:16:50 executing program 5: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000007c0)=ANY=[@ANYBLOB="70716e6f656e666f7263652c00752bb6a96d3c1f298d2453c6242f1c605a545bfe19020000003c57a7d16eb1c9669c019035768922c3f5d62044c9d4c6b6bb86653394c15a6f922f669da8636143f443d359146a9c338dd73e5c48445a1ebb8cbc320000000000000095771579956faf5e7ec9e263559cf4700652903ce0f0b565439970b6c53b377eadec2f9220531955c2a7f2fb0bea3570b62ee3e67c2fd6ca16cf638f197bd70ae7b38055bf69c0d0c749cc757fd43c5af97e7855f270c273302e7b68f395eebea99a37f340a1"], 0x4, 0x95d1, &(0x7f00000096c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b"], 0x30}}, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) r5 = open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x8000) ioctl$FS_IOC_FSSETXATTR(r5, 0x4020940d, &(0x7f0000000000)={0x4}) r6 = open(&(0x7f0000002000)='./bus\x00', 0x14f942, 0x0) r7 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x1000000201004) open(0x0, 0x40300, 0x0) 17:16:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0xfff}) 17:16:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x34}]}) 17:16:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4}}}, 0x1c}}, 0x0) 17:16:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf2501000000000000000b000000000c0014"], 0x28}}, 0x0) 17:16:50 executing program 1: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000007c0)=ANY=[@ANYBLOB="70716e6f656e666f7263652c00752bb6a96d3c1f298d2453c6242f1c605a545bfe19020000003c57a7d16eb1c9669c019035768922c3f5d62044c9d4c6b6bb86653394c15a6f922f669da8636143f443d359146a9c338dd73e5c48445a1ebb8cbc320000000000000095771579956faf5e7ec9e263559cf4700652903ce0f0b565439970b6c53b377eadec2f9220531955c2a7f2fb0bea3570b62ee3e67c2fd6ca16cf638f197bd70ae7b38055bf69c0d0c749cc757fd43c5af97e7855f270c273302e7b68f395eebea99a37f340a1"], 0x4, 0x95d1, &(0x7f00000096c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b"], 0x30}}, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) r5 = open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x8000) ioctl$FS_IOC_FSSETXATTR(r5, 0x4020940d, &(0x7f0000000000)={0x4}) r6 = open(&(0x7f0000002000)='./bus\x00', 0x14f942, 0x0) r7 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x1000000201004) open(0x0, 0x40300, 0x0) 17:16:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 17:16:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8100000000000000000001000000000000000941"], 0x30}}, 0x0) 17:16:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000a608fd"], 0x2c}}, 0x0) [ 606.158473][ T5045] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 17:16:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) [ 606.708619][T10038] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.925317][T10026] loop1: detected capacity change from 0 to 32768 [ 606.957772][T10026] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 607.039984][T10026] XFS (loop1): Ending clean mount [ 607.054927][T10026] XFS (loop1): Quotacheck needed: Please wait. [ 607.084927][T10036] loop5: detected capacity change from 0 to 32768 [ 607.123722][T10026] XFS (loop1): Quotacheck: Done. [ 607.125589][T10036] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 607.227367][T10036] XFS (loop5): Ending clean mount [ 607.229671][T10026] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.235382][T10036] XFS (loop5): Quotacheck needed: Please wait. [ 607.298075][T10036] XFS (loop5): Quotacheck: Done. [ 607.309722][ T27] audit: type=1800 audit(1685985412.236:155): pid=10056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=9287 res=0 errno=0 [ 607.416762][T10036] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 607.435374][ T27] audit: type=1804 audit(1685985412.356:156): pid=10056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3361560880/syzkaller.J8RfYP/267/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 607.494544][ T27] audit: type=1800 audit(1685985412.416:157): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="loop5" ino=9287 res=0 errno=0 [ 607.575986][ T27] audit: type=1804 audit(1685985412.496:158): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2313863721/syzkaller.Abi3xZ/284/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 607.668401][T10056] syz-executor.1 (10056) used greatest stack depth: 22344 bytes left [ 607.728290][ T5044] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 17:16:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}}}, 0x1c}}, 0x0) 17:16:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x0) 17:16:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001440), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)) 17:16:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000ffdbdf2501000000000000000b000000000c00149db8069c14d2edb5"], 0x28}, 0x10}, 0x0) 17:16:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x25, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}]}]}, 0x2c}}, 0x0) 17:16:52 executing program 2: io_setup(0x1, &(0x7f00000006c0)) io_setup(0xff, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000040)) io_setup(0x100, &(0x7f0000000080)) io_setup(0x3f, &(0x7f00000000c0)) 17:16:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 17:16:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKSECTGET(r0, 0x2284, &(0x7f00000000c0)) [ 607.936417][ T5045] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 17:16:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0xa, 'ip6erspan0\x00'}}]}]}, 0x2c}}, 0x0) 17:16:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0xffffffffffffffff) [ 608.396655][T10082] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. 17:16:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x615, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 17:16:53 executing program 3: io_setup(0x7f, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="c16d8f613712d5b4796b7570387a81c2ac23928f39087ece8adc81a70e", 0x1d}]) 17:16:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:53 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x2, r1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r3, 0x0, &(0x7f00007fe000/0x800000)=nil, 0x800000}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) dup(r0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, r5, 0x0, 0x0}) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000240)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000200)="adb0aa416f35cd4e59d3a08da18f3b067d89dbf17d12400f22b49d6dc70bf45c5fa934d27c13abee", 0x28}) ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000040)={0x8, r6}) 17:16:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xfee5, &(0x7f00000001c0)={&(0x7f0000000700)={0xe0, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{}, {}, {}]}, @NBD_ATTR_SOCKETS={0x4c}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '[['}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{}, {}, {}, {}, {}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xe0}}, 0x0) 17:16:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, 0x0) io_pgetevents(r1, 0x6, 0x6, &(0x7f0000002500)=[{}, {}, {}, {}, {}, {}], &(0x7f0000002440)={0x0, 0x3938700}, &(0x7f0000002640)={&(0x7f0000002600), 0x8}) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TIOCNOTTY(r3, 0x5422) io_setup(0x0, 0x0) io_getevents(0x0, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffc, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 17:16:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x2c}}, 0x0) [ 608.574597][T10092] iommufd_mock iommufd_mock0: Adding to iommu group 0 17:16:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0xfdfc, 0x0, 0x0, r0, 0x0}]) 17:16:53 executing program 5: syz_open_dev$dri(&(0x7f0000001440), 0x0, 0x66101) 17:16:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0xfdfc, 0x2, 0x0, r0, 0x0}]) 17:16:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:53 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:53 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:53 executing program 0: io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) [ 609.036955][T10116] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 609.055226][ T27] audit: type=1800 audit(1685985413.976:159): pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 609.085149][T10092] iommufd_mock iommufd_mock0: Removing from iommu group 0 [ 609.099907][T10086] iommufd_mock iommufd_mock1: Removing from iommu group 1 17:16:54 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:54 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000003c0)=0x7ff) 17:16:54 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1c1081) 17:16:54 executing program 0: io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:54 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="018f8de4193aa08072cd38"], 0x2c}}, 0x0) 17:16:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x2, 0x5, 0x0, r0, 0x0, 0x2}]) 17:16:54 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xd12f, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000480)) 17:16:54 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:54 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10120, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_80211_inject_frame(0x0, 0x0, 0x0) 17:16:54 executing program 0: io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:54 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:54 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xd12f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0], 0x0, 0x0, 0x1, 0x1}) [ 609.367479][T10134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 17:16:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000180001801200010070623a69703665727370616e30"], 0x2c}}, 0x0) 17:16:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:54 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r1, 0x801, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x18}}, 0x0) [ 609.484575][T10148] tipc: Enabling of bearer rejected, media not registered 17:16:54 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:54 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x1004007) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x29a17b63816, 0x0, 0x0}], 0xc40c, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 17:16:54 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 17:16:54 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/bus/input/devices\x00', 0x0, 0x0) 17:16:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:54 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:54 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x1276) 17:16:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:54 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:54 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:54 executing program 2: ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfff, 0x3, 0x2, 0x0, 0x7, 0xffffffffffffffff}) [ 610.501575][T10157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 17:16:55 executing program 1: io_setup(0x7f, &(0x7f0000000040)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 17:16:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000008700), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xee7b5c99955cae61}, 0x0) 17:16:55 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, 0xffffffffffffffff, 0x0, 0x10001}) 17:16:55 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x2000000, 0x1, 0x0, r0, 0x0}]) 17:16:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 17:16:55 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, 0xffffffffffffffff, 0x0, 0x10001}) 17:16:55 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:55 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) syz_clone(0x200000, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000980)='p', 0x1}], 0x2}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x3075436b, 0x10}, 0xc) 17:16:55 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:16:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:56 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, 0xffffffffffffffff, 0x0, 0x10001}) 17:16:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0xbc, 0x0, 0x0, "7a0741b1310d8e26f28f8e5a9e9609950f1cd27eec449b65353b28dd5e779c0c0e965d9fb3bdbe4a528bd68ce6aeccbb042b522297187cfb5f4ca8f6665b9445653a4e8e91dfba1cef9bad26265db6e5efe89646784ece390814e0a468e9412a205248c652da966cb57bf601f4ce7ca5c8ae253830554da939ccdfc91618ab7ceb3c27004654b88cacf26990db2b801f685c1188d4e7d8ffbc27d52e0004b44b5fde075d2bf23cadca0e1b3ce2fa2071c47f8da7984ecab7da2e7945"}) 17:16:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:56 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:16:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:56 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002680), &(0x7f00000026c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002700), 0x8, 0x10, &(0x7f0000002740), 0x10, 0xffffffffffffffff}, 0xcc) [ 611.240495][T10216] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:16:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0xbc, 0x0, 0x0, "7a0741b1310d8e26f28f8e5a9e9609950f1cd27eec449b65353b28dd5e779c0c0e965d9fb3bdbe4a528bd68ce6aeccbb042b522297187cfb5f4ca8f6665b9445653a4e8e91dfba1cef9bad26265db6e5efe89646784ece390814e0a468e9412a205248c652da966cb57bf601f4ce7ca5c8ae253830554da939ccdfc91618ab7ceb3c27004654b88cacf26990db2b801f685c1188d4e7d8ffbc27d52e0004b44b5fde075d2bf23cadca0e1b3ce2fa2071c47f8da7984ecab7da2e7945"}) 17:16:56 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:16:56 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) [ 611.434575][T10231] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:16:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:56 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000018"]) 17:16:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:56 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:16:56 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x2}, 0x0) 17:16:56 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r0, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 17:16:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:56 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1, 0x0, 0x10001}) 17:16:56 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:16:56 executing program 3: syz_open_dev$dri(&(0x7f0000001440), 0xf6ffffff, 0x66101) 17:16:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:16:56 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1, 0x0, 0x10001}) 17:16:56 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:16:56 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x100000002) 17:16:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002140)='/sys/class/mmc_host', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 17:16:56 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1, 0x0, 0x10001}) 17:16:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:56 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:16:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 17:16:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:57 executing program 5: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1, 0x0, 0x10001}) 17:16:57 executing program 3: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000007c0)=ANY=[@ANYBLOB="70716e6f656e666f7263652c00752bb6a96d3c1f298d2453c6242f1c605a545bfe19020000003c57a7d16eb1c9669c019035768922c3f5d62044c9d4c6b6bb86653394c15a6f922f669da8636143f443d359146a9c338dd73e5c48445a1ebb8cbc320000000000000095771579956faf5e7ec9e263559cf4700652903ce0f0b565439970b6c53b377eadec2f9220531955c2a7f2fb0bea3570b62ee3e67c2fd6ca16cf638f197bd70ae7b38055bf69c0d0c749cc757fd43c5af97e7855f270c273302e7b68f395eebea99a37f340a1"], 0x4, 0x95d1, &(0x7f00000096c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) r2 = open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x4020940d, &(0x7f0000000000)={0x4}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x14f942, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201004) open(&(0x7f00000005c0)='./bus\x00', 0x40300, 0x0) 17:16:57 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6}) 17:16:57 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) [ 612.875203][T10286] loop3: detected capacity change from 0 to 32768 17:16:57 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6}) 17:16:57 executing program 5: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1, 0x0, 0x10001}) 17:16:57 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:57 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x100000002) 17:16:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) [ 612.923412][T10286] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 17:16:57 executing program 5: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1, 0x0, 0x10001}) 17:16:57 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:58 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f0000000140)) [ 613.112275][T10286] XFS (loop3): Ending clean mount [ 613.172892][T10286] XFS (loop3): Quotacheck needed: Please wait. [ 613.289727][T10286] XFS (loop3): Quotacheck: Done. [ 613.382874][ T27] audit: type=1800 audit(1685985418.306:160): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="loop3" ino=9287 res=0 errno=0 [ 613.492141][ T27] audit: type=1804 audit(1685985418.416:161): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir291276752/syzkaller.25IjIm/302/file0/bus" dev="loop3" ino=9290 res=1 errno=0 [ 613.517824][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.544364][ T27] audit: type=1804 audit(1685985418.466:162): pid=10322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir291276752/syzkaller.25IjIm/302/file0/bus" dev="loop3" ino=9290 res=1 errno=0 [ 613.570043][ C1] vkms_vblank_simulate: vblank timer overrun 17:16:58 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:58 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6}) 17:16:58 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:58 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f0000000140)) 17:16:58 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:16:58 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:58 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 613.694245][ T5055] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 17:16:59 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x100000002) 17:16:59 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f0000000140)) 17:16:59 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:59 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:16:59 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:16:59 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:59 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:16:59 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:16:59 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0x40086602, &(0x7f0000000080)=0xfffffff8) 17:16:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[0x0]) 17:16:59 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:00 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0104307, &(0x7f0000000040)=0x1000600) 17:17:00 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1}) 17:17:00 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:00 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, r0, 0x0, 0x800000000000000}]) 17:17:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[0x0]) 17:17:00 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1}) 17:17:00 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:00 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[0x0]) 17:17:00 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:00 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1, 0x0, 0x10001}) 17:17:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:17:00 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1}) 17:17:00 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1, 0x0, 0x10001}) 17:17:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:17:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x615, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) 17:17:01 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:01 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1, 0x0, 0x10001}) 17:17:01 executing program 2: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1}) 17:17:01 executing program 1: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x88080) 17:17:01 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:01 executing program 2: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1}) 17:17:01 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:01 executing program 1: io_setup(0x6, &(0x7f0000000080)=0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) io_submit(r0, 0x1, &(0x7f0000001800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x4000, r1, &(0x7f00000000c0)="b0", 0x1, 0x0, 0x0, 0x2}]) 17:17:01 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}) 17:17:01 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:17:01 executing program 2: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1}) 17:17:01 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:01 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)) 17:17:01 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:01 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 17:17:01 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:01 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:02 executing program 3: r0 = io_uring_setup(0x73b2, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xd, &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 17:17:02 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:17:02 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:02 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x16, 0x0, 0x8, 0xffff56de}, 0x48) 17:17:02 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:02 executing program 1: syz_io_uring_setup(0x176f, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000938000/0x3000)=nil, &(0x7f0000000080), 0x0) r0 = io_uring_setup(0x41f4, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000938000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_setup(0x1d74, &(0x7f00000003c0)={0x0, 0xe1a3}, &(0x7f0000939000/0x2000)=nil, &(0x7f0000939000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000002c0)) 17:17:02 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:02 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @local, 0xa}, 0x1c) 17:17:02 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:02 executing program 1: syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000010600)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00692e0400000000d0d4aed3b4f12f92a85b7923372b80f335a051a3f824f996364c678ae25a247f7212679ad77a6786d78c9f80387012294176d54a0552d635a8a033c09b2f5f080dc4dc7aaf844c3d379fbfe3a5054bf5f3f096782563e318000000000000000000000000000000000000000000000016f19bed903cec178d8755e0b7e5ea65123a6c2edf8ae2e2faabf5095d9d29d0b1694c87fe643844718d8bdaeb29eb9af1188810cb9bc73d575bf43793ab61ed34ad8ec1b1"], 0x3, 0x105a6, &(0x7f00000106c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000104850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x0) 17:17:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:17:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:17:03 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:03 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:03 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:03 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:03 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:03 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:17:03 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x38, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:04 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 619.454108][T10467] loop1: detected capacity change from 0 to 131072 [ 619.466551][T10467] F2FS-fs (loop1): invalid crc value [ 619.490772][T10467] F2FS-fs (loop1): Found nat_bits in checkpoint 17:17:04 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:04 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:04 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:04 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1d52e5764c3eea41d71d554e97", 0xd}]) 17:17:04 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:04 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r0, 0x1, 0x70bd25, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x808e}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 619.530448][T10467] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 17:17:04 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:04 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:04 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1}) 17:17:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 17:17:04 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 619.769451][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:17:04 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000840)={'wg2\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) write$char_usb(r7, &(0x7f0000000040)="f4", 0x20000041) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) write$char_usb(r9, &(0x7f0000000040)="f4", 0x20000041) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) write$char_usb(r10, &(0x7f0000000040)="f4", 0x20000041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x1, &(0x7f0000000740)=@raw=[@ldst={0x2, 0x1, 0x0, 0x4, 0x2, 0x1}], &(0x7f0000000800)='syzkaller\x00', 0x1b, 0x8f, &(0x7f00000008c0)=""/143, 0x0, 0xf, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x5, 0x96, 0xa314}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, r6, 0xffffffffffffffff, r7, r8, 0x1, r9, r10]}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r4, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0xc, 0x2, [@TCA_TBF_BURST={0x8}]}}]}, 0x38}}, 0x0) socket$inet6(0xa, 0x0, 0x0) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) write$char_usb(r11, &(0x7f0000000040)="f4", 0x20000041) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) write$char_usb(r12, &(0x7f0000000040)="f4", 0x20000041) sendmsg$nl_route(r12, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001600000426bd74000100000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x20048006) recvmsg(r11, &(0x7f0000000600)={&(0x7f0000000180)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000400)=""/240, 0xf0}], 0x3, &(0x7f0000000500)=""/207, 0xcf}, 0x20100) [ 620.142302][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 620.170094][T10515] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 620.185230][T10515] sch_fq: defrate 0 ignored. 17:17:05 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 1) 17:17:05 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:05 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1}) 17:17:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 17:17:05 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:05 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (fail_nth: 1) [ 620.612120][T10529] FAULT_INJECTION: forcing a failure. [ 620.612120][T10529] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 620.644651][T10535] FAULT_INJECTION: forcing a failure. [ 620.644651][T10535] name failslab, interval 1, probability 0, space 0, times 1 [ 620.658107][T10529] CPU: 1 PID: 10529 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 620.672057][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 620.682210][T10529] Call Trace: [ 620.685530][T10529] [ 620.688493][T10529] dump_stack_lvl+0x136/0x150 [ 620.693251][T10529] should_fail_ex+0x4a3/0x5b0 [ 620.698010][T10529] _copy_from_user+0x30/0xf0 [ 620.702656][T10529] copy_msghdr_from_user+0x89/0x150 [ 620.707986][T10529] ? __copy_msghdr+0x4b0/0x4b0 17:17:05 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:05 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 620.712780][T10529] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 620.718807][T10529] ? find_held_lock+0x2d/0x110 [ 620.723641][T10529] ___sys_sendmsg+0xdd/0x1b0 [ 620.728373][T10529] ? do_recvmmsg+0x6f0/0x6f0 [ 620.733032][T10529] ? __fget_files+0x248/0x480 [ 620.737781][T10529] ? lock_downgrade+0x690/0x690 [ 620.742701][T10529] ? trace_lock_acquire+0x12d/0x180 [ 620.747969][T10529] ? receive_fd+0x110/0x110 [ 620.752528][T10529] ? lock_acquire+0x32/0xc0 [ 620.757088][T10529] ? receive_fd+0x110/0x110 [ 620.761645][T10529] ? __fget_files+0x26a/0x480 [ 620.766385][T10529] ? __fget_light+0xe5/0x270 [ 620.771036][T10529] __sys_sendmsg+0xf7/0x1c0 [ 620.775560][T10529] ? __sys_sendmsg_sock+0x40/0x40 [ 620.780605][T10529] ? fput+0x2f/0x1a0 [ 620.784538][T10529] ? ksys_write+0x1a3/0x250 [ 620.789058][T10529] ? syscall_enter_from_user_mode+0x26/0x80 [ 620.794978][T10529] ? lockdep_hardirqs_on+0x7d/0x100 [ 620.800191][T10529] do_syscall_64+0x39/0xb0 [ 620.804633][T10529] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 620.810554][T10529] RIP: 0033:0x7ff1bbc8c169 [ 620.815012][T10529] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 620.834637][T10529] RSP: 002b:00007ff1bc933168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.843067][T10529] RAX: ffffffffffffffda RBX: 00007ff1bbdabf80 RCX: 00007ff1bbc8c169 [ 620.851045][T10529] RDX: 0000000000000800 RSI: 0000000020000940 RDI: 0000000000000004 17:17:05 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r1}) [ 620.859020][T10529] RBP: 00007ff1bc9331d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.867004][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.874988][T10529] R13: 00007ffee10dfc5f R14: 00007ff1bc933300 R15: 0000000000022000 [ 620.882988][T10529] 17:17:05 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (fail_nth: 2) [ 620.922281][T10535] CPU: 1 PID: 10535 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 620.932242][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 620.942328][T10535] Call Trace: [ 620.945633][T10535] [ 620.948596][T10535] dump_stack_lvl+0x136/0x150 [ 620.953335][T10535] should_fail_ex+0x4a3/0x5b0 [ 620.958073][T10535] should_failslab+0x9/0x20 [ 620.962623][T10535] __kmem_cache_alloc_node+0x5b/0x320 [ 620.968041][T10535] ? tomoyo_realpath_from_path+0xc3/0x600 [ 620.973883][T10535] ? tomoyo_realpath_from_path+0xc3/0x600 [ 620.979648][T10535] __kmalloc+0x4e/0x190 [ 620.983911][T10535] ? rcu_is_watching+0x12/0xb0 [ 620.988819][T10535] tomoyo_realpath_from_path+0xc3/0x600 [ 620.994420][T10535] ? tomoyo_path_number_perm+0x1c1/0x570 [ 621.000108][T10535] tomoyo_path_number_perm+0x21a/0x570 [ 621.005702][T10535] ? tomoyo_path_number_perm+0x1c1/0x570 [ 621.011383][T10535] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 621.011680][T10542] FAULT_INJECTION: forcing a failure. 17:17:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 621.011680][T10542] name failslab, interval 1, probability 0, space 0, times 1 [ 621.017214][T10535] ? find_held_lock+0x2d/0x110 [ 621.017304][T10535] ? lock_downgrade+0x690/0x690 [ 621.017357][T10535] ? trace_lock_acquire+0x12d/0x180 [ 621.044997][T10535] ? receive_fd+0x110/0x110 [ 621.049540][T10535] ? lock_acquire+0x32/0xc0 [ 621.054093][T10535] ? receive_fd+0x110/0x110 [ 621.058641][T10535] ? __fget_files+0x26a/0x480 [ 621.063370][T10535] security_file_ioctl+0x54/0xb0 17:17:06 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 621.070371][T10535] __x64_sys_ioctl+0xb7/0x210 [ 621.070429][T10535] do_syscall_64+0x39/0xb0 [ 621.070467][T10535] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.070506][T10535] RIP: 0033:0x7ff18388c169 [ 621.070529][T10535] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 621.070554][T10535] RSP: 002b:00007ff18456d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.070576][T10535] RAX: ffffffffffffffda RBX: 00007ff1839abf80 RCX: 00007ff18388c169 17:17:06 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 2) 17:17:06 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:06 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:06 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:06 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (fail_nth: 3) [ 621.070591][T10535] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 621.070606][T10535] RBP: 00007ff18456d1d0 R08: 0000000000000000 R09: 0000000000000000 17:17:06 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:06 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:06 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:06 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (fail_nth: 4) [ 621.070622][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.070637][T10535] R13: 00007ffdcf84847f R14: 00007ff18456d300 R15: 0000000000022000 [ 621.070671][T10535] [ 621.085438][T10542] CPU: 0 PID: 10542 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 17:17:06 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 621.085483][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 621.085499][T10542] Call Trace: [ 621.085508][T10542] [ 621.085518][T10542] dump_stack_lvl+0x136/0x150 [ 621.085568][T10542] should_fail_ex+0x4a3/0x5b0 [ 621.085612][T10542] should_failslab+0x9/0x20 [ 621.085642][T10542] kmem_cache_alloc_node+0x5c/0x3e0 [ 621.085691][T10542] __alloc_skb+0x288/0x330 [ 621.085743][T10542] ? __napi_build_skb+0x50/0x50 [ 621.085789][T10542] ? __netlink_dump_start+0x910/0x910 [ 621.085829][T10542] ? apparmor_socket_getpeersec_dgram+0x9/0x10 [ 621.085876][T10542] netlink_sendmsg+0x9b0/0xe30 [ 621.085919][T10542] ? netlink_unicast+0x7f0/0x7f0 [ 621.085959][T10542] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 621.085996][T10542] ? netlink_unicast+0x7f0/0x7f0 [ 621.086034][T10542] sock_sendmsg+0xde/0x190 [ 621.086069][T10542] ____sys_sendmsg+0x71c/0x900 [ 621.086105][T10542] ? copy_msghdr_from_user+0xfc/0x150 [ 621.086175][T10542] ? kernel_sendmsg+0x50/0x50 [ 621.086215][T10542] ? find_held_lock+0x2d/0x110 [ 621.086258][T10542] ___sys_sendmsg+0x110/0x1b0 [ 621.086285][T10542] ? do_recvmmsg+0x6f0/0x6f0 [ 621.086313][T10542] ? __fget_files+0x248/0x480 [ 621.086338][T10542] ? lock_downgrade+0x690/0x690 [ 621.086374][T10542] ? trace_lock_acquire+0x12d/0x180 [ 621.086410][T10542] ? receive_fd+0x110/0x110 [ 621.086434][T10542] ? lock_acquire+0x32/0xc0 [ 621.086477][T10542] ? receive_fd+0x110/0x110 [ 621.086507][T10542] ? __fget_files+0x26a/0x480 [ 621.086539][T10542] ? __fget_light+0xe5/0x270 [ 621.086571][T10542] __sys_sendmsg+0xf7/0x1c0 [ 621.086597][T10542] ? __sys_sendmsg_sock+0x40/0x40 [ 621.086637][T10542] ? syscall_enter_from_user_mode+0x26/0x80 [ 621.086673][T10542] ? lockdep_hardirqs_on+0x7d/0x100 [ 621.086707][T10542] do_syscall_64+0x39/0xb0 [ 621.086747][T10542] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.086786][T10542] RIP: 0033:0x7ff1bbc8c169 [ 621.086808][T10542] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 621.086845][T10542] RSP: 002b:00007ff1bc933168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.086873][T10542] RAX: ffffffffffffffda RBX: 00007ff1bbdabf80 RCX: 00007ff1bbc8c169 [ 621.086889][T10542] RDX: 0000000000000800 RSI: 0000000020000940 RDI: 0000000000000004 [ 621.086905][T10542] RBP: 00007ff1bc9331d0 R08: 0000000000000000 R09: 0000000000000000 [ 621.086919][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.086933][T10542] R13: 00007ffee10dfc5f R14: 00007ff1bc933300 R15: 0000000000022000 [ 621.086964][T10542] [ 621.119386][T10535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.396306][T10558] FAULT_INJECTION: forcing a failure. [ 621.396306][T10558] name failslab, interval 1, probability 0, space 0, times 0 [ 621.396343][T10558] CPU: 0 PID: 10558 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 621.396371][T10558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 621.396385][T10558] Call Trace: [ 621.396392][T10558] [ 621.396402][T10558] dump_stack_lvl+0x136/0x150 [ 621.396450][T10558] should_fail_ex+0x4a3/0x5b0 [ 621.396493][T10558] should_failslab+0x9/0x20 [ 621.396523][T10558] __kmem_cache_alloc_node+0x5b/0x320 [ 621.396559][T10558] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 621.396595][T10558] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 621.396624][T10558] __kmalloc+0x4e/0x190 [ 621.396649][T10558] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 621.396678][T10558] tomoyo_encode2.part.0+0xe9/0x3a0 [ 621.396706][T10558] ? tomoyo_realpath_from_path+0xc3/0x600 [ 621.396733][T10558] ? rcu_is_watching+0x12/0xb0 [ 621.396762][T10558] tomoyo_encode+0x2c/0x50 [ 621.396786][T10558] tomoyo_realpath_from_path+0x185/0x600 [ 621.396823][T10558] tomoyo_path_number_perm+0x21a/0x570 [ 621.396907][T10558] ? tomoyo_path_number_perm+0x1c1/0x570 [ 621.396937][T10558] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 621.396964][T10558] ? find_held_lock+0x2d/0x110 [ 621.397006][T10558] ? lock_downgrade+0x690/0x690 [ 621.397062][T10558] ? trace_lock_acquire+0x12d/0x180 [ 621.397099][T10558] ? receive_fd+0x110/0x110 [ 621.397125][T10558] ? lock_acquire+0x32/0xc0 [ 621.397160][T10558] ? receive_fd+0x110/0x110 [ 621.397191][T10558] ? __fget_files+0x26a/0x480 [ 621.397229][T10558] security_file_ioctl+0x54/0xb0 [ 621.397267][T10558] __x64_sys_ioctl+0xb7/0x210 [ 621.397295][T10558] do_syscall_64+0x39/0xb0 [ 621.397340][T10558] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.397383][T10558] RIP: 0033:0x7ff18388c169 [ 621.397404][T10558] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 621.397432][T10558] RSP: 002b:00007ff18456d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.397460][T10558] RAX: ffffffffffffffda RBX: 00007ff1839abf80 RCX: 00007ff18388c169 [ 621.397480][T10558] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 621.397498][T10558] RBP: 00007ff18456d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 621.397515][T10558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.397533][T10558] R13: 00007ffdcf84847f R14: 00007ff18456d300 R15: 0000000000022000 [ 621.397576][T10558] [ 621.419968][T10558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.513911][T10566] FAULT_INJECTION: forcing a failure. [ 621.513911][T10566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.513978][T10566] CPU: 0 PID: 10566 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 621.514006][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 621.514021][T10566] Call Trace: [ 621.514029][T10566] [ 621.514039][T10566] dump_stack_lvl+0x136/0x150 [ 621.514088][T10566] should_fail_ex+0x4a3/0x5b0 [ 621.514129][T10566] _copy_from_iter+0x1d9/0x1290 [ 621.514160][T10566] ? __build_skb_around+0x276/0x3a0 [ 621.514205][T10566] ? hash_and_copy_to_iter+0x210/0x210 [ 621.514231][T10566] ? __napi_build_skb+0x50/0x50 [ 621.514270][T10566] ? __netlink_dump_start+0x900/0x910 [ 621.514307][T10566] ? __virt_addr_valid+0x61/0x2e0 [ 621.514358][T10566] ? __phys_addr+0xc8/0x140 [ 621.514396][T10566] ? __phys_addr_symbol+0x30/0x70 [ 621.514487][T10566] ? __check_object_size+0x323/0x730 [ 621.514530][T10566] netlink_sendmsg+0x883/0xe30 [ 621.514571][T10566] ? netlink_unicast+0x7f0/0x7f0 [ 621.514615][T10566] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 621.514646][T10566] ? netlink_unicast+0x7f0/0x7f0 [ 621.514695][T10566] sock_sendmsg+0xde/0x190 [ 621.514733][T10566] ____sys_sendmsg+0x71c/0x900 [ 621.514769][T10566] ? copy_msghdr_from_user+0xfc/0x150 [ 621.514796][T10566] ? kernel_sendmsg+0x50/0x50 [ 621.514892][T10566] ? find_held_lock+0x2d/0x110 [ 621.514943][T10566] ___sys_sendmsg+0x110/0x1b0 [ 621.514970][T10566] ? do_recvmmsg+0x6f0/0x6f0 [ 621.515001][T10566] ? __fget_files+0x248/0x480 [ 621.515029][T10566] ? lock_downgrade+0x690/0x690 [ 621.515068][T10566] ? trace_lock_acquire+0x12d/0x180 [ 621.515107][T10566] ? receive_fd+0x110/0x110 [ 621.515132][T10566] ? lock_acquire+0x32/0xc0 [ 621.515167][T10566] ? receive_fd+0x110/0x110 [ 621.515200][T10566] ? __fget_files+0x26a/0x480 [ 621.515235][T10566] ? __fget_light+0xe5/0x270 [ 621.515270][T10566] __sys_sendmsg+0xf7/0x1c0 [ 621.515292][T10566] ? __sys_sendmsg_sock+0x40/0x40 [ 621.515332][T10566] ? syscall_enter_from_user_mode+0x26/0x80 [ 621.515365][T10566] ? lockdep_hardirqs_on+0x7d/0x100 [ 621.515398][T10566] do_syscall_64+0x39/0xb0 [ 621.515437][T10566] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.515478][T10566] RIP: 0033:0x7ff1bbc8c169 [ 621.515501][T10566] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 621.515528][T10566] RSP: 002b:00007ff1bc933168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.515557][T10566] RAX: ffffffffffffffda RBX: 00007ff1bbdabf80 RCX: 00007ff1bbc8c169 [ 621.515578][T10566] RDX: 0000000000000800 RSI: 0000000020000940 RDI: 0000000000000004 [ 621.515596][T10566] RBP: 00007ff1bc9331d0 R08: 0000000000000000 R09: 0000000000000000 [ 621.515614][T10566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.515631][T10566] R13: 00007ffee10dfc5f R14: 00007ff1bc933300 R15: 0000000000022000 [ 621.515665][T10566] [ 622.473750][T10544] tty tty1: ldisc open failed (-12), clearing slot 0 17:17:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)}]) 17:17:07 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:07 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:07 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (fail_nth: 5) 17:17:07 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, 0xffffffffffffffff, 0x0, 0x10001}) 17:17:07 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 3) [ 622.609711][T10571] FAULT_INJECTION: forcing a failure. [ 622.609711][T10571] name failslab, interval 1, probability 0, space 0, times 0 [ 622.636684][T10577] FAULT_INJECTION: forcing a failure. [ 622.636684][T10577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.645940][T10571] CPU: 0 PID: 10571 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 17:17:07 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:07 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, 0xffffffffffffffff, 0x0, 0x10001}) 17:17:07 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 622.661714][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 622.661736][T10571] Call Trace: 17:17:07 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 4) 17:17:07 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (fail_nth: 6) [ 622.661745][T10571] [ 622.661756][T10571] dump_stack_lvl+0x136/0x150 [ 622.661808][T10571] should_fail_ex+0x4a3/0x5b0 17:17:07 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, 0xffffffffffffffff, 0x0, 0x10001}) [ 622.661875][T10571] should_failslab+0x9/0x20 [ 622.661906][T10571] __kmem_cache_alloc_node+0x5b/0x320 [ 622.661933][T10571] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 622.661987][T10571] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 622.662034][T10571] __kmalloc+0x4e/0x190 [ 622.662068][T10571] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 622.662117][T10571] ? genl_cmd_full_to_split+0x371/0x650 [ 622.662160][T10571] genl_family_rcv_msg_doit.isra.0+0x9f/0x2d0 [ 622.662208][T10571] ? genl_start+0x660/0x660 [ 622.662250][T10571] ? genl_cmd_full_to_split+0x650/0x650 [ 622.662294][T10571] ? nbd_open+0x810/0x810 [ 622.662405][T10571] ? __lock_acquire+0x1987/0x5f30 [ 622.662447][T10571] ? __radix_tree_lookup+0x215/0x2a0 [ 622.662502][T10571] genl_rcv_msg+0x4ff/0x7e0 [ 622.662549][T10571] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 622.662598][T10571] ? nbd_open+0x810/0x810 [ 622.662629][T10571] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 622.662680][T10571] netlink_rcv_skb+0x165/0x440 [ 622.662721][T10571] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 622.662768][T10571] ? netlink_ack+0x1360/0x1360 [ 622.662806][T10571] ? trace_lock_acquire+0x12d/0x180 [ 622.662862][T10571] ? down_write+0x200/0x200 [ 622.662896][T10571] ? netlink_deliver_tap+0x1b1/0xcf0 [ 622.662938][T10571] genl_rcv+0x28/0x40 [ 622.662978][T10571] netlink_unicast+0x547/0x7f0 [ 622.663023][T10571] ? netlink_attachskb+0x890/0x890 [ 622.663062][T10571] ? __virt_addr_valid+0x61/0x2e0 [ 622.663104][T10571] ? __phys_addr_symbol+0x30/0x70 [ 622.663145][T10571] ? __check_object_size+0x323/0x730 [ 622.663187][T10571] netlink_sendmsg+0x925/0xe30 [ 622.663235][T10571] ? netlink_unicast+0x7f0/0x7f0 [ 622.663284][T10571] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 622.663316][T10571] ? netlink_unicast+0x7f0/0x7f0 [ 622.663357][T10571] sock_sendmsg+0xde/0x190 [ 622.663397][T10571] ____sys_sendmsg+0x71c/0x900 [ 622.663438][T10571] ? copy_msghdr_from_user+0xfc/0x150 [ 622.663466][T10571] ? kernel_sendmsg+0x50/0x50 [ 622.663509][T10571] ? find_held_lock+0x2d/0x110 [ 622.663555][T10571] ___sys_sendmsg+0x110/0x1b0 [ 622.663583][T10571] ? do_recvmmsg+0x6f0/0x6f0 [ 622.663612][T10571] ? __fget_files+0x248/0x480 [ 622.663639][T10571] ? lock_downgrade+0x690/0x690 [ 622.663677][T10571] ? trace_lock_acquire+0x12d/0x180 [ 622.663714][T10571] ? receive_fd+0x110/0x110 [ 622.663739][T10571] ? lock_acquire+0x32/0xc0 [ 622.663776][T10571] ? receive_fd+0x110/0x110 [ 622.663815][T10571] ? __fget_files+0x26a/0x480 [ 622.663852][T10571] ? __fget_light+0xe5/0x270 [ 622.663888][T10571] __sys_sendmsg+0xf7/0x1c0 [ 622.663914][T10571] ? __sys_sendmsg_sock+0x40/0x40 [ 622.663957][T10571] ? syscall_enter_from_user_mode+0x26/0x80 [ 622.663993][T10571] ? lockdep_hardirqs_on+0x7d/0x100 [ 622.664027][T10571] do_syscall_64+0x39/0xb0 [ 622.664067][T10571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.664109][T10571] RIP: 0033:0x7ff1bbc8c169 [ 622.664132][T10571] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 622.664159][T10571] RSP: 002b:00007ff1bc933168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.664187][T10571] RAX: ffffffffffffffda RBX: 00007ff1bbdabf80 RCX: 00007ff1bbc8c169 [ 622.664239][T10571] RDX: 0000000000000800 RSI: 0000000020000940 RDI: 0000000000000004 [ 622.664257][T10571] RBP: 00007ff1bc9331d0 R08: 0000000000000000 R09: 0000000000000000 [ 622.664274][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.664291][T10571] R13: 00007ffee10dfc5f R14: 00007ff1bc933300 R15: 0000000000022000 [ 622.664328][T10571] [ 622.687825][T10577] CPU: 1 PID: 10577 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 622.687861][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 622.687875][T10577] Call Trace: [ 622.687882][T10577] [ 622.687893][T10577] dump_stack_lvl+0x136/0x150 [ 622.687945][T10577] should_fail_ex+0x4a3/0x5b0 [ 622.687989][T10577] _copy_from_user+0x30/0xf0 [ 622.688029][T10577] iommufd_fops_ioctl+0x2c5/0x4b0 [ 622.688077][T10577] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 622.688114][T10577] ? __fget_files+0x26a/0x480 [ 622.688149][T10577] ? bpf_lsm_file_ioctl+0x9/0x10 [ 622.688205][T10577] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 622.688236][T10577] __x64_sys_ioctl+0x197/0x210 [ 622.688269][T10577] do_syscall_64+0x39/0xb0 [ 622.688312][T10577] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.688354][T10577] RIP: 0033:0x7ff18388c169 [ 622.688375][T10577] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 622.688402][T10577] RSP: 002b:00007ff18456d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.688436][T10577] RAX: ffffffffffffffda RBX: 00007ff1839abf80 RCX: 00007ff18388c169 [ 622.688455][T10577] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 622.688472][T10577] RBP: 00007ff18456d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 622.688490][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.688507][T10577] R13: 00007ffdcf84847f R14: 00007ff18456d300 R15: 0000000000022000 [ 622.688543][T10577] [ 622.906795][T10592] FAULT_INJECTION: forcing a failure. [ 622.906795][T10592] name failslab, interval 1, probability 0, space 0, times 0 [ 623.422802][T10592] CPU: 1 PID: 10592 Comm: syz-executor.3 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 623.432750][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 623.442822][T10592] Call Trace: [ 623.446110][T10592] [ 623.449069][T10592] dump_stack_lvl+0x136/0x150 [ 623.453756][T10592] should_fail_ex+0x4a3/0x5b0 [ 623.458441][T10592] should_failslab+0x9/0x20 [ 623.462944][T10592] __kmem_cache_alloc_node+0x5b/0x320 [ 623.468323][T10592] ? nbd_dev_add+0x4d/0xc70 [ 623.472839][T10592] ? wait_for_completion_io_timeout+0x20/0x20 [ 623.478903][T10592] ? apparmor_capable+0x1dc/0x460 [ 623.483930][T10592] kmalloc_trace+0x26/0xe0 [ 623.488372][T10592] nbd_dev_add+0x4d/0xc70 [ 623.492709][T10592] nbd_genl_connect+0x751/0x1c70 [ 623.497646][T10592] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 623.503274][T10592] ? nbd_open+0x810/0x810 [ 623.507671][T10592] ? __nla_parse+0x41/0x50 [ 623.512121][T10592] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 623.519510][T10592] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 623.526808][T10592] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0 [ 623.532986][T10592] ? genl_start+0x660/0x660 [ 623.537499][T10592] ? __lock_acquire+0x1987/0x5f30 [ 623.542528][T10592] ? __radix_tree_lookup+0x215/0x2a0 [ 623.547832][T10592] genl_rcv_msg+0x4ff/0x7e0 [ 623.552370][T10592] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 623.558704][T10592] ? nbd_open+0x810/0x810 [ 623.563031][T10592] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 623.569020][T10592] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 623.575028][T10592] netlink_rcv_skb+0x165/0x440 [ 623.579796][T10592] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0 [ 623.586133][T10592] ? netlink_ack+0x1360/0x1360 [ 623.590897][T10592] ? trace_lock_acquire+0x12d/0x180 [ 623.596108][T10592] ? down_write+0x200/0x200 [ 623.600612][T10592] ? netlink_deliver_tap+0x1b1/0xcf0 [ 623.605907][T10592] genl_rcv+0x28/0x40 [ 623.609896][T10592] netlink_unicast+0x547/0x7f0 [ 623.614678][T10592] ? netlink_attachskb+0x890/0x890 [ 623.619812][T10592] ? __virt_addr_valid+0x61/0x2e0 [ 623.624857][T10592] ? __phys_addr_symbol+0x30/0x70 [ 623.629916][T10592] ? __check_object_size+0x323/0x730 [ 623.635236][T10592] netlink_sendmsg+0x925/0xe30 [ 623.640046][T10592] ? netlink_unicast+0x7f0/0x7f0 [ 623.644991][T10592] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 623.650289][T10592] ? netlink_unicast+0x7f0/0x7f0 [ 623.655238][T10592] sock_sendmsg+0xde/0x190 [ 623.659663][T10592] ____sys_sendmsg+0x71c/0x900 [ 623.664434][T10592] ? copy_msghdr_from_user+0xfc/0x150 [ 623.669809][T10592] ? kernel_sendmsg+0x50/0x50 [ 623.674494][T10592] ? find_held_lock+0x2d/0x110 [ 623.679262][T10592] ___sys_sendmsg+0x110/0x1b0 [ 623.683935][T10592] ? do_recvmmsg+0x6f0/0x6f0 [ 623.688523][T10592] ? __fget_files+0x248/0x480 [ 623.693216][T10592] ? lock_downgrade+0x690/0x690 [ 623.698081][T10592] ? trace_lock_acquire+0x12d/0x180 [ 623.703297][T10592] ? receive_fd+0x110/0x110 [ 623.707823][T10592] ? lock_acquire+0x32/0xc0 [ 623.712352][T10592] ? receive_fd+0x110/0x110 [ 623.716874][T10592] ? __fget_files+0x26a/0x480 [ 623.721575][T10592] ? __fget_light+0xe5/0x270 [ 623.726197][T10592] __sys_sendmsg+0xf7/0x1c0 [ 623.730703][T10592] ? __sys_sendmsg_sock+0x40/0x40 [ 623.735733][T10592] ? syscall_enter_from_user_mode+0x26/0x80 [ 623.741627][T10592] ? lockdep_hardirqs_on+0x7d/0x100 [ 623.746870][T10592] do_syscall_64+0x39/0xb0 [ 623.751303][T10592] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.757201][T10592] RIP: 0033:0x7ff1bbc8c169 [ 623.761621][T10592] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 623.781237][T10592] RSP: 002b:00007ff1bc933168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.789648][T10592] RAX: ffffffffffffffda RBX: 00007ff1bbdabf80 RCX: 00007ff1bbc8c169 [ 623.797623][T10592] RDX: 0000000000000800 RSI: 0000000020000940 RDI: 0000000000000004 [ 623.805596][T10592] RBP: 00007ff1bc9331d0 R08: 0000000000000000 R09: 0000000000000000 [ 623.813562][T10592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.821532][T10592] R13: 00007ffee10dfc5f R14: 00007ff1bc933300 R15: 0000000000022000 [ 623.829508][T10592] [ 623.852492][T10592] nbd: failed to add new device 17:17:08 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:08 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:08 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:08 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 5) 17:17:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)}]) 17:17:08 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:08 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:08 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:08 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:09 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:09 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)}]) 17:17:09 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 6) 17:17:09 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x2, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:09 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:09 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:09 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x3, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:09 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea", 0x7}]) [ 624.220954][T10620] FAULT_INJECTION: forcing a failure. [ 624.220954][T10620] name failslab, interval 1, probability 0, space 0, times 0 17:17:09 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 624.305299][T10620] CPU: 0 PID: 10620 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 624.315270][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 624.325361][T10620] Call Trace: [ 624.328680][T10620] [ 624.331644][T10620] dump_stack_lvl+0x136/0x150 [ 624.336394][T10620] should_fail_ex+0x4a3/0x5b0 [ 624.341139][T10620] should_failslab+0x9/0x20 [ 624.345716][T10620] __kmem_cache_alloc_node+0x5b/0x320 [ 624.351141][T10620] ? iopt_area_add_access+0x1ac/0x380 [ 624.358629][T10620] ? interval_tree_iter_first+0x1ff/0x280 [ 624.358731][T10620] kmalloc_trace+0x26/0xe0 [ 624.358768][T10620] iopt_area_add_access+0x1ac/0x380 [ 624.358801][T10620] ? iopt_area_contig_init+0x16c/0x270 [ 624.358849][T10620] iommufd_access_pin_pages+0x5b8/0x9b0 [ 624.358904][T10620] ? iommufd_access_create+0x2b0/0x2b0 [ 624.358944][T10620] ? __kmalloc_node+0xfb/0x1a0 [ 624.358981][T10620] iommufd_test+0x1ac0/0x2c20 17:17:09 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:09 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 624.359018][T10620] ? iommufd_selftest_destroy+0x190/0x190 [ 624.406103][T10620] ? __might_fault+0xb2/0x190 [ 624.406156][T10620] iommufd_fops_ioctl+0x317/0x4b0 17:17:09 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x4, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:09 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 624.406185][T10620] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 624.406229][T10620] ? bpf_lsm_file_ioctl+0x9/0x10 [ 624.406268][T10620] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 624.406297][T10620] __x64_sys_ioctl+0x197/0x210 [ 624.406328][T10620] do_syscall_64+0x39/0xb0 17:17:09 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 7) 17:17:09 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:09 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x5, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:09 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:09 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 624.406366][T10620] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.406405][T10620] RIP: 0033:0x7ff18388c169 [ 624.406427][T10620] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:17:09 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 624.406451][T10620] RSP: 002b:00007ff18456d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.406478][T10620] RAX: ffffffffffffffda RBX: 00007ff1839abf80 RCX: 00007ff18388c169 [ 624.406495][T10620] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 624.406511][T10620] RBP: 00007ff18456d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.406527][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.406632][T10620] R13: 00007ffdcf84847f R14: 00007ff18456d300 R15: 0000000000022000 [ 624.406669][T10620] [ 624.780876][T10653] FAULT_INJECTION: forcing a failure. [ 624.780876][T10653] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 624.781132][T10653] CPU: 0 PID: 10653 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 624.781162][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 624.781177][T10653] Call Trace: [ 624.781184][T10653] [ 624.781196][T10653] dump_stack_lvl+0x136/0x150 [ 624.781245][T10653] should_fail_ex+0x4a3/0x5b0 [ 624.781290][T10653] prepare_alloc_pages+0x178/0x570 [ 624.781329][T10653] __alloc_pages+0x149/0x4a0 [ 624.781361][T10653] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 624.781393][T10653] ? __lock_acquire+0xc17/0x5f30 [ 624.781434][T10653] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 624.781480][T10653] ? __lock_acquire+0xc17/0x5f30 [ 624.781519][T10653] ? print_usage_bug.part.0+0x660/0x660 [ 624.781564][T10653] alloc_pages+0x1aa/0x270 [ 624.781593][T10653] pte_alloc_one+0x1a/0x230 [ 624.781632][T10653] __pte_alloc+0x6d/0x260 [ 624.781661][T10653] ? pmd_install+0x160/0x160 [ 624.781711][T10653] __handle_mm_fault+0x400a/0x4170 [ 624.781753][T10653] ? vm_iomap_memory+0x190/0x190 [ 624.781787][T10653] ? mt_validate_nulls+0xd10/0xd10 [ 624.781851][T10653] handle_mm_fault+0x2af/0x9f0 [ 624.781892][T10653] __get_user_pages+0x60a/0x10e0 [ 624.781934][T10653] ? follow_page_mask+0x10a0/0x10a0 [ 624.781975][T10653] ? down_read_killable+0x14a/0x4f0 [ 624.782010][T10653] ? down_read_interruptible+0x4f0/0x4f0 [ 624.782050][T10653] __gup_longterm_locked+0x3f7/0x2420 [ 624.782087][T10653] ? find_held_lock+0x2d/0x110 [ 624.782119][T10653] ? get_user_pages_unlocked+0x820/0x820 [ 624.782146][T10653] ? internal_get_user_pages_fast+0x12e1/0x3300 [ 624.782174][T10653] ? lock_downgrade+0x690/0x690 [ 624.782271][T10653] ? mark_held_locks+0x9f/0xe0 [ 624.782318][T10653] ? sanity_check_pinned_pages+0x23/0xec0 [ 624.782366][T10653] internal_get_user_pages_fast+0x169f/0x3300 [ 624.782417][T10653] ? __gup_device_huge+0x6c0/0x6c0 [ 624.782443][T10653] ? __kernel_text_address+0xd/0x30 [ 624.782470][T10653] ? unwind_get_return_address+0x55/0xa0 [ 624.782501][T10653] ? arch_stack_walk+0x97/0xf0 [ 624.782539][T10653] ? is_valid_gup_args+0x199/0x230 [ 624.782584][T10653] pin_user_pages_fast+0xab/0x100 [ 624.782612][T10653] ? get_user_pages_fast+0x100/0x100 [ 624.782639][T10653] ? stack_trace_save+0x90/0xc0 [ 624.782679][T10653] ? __stack_depot_save+0x39/0x510 [ 624.782734][T10653] pfn_reader_user_pin+0x64f/0x810 [ 624.782775][T10653] iopt_pages_fill_xarray+0x32b/0xa90 [ 624.782854][T10653] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.782906][T10653] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 624.782945][T10653] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 624.783006][T10653] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 624.783033][T10653] ? iopt_area_add_access+0x1ac/0x380 [ 624.783071][T10653] iopt_area_add_access+0x1cf/0x380 [ 624.783107][T10653] iommufd_access_pin_pages+0x5b8/0x9b0 [ 624.783156][T10653] ? iommufd_access_create+0x2b0/0x2b0 [ 624.783204][T10653] ? __kmalloc_node+0xfb/0x1a0 [ 624.783244][T10653] iommufd_test+0x1ac0/0x2c20 [ 624.783284][T10653] ? iommufd_selftest_destroy+0x190/0x190 [ 624.783327][T10653] ? __might_fault+0xb2/0x190 [ 624.783374][T10653] iommufd_fops_ioctl+0x317/0x4b0 [ 624.783403][T10653] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 624.783450][T10653] ? bpf_lsm_file_ioctl+0x9/0x10 [ 624.783496][T10653] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 624.783524][T10653] __x64_sys_ioctl+0x197/0x210 [ 624.783557][T10653] do_syscall_64+0x39/0xb0 [ 624.783598][T10653] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.783638][T10653] RIP: 0033:0x7ff18388c169 [ 624.783661][T10653] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 624.783689][T10653] RSP: 002b:00007ff18456d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.783719][T10653] RAX: ffffffffffffffda RBX: 00007ff1839abf80 RCX: 00007ff18388c169 [ 624.783739][T10653] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 624.783756][T10653] RBP: 00007ff18456d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.783774][T10653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.783792][T10653] R13: 00007ffdcf84847f R14: 00007ff18456d300 R15: 0000000000022000 [ 624.783829][T10653] 17:17:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea", 0x7}]) 17:17:10 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:10 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x6, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:10 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:10 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 8) 17:17:10 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:10 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:10 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 625.534623][T10664] FAULT_INJECTION: forcing a failure. [ 625.534623][T10664] name failslab, interval 1, probability 0, space 0, times 0 17:17:10 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x7, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:10 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 625.597529][T10664] CPU: 1 PID: 10664 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 625.607496][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 625.617601][T10664] Call Trace: [ 625.620913][T10664] [ 625.623870][T10664] dump_stack_lvl+0x136/0x150 [ 625.628612][T10664] should_fail_ex+0x4a3/0x5b0 [ 625.633356][T10664] should_failslab+0x9/0x20 [ 625.637917][T10664] kmem_cache_alloc+0x63/0x3b0 [ 625.642748][T10664] ptlock_alloc+0x21/0x70 [ 625.647137][T10664] pte_alloc_one+0x6c/0x230 [ 625.651710][T10664] __pte_alloc+0x6d/0x260 [ 625.656070][T10664] ? pmd_install+0x160/0x160 [ 625.660684][T10664] __handle_mm_fault+0x400a/0x4170 [ 625.665838][T10664] ? vm_iomap_memory+0x190/0x190 [ 625.670795][T10664] ? mt_validate_nulls+0xd10/0xd10 [ 625.675967][T10664] handle_mm_fault+0x2af/0x9f0 [ 625.680790][T10664] __get_user_pages+0x60a/0x10e0 [ 625.685809][T10664] ? follow_page_mask+0x10a0/0x10a0 [ 625.691039][T10664] ? down_read_killable+0x14a/0x4f0 [ 625.696262][T10664] ? down_read_interruptible+0x4f0/0x4f0 [ 625.701930][T10664] __gup_longterm_locked+0x3f7/0x2420 [ 625.707339][T10664] ? find_held_lock+0x2d/0x110 [ 625.712140][T10664] ? get_user_pages_unlocked+0x820/0x820 [ 625.717782][T10664] ? internal_get_user_pages_fast+0x12e1/0x3300 [ 625.724032][T10664] ? lock_downgrade+0x690/0x690 [ 625.728904][T10664] ? mark_held_locks+0x9f/0xe0 [ 625.733686][T10664] ? sanity_check_pinned_pages+0x23/0xec0 [ 625.739431][T10664] internal_get_user_pages_fast+0x169f/0x3300 [ 625.745533][T10664] ? __gup_device_huge+0x6c0/0x6c0 [ 625.750654][T10664] ? __kernel_text_address+0xd/0x30 [ 625.755867][T10664] ? unwind_get_return_address+0x55/0xa0 [ 625.761515][T10664] ? arch_stack_walk+0x97/0xf0 [ 625.766296][T10664] ? is_valid_gup_args+0x199/0x230 [ 625.771431][T10664] pin_user_pages_fast+0xab/0x100 [ 625.776469][T10664] ? get_user_pages_fast+0x100/0x100 [ 625.781769][T10664] ? stack_trace_save+0x90/0xc0 [ 625.786642][T10664] ? __stack_depot_save+0x39/0x510 [ 625.791773][T10664] pfn_reader_user_pin+0x64f/0x810 [ 625.796904][T10664] iopt_pages_fill_xarray+0x32b/0xa90 [ 625.802313][T10664] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.808431][T10664] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 625.814465][T10664] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 625.820779][T10664] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 625.826690][T10664] ? iopt_area_add_access+0x1ac/0x380 [ 625.832087][T10664] iopt_area_add_access+0x1cf/0x380 [ 625.837299][T10664] iommufd_access_pin_pages+0x5b8/0x9b0 [ 625.842875][T10664] ? iommufd_access_create+0x2b0/0x2b0 [ 625.848361][T10664] ? __kmalloc_node+0xfb/0x1a0 [ 625.853164][T10664] iommufd_test+0x1ac0/0x2c20 [ 625.857874][T10664] ? iommufd_selftest_destroy+0x190/0x190 [ 625.863607][T10664] ? __might_fault+0xb2/0x190 [ 625.868312][T10664] iommufd_fops_ioctl+0x317/0x4b0 [ 625.873349][T10664] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 625.879179][T10664] ? bpf_lsm_file_ioctl+0x9/0x10 [ 625.884136][T10664] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 625.889952][T10664] __x64_sys_ioctl+0x197/0x210 [ 625.894728][T10664] do_syscall_64+0x39/0xb0 [ 625.899180][T10664] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.905098][T10664] RIP: 0033:0x7ff18388c169 [ 625.909522][T10664] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 625.929148][T10664] RSP: 002b:00007ff18456d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.937572][T10664] RAX: ffffffffffffffda RBX: 00007ff1839abf80 RCX: 00007ff18388c169 [ 625.945548][T10664] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 625.953525][T10664] RBP: 00007ff18456d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 625.961548][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.969528][T10664] R13: 00007ffdcf84847f R14: 00007ff18456d300 R15: 0000000000022000 [ 625.977531][T10664] [ 625.994232][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.000692][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 17:17:11 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 9) 17:17:11 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 626.094241][T10676] FAULT_INJECTION: forcing a failure. [ 626.094241][T10676] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 626.112641][T10676] CPU: 0 PID: 10676 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 626.122594][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 626.132697][T10676] Call Trace: [ 626.136019][T10676] [ 626.139068][T10676] dump_stack_lvl+0x136/0x150 [ 626.143811][T10676] should_fail_ex+0x4a3/0x5b0 [ 626.148556][T10676] prepare_alloc_pages+0x178/0x570 [ 626.153721][T10676] __alloc_pages+0x149/0x4a0 [ 626.158382][T10676] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 626.165210][T10676] ? find_held_lock+0x2d/0x110 [ 626.170039][T10676] ? lock_downgrade+0x690/0x690 [ 626.174955][T10676] ? spin_bug+0x1c0/0x1c0 [ 626.179346][T10676] ? pmd_install+0x6c/0x160 [ 626.183922][T10676] __folio_alloc+0x16/0x40 [ 626.188391][T10676] vma_alloc_folio+0x155/0x850 [ 626.193224][T10676] ? policy_nodemask+0x1c0/0x1c0 [ 626.198227][T10676] ? pmd_install+0x160/0x160 [ 626.202873][T10676] __handle_mm_fault+0x2263/0x4170 [ 626.208046][T10676] ? vm_iomap_memory+0x190/0x190 [ 626.213032][T10676] ? mt_validate_nulls+0xd10/0xd10 [ 626.218225][T10676] handle_mm_fault+0x2af/0x9f0 [ 626.223046][T10676] __get_user_pages+0x60a/0x10e0 [ 626.228084][T10676] ? follow_page_mask+0x10a0/0x10a0 [ 626.233340][T10676] ? down_read_killable+0x14a/0x4f0 [ 626.238597][T10676] ? down_read_interruptible+0x4f0/0x4f0 [ 626.244297][T10676] __gup_longterm_locked+0x3f7/0x2420 [ 626.249919][T10676] ? find_held_lock+0x2d/0x110 [ 626.254743][T10676] ? get_user_pages_unlocked+0x820/0x820 [ 626.260429][T10676] ? internal_get_user_pages_fast+0x12e1/0x3300 [ 626.266718][T10676] ? lock_downgrade+0x690/0x690 [ 626.271626][T10676] ? mark_held_locks+0x9f/0xe0 [ 626.276604][T10676] ? sanity_check_pinned_pages+0x23/0xec0 [ 626.282361][T10676] internal_get_user_pages_fast+0x169f/0x3300 [ 626.288474][T10676] ? __gup_device_huge+0x6c0/0x6c0 [ 626.293599][T10676] ? __kernel_text_address+0xd/0x30 [ 626.298812][T10676] ? unwind_get_return_address+0x55/0xa0 [ 626.304458][T10676] ? arch_stack_walk+0x97/0xf0 [ 626.309290][T10676] ? is_valid_gup_args+0x199/0x230 [ 626.314430][T10676] pin_user_pages_fast+0xab/0x100 [ 626.319469][T10676] ? get_user_pages_fast+0x100/0x100 [ 626.324816][T10676] ? stack_trace_save+0x90/0xc0 [ 626.329686][T10676] ? __stack_depot_save+0x39/0x510 [ 626.334831][T10676] pfn_reader_user_pin+0x64f/0x810 [ 626.339963][T10676] iopt_pages_fill_xarray+0x32b/0xa90 [ 626.345383][T10676] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.351507][T10676] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 626.357531][T10676] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 626.363819][T10676] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 626.369459][T10676] ? iopt_area_add_access+0x1ac/0x380 [ 626.374868][T10676] iopt_area_add_access+0x1cf/0x380 [ 626.380081][T10676] iommufd_access_pin_pages+0x5b8/0x9b0 [ 626.385664][T10676] ? iommufd_access_create+0x2b0/0x2b0 [ 626.391149][T10676] ? __kmalloc_node+0xfb/0x1a0 [ 626.395934][T10676] iommufd_test+0x1ac0/0x2c20 [ 626.400647][T10676] ? iommufd_selftest_destroy+0x190/0x190 [ 626.406392][T10676] ? __might_fault+0xb2/0x190 [ 626.412309][T10676] iommufd_fops_ioctl+0x317/0x4b0 [ 626.417349][T10676] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 626.423190][T10676] ? bpf_lsm_file_ioctl+0x9/0x10 [ 626.428152][T10676] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 626.434156][T10676] __x64_sys_ioctl+0x197/0x210 [ 626.438936][T10676] do_syscall_64+0x39/0xb0 [ 626.443375][T10676] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.449287][T10676] RIP: 0033:0x7ff18388c169 [ 626.453810][T10676] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 626.473685][T10676] RSP: 002b:00007ff18456d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.482118][T10676] RAX: ffffffffffffffda RBX: 00007ff1839abf80 RCX: 00007ff18388c169 17:17:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea", 0x7}]) 17:17:11 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:11 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:11 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x8, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 626.490180][T10676] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 626.498330][T10676] RBP: 00007ff18456d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 626.506309][T10676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.514303][T10676] R13: 00007ffdcf84847f R14: 00007ff18456d300 R15: 0000000000022000 [ 626.522311][T10676] 17:17:11 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:11 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:11 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:11 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x9, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d71d", 0xa}]) 17:17:11 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:11 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 10) 17:17:11 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:11 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:11 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6}) 17:17:11 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea", 0x7}]) 17:17:11 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0xf, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:11 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:11 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:11 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6}) [ 626.940431][T10709] FAULT_INJECTION: forcing a failure. [ 626.940431][T10709] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 626.997091][T10709] CPU: 0 PID: 10709 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 627.007085][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 627.017172][T10709] Call Trace: [ 627.020456][T10709] [ 627.023395][T10709] dump_stack_lvl+0x136/0x150 [ 627.028113][T10709] should_fail_ex+0x4a3/0x5b0 [ 627.033170][T10709] prepare_alloc_pages+0x178/0x570 [ 627.038311][T10709] __alloc_pages+0x149/0x4a0 [ 627.042921][T10709] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 627.049702][T10709] ? __lock_acquire+0x1987/0x5f30 [ 627.054856][T10709] __folio_alloc+0x16/0x40 [ 627.059289][T10709] vma_alloc_folio+0x155/0x850 [ 627.064084][T10709] ? policy_nodemask+0x1c0/0x1c0 [ 627.069044][T10709] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 627.075107][T10709] __handle_mm_fault+0x2263/0x4170 [ 627.080264][T10709] ? lock_downgrade+0x690/0x690 [ 627.085156][T10709] ? vm_iomap_memory+0x190/0x190 [ 627.090222][T10709] ? follow_page_pte+0x2f3/0x1d50 [ 627.095287][T10709] handle_mm_fault+0x2af/0x9f0 [ 627.100077][T10709] __get_user_pages+0x60a/0x10e0 [ 627.105118][T10709] ? follow_page_mask+0x10a0/0x10a0 [ 627.110341][T10709] ? down_read_killable+0x14a/0x4f0 [ 627.115702][T10709] ? down_read_interruptible+0x4f0/0x4f0 [ 627.121388][T10709] __gup_longterm_locked+0x3f7/0x2420 [ 627.126820][T10709] ? find_held_lock+0x2d/0x110 [ 627.131603][T10709] ? get_user_pages_unlocked+0x820/0x820 [ 627.137341][T10709] ? internal_get_user_pages_fast+0x12e1/0x3300 [ 627.143604][T10709] ? lock_downgrade+0x690/0x690 [ 627.148592][T10709] ? mark_held_locks+0x9f/0xe0 [ 627.153378][T10709] ? sanity_check_pinned_pages+0x23/0xec0 [ 627.159131][T10709] internal_get_user_pages_fast+0x169f/0x3300 [ 627.165232][T10709] ? __gup_device_huge+0x6c0/0x6c0 [ 627.170351][T10709] ? __kernel_text_address+0xd/0x30 [ 627.175561][T10709] ? unwind_get_return_address+0x55/0xa0 [ 627.181223][T10709] ? arch_stack_walk+0x97/0xf0 [ 627.186009][T10709] ? is_valid_gup_args+0x199/0x230 [ 627.191142][T10709] pin_user_pages_fast+0xab/0x100 [ 627.196177][T10709] ? get_user_pages_fast+0x100/0x100 [ 627.201499][T10709] ? stack_trace_save+0x90/0xc0 [ 627.206464][T10709] ? __stack_depot_save+0x39/0x510 [ 627.211710][T10709] pfn_reader_user_pin+0x64f/0x810 [ 627.216853][T10709] iopt_pages_fill_xarray+0x32b/0xa90 [ 627.222242][T10709] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.228339][T10709] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 627.234343][T10709] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 627.240650][T10709] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 627.246294][T10709] ? iopt_area_add_access+0x1ac/0x380 [ 627.251699][T10709] iopt_area_add_access+0x1cf/0x380 [ 627.256945][T10709] iommufd_access_pin_pages+0x5b8/0x9b0 [ 627.262527][T10709] ? iommufd_access_create+0x2b0/0x2b0 [ 627.268009][T10709] ? __kmalloc_node+0xfb/0x1a0 [ 627.272888][T10709] iommufd_test+0x1ac0/0x2c20 [ 627.277587][T10709] ? iommufd_selftest_destroy+0x190/0x190 [ 627.283415][T10709] ? __might_fault+0xb2/0x190 [ 627.288112][T10709] iommufd_fops_ioctl+0x317/0x4b0 [ 627.293178][T10709] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 627.299026][T10709] ? bpf_lsm_file_ioctl+0x9/0x10 [ 627.304118][T10709] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 627.310136][T10709] __x64_sys_ioctl+0x197/0x210 [ 627.314926][T10709] do_syscall_64+0x39/0xb0 [ 627.319380][T10709] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.325347][T10709] RIP: 0033:0x7ff18388c169 [ 627.329780][T10709] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 627.349409][T10709] RSP: 002b:00007ff18456d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.357837][T10709] RAX: ffffffffffffffda RBX: 00007ff1839abf80 RCX: 00007ff18388c169 [ 627.365820][T10709] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 627.373804][T10709] RBP: 00007ff18456d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 627.381786][T10709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.389766][T10709] R13: 00007ffdcf84847f R14: 00007ff18456d300 R15: 0000000000022000 [ 627.397763][T10709] 17:17:12 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea", 0x7}]) 17:17:12 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 11) 17:17:12 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:12 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6}) 17:17:12 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:12 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea", 0x7}]) 17:17:12 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:12 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:12 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:12 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x11, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 627.779747][T10735] FAULT_INJECTION: forcing a failure. [ 627.779747][T10735] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:17:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) [ 627.854876][T10735] CPU: 1 PID: 10735 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 627.864847][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 627.875036][T10735] Call Trace: [ 627.878349][T10735] [ 627.881307][T10735] dump_stack_lvl+0x136/0x150 [ 627.886044][T10735] should_fail_ex+0x4a3/0x5b0 [ 627.890778][T10735] prepare_alloc_pages+0x178/0x570 [ 627.895953][T10735] __alloc_pages+0x149/0x4a0 [ 627.900604][T10735] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 627.907514][T10735] ? __lock_acquire+0x1987/0x5f30 [ 627.912631][T10735] __folio_alloc+0x16/0x40 [ 627.917110][T10735] vma_alloc_folio+0x155/0x850 [ 627.921943][T10735] ? policy_nodemask+0x1c0/0x1c0 [ 627.926946][T10735] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 627.933002][T10735] __handle_mm_fault+0x2263/0x4170 [ 627.938168][T10735] ? lock_downgrade+0x690/0x690 [ 627.943070][T10735] ? vm_iomap_memory+0x190/0x190 17:17:12 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 627.950162][T10735] ? follow_page_pte+0x2f3/0x1d50 [ 627.950225][T10735] handle_mm_fault+0x2af/0x9f0 [ 627.950266][T10735] __get_user_pages+0x60a/0x10e0 [ 627.950304][T10735] ? follow_page_mask+0x10a0/0x10a0 [ 627.950352][T10735] ? down_read_killable+0x14a/0x4f0 [ 627.950389][T10735] ? down_read_interruptible+0x4f0/0x4f0 [ 627.950432][T10735] __gup_longterm_locked+0x3f7/0x2420 [ 627.950474][T10735] ? find_held_lock+0x2d/0x110 [ 627.950508][T10735] ? get_user_pages_unlocked+0x820/0x820 17:17:13 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) (fail_nth: 12) 17:17:13 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:13 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:13 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x12, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:13 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 627.950537][T10735] ? internal_get_user_pages_fast+0x12e1/0x3300 [ 627.950565][T10735] ? lock_downgrade+0x690/0x690 [ 627.950604][T10735] ? mark_held_locks+0x9f/0xe0 17:17:13 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 627.950636][T10735] ? sanity_check_pinned_pages+0x23/0xec0 17:17:13 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x13, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:13 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:13 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 627.950677][T10735] internal_get_user_pages_fast+0x169f/0x3300 [ 627.950727][T10735] ? __gup_device_huge+0x6c0/0x6c0 [ 627.950752][T10735] ? __kernel_text_address+0xd/0x30 [ 627.950782][T10735] ? unwind_get_return_address+0x55/0xa0 [ 627.950814][T10735] ? arch_stack_walk+0x97/0xf0 [ 627.950858][T10735] ? is_valid_gup_args+0x199/0x230 [ 627.950952][T10735] pin_user_pages_fast+0xab/0x100 [ 627.950980][T10735] ? get_user_pages_fast+0x100/0x100 [ 627.951008][T10735] ? stack_trace_save+0x90/0xc0 [ 627.951050][T10735] ? __stack_depot_save+0x39/0x510 [ 627.951088][T10735] pfn_reader_user_pin+0x64f/0x810 [ 627.951127][T10735] iopt_pages_fill_xarray+0x32b/0xa90 [ 627.951157][T10735] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.951208][T10735] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 627.951245][T10735] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 627.951306][T10735] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 627.951329][T10735] ? iopt_area_add_access+0x1ac/0x380 [ 627.951367][T10735] iopt_area_add_access+0x1cf/0x380 [ 627.951401][T10735] iommufd_access_pin_pages+0x5b8/0x9b0 [ 627.951454][T10735] ? iommufd_access_create+0x2b0/0x2b0 [ 627.951497][T10735] ? __kmalloc_node+0xfb/0x1a0 [ 627.951537][T10735] iommufd_test+0x1ac0/0x2c20 [ 627.951576][T10735] ? iommufd_selftest_destroy+0x190/0x190 [ 627.951605][T10735] ? __might_fault+0xb2/0x190 [ 627.951647][T10735] iommufd_fops_ioctl+0x317/0x4b0 [ 627.951676][T10735] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 627.951723][T10735] ? bpf_lsm_file_ioctl+0x9/0x10 [ 627.951764][T10735] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 627.951794][T10735] __x64_sys_ioctl+0x197/0x210 [ 627.951826][T10735] do_syscall_64+0x39/0xb0 [ 627.951876][T10735] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.951916][T10735] RIP: 0033:0x7ff18388c169 [ 627.951939][T10735] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 627.951964][T10735] RSP: 002b:00007ff18456d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.951992][T10735] RAX: ffffffffffffffda RBX: 00007ff1839abf80 RCX: 00007ff18388c169 [ 627.952011][T10735] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 627.952030][T10735] RBP: 00007ff18456d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 627.952047][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.952064][T10735] R13: 00007ffdcf84847f R14: 00007ff18456d300 R15: 0000000000022000 [ 627.952103][T10735] [ 628.420062][T10758] FAULT_INJECTION: forcing a failure. 17:17:13 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 628.420062][T10758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:17:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:13 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 628.895328][T10758] CPU: 0 PID: 10758 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 628.905295][T10758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 628.915384][T10758] Call Trace: [ 628.918687][T10758] [ 628.921648][T10758] dump_stack_lvl+0x136/0x150 [ 628.926383][T10758] should_fail_ex+0x4a3/0x5b0 [ 628.931117][T10758] prepare_alloc_pages+0x178/0x570 [ 628.936279][T10758] __alloc_pages+0x149/0x4a0 [ 628.940914][T10758] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 628.947729][T10758] ? __lock_acquire+0x1987/0x5f30 [ 628.952831][T10758] __folio_alloc+0x16/0x40 [ 628.957320][T10758] vma_alloc_folio+0x155/0x850 [ 628.962181][T10758] ? policy_nodemask+0x1c0/0x1c0 [ 628.967173][T10758] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 628.973274][T10758] __handle_mm_fault+0x2263/0x4170 [ 628.978441][T10758] ? lock_downgrade+0x690/0x690 [ 628.983345][T10758] ? vm_iomap_memory+0x190/0x190 [ 628.988349][T10758] ? follow_page_pte+0x2f3/0x1d50 [ 628.993881][T10758] handle_mm_fault+0x2af/0x9f0 [ 628.999844][T10758] __get_user_pages+0x60a/0x10e0 [ 629.004874][T10758] ? follow_page_mask+0x10a0/0x10a0 [ 629.010125][T10758] ? down_read_killable+0x14a/0x4f0 [ 629.015371][T10758] ? down_read_interruptible+0x4f0/0x4f0 [ 629.021063][T10758] __gup_longterm_locked+0x3f7/0x2420 [ 629.026665][T10758] ? find_held_lock+0x2d/0x110 [ 629.031487][T10758] ? get_user_pages_unlocked+0x820/0x820 [ 629.037164][T10758] ? internal_get_user_pages_fast+0x12e1/0x3300 [ 629.043530][T10758] ? lock_downgrade+0x690/0x690 [ 629.048426][T10758] ? mark_held_locks+0x9f/0xe0 [ 629.053502][T10758] ? sanity_check_pinned_pages+0x23/0xec0 [ 629.059296][T10758] internal_get_user_pages_fast+0x169f/0x3300 [ 629.065433][T10758] ? __gup_device_huge+0x6c0/0x6c0 [ 629.070594][T10758] ? __kernel_text_address+0xd/0x30 [ 629.075837][T10758] ? unwind_get_return_address+0x55/0xa0 [ 629.081530][T10758] ? arch_stack_walk+0x97/0xf0 [ 629.086349][T10758] ? is_valid_gup_args+0x199/0x230 [ 629.091521][T10758] pin_user_pages_fast+0xab/0x100 [ 629.096593][T10758] ? get_user_pages_fast+0x100/0x100 [ 629.101922][T10758] ? stack_trace_save+0x90/0xc0 [ 629.106829][T10758] ? __stack_depot_save+0x39/0x510 [ 629.112088][T10758] pfn_reader_user_pin+0x64f/0x810 [ 629.117267][T10758] iopt_pages_fill_xarray+0x32b/0xa90 [ 629.122721][T10758] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 629.128861][T10758] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 629.134903][T10758] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 629.141225][T10758] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 629.146903][T10758] ? iopt_area_add_access+0x1ac/0x380 [ 629.152431][T10758] iopt_area_add_access+0x1cf/0x380 [ 629.157684][T10758] iommufd_access_pin_pages+0x5b8/0x9b0 [ 629.163302][T10758] ? iommufd_access_create+0x2b0/0x2b0 [ 629.168833][T10758] ? __kmalloc_node+0xfb/0x1a0 [ 629.173663][T10758] iommufd_test+0x1ac0/0x2c20 [ 629.178678][T10758] ? iommufd_selftest_destroy+0x190/0x190 [ 629.184462][T10758] ? __might_fault+0xb2/0x190 [ 629.189203][T10758] iommufd_fops_ioctl+0x317/0x4b0 [ 629.194277][T10758] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 629.200158][T10758] ? bpf_lsm_file_ioctl+0x9/0x10 [ 629.205442][T10758] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 629.211343][T10758] __x64_sys_ioctl+0x197/0x210 [ 629.216160][T10758] do_syscall_64+0x39/0xb0 [ 629.220641][T10758] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 629.226600][T10758] RIP: 0033:0x7ff18388c169 [ 629.231052][T10758] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 629.250871][T10758] RSP: 002b:00007ff18456d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.259329][T10758] RAX: ffffffffffffffda RBX: 00007ff1839abf80 RCX: 00007ff18388c169 [ 629.267342][T10758] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 629.275365][T10758] RBP: 00007ff18456d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 629.283378][T10758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 629.291389][T10758] R13: 00007ffdcf84847f R14: 00007ff18456d300 R15: 0000000000022000 [ 629.299418][T10758] 17:17:14 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:14 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x14, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41", 0x8}]) 17:17:14 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:14 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:14 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 17:17:14 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 17:17:14 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:14 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x1a, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41", 0x8}]) 17:17:14 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:14 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x1e, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:14 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x2, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:14 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:14 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:14 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 17:17:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41", 0x8}]) 17:17:14 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:14 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:14 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x10, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:14 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x24, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:14 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:15 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:15 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:15 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x541b, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:15 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x26, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:15 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:15 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:15 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:15 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5421, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) (fail_nth: 1) 17:17:15 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:15 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x3e, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:15 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 17:17:15 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:15 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x48, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 630.461166][T10838] FAULT_INJECTION: forcing a failure. [ 630.461166][T10838] name fail_usercopy, interval 1, probability 0, space 0, times 0 17:17:15 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5450, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) [ 630.536806][T10838] CPU: 0 PID: 10838 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 630.546774][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 630.556865][T10838] Call Trace: [ 630.560179][T10838] [ 630.563144][T10838] dump_stack_lvl+0x136/0x150 [ 630.567885][T10838] should_fail_ex+0x4a3/0x5b0 [ 630.572634][T10838] _copy_from_user+0x30/0xf0 [ 630.577284][T10838] io_submit_one+0x91/0x1d20 [ 630.581963][T10838] ? find_held_lock+0x2d/0x110 [ 630.586784][T10838] ? do_io_getevents+0x160/0x160 [ 630.591778][T10838] ? __might_fault+0xe2/0x190 [ 630.596519][T10838] ? lock_downgrade+0x690/0x690 [ 630.601418][T10838] ? trace_lock_acquire+0x12d/0x180 [ 630.606657][T10838] ? __might_fault+0xb2/0x190 [ 630.611393][T10838] ? lock_acquire+0x32/0xc0 [ 630.615921][T10838] ? __might_fault+0xb2/0x190 [ 630.620629][T10838] __x64_sys_io_submit+0x190/0x320 [ 630.625773][T10838] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 630.631256][T10838] ? fput+0x2f/0x1a0 [ 630.635172][T10838] ? ksys_write+0x1a3/0x250 [ 630.639690][T10838] ? syscall_enter_from_user_mode+0x26/0x80 [ 630.645609][T10838] do_syscall_64+0x39/0xb0 [ 630.650057][T10838] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 630.655971][T10838] RIP: 0033:0x7f1c40a8c169 [ 630.660397][T10838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 630.680030][T10838] RSP: 002b:00007f1c41745168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 630.688464][T10838] RAX: ffffffffffffffda RBX: 00007f1c40babf80 RCX: 00007f1c40a8c169 [ 630.696443][T10838] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 00007f1c41722000 [ 630.704422][T10838] RBP: 00007f1c417451d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.712407][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.720398][T10838] R13: 00007ffd84cacd6f R14: 00007f1c41745300 R15: 0000000000022000 [ 630.728396][T10838] 17:17:15 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4}) 17:17:15 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 17:17:15 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5451, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:15 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:15 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x4c, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) (fail_nth: 2) 17:17:16 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 17:17:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4}) 17:17:16 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5452, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:16 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:16 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x68, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4}) 17:17:16 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:16 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, 0xffffffffffffffff, 0x0, 0x10001}) 17:17:16 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5460, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:16 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x6c, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) [ 631.429057][T10880] FAULT_INJECTION: forcing a failure. [ 631.429057][T10880] name failslab, interval 1, probability 0, space 0, times 0 [ 631.466085][T10880] CPU: 0 PID: 10880 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 631.476101][T10880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 631.486188][T10880] Call Trace: [ 631.489479][T10880] [ 631.492413][T10880] dump_stack_lvl+0x136/0x150 [ 631.497108][T10880] should_fail_ex+0x4a3/0x5b0 [ 631.501799][T10880] should_failslab+0x9/0x20 [ 631.506306][T10880] kmem_cache_alloc+0x63/0x3b0 [ 631.511194][T10880] io_submit_one+0xfd/0x1d20 [ 631.515832][T10880] ? find_held_lock+0x2d/0x110 [ 631.520608][T10880] ? do_io_getevents+0x160/0x160 [ 631.525550][T10880] ? __might_fault+0xe2/0x190 [ 631.530242][T10880] ? lock_downgrade+0x690/0x690 [ 631.535262][T10880] ? lock_acquire+0x32/0xc0 [ 631.539773][T10880] ? __might_fault+0xb2/0x190 [ 631.544454][T10880] __x64_sys_io_submit+0x190/0x320 [ 631.549586][T10880] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 631.555095][T10880] ? fput+0x2f/0x1a0 [ 631.559042][T10880] ? ksys_write+0x1a3/0x250 [ 631.563602][T10880] ? syscall_enter_from_user_mode+0x26/0x80 [ 631.569539][T10880] do_syscall_64+0x39/0xb0 [ 631.573971][T10880] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 631.579884][T10880] RIP: 0033:0x7f1c40a8c169 [ 631.584325][T10880] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 631.603954][T10880] RSP: 002b:00007f1c41745168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 631.612370][T10880] RAX: ffffffffffffffda RBX: 00007f1c40babf80 RCX: 00007f1c40a8c169 [ 631.620360][T10880] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 00007f1c41722000 [ 631.628357][T10880] RBP: 00007f1c417451d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.636331][T10880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.644305][T10880] R13: 00007ffd84cacd6f R14: 00007f1c41745300 R15: 0000000000022000 [ 631.652292][T10880] 17:17:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) (fail_nth: 3) 17:17:16 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, 0xffffffffffffffff, 0x0, 0x10001}) 17:17:16 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:16 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x8933, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:16 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x74, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:16 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 1) 17:17:16 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:16 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, 0xffffffffffffffff, 0x0, 0x10001}) [ 631.806845][T10890] FAULT_INJECTION: forcing a failure. [ 631.806845][T10890] name failslab, interval 1, probability 0, space 0, times 0 17:17:16 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x7a, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:16 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x400448c9, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) [ 631.860992][T10894] FAULT_INJECTION: forcing a failure. [ 631.860992][T10894] name failslab, interval 1, probability 0, space 0, times 0 17:17:16 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 631.901438][T10890] CPU: 1 PID: 10890 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 631.911413][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 631.921502][T10890] Call Trace: [ 631.924811][T10890] [ 631.927772][T10890] dump_stack_lvl+0x136/0x150 [ 631.932602][T10890] should_fail_ex+0x4a3/0x5b0 [ 631.937333][T10890] should_failslab+0x9/0x20 [ 631.942140][T10890] __kmem_cache_alloc_node+0x5b/0x320 17:17:16 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 631.947551][T10890] ? tomoyo_realpath_from_path+0xc3/0x600 [ 631.953342][T10890] ? tomoyo_realpath_from_path+0xc3/0x600 [ 631.959116][T10890] __kmalloc+0x4e/0x190 [ 631.963318][T10890] ? rcu_is_watching+0x12/0xb0 [ 631.968135][T10890] tomoyo_realpath_from_path+0xc3/0x600 [ 631.973739][T10890] ? tomoyo_path_number_perm+0x1c1/0x570 [ 631.979478][T10890] tomoyo_path_number_perm+0x21a/0x570 [ 631.984991][T10890] ? tomoyo_path_number_perm+0x1c1/0x570 [ 631.990668][T10890] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 631.996519][T10890] ? find_held_lock+0x2d/0x110 [ 632.001352][T10890] ? lock_downgrade+0x690/0x690 [ 632.006279][T10890] ? trace_lock_acquire+0x12d/0x180 [ 632.011527][T10890] ? receive_fd+0x110/0x110 [ 632.016052][T10890] ? lock_acquire+0x32/0xc0 [ 632.020576][T10890] ? receive_fd+0x110/0x110 [ 632.025092][T10890] ? __fget_files+0x26a/0x480 [ 632.029784][T10890] security_file_ioctl+0x54/0xb0 [ 632.034745][T10890] __x64_sys_ioctl+0xb7/0x210 [ 632.039486][T10890] do_syscall_64+0x39/0xb0 [ 632.044055][T10890] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 632.049971][T10890] RIP: 0033:0x7fd0e668c169 [ 632.054395][T10890] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 632.074020][T10890] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.082450][T10890] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 632.090427][T10890] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 632.098405][T10890] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 632.106383][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.114451][T10890] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 632.122443][T10890] [ 632.127049][T10894] CPU: 0 PID: 10894 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 632.137081][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 632.147169][T10894] Call Trace: [ 632.150480][T10894] [ 632.153439][T10894] dump_stack_lvl+0x136/0x150 [ 632.158179][T10894] should_fail_ex+0x4a3/0x5b0 [ 632.162915][T10894] should_failslab+0x9/0x20 [ 632.167465][T10894] __kmem_cache_alloc_node+0x5b/0x320 [ 632.172882][T10894] ? iovec_from_user.part.0+0x144/0x170 [ 632.178918][T10894] ? iovec_from_user.part.0+0x144/0x170 [ 632.184506][T10894] __kmalloc+0x4e/0x190 [ 632.188708][T10894] iovec_from_user.part.0+0x144/0x170 [ 632.194129][T10894] __import_iovec+0xc7/0x770 [ 632.198761][T10894] ? __get_task_ioprio+0x1cf/0x270 [ 632.203945][T10894] ? aio_write+0x20c/0x7c0 [ 632.208424][T10894] ? folio_flags.constprop.0+0x150/0x150 [ 632.214119][T10894] ? find_held_lock+0x2d/0x110 [ 632.218941][T10894] ? __might_fault+0xe2/0x190 [ 632.223677][T10894] ? lock_downgrade+0x690/0x690 [ 632.228679][T10894] ? trace_lock_acquire+0x12d/0x180 [ 632.236014][T10894] ? __might_fault+0xb2/0x190 [ 632.240826][T10894] ? lock_acquire+0x32/0xc0 [ 632.245387][T10894] ? __might_fault+0xb2/0x190 [ 632.250133][T10894] ? io_submit_one+0x4dd/0x1d20 [ 632.255231][T10894] ? find_held_lock+0x2d/0x110 [ 632.260151][T10894] ? do_io_getevents+0x160/0x160 [ 632.265144][T10894] ? __might_fault+0xe2/0x190 [ 632.269884][T10894] ? lock_downgrade+0x690/0x690 [ 632.274800][T10894] ? lock_acquire+0x32/0xc0 [ 632.279351][T10894] ? __might_fault+0xb2/0x190 [ 632.284095][T10894] ? __x64_sys_io_submit+0x190/0x320 [ 632.289437][T10894] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 632.294941][T10894] ? fput+0x2f/0x1a0 [ 632.298886][T10894] ? ksys_write+0x1a3/0x250 [ 632.303436][T10894] ? syscall_enter_from_user_mode+0x26/0x80 [ 632.304346][T10890] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.309361][T10894] ? do_syscall_64+0x39/0xb0 [ 632.309406][T10894] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 632.309456][T10894] 17:17:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) (fail_nth: 4) 17:17:17 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x400448dd, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:17 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:17 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:17 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 2) 17:17:17 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0xe3, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:17 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x400454ca, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:17 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:17 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:17 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0xf0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 632.513470][T10915] FAULT_INJECTION: forcing a failure. [ 632.513470][T10915] name failslab, interval 1, probability 0, space 0, times 0 [ 632.547843][T10915] CPU: 0 PID: 10915 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 632.557825][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 632.568011][T10915] Call Trace: [ 632.571306][T10915] [ 632.574243][T10915] dump_stack_lvl+0x136/0x150 [ 632.578955][T10915] should_fail_ex+0x4a3/0x5b0 [ 632.583663][T10915] should_failslab+0x9/0x20 [ 632.588183][T10915] __kmem_cache_alloc_node+0x5b/0x320 [ 632.593563][T10915] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 632.598961][T10915] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 632.604372][T10915] __kmalloc+0x4e/0x190 [ 632.608544][T10915] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 632.614190][T10915] tomoyo_encode2.part.0+0xe9/0x3a0 [ 632.619397][T10915] ? tomoyo_realpath_from_path+0xc3/0x600 [ 632.625129][T10915] ? rcu_is_watching+0x12/0xb0 [ 632.629916][T10915] tomoyo_encode+0x2c/0x50 [ 632.634345][T10915] tomoyo_realpath_from_path+0x185/0x600 [ 632.639998][T10915] tomoyo_path_number_perm+0x21a/0x570 [ 632.645476][T10915] ? tomoyo_path_number_perm+0x1c1/0x570 [ 632.651126][T10915] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 632.657236][T10915] ? find_held_lock+0x2d/0x110 [ 632.662054][T10915] ? lock_downgrade+0x690/0x690 [ 632.666946][T10915] ? trace_lock_acquire+0x12d/0x180 [ 632.672175][T10915] ? receive_fd+0x110/0x110 [ 632.676694][T10915] ? lock_acquire+0x32/0xc0 [ 632.681215][T10915] ? receive_fd+0x110/0x110 [ 632.685818][T10915] ? __fget_files+0x26a/0x480 [ 632.690508][T10915] security_file_ioctl+0x54/0xb0 [ 632.695469][T10915] __x64_sys_ioctl+0xb7/0x210 [ 632.700156][T10915] do_syscall_64+0x39/0xb0 [ 632.704647][T10915] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 632.710561][T10915] RIP: 0033:0x7fd0e668c169 [ 632.715002][T10915] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 632.734716][T10915] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.743140][T10915] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 632.751206][T10915] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 632.759901][T10915] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 632.767889][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.775953][T10915] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 632.783949][T10915] [ 632.798169][T10918] FAULT_INJECTION: forcing a failure. [ 632.798169][T10918] name failslab, interval 1, probability 0, space 0, times 0 17:17:17 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 632.841430][T10918] CPU: 1 PID: 10918 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 632.851410][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 632.861504][T10918] Call Trace: [ 632.864819][T10918] [ 632.867964][T10918] dump_stack_lvl+0x136/0x150 [ 632.872705][T10918] should_fail_ex+0x4a3/0x5b0 [ 632.877457][T10918] should_failslab+0x9/0x20 [ 632.882017][T10918] __kmem_cache_alloc_node+0x5b/0x320 17:17:17 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) (fail_nth: 1) [ 632.887439][T10918] ? kvmalloc_node+0xa2/0x1a0 [ 632.892171][T10918] ? mutex_trylock+0x2f4/0x370 [ 632.896988][T10918] ? kvmalloc_node+0xa2/0x1a0 [ 632.901714][T10918] __kmalloc_node+0x51/0x1a0 [ 632.906367][T10918] kvmalloc_node+0xa2/0x1a0 [ 632.910927][T10918] file_tty_write.constprop.0+0x71f/0x9c0 [ 632.916694][T10918] ? security_file_permission+0xaf/0xd0 [ 632.922294][T10918] ? n_tty_receive_signal_char+0x150/0x150 [ 632.928177][T10918] aio_write+0x34a/0x7c0 [ 632.932485][T10918] ? folio_flags.constprop.0+0x150/0x150 [ 632.938203][T10918] ? __might_fault+0xe2/0x190 [ 632.942939][T10918] ? lock_downgrade+0x690/0x690 [ 632.947852][T10918] ? trace_lock_acquire+0x12d/0x180 [ 632.953105][T10918] ? __might_fault+0xb2/0x190 [ 632.957821][T10918] ? lock_acquire+0x32/0xc0 [ 632.962380][T10918] ? __might_fault+0xb2/0x190 [ 632.967112][T10918] io_submit_one+0x4dd/0x1d20 [ 632.971851][T10918] ? find_held_lock+0x2d/0x110 [ 632.976667][T10918] ? do_io_getevents+0x160/0x160 [ 632.981666][T10918] ? __might_fault+0xe2/0x190 [ 632.986389][T10918] ? lock_downgrade+0x690/0x690 [ 632.989143][T10930] FAULT_INJECTION: forcing a failure. [ 632.989143][T10930] name failslab, interval 1, probability 0, space 0, times 0 [ 632.991277][T10918] ? lock_acquire+0x32/0xc0 [ 633.008454][T10918] ? __might_fault+0xb2/0x190 [ 633.013184][T10918] __x64_sys_io_submit+0x190/0x320 [ 633.018356][T10918] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 633.023857][T10918] ? fput+0x2f/0x1a0 [ 633.027787][T10918] ? ksys_write+0x1a3/0x250 [ 633.032367][T10918] ? syscall_enter_from_user_mode+0x26/0x80 [ 633.038295][T10918] do_syscall_64+0x39/0xb0 [ 633.042771][T10918] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.048707][T10918] RIP: 0033:0x7f1c40a8c169 [ 633.053153][T10918] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 633.072889][T10918] RSP: 002b:00007f1c41745168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 633.081335][T10918] RAX: ffffffffffffffda RBX: 00007f1c40babf80 RCX: 00007f1c40a8c169 [ 633.089328][T10918] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 00007f1c41722000 [ 633.097326][T10918] RBP: 00007f1c417451d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.105327][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.113324][T10918] R13: 00007ffd84cacd6f R14: 00007f1c41745300 R15: 0000000000022000 [ 633.121338][T10918] [ 633.124368][T10930] CPU: 0 PID: 10930 Comm: syz-executor.5 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 633.134306][T10930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 633.144397][T10930] Call Trace: [ 633.147692][T10930] [ 633.150653][T10930] dump_stack_lvl+0x136/0x150 [ 633.155389][T10930] should_fail_ex+0x4a3/0x5b0 [ 633.160129][T10930] should_failslab+0x9/0x20 [ 633.164674][T10930] __kmem_cache_alloc_node+0x5b/0x320 [ 633.170083][T10930] ? tomoyo_realpath_from_path+0xc3/0x600 [ 633.175856][T10930] ? tomoyo_realpath_from_path+0xc3/0x600 [ 633.181793][T10930] __kmalloc+0x4e/0x190 [ 633.185987][T10930] ? rcu_is_watching+0x12/0xb0 [ 633.190766][T10930] tomoyo_realpath_from_path+0xc3/0x600 [ 633.196332][T10930] ? tomoyo_path_number_perm+0x1c1/0x570 [ 633.201982][T10930] tomoyo_path_number_perm+0x21a/0x570 [ 633.207457][T10930] ? tomoyo_path_number_perm+0x1c1/0x570 [ 633.213157][T10930] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 633.218973][T10930] ? find_held_lock+0x2d/0x110 [ 633.223762][T10930] ? lock_downgrade+0x690/0x690 [ 633.228650][T10930] ? trace_lock_acquire+0x12d/0x180 [ 633.233874][T10930] ? receive_fd+0x110/0x110 [ 633.238389][T10930] ? lock_acquire+0x32/0xc0 [ 633.242912][T10930] ? receive_fd+0x110/0x110 [ 633.247430][T10930] ? __fget_files+0x26a/0x480 [ 633.252123][T10930] security_file_ioctl+0x54/0xb0 [ 633.257091][T10930] __x64_sys_ioctl+0xb7/0x210 [ 633.261793][T10930] do_syscall_64+0x39/0xb0 [ 633.266235][T10930] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.272154][T10930] RIP: 0033:0x7f090448c169 [ 633.276575][T10930] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 633.296194][T10930] RSP: 002b:00007f0905213168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.304618][T10930] RAX: ffffffffffffffda RBX: 00007f09045abf80 RCX: 00007f090448c169 [ 633.312596][T10930] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 633.320571][T10930] RBP: 00007f09052131d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.328650][T10930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.336627][T10930] R13: 00007ffc3f1f44af R14: 00007f0905213300 R15: 0000000000022000 [ 633.344621][T10930] [ 633.361792][T10915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 633.388988][T10930] ERROR: Out of memory at tomoyo_realpath_from_path. 17:17:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:18 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x40049409, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:18 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:18 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 3) 17:17:18 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x174, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:18 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) (fail_nth: 2) 17:17:18 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:18 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x40086602, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:18 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x175, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 633.610053][T10942] FAULT_INJECTION: forcing a failure. [ 633.610053][T10942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.626367][T10944] FAULT_INJECTION: forcing a failure. [ 633.626367][T10944] name failslab, interval 1, probability 0, space 0, times 0 17:17:18 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 633.663984][T10942] CPU: 1 PID: 10942 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 633.673950][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 633.684044][T10942] Call Trace: [ 633.687360][T10942] [ 633.690331][T10942] dump_stack_lvl+0x136/0x150 [ 633.695071][T10942] should_fail_ex+0x4a3/0x5b0 [ 633.699814][T10942] _copy_from_user+0x30/0xf0 [ 633.704468][T10942] iommufd_fops_ioctl+0x2c5/0x4b0 17:17:18 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x176, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 633.709545][T10942] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 633.715416][T10942] ? __fget_files+0x26a/0x480 [ 633.720151][T10942] ? bpf_lsm_file_ioctl+0x9/0x10 [ 633.725154][T10942] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 633.731014][T10942] __x64_sys_ioctl+0x197/0x210 [ 633.735827][T10942] do_syscall_64+0x39/0xb0 [ 633.740308][T10942] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.746260][T10942] RIP: 0033:0x7fd0e668c169 [ 633.750721][T10942] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 633.770364][T10942] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.778824][T10942] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 633.786838][T10942] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 633.794844][T10942] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.802857][T10942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:17:18 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 633.810861][T10942] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 633.818869][T10942] [ 633.846122][T10944] CPU: 1 PID: 10944 Comm: syz-executor.5 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 17:17:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:18 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x188, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 633.856102][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 633.866195][T10944] Call Trace: [ 633.869513][T10944] [ 633.872478][T10944] dump_stack_lvl+0x136/0x150 [ 633.877230][T10944] should_fail_ex+0x4a3/0x5b0 [ 633.881976][T10944] should_failslab+0x9/0x20 [ 633.886530][T10944] __kmem_cache_alloc_node+0x5b/0x320 [ 633.891949][T10944] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 633.897378][T10944] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 633.902780][T10944] __kmalloc+0x4e/0x190 [ 633.906961][T10944] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 633.912629][T10944] tomoyo_encode2.part.0+0xe9/0x3a0 [ 633.917878][T10944] ? tomoyo_realpath_from_path+0xc3/0x600 [ 633.923650][T10944] ? rcu_is_watching+0x12/0xb0 [ 633.928457][T10944] tomoyo_encode+0x2c/0x50 [ 633.932944][T10944] tomoyo_realpath_from_path+0x185/0x600 [ 633.938598][T10944] tomoyo_path_number_perm+0x21a/0x570 [ 633.944069][T10944] ? tomoyo_path_number_perm+0x1c1/0x570 [ 633.949720][T10944] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 633.955548][T10944] ? find_held_lock+0x2d/0x110 [ 633.960339][T10944] ? lock_downgrade+0x690/0x690 [ 633.965253][T10944] ? trace_lock_acquire+0x12d/0x180 [ 633.970512][T10944] ? receive_fd+0x110/0x110 [ 633.975038][T10944] ? lock_acquire+0x32/0xc0 [ 633.979562][T10944] ? receive_fd+0x110/0x110 [ 633.984080][T10944] ? __fget_files+0x26a/0x480 [ 633.988777][T10944] security_file_ioctl+0x54/0xb0 [ 633.993734][T10944] __x64_sys_ioctl+0xb7/0x210 [ 633.998433][T10944] do_syscall_64+0x39/0xb0 [ 634.002878][T10944] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.008791][T10944] RIP: 0033:0x7f090448c169 [ 634.013216][T10944] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 634.032832][T10944] RSP: 002b:00007f0905213168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.041260][T10944] RAX: ffffffffffffffda RBX: 00007f09045abf80 RCX: 00007f090448c169 [ 634.049238][T10944] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 634.057216][T10944] RBP: 00007f09052131d0 R08: 0000000000000000 R09: 0000000000000000 17:17:19 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 4) [ 634.065370][T10944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.073344][T10944] R13: 00007ffc3f1f44af R14: 00007f0905213300 R15: 0000000000022000 [ 634.081336][T10944] 17:17:19 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x40186366, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:19 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) [ 634.130459][T10944] ERROR: Out of memory at tomoyo_realpath_from_path. 17:17:19 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) (fail_nth: 3) 17:17:19 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x18c, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 634.208721][T10962] FAULT_INJECTION: forcing a failure. [ 634.208721][T10962] name failslab, interval 1, probability 0, space 0, times 0 17:17:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x3, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) [ 634.290276][T10962] CPU: 0 PID: 10962 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 634.300254][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 634.310344][T10962] Call Trace: [ 634.313650][T10962] [ 634.316619][T10962] dump_stack_lvl+0x136/0x150 [ 634.321366][T10962] should_fail_ex+0x4a3/0x5b0 [ 634.326107][T10962] should_failslab+0x9/0x20 [ 634.330664][T10962] __kmem_cache_alloc_node+0x5b/0x320 [ 634.336074][T10962] ? kvmalloc_node+0xa2/0x1a0 [ 634.340787][T10962] ? lock_acquire+0x32/0xc0 [ 634.345348][T10962] ? receive_fd+0x110/0x110 [ 634.349901][T10962] ? kvmalloc_node+0xa2/0x1a0 [ 634.354607][T10962] __kmalloc_node+0x51/0x1a0 [ 634.359225][T10962] ? __fget_files+0x26a/0x480 [ 634.363918][T10962] kvmalloc_node+0xa2/0x1a0 [ 634.368438][T10962] iommufd_test+0x1a54/0x2c20 [ 634.373138][T10962] ? iommufd_selftest_destroy+0x190/0x190 [ 634.378872][T10962] ? __might_fault+0xb2/0x190 [ 634.383571][T10962] iommufd_fops_ioctl+0x317/0x4b0 [ 634.388956][T10962] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 634.394784][T10962] ? bpf_lsm_file_ioctl+0x9/0x10 [ 634.399801][T10962] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 634.405644][T10962] __x64_sys_ioctl+0x197/0x210 [ 634.410431][T10962] do_syscall_64+0x39/0xb0 [ 634.414874][T10962] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.420792][T10962] RIP: 0033:0x7fd0e668c169 [ 634.425216][T10962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 634.444841][T10962] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.453268][T10962] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 634.461244][T10962] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 634.469220][T10962] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 634.477199][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.485181][T10962] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 634.493177][T10962] 17:17:19 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x401c5820, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:19 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 17:17:19 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x21c, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:19 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x4020940d, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:19 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 17:17:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x9, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) [ 634.605024][T10975] FAULT_INJECTION: forcing a failure. [ 634.605024][T10975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.683002][T10975] CPU: 0 PID: 10975 Comm: syz-executor.5 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 634.692974][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 634.703078][T10975] Call Trace: [ 634.706391][T10975] [ 634.709356][T10975] dump_stack_lvl+0x136/0x150 [ 634.714103][T10975] should_fail_ex+0x4a3/0x5b0 [ 634.718854][T10975] _copy_from_user+0x30/0xf0 [ 634.723502][T10975] iommufd_fops_ioctl+0x2c5/0x4b0 [ 634.728575][T10975] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 634.734528][T10975] ? __fget_files+0x26a/0x480 [ 634.739258][T10975] ? bpf_lsm_file_ioctl+0x9/0x10 [ 634.744257][T10975] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 634.750115][T10975] __x64_sys_ioctl+0x197/0x210 [ 634.754942][T10975] do_syscall_64+0x39/0xb0 [ 634.759421][T10975] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.765383][T10975] RIP: 0033:0x7f090448c169 17:17:19 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 5) 17:17:19 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6}) [ 634.769836][T10975] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 634.789486][T10975] RSP: 002b:00007f0905213168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.797945][T10975] RAX: ffffffffffffffda RBX: 00007f09045abf80 RCX: 00007f090448c169 [ 634.805952][T10975] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 634.813963][T10975] RBP: 00007f09052131d0 R08: 0000000000000000 R09: 0000000000000000 [ 634.821973][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:17:19 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x80086301, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) [ 634.829982][T10975] R13: 00007ffc3f1f44af R14: 00007f0905213300 R15: 0000000000022000 [ 634.838010][T10975] 17:17:19 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) (fail_nth: 4) 17:17:19 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x2a0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0xa, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:19 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6}) 17:17:19 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x80086601, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) [ 634.968916][T10991] FAULT_INJECTION: forcing a failure. [ 634.968916][T10991] name failslab, interval 1, probability 0, space 0, times 0 [ 634.994159][T10991] CPU: 0 PID: 10991 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 635.004377][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 635.014474][T10991] Call Trace: [ 635.017790][T10991] [ 635.020751][T10991] dump_stack_lvl+0x136/0x150 [ 635.025494][T10991] should_fail_ex+0x4a3/0x5b0 [ 635.030234][T10991] should_failslab+0x9/0x20 [ 635.034845][T10991] __kmem_cache_alloc_node+0x5b/0x320 [ 635.040265][T10991] ? iopt_area_add_access+0x1ac/0x380 [ 635.045708][T10991] ? interval_tree_iter_first+0x1ff/0x280 17:17:20 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6}) 17:17:20 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x2e0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 635.045756][T10991] kmalloc_trace+0x26/0xe0 [ 635.045791][T10991] iopt_area_add_access+0x1ac/0x380 17:17:20 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 6) 17:17:20 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x801c581f, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) [ 635.045823][T10991] ? iopt_area_contig_init+0x16c/0x270 [ 635.045869][T10991] iommufd_access_pin_pages+0x5b8/0x9b0 [ 635.045919][T10991] ? iommufd_access_create+0x2b0/0x2b0 17:17:20 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:20 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 635.045962][T10991] ? __kmalloc_node+0xfb/0x1a0 [ 635.045990][T10991] ? __fget_files+0x26a/0x480 [ 635.046028][T10991] iommufd_test+0x1ac0/0x2c20 17:17:20 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0xc0045878, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) [ 635.046067][T10991] ? iommufd_selftest_destroy+0x190/0x190 [ 635.046098][T10991] ? __might_fault+0xb2/0x190 17:17:20 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) (fail_nth: 1) [ 635.046149][T10991] iommufd_fops_ioctl+0x317/0x4b0 17:17:20 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 7) [ 635.046178][T10991] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 635.046227][T10991] ? bpf_lsm_file_ioctl+0x9/0x10 [ 635.046269][T10991] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 635.046299][T10991] __x64_sys_ioctl+0x197/0x210 [ 635.046330][T10991] do_syscall_64+0x39/0xb0 [ 635.046372][T10991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.046409][T10991] RIP: 0033:0x7fd0e668c169 [ 635.046429][T10991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 635.046457][T10991] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.046484][T10991] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 635.046503][T10991] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 635.046520][T10991] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.046535][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.046549][T10991] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 635.046582][T10991] [ 635.142780][T11002] FAULT_INJECTION: forcing a failure. [ 635.142780][T11002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.142944][T11002] CPU: 1 PID: 11002 Comm: syz-executor.5 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 635.142975][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 635.142991][T11002] Call Trace: [ 635.142999][T11002] [ 635.143008][T11002] dump_stack_lvl+0x136/0x150 [ 635.143056][T11002] should_fail_ex+0x4a3/0x5b0 [ 635.143097][T11002] _copy_to_user+0x30/0xc0 [ 635.143130][T11002] simple_read_from_buffer+0xd0/0x160 [ 635.143167][T11002] proc_fail_nth_read+0x18b/0x220 [ 635.143241][T11002] ? proc_fault_inject_read+0x220/0x220 [ 635.143280][T11002] ? security_file_permission+0xaf/0xd0 [ 635.143316][T11002] vfs_read+0x1e1/0x8a0 [ 635.143343][T11002] ? proc_fault_inject_read+0x220/0x220 [ 635.143379][T11002] ? kernel_read+0x1c0/0x1c0 [ 635.143406][T11002] ? receive_fd+0x110/0x110 [ 635.143436][T11002] ? __fget_files+0x26a/0x480 [ 635.143478][T11002] ksys_read+0x12b/0x250 [ 635.143563][T11002] ? vfs_write+0xd50/0xd50 [ 635.143596][T11002] ? syscall_enter_from_user_mode+0x26/0x80 [ 635.143646][T11002] do_syscall_64+0x39/0xb0 [ 635.143689][T11002] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.143727][T11002] RIP: 0033:0x7f090443df8c [ 635.143749][T11002] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 635.143776][T11002] RSP: 002b:00007f0905213160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 635.143805][T11002] RAX: ffffffffffffffda RBX: 00007f09045abf80 RCX: 00007f090443df8c [ 635.143824][T11002] RDX: 000000000000000f RSI: 00007f09052131e0 RDI: 0000000000000005 [ 635.143841][T11002] RBP: 00007f09052131d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.143857][T11002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.143874][T11002] R13: 00007ffc3f1f44af R14: 00007f0905213300 R15: 0000000000022000 [ 635.143910][T11002] [ 635.300660][T11010] FAULT_INJECTION: forcing a failure. [ 635.300660][T11010] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 635.300697][T11010] CPU: 1 PID: 11010 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 635.300727][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 635.300743][T11010] Call Trace: [ 635.300751][T11010] [ 635.300760][T11010] dump_stack_lvl+0x136/0x150 [ 635.300805][T11010] should_fail_ex+0x4a3/0x5b0 [ 635.300843][T11010] ? __stack_depot_save+0x39/0x510 [ 635.300880][T11010] pfn_reader_user_pin+0x231/0x810 [ 635.300917][T11010] iopt_pages_fill_xarray+0x32b/0xa90 [ 635.300948][T11010] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.300997][T11010] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 635.301036][T11010] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 635.301095][T11010] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 635.301209][T11010] ? iopt_area_add_access+0x1ac/0x380 [ 635.301252][T11010] iopt_area_add_access+0x1cf/0x380 [ 635.301286][T11010] iommufd_access_pin_pages+0x5b8/0x9b0 [ 635.301333][T11010] ? iommufd_access_create+0x2b0/0x2b0 [ 635.301375][T11010] ? __kmalloc_node+0xfb/0x1a0 [ 635.301404][T11010] ? __fget_files+0x26a/0x480 [ 635.301440][T11010] iommufd_test+0x1ac0/0x2c20 [ 635.301478][T11010] ? iommufd_selftest_destroy+0x190/0x190 [ 635.301521][T11010] ? __might_fault+0xb2/0x190 [ 635.301576][T11010] iommufd_fops_ioctl+0x317/0x4b0 [ 635.301606][T11010] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 635.301654][T11010] ? bpf_lsm_file_ioctl+0x9/0x10 [ 635.301697][T11010] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 635.301725][T11010] __x64_sys_ioctl+0x197/0x210 [ 635.301754][T11010] do_syscall_64+0x39/0xb0 [ 635.301796][T11010] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.301835][T11010] RIP: 0033:0x7fd0e668c169 [ 635.301856][T11010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 635.301883][T11010] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.301965][T11010] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 635.301986][T11010] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 635.302004][T11010] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.302022][T11010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.302041][T11010] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 635.302075][T11010] [ 635.433361][T11018] FAULT_INJECTION: forcing a failure. [ 635.433361][T11018] name failslab, interval 1, probability 0, space 0, times 0 [ 635.433398][T11018] CPU: 0 PID: 11018 Comm: syz-executor.2 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 635.433425][T11018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 635.433453][T11018] Call Trace: [ 635.433461][T11018] [ 635.433471][T11018] dump_stack_lvl+0x136/0x150 [ 635.433519][T11018] should_fail_ex+0x4a3/0x5b0 [ 635.433561][T11018] should_failslab+0x9/0x20 [ 635.433591][T11018] __kmem_cache_alloc_node+0x5b/0x320 [ 635.433616][T11018] ? tomoyo_realpath_from_path+0xc3/0x600 [ 635.433650][T11018] ? tomoyo_realpath_from_path+0xc3/0x600 [ 635.433678][T11018] __kmalloc+0x4e/0x190 [ 635.433702][T11018] ? rcu_is_watching+0x12/0xb0 [ 635.433731][T11018] tomoyo_realpath_from_path+0xc3/0x600 [ 635.433761][T11018] ? tomoyo_path_number_perm+0x1c1/0x570 [ 635.433791][T11018] tomoyo_path_number_perm+0x21a/0x570 [ 635.433817][T11018] ? tomoyo_path_number_perm+0x1c1/0x570 [ 635.433844][T11018] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 635.433872][T11018] ? find_held_lock+0x2d/0x110 [ 635.433911][T11018] ? lock_downgrade+0x690/0x690 [ 635.433964][T11018] ? trace_lock_acquire+0x12d/0x180 [ 635.434001][T11018] ? receive_fd+0x110/0x110 [ 635.434026][T11018] ? lock_acquire+0x32/0xc0 [ 635.434071][T11018] ? receive_fd+0x110/0x110 [ 635.434105][T11018] ? __fget_files+0x26a/0x480 [ 635.434138][T11018] security_file_ioctl+0x54/0xb0 [ 635.434178][T11018] __x64_sys_ioctl+0xb7/0x210 [ 635.434209][T11018] do_syscall_64+0x39/0xb0 [ 635.434249][T11018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.434287][T11018] RIP: 0033:0x7f38f5a8c169 [ 635.434309][T11018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 635.434336][T11018] RSP: 002b:00007f38f45fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.434365][T11018] RAX: ffffffffffffffda RBX: 00007f38f5babf80 RCX: 00007f38f5a8c169 [ 635.434383][T11018] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 635.434401][T11018] RBP: 00007f38f45fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.434417][T11018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.434433][T11018] R13: 00007ffc4084958f R14: 00007f38f45fe300 R15: 0000000000022000 [ 635.434469][T11018] [ 635.434479][T11018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 635.445159][T11020] FAULT_INJECTION: forcing a failure. [ 635.445159][T11020] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 635.445195][T11020] CPU: 1 PID: 11020 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 635.445280][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 635.445296][T11020] Call Trace: [ 635.445304][T11020] [ 635.445314][T11020] dump_stack_lvl+0x136/0x150 [ 635.445361][T11020] should_fail_ex+0x4a3/0x5b0 [ 635.445404][T11020] prepare_alloc_pages+0x178/0x570 [ 635.445443][T11020] __alloc_pages+0x149/0x4a0 [ 635.445475][T11020] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 635.445508][T11020] ? __lock_acquire+0xc17/0x5f30 [ 635.445556][T11020] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 635.445604][T11020] ? __lock_acquire+0xc17/0x5f30 [ 635.445642][T11020] ? print_usage_bug.part.0+0x660/0x660 [ 635.445687][T11020] alloc_pages+0x1aa/0x270 [ 635.445717][T11020] pte_alloc_one+0x1a/0x230 [ 635.445755][T11020] __pte_alloc+0x6d/0x260 [ 635.445784][T11020] ? pmd_install+0x160/0x160 [ 635.445824][T11020] __handle_mm_fault+0x400a/0x4170 [ 635.445864][T11020] ? vm_iomap_memory+0x190/0x190 [ 635.445898][T11020] ? mt_validate_nulls+0xd10/0xd10 [ 635.445962][T11020] handle_mm_fault+0x2af/0x9f0 [ 635.446004][T11020] __get_user_pages+0x60a/0x10e0 [ 635.446040][T11020] ? follow_page_mask+0x10a0/0x10a0 [ 635.446082][T11020] ? down_read_killable+0x14a/0x4f0 [ 635.446119][T11020] ? down_read_interruptible+0x4f0/0x4f0 [ 635.446163][T11020] __gup_longterm_locked+0x3f7/0x2420 [ 635.446203][T11020] ? find_held_lock+0x2d/0x110 [ 635.446237][T11020] ? get_user_pages_unlocked+0x820/0x820 [ 635.446267][T11020] ? internal_get_user_pages_fast+0x12e1/0x3300 [ 635.446296][T11020] ? lock_downgrade+0x690/0x690 [ 635.446339][T11020] ? mark_held_locks+0x9f/0xe0 [ 635.446376][T11020] ? sanity_check_pinned_pages+0x23/0xec0 [ 635.446423][T11020] internal_get_user_pages_fast+0x169f/0x3300 [ 635.446479][T11020] ? __gup_device_huge+0x6c0/0x6c0 [ 635.446505][T11020] ? __kernel_text_address+0xd/0x30 [ 635.446534][T11020] ? unwind_get_return_address+0x55/0xa0 [ 635.446579][T11020] ? arch_stack_walk+0x97/0xf0 [ 635.446613][T11020] ? is_valid_gup_args+0x199/0x230 [ 635.446661][T11020] pin_user_pages_fast+0xab/0x100 [ 635.446687][T11020] ? get_user_pages_fast+0x100/0x100 [ 635.446713][T11020] ? stack_trace_save+0x90/0xc0 [ 635.446753][T11020] ? __stack_depot_save+0x39/0x510 [ 635.446790][T11020] pfn_reader_user_pin+0x64f/0x810 [ 635.446828][T11020] iopt_pages_fill_xarray+0x32b/0xa90 [ 635.446859][T11020] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.446910][T11020] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 635.446949][T11020] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 635.447038][T11020] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 635.447064][T11020] ? iopt_area_add_access+0x1ac/0x380 [ 635.447104][T11020] iopt_area_add_access+0x1cf/0x380 [ 635.447139][T11020] iommufd_access_pin_pages+0x5b8/0x9b0 [ 635.447191][T11020] ? iommufd_access_create+0x2b0/0x2b0 [ 635.447231][T11020] ? __kmalloc_node+0xfb/0x1a0 [ 635.447256][T11020] ? __fget_files+0x26a/0x480 [ 635.447289][T11020] iommufd_test+0x1ac0/0x2c20 [ 635.447327][T11020] ? iommufd_selftest_destroy+0x190/0x190 [ 635.447355][T11020] ? __might_fault+0xb2/0x190 [ 635.447395][T11020] iommufd_fops_ioctl+0x317/0x4b0 [ 635.447423][T11020] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 635.447468][T11020] ? bpf_lsm_file_ioctl+0x9/0x10 [ 635.447507][T11020] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 635.447535][T11020] __x64_sys_ioctl+0x197/0x210 [ 635.447575][T11020] do_syscall_64+0x39/0xb0 [ 635.447613][T11020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.447650][T11020] RIP: 0033:0x7fd0e668c169 [ 635.447671][T11020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 635.447697][T11020] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.447725][T11020] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 635.447742][T11020] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 635.447760][T11020] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.447777][T11020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.447793][T11020] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 635.447828][T11020] [ 636.886396][T10995] tty tty1: ldisc open failed (-12), clearing slot 0 17:17:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x17f, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:21 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x2, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:21 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0xc0045878, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:21 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x306, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:21 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) (fail_nth: 2) 17:17:21 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 8) 17:17:22 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0xc0189436, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:22 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x324, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:22 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x10, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 637.039023][T11030] FAULT_INJECTION: forcing a failure. [ 637.039023][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 637.044542][T11027] FAULT_INJECTION: forcing a failure. [ 637.044542][T11027] name failslab, interval 1, probability 0, space 0, times 0 [ 637.115713][T11030] CPU: 1 PID: 11030 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 637.125701][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 637.135803][T11030] Call Trace: [ 637.139111][T11030] [ 637.142058][T11030] dump_stack_lvl+0x136/0x150 [ 637.146778][T11030] should_fail_ex+0x4a3/0x5b0 [ 637.151504][T11030] should_failslab+0x9/0x20 [ 637.156053][T11030] kmem_cache_alloc+0x63/0x3b0 [ 637.160895][T11030] ptlock_alloc+0x21/0x70 [ 637.165275][T11030] pte_alloc_one+0x6c/0x230 [ 637.169838][T11030] __pte_alloc+0x6d/0x260 [ 637.174225][T11030] ? pmd_install+0x160/0x160 [ 637.178962][T11030] __handle_mm_fault+0x400a/0x4170 [ 637.184147][T11030] ? vm_iomap_memory+0x190/0x190 [ 637.189140][T11030] ? mt_validate_nulls+0xd10/0xd10 [ 637.194344][T11030] handle_mm_fault+0x2af/0x9f0 [ 637.199175][T11030] __get_user_pages+0x60a/0x10e0 [ 637.204175][T11030] ? follow_page_mask+0x10a0/0x10a0 [ 637.209496][T11030] ? down_read_killable+0x14a/0x4f0 [ 637.214776][T11030] ? down_read_interruptible+0x4f0/0x4f0 [ 637.220469][T11030] __gup_longterm_locked+0x3f7/0x2420 [ 637.225876][T11030] ? find_held_lock+0x2d/0x110 [ 637.230666][T11030] ? get_user_pages_unlocked+0x820/0x820 [ 637.236311][T11030] ? internal_get_user_pages_fast+0x12e1/0x3300 [ 637.242562][T11030] ? lock_downgrade+0x690/0x690 [ 637.247437][T11030] ? mark_held_locks+0x9f/0xe0 [ 637.252225][T11030] ? sanity_check_pinned_pages+0x23/0xec0 [ 637.257989][T11030] internal_get_user_pages_fast+0x169f/0x3300 [ 637.264094][T11030] ? __gup_device_huge+0x6c0/0x6c0 [ 637.269224][T11030] ? __kernel_text_address+0xd/0x30 [ 637.274436][T11030] ? unwind_get_return_address+0x55/0xa0 [ 637.280104][T11030] ? arch_stack_walk+0x97/0xf0 [ 637.284908][T11030] ? is_valid_gup_args+0x199/0x230 [ 637.290055][T11030] pin_user_pages_fast+0xab/0x100 [ 637.295097][T11030] ? get_user_pages_fast+0x100/0x100 [ 637.300394][T11030] ? stack_trace_save+0x90/0xc0 [ 637.305282][T11030] ? __stack_depot_save+0x39/0x510 [ 637.310411][T11030] pfn_reader_user_pin+0x64f/0x810 [ 637.315542][T11030] iopt_pages_fill_xarray+0x32b/0xa90 [ 637.320930][T11030] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 637.327029][T11030] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 637.333117][T11030] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 637.339418][T11030] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 637.345076][T11030] ? iopt_area_add_access+0x1ac/0x380 [ 637.350475][T11030] iopt_area_add_access+0x1cf/0x380 [ 637.355695][T11030] iommufd_access_pin_pages+0x5b8/0x9b0 [ 637.361278][T11030] ? iommufd_access_create+0x2b0/0x2b0 [ 637.366764][T11030] ? __kmalloc_node+0xfb/0x1a0 [ 637.371545][T11030] ? __fget_files+0x26a/0x480 [ 637.376245][T11030] iommufd_test+0x1ac0/0x2c20 [ 637.380945][T11030] ? iommufd_selftest_destroy+0x190/0x190 [ 637.386697][T11030] ? __might_fault+0xb2/0x190 [ 637.391417][T11030] iommufd_fops_ioctl+0x317/0x4b0 [ 637.396470][T11030] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 637.402305][T11030] ? bpf_lsm_file_ioctl+0x9/0x10 [ 637.407264][T11030] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 637.413079][T11030] __x64_sys_ioctl+0x197/0x210 [ 637.417874][T11030] do_syscall_64+0x39/0xb0 [ 637.422321][T11030] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 637.428232][T11030] RIP: 0033:0x7fd0e668c169 [ 637.432657][T11030] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 637.452295][T11030] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:17:22 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x347, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:22 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x541b, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 637.460737][T11030] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 637.468720][T11030] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 637.476750][T11030] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 637.484738][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.492716][T11030] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 637.500714][T11030] [ 637.513782][T11027] CPU: 0 PID: 11027 Comm: syz-executor.2 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 637.523749][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 637.533842][T11027] Call Trace: [ 637.537139][T11027] [ 637.540101][T11027] dump_stack_lvl+0x136/0x150 [ 637.544841][T11027] should_fail_ex+0x4a3/0x5b0 [ 637.549583][T11027] should_failslab+0x9/0x20 [ 637.554133][T11027] __kmem_cache_alloc_node+0x5b/0x320 [ 637.559552][T11027] ? tomoyo_encode2.part.0+0xe9/0x3a0 17:17:22 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0xc020660b, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) [ 637.565004][T11027] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 637.570418][T11027] __kmalloc+0x4e/0x190 [ 637.574620][T11027] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 637.580298][T11027] tomoyo_encode2.part.0+0xe9/0x3a0 [ 637.585540][T11027] ? tomoyo_realpath_from_path+0xc3/0x600 [ 637.591310][T11027] ? rcu_is_watching+0x12/0xb0 [ 637.596125][T11027] tomoyo_encode+0x2c/0x50 [ 637.600582][T11027] tomoyo_realpath_from_path+0x185/0x600 [ 637.607617][T11027] tomoyo_path_number_perm+0x21a/0x570 [ 637.607657][T11027] ? tomoyo_path_number_perm+0x1c1/0x570 [ 637.607689][T11027] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 637.607719][T11027] ? find_held_lock+0x2d/0x110 [ 637.607763][T11027] ? lock_downgrade+0x690/0x690 [ 637.607824][T11027] ? trace_lock_acquire+0x12d/0x180 [ 637.607864][T11027] ? receive_fd+0x110/0x110 [ 637.607891][T11027] ? lock_acquire+0x32/0xc0 [ 637.607928][T11027] ? receive_fd+0x110/0x110 [ 637.607961][T11027] ? __fget_files+0x26a/0x480 [ 637.608005][T11027] security_file_ioctl+0x54/0xb0 [ 637.608047][T11027] __x64_sys_ioctl+0xb7/0x210 [ 637.608079][T11027] do_syscall_64+0x39/0xb0 [ 637.608124][T11027] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 637.608165][T11027] RIP: 0033:0x7f38f5a8c169 [ 637.608188][T11027] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 637.608215][T11027] RSP: 002b:00007f38f45fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.608243][T11027] RAX: ffffffffffffffda RBX: 00007f38f5babf80 RCX: 00007f38f5a8c169 [ 637.608263][T11027] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 637.608280][T11027] RBP: 00007f38f45fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 637.608298][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.608315][T11027] R13: 00007ffc4084958f R14: 00007f38f45fe300 R15: 0000000000022000 [ 637.608351][T11027] [ 637.738493][T11027] ERROR: Out of memory at tomoyo_realpath_from_path. 17:17:22 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5421, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:22 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 9) 17:17:22 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x348, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:22 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x34, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x300, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:22 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:22 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x36c, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:22 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5450, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:22 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x2, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 638.003109][T11055] FAULT_INJECTION: forcing a failure. [ 638.003109][T11055] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 638.067883][T11055] CPU: 1 PID: 11055 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 638.077943][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 638.088039][T11055] Call Trace: [ 638.091359][T11055] [ 638.094325][T11055] dump_stack_lvl+0x136/0x150 [ 638.099089][T11055] should_fail_ex+0x4a3/0x5b0 [ 638.103826][T11055] prepare_alloc_pages+0x178/0x570 [ 638.108990][T11055] __alloc_pages+0x149/0x4a0 [ 638.113629][T11055] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 638.120457][T11055] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 638.126495][T11055] ? __lock_acquire+0x1987/0x5f30 [ 638.131549][T11055] ? find_held_lock+0x2d/0x110 [ 638.136347][T11055] __folio_alloc+0x16/0x40 [ 638.140784][T11055] vma_alloc_folio+0x155/0x850 [ 638.145578][T11055] ? policy_nodemask+0x1c0/0x1c0 [ 638.150549][T11055] do_wp_page+0x1797/0x34e0 [ 638.155074][T11055] ? lock_sync+0x190/0x190 [ 638.159510][T11055] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 638.164911][T11055] ? rcu_is_watching+0x12/0xb0 [ 638.169685][T11055] ? do_raw_spin_lock+0x124/0x2b0 [ 638.174733][T11055] ? spin_bug+0x1c0/0x1c0 [ 638.179091][T11055] ? lock_acquire+0x32/0xc0 [ 638.183614][T11055] ? __handle_mm_fault+0x132b/0x4170 [ 638.189013][T11055] __handle_mm_fault+0x1635/0x4170 [ 638.194146][T11055] ? lock_downgrade+0x690/0x690 [ 638.199020][T11055] ? vm_iomap_memory+0x190/0x190 [ 638.203989][T11055] ? follow_page_pte+0x2f3/0x1d50 [ 638.209046][T11055] handle_mm_fault+0x2af/0x9f0 [ 638.213832][T11055] __get_user_pages+0x60a/0x10e0 [ 638.218790][T11055] ? follow_page_mask+0x10a0/0x10a0 [ 638.224016][T11055] ? down_read_killable+0x14a/0x4f0 [ 638.229231][T11055] ? down_read_interruptible+0x4f0/0x4f0 [ 638.234892][T11055] __gup_longterm_locked+0x3f7/0x2420 [ 638.240283][T11055] ? find_held_lock+0x2d/0x110 [ 638.245068][T11055] ? get_user_pages_unlocked+0x820/0x820 [ 638.250718][T11055] ? internal_get_user_pages_fast+0x12e1/0x3300 [ 638.256968][T11055] ? lock_downgrade+0x690/0x690 [ 638.261844][T11055] ? mark_held_locks+0x9f/0xe0 [ 638.266624][T11055] ? sanity_check_pinned_pages+0x23/0xec0 [ 638.272378][T11055] internal_get_user_pages_fast+0x169f/0x3300 [ 638.278475][T11055] ? __gup_device_huge+0x6c0/0x6c0 [ 638.283595][T11055] ? __kernel_text_address+0xd/0x30 [ 638.288805][T11055] ? unwind_get_return_address+0x55/0xa0 [ 638.294454][T11055] ? arch_stack_walk+0x97/0xf0 [ 638.299237][T11055] ? is_valid_gup_args+0x199/0x230 [ 638.304379][T11055] pin_user_pages_fast+0xab/0x100 [ 638.309416][T11055] ? get_user_pages_fast+0x100/0x100 [ 638.314759][T11055] ? stack_trace_save+0x90/0xc0 [ 638.319630][T11055] ? __stack_depot_save+0x39/0x510 [ 638.324762][T11055] pfn_reader_user_pin+0x64f/0x810 [ 638.329893][T11055] iopt_pages_fill_xarray+0x32b/0xa90 [ 638.335279][T11055] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 638.341381][T11055] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 638.347384][T11055] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 638.353661][T11055] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 638.359308][T11055] ? iopt_area_add_access+0x1ac/0x380 [ 638.364703][T11055] iopt_area_add_access+0x1cf/0x380 [ 638.369916][T11055] iommufd_access_pin_pages+0x5b8/0x9b0 [ 638.375493][T11055] ? iommufd_access_create+0x2b0/0x2b0 [ 638.380973][T11055] ? __kmalloc_node+0xfb/0x1a0 [ 638.385751][T11055] ? __fget_files+0x26a/0x480 [ 638.390448][T11055] iommufd_test+0x1ac0/0x2c20 [ 638.395152][T11055] ? iommufd_selftest_destroy+0x190/0x190 [ 638.400889][T11055] ? __might_fault+0xb2/0x190 [ 638.405596][T11055] iommufd_fops_ioctl+0x317/0x4b0 [ 638.410722][T11055] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 638.416555][T11055] ? bpf_lsm_file_ioctl+0x9/0x10 [ 638.421545][T11055] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 638.427387][T11055] __x64_sys_ioctl+0x197/0x210 [ 638.432183][T11055] do_syscall_64+0x39/0xb0 [ 638.436627][T11055] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 638.442541][T11055] RIP: 0033:0x7fd0e668c169 [ 638.446963][T11055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 638.466581][T11055] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 638.475005][T11055] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 638.482989][T11055] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 638.490966][T11055] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 638.498948][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.506926][T11055] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 638.514920][T11055] 17:17:23 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x2, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:23 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x3e6, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:23 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x10, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0xffffff1f, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) [ 638.686594][T11068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.711670][T11068] iommufd_mock iommufd_mock0: Removing from iommu group 0 17:17:23 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 10) 17:17:23 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5451, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:23 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x541b, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:23 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x500, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:23 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x3, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:23 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5421, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 638.915444][T11083] FAULT_INJECTION: forcing a failure. [ 638.915444][T11083] name fail_iommufd, interval 1, probability 0, space 0, times 0 [ 638.929398][T11083] CPU: 0 PID: 11083 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 638.939335][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 638.949428][T11083] Call Trace: [ 638.952738][T11083] [ 638.955700][T11083] dump_stack_lvl+0x136/0x150 [ 638.960446][T11083] should_fail_ex+0x4a3/0x5b0 [ 638.965186][T11083] pages_to_xarray+0x3c9/0x5b0 [ 638.970010][T11083] ? pin_user_pages_fast+0xb3/0x100 [ 638.975265][T11083] ? clear_xarray+0x390/0x390 [ 638.979991][T11083] ? stack_trace_save+0x90/0xc0 [ 638.984905][T11083] ? pfn_reader_user_pin+0x461/0x810 [ 638.990397][T11083] iopt_pages_fill_xarray+0x4e5/0xa90 [ 638.998016][T11083] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.004158][T11083] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 639.010207][T11083] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 639.016540][T11083] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 639.022217][T11083] ? iopt_area_add_access+0x1ac/0x380 [ 639.027663][T11083] iopt_area_add_access+0x1cf/0x380 [ 639.032916][T11083] iommufd_access_pin_pages+0x5b8/0x9b0 [ 639.038542][T11083] ? iommufd_access_create+0x2b0/0x2b0 [ 639.044070][T11083] ? __kmalloc_node+0xfb/0x1a0 [ 639.048884][T11083] ? __fget_files+0x26a/0x480 [ 639.053620][T11083] iommufd_test+0x1ac0/0x2c20 [ 639.058356][T11083] ? iommufd_selftest_destroy+0x190/0x190 [ 639.064118][T11083] ? __might_fault+0xb2/0x190 [ 639.068945][T11083] iommufd_fops_ioctl+0x317/0x4b0 [ 639.074115][T11083] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 639.079989][T11083] ? bpf_lsm_file_ioctl+0x9/0x10 [ 639.084983][T11083] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 639.090841][T11083] __x64_sys_ioctl+0x197/0x210 [ 639.095658][T11083] do_syscall_64+0x39/0xb0 [ 639.100110][T11083] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.106029][T11083] RIP: 0033:0x7fd0e668c169 [ 639.110464][T11083] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 639.130089][T11083] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.138536][T11083] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 639.146514][T11083] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 639.154488][T11083] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 17:17:23 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x600, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:23 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x4, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:23 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5452, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:24 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5460, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:24 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x603, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 639.162464][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 639.170438][T11083] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 639.178519][T11083] 17:17:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 11) 17:17:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x3, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:24 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5450, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:24 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x8933, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:24 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x700, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:24 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5451, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:24 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x400448c9, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 639.449832][T11107] FAULT_INJECTION: forcing a failure. [ 639.449832][T11107] name fail_iommufd, interval 1, probability 0, space 0, times 0 17:17:24 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x8d6, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) [ 639.540659][T11107] CPU: 1 PID: 11107 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 639.550634][T11107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 639.560729][T11107] Call Trace: [ 639.564043][T11107] [ 639.567001][T11107] dump_stack_lvl+0x136/0x150 [ 639.571746][T11107] should_fail_ex+0x4a3/0x5b0 [ 639.576489][T11107] pfn_reader_user_update_pinned+0x158/0x200 [ 639.582526][T11107] iopt_pages_fill_xarray+0x553/0xa90 17:17:24 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5452, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 639.587959][T11107] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.594096][T11107] ? iopt_pages_fill_from_xarray+0x560/0x560 [ 639.600225][T11107] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 639.606573][T11107] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 639.612268][T11107] ? iopt_area_add_access+0x1ac/0x380 [ 639.612322][T11107] iopt_area_add_access+0x1cf/0x380 17:17:24 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 12) 17:17:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x8, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:24 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x400448dd, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:24 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x8d7, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 639.612364][T11107] iommufd_access_pin_pages+0x5b8/0x9b0 [ 639.612417][T11107] ? iommufd_access_create+0x2b0/0x2b0 17:17:24 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x5460, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 639.612508][T11107] ? __kmalloc_node+0xfb/0x1a0 [ 639.612539][T11107] ? __fget_files+0x26a/0x480 17:17:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x9, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:24 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x8e3, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 639.612577][T11107] iommufd_test+0x1ac0/0x2c20 17:17:24 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x400454ca, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 639.612617][T11107] ? iommufd_selftest_destroy+0x190/0x190 [ 639.612647][T11107] ? __might_fault+0xb2/0x190 [ 639.612688][T11107] iommufd_fops_ioctl+0x317/0x4b0 [ 639.612715][T11107] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 639.612760][T11107] ? bpf_lsm_file_ioctl+0x9/0x10 [ 639.612802][T11107] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 639.612830][T11107] __x64_sys_ioctl+0x197/0x210 [ 639.612860][T11107] do_syscall_64+0x39/0xb0 [ 639.612903][T11107] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.612944][T11107] RIP: 0033:0x7fd0e668c169 [ 639.612968][T11107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 639.612993][T11107] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.613021][T11107] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 639.613039][T11107] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 17:17:24 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0xa, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:24 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x900, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 639.613056][T11107] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 639.613073][T11107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 639.613090][T11107] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 639.613127][T11107] [ 639.845314][T11130] FAULT_INJECTION: forcing a failure. [ 639.845314][T11130] name failslab, interval 1, probability 0, space 0, times 0 [ 639.852113][T11130] CPU: 1 PID: 11130 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 639.994325][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 640.004378][T11130] Call Trace: [ 640.007666][T11130] [ 640.010626][T11130] dump_stack_lvl+0x136/0x150 [ 640.015357][T11130] should_fail_ex+0x4a3/0x5b0 [ 640.020088][T11130] should_failslab+0x9/0x20 [ 640.024627][T11130] __kmem_cache_alloc_node+0x5b/0x320 [ 640.030026][T11130] ? iommufd_test+0x20bf/0x2c20 [ 640.034919][T11130] ? __kmalloc_node+0xfb/0x1a0 [ 640.039729][T11130] ? __fget_files+0x26a/0x480 [ 640.044453][T11130] kmalloc_trace+0x26/0xe0 [ 640.048903][T11130] iommufd_test+0x20bf/0x2c20 [ 640.053675][T11130] ? iommufd_selftest_destroy+0x190/0x190 [ 640.059404][T11130] ? __might_fault+0xb2/0x190 [ 640.064125][T11130] iommufd_fops_ioctl+0x317/0x4b0 [ 640.069180][T11130] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 640.075048][T11130] ? bpf_lsm_file_ioctl+0x9/0x10 [ 640.080041][T11130] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 640.085904][T11130] __x64_sys_ioctl+0x197/0x210 [ 640.090718][T11130] do_syscall_64+0x39/0xb0 [ 640.095199][T11130] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 640.101136][T11130] RIP: 0033:0x7fd0e668c169 [ 640.105547][T11130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 640.125391][T11130] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.134333][T11130] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 640.142305][T11130] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 640.150277][T11130] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 640.158261][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 640.166250][T11130] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 640.174244][T11130] 17:17:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x5, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:25 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0xf, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:25 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0xa00, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:25 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x40049409, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:25 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x8933, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:25 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 13) 17:17:25 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:25 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x400448c9, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:25 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0xb65, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:25 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x40086602, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 640.309426][T11147] FAULT_INJECTION: forcing a failure. [ 640.309426][T11147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.392972][T11147] CPU: 1 PID: 11147 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 640.402947][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 640.413039][T11147] Call Trace: [ 640.416368][T11147] [ 640.419361][T11147] dump_stack_lvl+0x136/0x150 [ 640.424109][T11147] should_fail_ex+0x4a3/0x5b0 [ 640.428852][T11147] _copy_to_user+0x30/0xc0 [ 640.433330][T11147] iommufd_test+0x2379/0x2c20 17:17:25 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0xf00, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 640.438077][T11147] ? iommufd_selftest_destroy+0x190/0x190 [ 640.443848][T11147] ? __might_fault+0xb2/0x190 [ 640.448589][T11147] iommufd_fops_ioctl+0x317/0x4b0 [ 640.453663][T11147] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 640.459531][T11147] ? bpf_lsm_file_ioctl+0x9/0x10 [ 640.464530][T11147] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 640.470392][T11147] __x64_sys_ioctl+0x197/0x210 [ 640.475209][T11147] do_syscall_64+0x39/0xb0 [ 640.479690][T11147] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 640.485649][T11147] RIP: 0033:0x7fd0e668c169 [ 640.492398][T11147] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:17:25 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x40186366, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) [ 640.492435][T11147] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.492464][T11147] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 640.492484][T11147] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 640.492502][T11147] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 640.492519][T11147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 640.492537][T11147] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 640.492575][T11147] 17:17:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x6, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:25 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x400448dd, &(0x7f00000000c0)={0x38, 0x6, r2}) 17:17:25 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:25 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x1100, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:25 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x401c5820, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:25 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 14) 17:17:25 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x4020940d, &(0x7f00000000c0)={0x38, 0x6, r2, 0x0, 0x10001}) 17:17:25 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x1168, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:25 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x400454ca, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 640.870233][T11171] FAULT_INJECTION: forcing a failure. [ 640.870233][T11171] name failslab, interval 1, probability 0, space 0, times 0 [ 640.925744][T11171] CPU: 1 PID: 11171 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 640.935717][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 640.945812][T11171] Call Trace: [ 640.949118][T11171] [ 640.952080][T11171] dump_stack_lvl+0x136/0x150 [ 640.956826][T11171] should_fail_ex+0x4a3/0x5b0 [ 640.961571][T11171] should_failslab+0x9/0x20 [ 640.966129][T11171] __kmem_cache_alloc_node+0x5b/0x320 [ 640.971550][T11171] ? iommufd_test+0x20bf/0x2c20 [ 640.976457][T11171] ? __kmalloc_node+0xfb/0x1a0 [ 640.981270][T11171] ? __fget_files+0x26a/0x480 [ 640.985985][T11171] kmalloc_trace+0x26/0xe0 [ 640.990475][T11171] iommufd_test+0x20bf/0x2c20 [ 640.995186][T11171] ? iommufd_selftest_destroy+0x190/0x190 [ 641.001440][T11171] ? __might_fault+0xb2/0x190 [ 641.006139][T11171] iommufd_fops_ioctl+0x317/0x4b0 [ 641.011173][T11171] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 641.017002][T11171] ? bpf_lsm_file_ioctl+0x9/0x10 [ 641.021967][T11171] ? iommufd_get_object.part.0+0x2b0/0x2b0 [ 641.030758][T11171] __x64_sys_ioctl+0x197/0x210 [ 641.036079][T11171] do_syscall_64+0x39/0xb0 [ 641.040532][T11171] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.046452][T11171] RIP: 0033:0x7fd0e668c169 [ 641.050874][T11171] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:17:26 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x10000, 0x4c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x40049409, &(0x7f00000000c0)={0x38, 0x6, r2}) [ 641.070509][T11171] RSP: 002b:00007fd0e7312168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.079119][T11171] RAX: ffffffffffffffda RBX: 00007fd0e67abf80 RCX: 00007fd0e668c169 [ 641.087189][T11171] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 641.095164][T11171] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 641.103138][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 641.111284][T11171] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 641.119303][T11171] 17:17:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 15) [ 641.253095][T11184] FAULT_INJECTION: forcing a failure. [ 641.253095][T11184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.292456][T11184] CPU: 0 PID: 11184 Comm: syz-executor.4 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 641.302426][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 641.312588][T11184] Call Trace: [ 641.316054][T11184] [ 641.319179][T11184] dump_stack_lvl+0x136/0x150 [ 641.323922][T11184] should_fail_ex+0x4a3/0x5b0 [ 641.328637][T11184] _copy_from_user+0x30/0xf0 [ 641.333261][T11184] kstrtouint_from_user+0xac/0x190 [ 641.338440][T11184] ? kstrtouint+0x120/0x120 [ 641.343047][T11184] ? lock_sync+0x190/0x190 [ 641.347514][T11184] proc_fail_nth_write+0x7d/0x220 [ 641.352594][T11184] ? proc_task_getattr+0x1f0/0x1f0 [ 641.357863][T11184] vfs_write+0x2ae/0xd50 [ 641.362154][T11184] ? proc_task_getattr+0x1f0/0x1f0 [ 641.367316][T11184] ? kernel_write+0x670/0x670 [ 641.372020][T11184] ? receive_fd+0x110/0x110 [ 641.376567][T11184] ? __fget_files+0x26a/0x480 [ 641.381461][T11184] ksys_write+0x12b/0x250 [ 641.385824][T11184] ? __ia32_sys_read+0xb0/0xb0 [ 641.390617][T11184] ? syscall_enter_from_user_mode+0x26/0x80 [ 641.396552][T11184] do_syscall_64+0x39/0xb0 [ 641.401016][T11184] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.406944][T11184] RIP: 0033:0x7fd0e663deef [ 641.411378][T11184] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 641.431167][T11184] RSP: 002b:00007fd0e7312160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 641.439625][T11184] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd0e663deef 17:17:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x7, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="1d52e5764c3eea41d7", 0x9}]) 17:17:26 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f00007db000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x27a2e7}) 17:17:26 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x1200, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 641.447665][T11184] RDX: 0000000000000001 RSI: 00007fd0e73121e0 RDI: 0000000000000006 [ 641.455768][T11184] RBP: 00007fd0e73121d0 R08: 0000000000000000 R09: 0000000000000000 [ 641.463768][T11184] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 641.471778][T11184] R13: 00007ffdb3af5b1f R14: 00007fd0e7312300 R15: 0000000000022000 [ 641.479893][T11184] 17:17:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 17:17:26 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={0x0, 0x123f, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:17:26 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000c64000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x2, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 687.282010][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.288590][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.187238][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 746.193916][ C1] rcu: 1-....: (1 GPs behind) idle=c3fc/1/0x4000000000000000 softirq=30949/30951 fqs=5130 [ 746.205339][ C1] rcu: hardirqs softirqs csw/system [ 746.211752][ C1] rcu: number: 4 0 0 [ 746.218164][ C1] rcu: cputime: 209 52280 3 ==> 52490(ms) [ 746.225966][ C1] rcu: (t=10500 jiffies g=38977 q=1286 ncpus=2) [ 746.232299][ C1] CPU: 1 PID: 4457 Comm: udevd Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 746.241325][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 746.251411][ C1] RIP: 0010:fq_pie_qdisc_dequeue+0x5fd/0x9c0 [ 746.257414][ C1] Code: 0f 85 56 03 00 00 4c 89 e8 4c 89 6b 08 48 c1 e8 03 42 80 3c 20 00 0f 85 33 03 00 00 49 89 5d 00 e9 56 fa ff ff e8 e3 d1 43 f9 <48> 8b 44 24 18 4c 8b 2c 24 42 80 3c 20 00 0f 85 04 03 00 00 48 8b [ 746.277033][ C1] RSP: 0018:ffffc900001e0630 EFLAGS: 00000246 [ 746.283103][ C1] RAX: 0000000000000000 RBX: ffff8880a181bb10 RCX: 0000000000000100 [ 746.291107][ C1] RDX: ffff88807d28bb80 RSI: ffffffff884051cd RDI: ffff8880a181bb18 [ 746.299082][ C1] RBP: ffff88807b207000 R08: 0000000000000001 R09: 0000000000000000 [ 746.307137][ C1] R10: 0000000000000001 R11: 0200000000000000 R12: dffffc0000000000 [ 746.315113][ C1] R13: ffff88807b2072f0 R14: ffff88807b2072f0 R15: 0000000000000001 [ 746.323091][ C1] FS: 00007fcc84c8ec80(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 746.332029][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.338617][ C1] CR2: 00007f38f5a47410 CR3: 0000000029ece000 CR4: 00000000003506e0 [ 746.346590][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 746.354561][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 746.362535][ C1] Call Trace: [ 746.365899][ C1] [ 746.368765][ C1] __qdisc_run+0x1b2/0x1780 [ 746.373309][ C1] ? rcu_is_watching+0x12/0xb0 [ 746.378113][ C1] __dev_queue_xmit+0x21f9/0x3c10 [ 746.383246][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 746.388806][ C1] ? netdev_core_pick_tx+0x390/0x390 [ 746.394107][ C1] ? find_held_lock+0x2d/0x110 [ 746.398887][ C1] ? ip6_finish_output2+0x55a/0x1560 [ 746.404350][ C1] ? lock_downgrade+0x690/0x690 [ 746.409218][ C1] ? mark_held_locks+0x9f/0xe0 [ 746.413993][ C1] ? neigh_connected_output+0x41c/0x550 [ 746.419548][ C1] neigh_connected_output+0x3c2/0x550 [ 746.424941][ C1] ip6_finish_output2+0x55a/0x1560 [ 746.430070][ C1] ip6_finish_output+0x69a/0x1170 [ 746.435103][ C1] ip6_output+0x1f1/0x540 [ 746.439448][ C1] ndisc_send_skb+0xa63/0x1850 [ 746.444234][ C1] ? ndisc_ifinfo_sysctl_change+0x610/0x610 [ 746.450143][ C1] ? skb_store_bits+0x5a3/0x7a0 [ 746.455065][ C1] ? ndisc_net_init+0x230/0x230 [ 746.459925][ C1] ? __alloc_skb+0x1c4/0x330 [ 746.464538][ C1] ? skb_put+0x138/0x1a0 [ 746.468796][ C1] ndisc_send_rs+0x132/0x6f0 [ 746.473404][ C1] addrconf_rs_timer+0x3f1/0x870 [ 746.478356][ C1] ? ipv6_get_lladdr+0x4f0/0x4f0 [ 746.483303][ C1] ? call_timer_fn+0xd5/0x580 [ 746.487994][ C1] ? lock_acquire+0x32/0xc0 [ 746.492507][ C1] ? call_timer_fn+0xd5/0x580 [ 746.497223][ C1] ? ipv6_get_lladdr+0x4f0/0x4f0 [ 746.502187][ C1] call_timer_fn+0x1a0/0x580 [ 746.506789][ C1] ? enqueue_timer+0x520/0x520 [ 746.511556][ C1] ? lock_downgrade+0x690/0x690 [ 746.516424][ C1] ? mark_held_locks+0x9f/0xe0 [ 746.521196][ C1] ? ipv6_get_lladdr+0x4f0/0x4f0 [ 746.526168][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 746.531413][ C1] ? ipv6_get_lladdr+0x4f0/0x4f0 [ 746.536369][ C1] ? ipv6_get_lladdr+0x4f0/0x4f0 [ 746.541322][ C1] expire_timers+0x234/0x330 [ 746.545932][ C1] run_timer_softirq+0x326/0x910 [ 746.550884][ C1] ? expire_timers+0x330/0x330 [ 746.555659][ C1] ? kvm_clock_read+0x14/0x30 [ 746.560346][ C1] ? mark_held_locks+0x9f/0xe0 [ 746.565125][ C1] __do_softirq+0x1d4/0x905 [ 746.569647][ C1] irq_exit_rcu+0xb7/0x120 [ 746.574096][ C1] sysvec_apic_timer_interrupt+0x97/0xc0 [ 746.579736][ C1] [ 746.582672][ C1] [ 746.585601][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.591598][ C1] RIP: 0010:tomoyo_supervisor+0xa2/0xec0 [ 746.597256][ C1] Code: 08 00 f2 f2 f2 c7 40 0c f2 f2 00 00 c7 40 14 f2 f2 f2 f2 c7 40 18 00 00 00 f3 c7 40 1c f3 f3 f3 f3 65 48 8b 04 25 28 00 00 00 <48> 89 84 24 38 01 00 00 31 c0 e8 8f d1 b4 fd 31 c0 b9 06 00 00 00 [ 746.616871][ C1] RSP: 0018:ffffc9000315f890 EFLAGS: 00000a02 [ 746.622946][ C1] RAX: e345a0f2b447ed00 RBX: ffffc9000315fb00 RCX: ffff88807ce2a000 [ 746.630920][ C1] RDX: ffffffff8a9f4f20 RSI: ffffffff8a9f7ac0 RDI: ffffc9000315fb00 [ 746.638900][ C1] RBP: ffffc9000315fa28 R08: 0000000000000003 R09: 00000000000000ff [ 746.646870][ C1] R10: 0000000000000100 R11: 0000000000094001 R12: ffffffff8a9f7ac0 [ 746.654846][ C1] R13: fffff5200062bf63 R14: 1ffff9200062bf16 R15: dffffc0000000000 [ 746.662836][ C1] ? tomoyo_profile+0x60/0x60 [ 746.667530][ C1] ? mark_held_locks+0x9f/0xe0 [ 746.672308][ C1] ? kasan_quarantine_put+0xf9/0x220 [ 746.677603][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 746.682813][ C1] ? slab_free_freelist_hook+0x8b/0x1c0 [ 746.688369][ C1] ? tomoyo_path_matches_pattern+0x114/0x290 [ 746.694358][ C1] ? tomoyo_check_path_acl+0xaf/0x210 [ 746.699735][ C1] ? tomoyo_check_acl+0x328/0x440 [ 746.704776][ C1] tomoyo_path_permission+0x270/0x3a0 [ 746.710173][ C1] tomoyo_path_perm+0x31c/0x430 [ 746.715030][ C1] ? tomoyo_check_open_permission+0x3a0/0x3a0 [ 746.721184][ C1] ? path_lookupat+0x25a/0x840 [ 746.726000][ C1] ? __virt_addr_valid+0x61/0x2e0 [ 746.731040][ C1] security_inode_getattr+0xd3/0x140 [ 746.736333][ C1] vfs_statx+0x16e/0x430 [ 746.740591][ C1] ? inode_sub_bytes+0x100/0x100 [ 746.745531][ C1] ? getname_flags.part.0+0x1dd/0x4f0 [ 746.750940][ C1] vfs_fstatat+0x90/0xb0 [ 746.755206][ C1] __do_sys_newfstatat+0x8a/0x110 [ 746.760243][ C1] ? __do_compat_sys_newlstat+0x100/0x100 [ 746.765975][ C1] ? mntput+0x6b/0x90 [ 746.769970][ C1] ? do_readlinkat+0x1e7/0x2f0 [ 746.774738][ C1] ? __x64_sys_openat+0x143/0x1f0 [ 746.779768][ C1] ? __ia32_sys_open+0x1c0/0x1c0 [ 746.784711][ C1] ? syscall_enter_from_user_mode+0x26/0x80 [ 746.790621][ C1] do_syscall_64+0x39/0xb0 [ 746.795062][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 746.800970][ C1] RIP: 0033:0x7fcc84d645f4 [ 746.805390][ C1] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8 [ 746.825026][ C1] RSP: 002b:00007ffe2154a018 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 746.833451][ C1] RAX: ffffffffffffffda RBX: 0000562166b52d00 RCX: 00007fcc84d645f4 [ 746.841432][ C1] RDX: 00007ffe2154a030 RSI: 00007fcc84e01130 RDI: 000000000000000d [ 746.849408][ C1] RBP: 0000562166b93e80 R08: 0000000000090800 R09: 0000562166b40810 [ 746.857383][ C1] R10: 0000000000001000 R11: 0000000000000202 R12: 00007ffe2154a030 [ 746.865356][ C1] R13: 00000000000000ff R14: 00005621650f91c4 R15: 0000000000000000 [ 746.873346][ C1] [ 748.720660][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.727005][ T1217] ieee802154 phy1 wpan1: encryption failed: -22