am 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0xffffffffffff8000, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x17) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:41 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x7, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {0x0, 0x0, r4}}, 0x1f) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2196.017958][T12994] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:41 executing program 5: r0 = syz_io_uring_setup(0x935, &(0x7f00000002c0)={0x0, 0x3dc6}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:41 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x7, 0x0, 0x0, 0x0) [ 2196.108004][T13001] device syzkaller1 entered promiscuous mode 03:45:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000300)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xa0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@appraise}, {@appraise_type}]}}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3801000010001307000000000000000000000000000000000000000000000001fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) 03:45:41 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2196.247178][T13011] device syzkaller1 entered promiscuous mode [ 2196.271077][T13016] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="fc0000000000002c9373bc0000000000000000003200000000000000000000000000ffffac1414aa00000000000000004100000000000000000000000000000000000000000000000000000000000000000000000002000800000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000500000400000000000000e20900000000000000000000004800020063e370216652b099d98e30626328646573330029000000000000000000000000000000000000000000000000000100"/230], 0x138}}, 0x0) 03:45:42 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x8, 0x0, 0x0, 0x0) 03:45:42 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x20000) 03:45:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:42 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x745e00, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x9, 0x8010, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0xfac27581fb3fa485}, 0x2) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd=r3, 0xcdd3, &(0x7f0000000040)=[{&(0x7f0000000180)="29ca5f9b5b2e1db152cfa7808a9d00574a721f564060539d5d5aa6d25d3035dd13ba602d170f6b1be5f9332956d760c09cd92c76514d3219763bb1229e1e5c576f7b2f17bc0d725821b1cb1cc8d2eee6c6f1fe8878f375bb502964fd9b308a64ec839724d9b547fd213df6b53ea8a2984202abda02f21d5f83a881e61da81db63201e7775eeef32de62de7b43aa2c7e5340bd5a2ab9ab221031faed7eb41cca9790885ec89b27466699e82bc908effbf8677e92710d194ae59c2cb3f745bee200f7024062e982c5c218eb01b2d6685589751a1719f8f3f", 0xd7}, {&(0x7f00000000c0)="ffb821415ddb5341ceb410ce1e74ef0703f04ca1ebe75065d214d66b7ae794297fafb53bfe1cfb137fce7e63b264265271ea2f3513433a986440c2de60ad87e97befd0b9c716a8b0f5793b454c64f9c093c1a1664583e8302e5269da9bb6a4c7", 0x60}], 0x2, 0x5db1fa52b9f310d5, 0x1, {0x2}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:42 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x84, 0x49, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x78}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x8}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x44050) r2 = socket$key(0xf, 0x3, 0x2) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0x102, 0x2, 0x5, "9be8f7014a6193ae57336891fce50a56", "df0d4ee009e3866263e80ce107f132bd1fe0804a2c6cbc6e16dfce70b49a26c600bdd0a1265ddbeae821218cac0aa7e411508dc1cfe5ffbe1e7e6731826e679bd93e0ae7d2243d1f3efcc401426a7354c89db93d866e36ff6f5ac835f9c98e69b3fbd6e2bbaab30c9cf84e3ff9d8dd2a740f446470ff8dd2e02f78ffb5a6ed17890698b1c09ad7d277c7df691caf73a8d029e74bd735f64ecfe826ebc440ffb6ae57feb7d48df54ad2bba8cffaf514cee7fbd894d81ef476f318b0cf925a554a41affc07fd08e35922e924225b7eed7a9a6d6e880b3da22711c77f4c739ddc237a3074403718477fae11524228"}, 0x102, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3801000010001307120000000000000000000000000000000000000000000001fc020000000000e7a5dc68000000000000000000000000000000000000000000d90773a95bed17a8a67e624425ce7792de2ed2d455d92d46b766bd53ffe588ddd7c39ac6b7f176014802d1a35d6a9e84571d4767cbf029fe9c78487327a0d09aec1d28e64cc757d5302ab2a56474643b6e919fe5bbf323ffff7675e32ea0f52be21386440a5a85e1dde3b9ef46f8eb5920d2be225c45", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328646573335f6564652900"/240], 0x138}}, 0x0) 03:45:42 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x700, 0x0, 0x0, 0x0) [ 2197.025501][T13041] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2197.025909][T13033] device syzkaller1 entered promiscuous mode [ 2197.045845][T13045] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380100001000130700000000000000000000000000000000000000e3ff000001fc020000000000000000000000000000000000000002003469e7ba49fc2aa0fe580939348fc33eebe8b1c4d9f932abbe9ab2369e0e73e47172c14af812cf6de8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328649e73335f6564652900"/240], 0x138}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(r6, &(0x7f00000001c0)='./file0\x00', 0x140) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80300001a0000022abd7000ffdbdf257f000001000000000000000000000000fc0100000000000000000000000000014a20fffc4e2000030a00202004000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) 03:45:42 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x1, &(0x7f0000000180)="747c27010c473025634d4bf246c9830f1d4c25c2424e190d8951de9fb316c660d3eac50fc35450ea1d34c11aca49621f5b817241abd10984283ede8fc7bbed4f2c0b4380685e2d0e94115669d88e76ea5a1ff34abdb82bd3bea81b2ad8b1fb6caa4507b07d4ab4dd960d365b226ea231bea11486293f1c02c023d5efec6ce4ef2ba97c72b696b67b8b4d6dde69ed49c14bbfeecf37c8e980f973c027be04c70dc0b075b37e7e0e0cbaf98764162c06fd2419a432cc6d796dc754", 0x8, 0x0, 0x0, {0x1, r7}}, 0x695b) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:42 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2197.171114][T13046] device syzkaller1 entered promiscuous mode 03:45:42 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x1f00, 0x0, 0x0, 0x0) [ 2197.289656][T13067] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r3, r4, 0x16, &(0x7f0000000100)={0x0, 0x0, 0xffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x6, 0x3, 0x9, 0x0, 0x3, 0x40000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x12403, 0x24, 0xf4f, 0x8, 0x7f, 0x401, 0x3ff, 0x0, 0x1, 0x0, 0x1}, r4, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:43 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x100, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x27, 0x0, 0x7) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:43 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x40000) 03:45:43 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in6=@private2}, {@in6=@private0, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 03:45:43 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x2000, 0x0, 0x0, 0x0) 03:45:43 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r6, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, 0x0}, 0xff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:43 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYBLOB="8d947f5f233a317d8c3c9fe23ced7cad01259f80fc96ec1ebfc3d4c765ab96c3271c2a54028d63083a0e8718c65111ba2ad91b4fd3e323d57c5149", @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328646573335f6564652900"/240], 0x138}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xe, 0x5, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x55}, @generic={0x20, 0x8, 0x5, 0x8, 0x5}, @alu={0x4, 0x0, 0x2, 0x9, 0x4, 0x8, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000580)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xe, 0x10001, 0xc4c}, 0x10, 0x0, r0}, 0x78) r10 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r10, 0x0, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000001600)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0xaf22, 0x7, 0x1, {0x0, 0x0, r10}}, 0x4) 03:45:43 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x14, 0x6, 0x1, 0x9, 0x0, 0x8, 0x1000, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x410, 0xbfc2, 0x2, 0x9, 0x2, 0x9, 0x200, 0x0, 0x0, 0x0, 0x6451}, 0x0, 0xc, 0xffffffffffffffff, 0x3) writev(r0, &(0x7f00000000c0)=[{}, {&(0x7f0000000040)="43ac212706011fa437a5", 0xa}, {&(0x7f0000000180)="ba98eae59ccb78a8fc13c99f46a5f244f4a8f2ff629530b9546dd3b4ec5fb6cfee5655de550a6695f65a05a534fe1ccdc3e72237de92e8f3d7bbe2be706b9ecf491fcb73ece1ffeff5a8467a8059f32cdbd3ed71acb156c6fc6d249eba66fb717cd779b3349c3ab50f21a5aec605b998c27a780ea40fd682138bda459106360f9c774fc9bf961dffdf68b5b7ac38ab60a260d1f92e95e954693300fdf3814270d438fa8686388e3c41cf8a5d5ccfd4210b9cd61db3", 0xb5}, {&(0x7f0000000440)="537e83e929a62e28006d4ec7c3b91c5a8d17ab65ddb2ecb5158a178dc04b8fbd7e3c530d17bb4a6b0bf0098f5213d84e1523c7d5db60366966c7c9f2fe147359fd3892fb1a9ff950cde7ab52ef25286f1dcef68df3bc412bc664aa4f30cd397c586ff2fa867237e7f934452aa30e3890c7d395d88535145ffad0bfee13b3f77cc8bb9bfe05416de5faab9532e3007e3a9c6ee495107bf34acf943a65ebff67b3a959", 0xa2}, {&(0x7f0000000580)="d1bab2d60da72ce741964a36d95196f64865e256c99e50671fffaa58f454cb51d52fbb586e5e836e0084700f01b5efb16f4a46735d2b734225751c42777741a39d28f9a25986a1cb91e7589cac7e9c103fc510b3cf13eb1124383b0db4c74f739f89d073021b609373d8da844d8b405339cfebdc87d3f4e5244398472666a83f3af2e66661f508ca44a4c93ecc75beda10276ab3ce2ed09c62beca811e4f2bc4e6c8c16111c6ecea1f04cb8846fd5fd52cf9a2e4dc3d7e2a2eab5dfea375b9", 0xbf}], 0x5) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r4, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000240)) 03:45:43 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x20000, 0x0, 0x0, 0x0) 03:45:43 executing program 1: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f00005d7000/0x2000)=nil, 0x2000, 0x3000002, 0x8010, r1, 0xe27d9000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3801000010001307000000000000000000000000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640101000000000000000000000000000000000032000000fc0100000000000000000000000000fc00000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006563622863616d656c6c69612900"/240], 0x138}}, 0x0) 03:45:46 executing program 1: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:46 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x44800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:46 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x40000, 0x0, 0x0, 0x0) 03:45:46 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000380), 0x6, 0x10000) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) poll(&(0x7f0000000400)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x80}, {}, {r0, 0x2400}, {r1, 0x4}, {r2, 0x4080}, {0xffffffffffffffff, 0x8ba75cef62761214}, {r3, 0x1000}, {0xffffffffffffffff, 0x2012}, {0xffffffffffffffff, 0x150}], 0xa, 0x9) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000040), &(0x7f0000000080)=0x4) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000900)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000000800)=""/245, 0xf5}], 0x5, 0xd9d, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78000000250000012cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a700f3ff0500008531b612220b9571c06a3f70ab2b09ee00736671004c000200080000008df4000002000000ff0700000800000072dbb06a01000000040000000500000000000000081d1b08f81900000900000002000000b5f700000400000001f8ffff06ffde00af03e8965bf3b311c7c40e77ee190b44cfdb24a508ab78f744f09ddc7f56dbd6c87754d0eff52cfa8dd02679fdf910aa31600c6c"], 0x78}, 0x1, 0x0, 0x0, 0x20000}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3801000010001307000000000000000000000000000000000000000000000001fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/429], 0x138}}, 0x0) 03:45:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f0000000200)=""/192, 0xc0}], 0x2, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000100), 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000180)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x7, 0x6, 0x2, 0x6, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_lifetime={0x4, 0x4, 0xfffffffe, 0xfffffffffffffffe, 0xffffffff, 0xffff}]}, 0x30}}, 0x20000000) 03:45:46 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x1000000) [ 2200.546070][T13124] device syzkaller1 entered promiscuous mode 03:45:46 executing program 1: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2200.605541][T13125] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2200.654567][T13138] device syzkaller1 entered promiscuous mode 03:45:46 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xe786, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r7}}, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r8, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r11}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r10, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0xc0c2fda) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1, 0x6, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r2, 0x0, 0x0) close(r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000140)=0xfffffff8, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r5, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r4, &(0x7f0000000040)='./file0\x00', 0x30282, 0x10) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2}, {@in6=@private0, 0x0, 0x32}, @in6=@private1, {}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ctr(blowfish)\x00'}}}]}, 0x138}}, 0x0) 03:45:46 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x1000000, 0x0, 0x0, 0x0) 03:45:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x7, 0x20, 0x1c, 0x0, 0x100, 0x238ad01ddf8c6481, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x2868, 0x2, 0x80000001, 0x9, 0xa, 0xfffffffd, 0xa0, 0x0, 0x6, 0x0, 0xffffffff80000001}, r4, 0xf, r0, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:46 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, '=M'}, 0x3, 0x1) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3801000010001307000000000000000000000000000000000000000000000001fc02000000000000000000000000009d00"/64, @ANYBLOB="bca5240eade0a165a2b7f4c25929f2a703c5c401b20bbf8de708c3ea86ced30276605517cb1f47fb389c659a72343b511b8d3d63ce44e0e52e509207804e925677d22414e9b68f90c2fc47155c3b629da2d9573aca69f29b2bf2800e768b9220dd93f98fa96b873f349182f8d6d38ee50dc20a63c17a0c7e5ad1fa3e60cdc9227186d3af92ce678bc692a8c38d5c3fb9dc2f77a33bb4f087dba3bbb60cf71775f23f54939452f20258d982e18850b79ed0341e911bb2b45ce18eef7608396172b49b8d491073f1b1d76af6e465e54d94ad19b9fc9f2a8b0146202890", @ANYRES32=0x0, @ANYRESHEX=r1], 0x138}}, 0x0) [ 2200.974417][T13162] device syzkaller1 entered promiscuous mode 03:45:46 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x200000}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r4, &(0x7f0000002a80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/32, 0x20}], 0x7, &(0x7f0000000500)=""/56, 0x38}, 0x3}, {{&(0x7f0000001580)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/139, 0x8b}, {&(0x7f00000016c0)=""/13, 0xd}, {&(0x7f0000001700)=""/183, 0xb7}], 0x3, &(0x7f0000001800)=""/4096, 0x1000}}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002880)=""/183, 0xb7}], 0x1, &(0x7f0000002980)=""/220, 0xdc}, 0x1}], 0x3, 0x140, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:46 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:45:46 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x7000000, 0x0, 0x0, 0x0) [ 2201.109523][T13174] device syzkaller1 entered promiscuous mode [ 2201.134324][T13179] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:46 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2201.173963][T13189] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:47 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2000000) 03:45:47 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x100000c, 0x2010, 0xffffffffffffffff, 0x10000000) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r5, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r5, 0x2, 0x0, 0x1}, 0x6) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xb0, 0xb8, 0x80, 0x61, 0x0, 0x4, 0x1b512, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x8000, 0x9, 0x8, 0x5, 0x7, 0x8001, 0x9, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:47 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x8000000, 0x0, 0x0, 0x0) 03:45:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x7, 0x20, 0x1c, 0x0, 0x100, 0x238ad01ddf8c6481, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x2868, 0x2, 0x80000001, 0x9, 0xa, 0xfffffffd, 0xa0, 0x0, 0x6, 0x0, 0xffffffff80000001}, r4, 0xf, r0, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:47 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x40000, 0x0, 0x0, 0x0) [ 2201.635394][T13206] device syzkaller1 entered promiscuous mode [ 2201.647660][T13205] device syzkaller1 entered promiscuous mode 03:45:47 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x1f000000, 0x0, 0x0, 0x0) 03:45:47 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:47 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) r4 = getpid() ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x7, 0x20, 0x1c, 0x0, 0x100, 0x238ad01ddf8c6481, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x2868, 0x2, 0x80000001, 0x9, 0xa, 0xfffffffd, 0xa0, 0x0, 0x6, 0x0, 0xffffffff80000001}, r4, 0xf, r0, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2201.789539][T13205] device syzkaller1 entered promiscuous mode 03:45:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mmap(&(0x7f0000294000/0x4000)=nil, 0x4000, 0x4, 0x8010, r0, 0x6576e000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x98, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2201.925940][T13247] device syzkaller1 entered promiscuous mode 03:45:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = signalfd4(r1, &(0x7f0000000240)={[0x81]}, 0x8, 0x80000) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x3, 0x6, {}, {0xee01}, 0x1000, 0x40}) r6 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getgroups(0x4, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0, 0xee01, 0xee00]) r9 = getegid() fsetxattr$system_posix_acl(r4, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="7030137e5b90f1d7f2d4933f4402000000010005000000000002000200", @ANYRES32=r5, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="02000300", @ANYRES32=r6, @ANYBLOB="040000000000000008000300", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="07001000", @ANYRES32=r8, @ANYBLOB="180b0000", @ANYRES32=r9, @ANYBLOB="10000300000000002000020000000000"], 0x5c, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x3, 0x0, &(0x7f00000000c0)="1e0ead271020a04ffb823f8eb1005335586198cee8f3d3a5227ceb3aecdcfed729d831f8393d8f8f3d539f8afd0974cc44d641f8f133e177006ab22b6d1fa412007245b7cac13ce2d7a4ac9ab30c82dea647640ad094786b175b389d9dda3dcff99bdf93fe884b77c75f41d633fcfd9e9d40c1d4ab2e346f470cae56d37f", 0x505, 0x0, 0x1, {0x1, r10}}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)=0x2) ptrace$setopts(0x4200, 0x0, 0x9, 0xe) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x40000800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x5, 0x7fffffff, 0x80, 0x100000000, 0x0, 0x800, 0xffffffffffffffe1, 0x2, 0x6, 0x7e0000000, 0x100, 0x6, 0xffffffff, 0x3, 0x0, 0x101], 0x1001, 0x8093}) io_uring_enter(r1, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:47 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x4000000) 03:45:47 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x20000000, 0x0, 0x0, 0x0) 03:45:47 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x8, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r12}, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', 0x90, 0x4080}, 0x8) syz_io_uring_submit(r7, r11, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd_index=0x7, 0x5, 0x7, 0xb89, 0x2, 0x0, {0x0, r6}}, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x9, 0xffffffffffffff7f, 0x0, 0x3, 0x5, 0x0, {0x0, r6}}, 0x1ff) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2202.054208][T13259] device syzkaller1 entered promiscuous mode 03:45:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x7, 0x20, 0x1c, 0x0, 0x100, 0x238ad01ddf8c6481, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x2868, 0x2, 0x80000001, 0x9, 0xa, 0xfffffffd, 0xa0, 0x0, 0x6, 0x0, 0xffffffff80000001}, r4, 0xf, r0, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2202.147014][T13259] device syzkaller1 entered promiscuous mode [ 2202.198884][T13276] device syzkaller1 entered promiscuous mode 03:45:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sched\x00') r5 = socket$inet_udplite(0x2, 0x2, 0x88) close(r5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:48 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r3, 0x20c1, 0x4bc5, 0x3, &(0x7f0000000040)={[0x1f]}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x43e0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:48 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x2, 0x0, 0x0) 03:45:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x7, 0x20, 0x1c, 0x0, 0x100, 0x238ad01ddf8c6481, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x2868, 0x2, 0x80000001, 0x9, 0xa, 0xfffffffd, 0xa0, 0x0, 0x6, 0x0, 0xffffffff80000001}, r4, 0xf, r0, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2202.480415][T13302] device syzkaller1 entered promiscuous mode 03:45:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101000, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x4, 0xff, 0x2a, @mcast2, @mcast1, 0x20, 0x80, 0x800, 0x20}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000880) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2202.566052][T13311] device syzkaller1 entered promiscuous mode 03:45:48 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x4, 0x0, 0x0) [ 2202.609837][T13321] device syzkaller1 entered promiscuous mode 03:45:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000200)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10882, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) exit_group(0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r3 = getpid() rt_tgsigqueueinfo(0x0, r3, 0x16, &(0x7f0000000100)={0x0, 0x0, 0xffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x1, 0xfc, 0x1, 0x0, 0x3, 0x804, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000100), 0xe}, 0x180, 0x3e, 0x0, 0x8, 0x101, 0xfffffffc, 0x2003, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x3, r4, 0x2) 03:45:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x7, 0x20, 0x1c, 0x0, 0x100, 0x238ad01ddf8c6481, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x2868, 0x2, 0x80000001, 0x9, 0xa, 0xfffffffd, 0xa0, 0x0, 0x6, 0x0, 0xffffffff80000001}, r4, 0xf, r0, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:48 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x5000000) 03:45:48 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4004, @fd_index=0x7, 0x9, 0x0, 0x0, 0x3, 0x1, {0x2}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:48 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x7, 0x0, 0x0) 03:45:49 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x8000000) [ 2203.394939][T13352] device syzkaller1 entered promiscuous mode 03:45:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x7, 0x20, 0x1c, 0x0, 0x100, 0x238ad01ddf8c6481, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x2868, 0x2, 0x80000001, 0x9, 0xa, 0xfffffffd, 0xa0, 0x0, 0x6, 0x0, 0xffffffff80000001}, r4, 0xf, r0, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000340)={{r2}, "b56bd39192c34fd4c03f51a5b20002204ac558b294966cc6410db2c8514175e5c453a28fb9e85ff740af23ac3972da07395f85a45430d30b27235bf6b03b71e2f6b7ff232dcd615b96ada0d1a36dedfb1c1b12f8f5035317de79e8f6367f7913545e831da912d47352ed2b9c8d85d90b0df24968d9c5a3dfd85d781da53c3360106cab5f285ea6a260d0681558a1822390ea58263ad174123114ee9f8b220cf82c001ac045d5f9cbd79be7145280c930d5b3833cde79d6618cda399513f9ea738ab861452548742ed34d86a37fc6b9e964130530ada3b50355604c05fafab6e95280cc133c646af04061c92be6bbf50d6cc7301d1b26de4b01537efb6551ed6ce843e10eff8657879e6c9fb18f0723de8e5f7025f2988224180cf026b4f5ffca7ec12a755555edca7ebb28554c4dcbb63da36a019a95c40aca9185edabe324a878c65e01b46857bbffb2a0e0acd90966b3634f23e645f3064d2fd02165f451c5803efcc155dac70c4b67c96e088a3813deda08574d0c0279c8d9a244044c544c84ddfa72025987ff41286821331857fa7640781dd242a1c0f039ab6b930e39bba7bc64c6b80f3f99c1908eda2e87f8447a82dc04305e1f4a923f1a376b435e96d1db91363eaacaf631b1050347cb6dab1d4a91314ac50b5e910849b5cc95f13f89b7af1b0c1eaaaf535404979496cbf9654a24daa4b5676ef26d020ba46f7135c176f05a57ac5ce1224554b0ba6b1e63e8af4ab72f24472a5a0e1a193fddee57061ae509f44b5599cb604644e47d0d7886013f9cee97be4178bfbe461b343b6cca69932a13267afec0678bbc209eea859c2a6af79dbb6c3e32a9cb378b87e6bfd187f4e2e7361ab4459fd5832168149c8bd9f09057c1a0091afe301aaf7d6ffd67816ac240ad034328eb85dbb7de548dab09824ea3d665ae229c1f195ca5fb4db17563a5eb339e386e910b4ed9810956d6bab55aca0c261d12aa87c459a89b4ca2fda0851705d27237bedca7bd454e6b881a436afce28aa353aaceab3f7a2c7e18c8a9b98ff0676b2ef91da2564eb8822ae1ddeaed8030dcc341f490b9a18ef8fa7f0a69af9e803e0ad982558b6d9f46e845b3ced42d0de8bc5cdb67a9a5dea81c49f470ffa4521b77e0b29adff8c7536b0b4b92aca94fabfa1765403f9a6760f952157b005888ffa242eba5021042a734fb87af50f2727c513e62f00d0d0ad3c87e396a7ef5420babd25a5b3eae66751f42ace77b695a33c136c589792032935db54e46e5448c1fc442547d687a34ada0d283045804b7cdd4aed831bfdc86cd530a0a36b6fa916461c27cccf2660baeb101984aeadf3aec673fb270432b468a94d27b0a3592187285db188f4e92bb7927ab55ee921a7e9a4bda03e0f41191d349838c46c383e1cbcbbccb02c49674a2be90e67cfc30b158a4d965b0b18f09603e8ea896fa2c19f26c521b2217b2e6097bd6843bc8cfe8137e2511ed98ea047021797bf2799e243f99c15f23331751fcf2ad7a3e350a02e323c1967e2fd137500a1b2757b15658a2ffffaffad60b93ccaa1d2db93067c77a6da54d8f147345031e2456df5cacd494c1a6ef1d5c2b71f2821336688ec61f9c19c6eb99382d066c8f044ca033d0032593077baa078799b9959d513ddda48504de83896fb1a3e7ff1734fc962bd3037735606af9cfa96123f7be02a8f22339c40e2dfa0753d826dd35a5e47f800593808c3cc2d3d858c7d2638462d3ccd69c3371b5f6c70dbe9022fb916d959b955ea786d1b6babe499f3ddccbd1301c29320368ebd528a7bfe426172235d1b09b681fe9b0283f32bae5e01af3e973a3214a2c9cf31775cab2ff88071b5b9c419b4120d15bcdce33e7558c8b65e477d4044178ea676c9f9d5f9669c59c67092f9c7631dc4064eccde8536231e80514d7e2321ce3f390689b65038e4cb587dd58b1a6d254effad9fdb4ba2e48d1f32a0d6a9590f09d0d99c23ad48e3b7784350ce0e1977dcb60cb9200807178da97f84a827bfd3df948bb456fe7920baa19529666a42846c9298c7ff34b1bfa9fe34d889d4f55b697517707da7d2aa23029819d342ee597688838b6b94d4520e18c5fe9db3855b751c53bf40beb2587b1ca481858f56175c5325e42416c31f47e96c599536332555f0375964516f248e702882aae8e93c6e4b7c78fb26d9628b06d20b0eb88cf5e9b206b6a79447ab296fe1f05bb93cf08b4826608852c27335c0aedb6bf358cfad43cc2dfc4ba9f0f18aba7fbb5cf0d34b56a3036120155f9ab196439e1f51b0a42f1157cd74892f0da7eff40f1d49f6fff15a71b826e7e64d0f04fac40c425f866dd93c30125dba8c4c36cc931a92f5250c041b11336c73bb6b6b9400fc40559134a909dca508a8d9f32484ea3247afdecf31fc6d93b91af39644ab95de011cd94593dffc5f7693f517e3ffa5d3211fba6b4ada379cdff3dd899b747bcd148ab8202c165bd25dd496c82c030ec00cc5c32fccdc38dc480c3d9efa8ed9d5dd4e4ff34e30229408465f115c1999dca9893c058d21ff7680db14a8ff4ab64739cc0c0ec0a9fb690a33b0c30ee26446b140c216ff9c3324ba8fe156acaf5a2ef0484fe7c902598a827b8a1f1a5831467bb5eb18ffb0b7e02976be148c8d12db838f809de11f01a3919782f7dcaffa200decb338123d062b76385da4d21208a1d71928675df5a1a0a759ac06c31eaed619680c534107a198eb0408c3b98700ba99397beef5ea0477cfc64a2bfe556b640a146bd001878f02c827292b30a2b81bf086e8d558f84ca6788473616bcfb60303501c86d56f2b9f43f3a337b8ca98fed23af094077e778070976c20da69829534f130c4e94c1e52f9db7e164cc42acea3ec5a5ee413caa1fd02adc2b850e91c6a49e0e8bb4d74d443b23493e9e5ee8f28130e43860ad9c210a3edacc2c29da490a0449f8a2c4edfbb085c86c19c95e992266d15d6304af58d25ac95e8223ea0364cab75dbed191c99da64f678af9e747bd1b6126254021714a7e6d6973775fc07f1cb0d06ec45eb161c9e5502eb588725f79ec9eec9d15dc6afa83f953ddb45a252615ed7e6586413ed1a4ad23f1207a5c6bbc8714d535b89ec8ec34374d4018de4901ef2571a29c76a87d07f9c74bd14be338d37df0c1821d5df192f4fbff202f0884357111f348cb593786c2fdc085289bdf5c315817959c03fe9f45bd53be3f736f4af18b1e3f43bf2c7b4eb55c2ead635e9ceb5e1270bc3de929b3706627e82ab9c4b41a783cce098f27e4e3efa39438f74b8b79ceb7848da28939fb90faed28e491dbd97a9c5fe2d89213e9fb22f58d060a5e5fe9ca451d08889d06c92bf655639f20f1c92f1bab49724b2081bee863fe9a60e812162f8ebb100027c47fda7d7334461ca92f23950e6215d7eafb813f08bb70245401ec6efad37673219d7e80e9e5621fe8bddb7f644eeef5ccb9df24a2a512160eaefadfc24a313859dcd80dfab79393d7cc247f11b40564067811e72812df40abbb15a62547069cc7299c7e655ca3dfa72408f7aa13b27f1971b3b57d638f8c1c69e38bc66971b05e5605eed0efd64ae6c7d5283f960f5067e755fe62ceeb39081ba3e57e12d205f6fd756b647715dc8a95e34ef1f354352f6f95758048497e82008305204c23451424a45ca64e3e456e0ef1b7092e33c8e9b3a9f7685c7953e1831321f07e2a3d3d4a3601dc9bcb448e87822681d4cb49f108f09b43a4dbca109a5af8d7cf80dde6255df6efb272ae2c4e3978cd596fe91945b0beb5d4e1e23eb46efd613b8bef21f4ffca38ab7f5e200487b5db139dd50c440350de4dea1277bb18a4dde772d9f9318396826177a3e0ab554a474d43188016f73a331ff8b405214b91e9842b64258594c2b896d63df10d85faf654fd8f0e27a3891d52f9b9bc121e8cf1fdf067da3f97c9a3fcc916ce5a3a8839e95b912bbac2c275e4c50b038490c25d76e35069463156ee88408dd67ec321ec78d91dd641e1ad3ee167d65fa7f2d5e0e6ef54565f7719abf15a3dc74e59bb8be349e3ca3cc083b8d8a655da0a12f0574eec87872927194159e798932442409d3f34876ceaad949dc7f9deb54ac56c5035453170d932a960f8bf5406dfa3e91fbbb270817a5e54427a2c4165b1dbdc01065500e3076d945091ae5c7f9d96469074248711168206d4960a692865218f3e781a6700039a67effe3eb341936761162907f398e1958131e34989ba0f3a115a487507985a946b6e793ca1e328b75af4ff5c165fa6c49d7d29bb2a3fde7b7fce6dc71e2c8da88d6e8071e176979183dbe0f3bd20b9643a6fb512d8c5c83afdd36b22b46e04c7bd7908789dd82704a17662dbeac87a2d5a69cec8eb49eb24e869f314a14773c04609e2c00ffa689f9ce8936508c60915f57d3b7d76a6abd91f25fc93a83acf2a90738f228c1db0335286669e546fdd2789e72c93efb3360ac1526f442a84e155110bb3a484739899b660a56a75a1064fb3f2aa7742548ae4c4364201c69425d705a380bf9a4f5769e40b35cf3eb48dfed6f1c9e48fdf92be87c4bab162d147185ea1a0db99f0ab8ca36409c20b6ff19edd0bcbc94e4d9b8b3e309707ed19f5d88434a39176d8f388076aca318f4d4819493f4f5c7a555126189580ee7d0b5f70fd48fc87db2fc69457936b42d46330dd86da5892e99d8e3c6f6a4db9eceea44fe69ce659f3831a12814b1784a2cb653efbdd72bd7dbf23b9ed26a2c7006f5d3ce6f03f0bb9f8cfe61a3d668323c9ebfcdd98039c7d2119f4919ad9fb3f485dd3b8f147514bd1e1331309808dbe63fd92a074399b2611ad7290c86ab7079aa034161127ba696d7657f73a2c8c1b6b658e94f37389042c656e7a9c4ffac1d4181ffaa54ce73f90ae456fa77f26cb0354a98fdd49d599a46147c032f7bc5767dba64030d86177b322d25bc7f8411e4c7fdcb6269b7e90e4b617ddd9a93b32e4a29bffd6cb1fcf2df185abfae3078867784a1bfe60e4f628b3cf8a0ec0ca1597bbdd69daedacdb18ec98b68dba0700948d6645935365b0405155d2cfadd243d7fd97cd85180cd37c04f05399714151ce842680cae6701303be2c6dc9c11f1dfd5fd1ac751913a1a6767daded82b927a634fbba0fab6a4b98734eb4880485b0b071786b5e0ae41215b29dd0718d971cf9ac98426d041f17140bde077e2c35fcc22aba0ca9edd6734e154fe9f3a4558082c8fa9de4da120355925fc1eb4fced48e2bac9877b482846ccc01560d0258c0cbe90e9d3523c38eea69ce6a6b3a28619b2ee41d1f00d6f349d8b3cd27d14c2b348f658e6dc3c715aebde425cb0b22c6ffa291e869cb1ff1287d6c7782441edc3833558daa4d0d745a11b5bbeefbaa9cae3e7ded9bbefb344d9197dbbfddfe7fa29691ce33bf7d8c6ed6745c713f1cd848acec07e66eec565bcdf5b9dc92b8423476dba3994e675a6f084221eba05f5a47a7085a245b5c49078bc59637fb506c6616a911fcd29468f3cd8e132edb00c487173243b697879a112ccbe220cad8e8e08ef852c4f0f381a15122071d2a7a85c048923429c6f8a332278d2a1e03ce00620126977e666a95960703758bbaa4c4ddbfaeebddf0940bd33bad9c276e7397bf8b09459b1331a49d615d9c300842a01e9ea100e4876e946f1e7dd8ebf9f98b5e2dcf5956ba26e7a0bb687c38ded8e6cc69a577b5272d358b06b41f5257268e2c8e37845bf2cf4c5796f809c77d05f2f5582efada928c9d22a0815c3b15c6adf157ce"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:49 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x8, 0x0, 0x0) 03:45:49 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:49 executing program 5: r0 = syz_io_uring_setup(0x53a9, &(0x7f00000002c0), &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x3, r5}}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2203.708177][T13367] device syzkaller1 entered promiscuous mode [ 2203.725091][T13368] device syzkaller1 entered promiscuous mode 03:45:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x7, 0x20, 0x1c, 0x0, 0x100, 0x238ad01ddf8c6481, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x2868, 0x2, 0x80000001, 0x9, 0xa, 0xfffffffd, 0xa0, 0x0, 0x6, 0x0, 0xffffffff80000001}, r4, 0xf, r0, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2203.845691][T13388] device syzkaller1 entered promiscuous mode 03:45:49 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x700, 0x0, 0x0) 03:45:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x6000000) 03:45:50 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000004c0)={'macvlan0\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="c1a7953730ae41323b55b35d6958246312a364ffd10c73aace6218c49de4cf75b16fb81e944cf5b43c04f228c6d291c207bb095285fcd715d3570210e828438084ffa8adac558b831ccd35dc9452ed5dc5961b47c7eb67ff9b8ff30eafe5785c7d6bd1c4708692a5bb795f7c490ae6c95d1a9adafb615e9557eb3d20cb6033ad9bb09108110b14b5f0f845e14af9d879be97473b2c7e21f035a0ad1e240938f6674f802646573a31ce29c7253b4cb6e10f04039f839f4e25fc0421f5bcb6183978462c2d74fdf0a45b208d5e5baec7068951c82b83c8", 0xd6}, {&(0x7f0000000200)="6e202cb5bad827ae38de763b1858ed050b203dd0db04f5641d9d207707f10aec97647661dbd574ee5b0c64a1784863789b1ea769f6c0d643856faae5ee9367fd46787a5c0ce90dccddc256274f79ea2c1280f5fdd1395d1fff7d2d78a602b1a237ae8fd605507e5ec5b73da01694b2d5b15681b27eba12b4437c341c83c9e8f55bea0e24413ef543348372a294e121dc2d48354225c01cf5ccd22b3479c8b390", 0xa0}, {&(0x7f0000000340)="c4f01241edb877e3e18626f5cd523caa86e20945aa6d44fafbde9a27e3ccf80969622b1c2f561ee14d58490410007995ffb2018bbb584302c89779424ff9a44de583dfeb0bd6fca6d1ab2d7843ffd22258bdddafb8dfb1c2c47c00663016c4523c1a5db3e479e5d3febe7586ef0ee2b8eb40c31ec2c16a82149c75f51d0e4ec05b6f7d04daec8c328f9585c9f6e690f0d48fab2fcba882f4055de0c59b57740574d29b388c6bb3a535eba3b3b9556c06a6eb436e68bfad0fad", 0xb9}, {&(0x7f0000000400)="b2a91873eb55ff3438b18b1b4f18275fedb8fd5c802ed4abb5cf1d57d235685e8451e5bcdcfb547cba497aade35db6043da8b9546649a55098a833547e153faf83f4f1e619129b728baeea6778292d04b883849f8c55b21afdf60bfce0b89cfa4ccf6325d2ca638d44521bf14f8662b7f519a98d5b56bff1b24b9de6cdb558e59404", 0x82}], 0x4) 03:45:50 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x1f00, 0x0, 0x0) 03:45:50 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x20, 0x1800}, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r6, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee7000/0x11000)=nil, 0x11000, 0x1000008, 0x2010, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x4, 0x0, 0x2}, 0x7) 03:45:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:50 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x2000, 0x0, 0x0) 03:45:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:50 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:50 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14009, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:50 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x20000, 0x0, 0x0) 03:45:50 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x183041, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000740)=""/25, 0x19}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/87, 0x57}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f0000000600)=""/151, 0x97}], 0x7, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x1, 0x0, 0x100000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x7000) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x3000) clone(0x2190c000, &(0x7f00000000c0)="82002fce2135c1d875b392b522edeb22b50a195e99d4988244283794c379ca1ab0a807968676f02aba40c0606d4aed6ebd2d1090fe8f01ab51bf27b643111b4eb6591dceed1ca1c9775bb87847b5164c4090b67fbd144781835e20fb75e013", &(0x7f0000000000), 0x0, &(0x7f0000000180)="79065d3c923da44ae5c8bad446b548d26facfbce00a86b7c4e2108a06ccec654d118d427e50e94d2303b30f7194f28af1c607e29204895ed48a5ab576a5725071e19618f454680f62c53549ac518b09ec37f27ea716eb0bb582e72d04c1a7510c029cdec12e8a87e23f7307408d8a815137ae841fd2ab56ef16a887b4f978c51a942c45dd6029ebc59") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='syzkaller1\x00') r3 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f00008fc000/0x3000)=nil, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x42, 0x0, 0x0, 0x0, 0x50d, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x100, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) 03:45:51 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x7000000) 03:45:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x24000013) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:51 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r4, 0x0, 0x0) poll(&(0x7f0000000000)=[{r4, 0x4}], 0x1, 0x81) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r4, 0x4, 0x10001, 0x5}) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:51 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x40000, 0x0, 0x0) 03:45:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x82, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0xffffffffffffd6e8, 0x680240) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000180)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:51 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2205.603700][T13481] device syzkaller1 entered promiscuous mode 03:45:51 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x1000000, 0x0, 0x0) 03:45:51 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2205.697334][T13500] device syzkaller1 entered promiscuous mode 03:45:51 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2007, @fd_index=0x3, 0x3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/169, 0xa9}], 0x1, 0x1b, 0x1}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syzkaller0\x00', 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x6000, @fd=r4, 0x0, 0x0, 0xfffffffffffffe81}, 0x7) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2, 0x76, 0xff, 0x80, 0x0, 0xfffffffffffffff7, 0x80000, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x9, 0x2}, 0x51091, 0x1, 0x80, 0x0, 0x7ff, 0x80, 0xfff7, 0x0, 0x8001, 0x0, 0x4ef4}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x8) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x24701, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r2, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000100)={0x7, 0x8, 0x0, 0x27, 0x2, [0xffffff00, 0x2, 0xe43, 0xffff7fff]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:51 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x7000000, 0x0, 0x0) [ 2205.967253][T13527] device syzkaller1 entered promiscuous mode [ 2206.086666][T13527] device syzkaller1 entered promiscuous mode 03:45:52 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r4, 0x4f74, 0x2a05, 0x1, &(0x7f0000000000)={[0x1000]}, 0x8) 03:45:52 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:52 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x1f000000) 03:45:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x20010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/176, 0xb0, 0x100, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) dup3(r1, r1, 0x80000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'sit0\x00'}) 03:45:52 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x8000000, 0x0, 0x0) 03:45:52 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:52 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x50c00, 0x0) io_uring_enter(r4, 0x5e74, 0xf43e, 0x2, &(0x7f0000000000)={[0x8]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = getpid() ptrace$pokeuser(0x6, r6, 0x388, 0xfffffffffffffffe) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x400500, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x7f, 0x2, 0x81, 0x0, 0x80, 0x80000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x7, @perf_bp={&(0x7f0000000040), 0x2}, 0x20, 0xb1e2, 0x0, 0x0, 0x8574, 0x7, 0x3ff, 0x0, 0xff9, 0x0, 0x2}, r6, 0x4, r7, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r5], 0x1}, 0xfff) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000001c0)='./file0\x00', 0x120, 0x6000, 0x1}, 0x1) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:52 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x1f000000, 0x0, 0x0) 03:45:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f00000001c0)='/dev/net/tun\x00', 0x6) preadv(r1, &(0x7f0000000200), 0x0, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000050d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x7f, 0x2, 0x4, 0x0, 0x5, 0x8000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x1225, 0x0, 0x7, 0x4, 0x7fffffff, 0x19a3, 0x400, 0x0, 0xfffffffb, 0x0, 0x4b92}, 0xffffffffffffffff, 0x9, r2, 0x8) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:52 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x15) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x80010, r5, 0x10000000) close(r4) 03:45:52 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x20000000, 0x0, 0x0) 03:45:52 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2206.929211][T13607] device syzkaller1 entered promiscuous mode 03:45:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2207.022403][T13623] device syzkaller1 entered promiscuous mode 03:45:53 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x20000000) 03:45:53 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x2000000000000, 0x0, 0x0) 03:45:53 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:53 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x7e) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x602201, 0xa0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x400040, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x5, 0x1682a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x20}, 0x28}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'veth0_vlan\x00'}) r3 = dup3(r0, r1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'team_slave_1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x0, 0x800, 0x93c1}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f00005d4000/0x1000)=nil}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r6 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r6, 0x0, 0x0) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000200)) dup2(r1, r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x9, 0x6, 0x7, 0x7fff, 0xb7}, &(0x7f0000000280)=0xe) 03:45:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x4, 0x0, 0x1f, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x640}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000340)={0x6b, "6a803385fed3dee30da172f6ff0ca57fb5fc6486e92a6e23a8c0641a96d44d3966374c9bc2b05be3a78c0f102cb45faafd8763e79769fd8d2ae1576afa6ad528f77c11f774d675691e7e783cf402613cf0e6f4d20fdbaee636fa18f3a8e7279b54a32351cd77b67d4847c7030a0f32143cabd7d8861d76893d5e8635ac986ac7f7b7f3971da2ca641b92614630f7f4f2cfaaf981bfe07cddceb4234bffd958a555c23d0325a467a16cec769979effbad688c1952629caadc7f71d17e6c2e5e71ec9ac2e63dea9c55d113eb9926a344e38eaf436fd0c1127c64b18971cfdf72e0feedb447b9a30264941ef43b7a81a4d9ff84eddb71dfbd25ba74fa3e91d5bfb096d491b24d42eead08b6aeb4a8522962ab675e28f094b3c41abe73cb95250d9e6e57cf06c76f74f9a09684994e840f2fe48c4620cfcfba460e64b5ef792d5f7a0ea9e0367d6e9db15ee09c98d0d3c40675778ec8896f20ba180cfd55049e75f1b1eb8e9f8f62be51fd328ae99928e831961b5eb82465b509835bfd9710b760bb327dc70886bf79357960c0ed9e440ca788c39cad03c32f96471d341ddfca07e473ab9c7872e518db41448c8bd6d68d724f299bdc81d16ddfcd3780e73c443b54585a9c7330f038f2c48763563c38f87385afbb942625d041a1f336e824d67fd964c5b220c34ae8a99d1c9510acd3c28c2d6eb477a1852dc91a9335ba60561791"}) 03:45:53 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:53 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x2000008, 0x20010, r4, 0x8000000) 03:45:53 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x4000000000000, 0x0, 0x0) 03:45:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2207.861557][T13662] device syzkaller1 entered promiscuous mode 03:45:53 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2208.019630][T13662] device syzkaller1 entered promiscuous mode 03:45:54 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x3f000000) 03:45:54 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x9, 0x0, 0x4) syz_io_uring_setup(0x1ecd, &(0x7f00000000c0)={0x0, 0x91e1, 0x2, 0x2, 0x45, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xebb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x40000020) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000000)={'ip6_vti0\x00', 0x5}) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:54 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x100000000000000, 0x0, 0x0) 03:45:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:54 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7d, 0x400}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x201) fcntl$lock(r1, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x5d, 0x6fa}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x4) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x80000000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2208.675709][T13700] device syzkaller1 entered promiscuous mode 03:45:54 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:54 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x700000000000000, 0x0, 0x0) 03:45:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:54 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) io_uring_enter(r4, 0x42d6, 0xd894, 0x5, &(0x7f0000000040)={[0xe0]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001d00080028bd08000000ffffff34aa84", @ANYRES32=0x0, @ANYBLOB="0100080208000a00d6c800000a000200aaaaaaaaaa2b00000a000200e1e6b7088de2000008000a0068060000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4048884) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r4, 0x0, 0x0) r5 = fcntl$dupfd(r1, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'veth1_to_hsr\x00'}) 03:45:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r0, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2209.010071][T13744] device syzkaller1 entered promiscuous mode [ 2209.101502][T13744] device syzkaller1 entered promiscuous mode 03:45:55 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x84000000) 03:45:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x800000000000000, 0x0, 0x0) 03:45:55 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x4010, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd, 0x1, 0xdecb, 0x5, 0x12, 0x1, {0x2, r4}}, 0x1000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x14, 0x0, 0xfd, 0x0, 0x0, 0xc4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfd8}, 0x4029, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x29, 0x21, 0x0, 0x7) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) write(r6, &(0x7f0000000040)=')', 0x1) ioctl$TCXONC(r6, 0x540a, 0x1) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r8 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r8, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x1, 0x0, {0x0, r7}, 0x200, 0x1, 0x1, {0x0, 0x0, r8}}, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000040)=0xffffffffffff0000) 03:45:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r0, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@ipv4, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000440)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) fchown(r2, r3, r4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'batadv_slave_1\x00', &(0x7f0000000180)=@ethtool_stats={0x1d, 0x2, [0xec25, 0x7]}}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x94004, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=r4, @ANYBLOB=',allow_other,default_permissions,dont_appraise,\x00']) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3ccd0000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf25120000000800060003000000080008000000000008000600ff03000008000800070000000800090002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004010}, 0x24040000) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r0, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:55 executing program 5: io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000), 0x1) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setsig(r3, 0xa, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r4, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000040)={'virt_wifi0\x00', {0x2, 0x0, @initdev}}) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x1f00000000000000, 0x0, 0x0) [ 2209.869284][T13782] device syzkaller1 entered promiscuous mode 03:45:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") signalfd4(r0, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:55 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:56 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0xfeffffff) 03:45:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x2000000000000000, 0x0, 0x0) 03:45:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000015c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r3, 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/204, 0xcc}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000001340)=""/71, 0x47}, {&(0x7f00000013c0)=""/20, 0x14}, {&(0x7f0000001400)=""/142, 0x8e}, {&(0x7f00000014c0)=""/22, 0x16}], 0x8, 0x9, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001580)={'netdevsim0\x00'}) write$midi(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xfff) 03:45:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x5165, 0x8}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:56 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:56 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2210.691573][T13817] device gretap0 entered promiscuous mode 03:45:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x10000000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x1, 0x3, 0x0, 0x810, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x40) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd=r6, 0x8, 0x0, 0x0, 0xd, 0x0, {0x2}}, 0x5) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x2, @rand_addr=0x64010102, 0x4e24, 0x4, 'lc\x00', 0x8, 0x2, 0x77}, {@loopback, 0x4e23, 0x0, 0x1f, 0xd0b2, 0x101}}, 0x44) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r7, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0xffffffff00000000, 0x0, 0x0) 03:45:56 executing program 1: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2210.915019][T13832] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20004 [ 2210.967490][T13832] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20004 03:45:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2) 03:45:56 executing program 1: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:57 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0xffffff7f) 03:45:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x2, 0x80010, r0, 0x10000000) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r5, &(0x7f0000000040)=0x80, &(0x7f00000000c0)=@ethernet={0x0, @dev}}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:57 executing program 1: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:57 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x4) 03:45:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat(r0, &(0x7f00000003c0)='./file0\x00', 0x1, 0x87) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000400)={'tunl0\x00', {0x2, 0x0, @initdev}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x80, 0x2, 0x9, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x800}, 0x48c1, 0xa0be, 0x3a, 0x8, 0x400, 0x81, 0x5, 0x0, 0x7ff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x5, 0x5b, 0x9, 0x7f, 0x0, 0x8000, 0x40850, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x830, 0x2, @perf_config_ext={0xf3, 0x1}, 0xc0, 0x3ff, 0x80000000, 0x5, 0xffffffffffffff01, 0x1, 0x8000, 0x0, 0x5, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) vmsplice(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)="30f64674187fd0f9bcf09341887e6ba95ed984ae217ac829167a606651f90af6f149414344f4c10c1b91be711003f7", 0x2f}, {&(0x7f0000000200)="7c4501fa3e93d308a4a6911d585e379ed3b906d1efd1baf4d14eb038e39f84c43a36ac62a8c803f6cb1f6c6c3a378de32be7dcc5b5690dbe57643c396fa6793511966d1ab5edb0be47922f190bec08bed7786808d0257ec4a0fc7828f067ae7c17bfc403f16a1c6d24b2764c816d90dfe9c11f9082e7bf79690234ad53b48f4651fbdd91cf", 0x85}, {&(0x7f0000000340)="eb470a8467f7616d158e59952c54afe6c61808589d882224cd0b2e95af7e7f69841de29d29ba107567cf2f3486d113bd5dc7cf2ff539a1cfa452144ee6ee4d998cffdfb4b83c58c4bd9bfdc9d55722ec2647b63debd5c37e1c75f62e4fa4d1c851212fa4ae39ad", 0x67}], 0x3, 0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0x442180) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000480)=0x1) 03:45:57 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2211.972642][T13874] device syzkaller1 entered promiscuous mode 03:45:57 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x7) 03:45:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', r6, 0x80, 0x40, 0x1, 0x86, {{0x27, 0x4, 0x0, 0xa, 0x9c, 0x66, 0x0, 0x80, 0x4, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x1b, 0x1, 0x2, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xd9}, {@multicast1, 0x2}, {@local, 0x33b}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x3f}, {@private=0xa010100, 0x81}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x6b, 0x0, 0x2, [0x6, 0x5, 0x3, 0x6470, 0x8]}, @rr={0x7, 0x23, 0xa2, [@remote, @multicast2, @loopback, @remote, @loopback, @broadcast, @empty, @empty]}, @generic={0x94, 0x11, "cc9a79a291a9e3d67ef375547fc03e"}]}}}}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:57 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2212.109250][T13895] device syzkaller1 entered promiscuous mode 03:45:57 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@local, @empty}, 0xc) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/179, 0xb3}, {&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/183, 0xb7}, {&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000001500)=""/131, 0x83}], 0x7, 0x93, 0xa0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001680), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000018c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f00000016c0)={0x194, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x3000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x85cb}, {0x5}, {0x6, 0x11, 0x3ff}, {0x8, 0xb, 0xc8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x1c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x7fff}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:58 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0xfffffffe) 03:45:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x4, 0xaec3, &(0x7f0000000180)=""/171, 0xab, 0x14}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x5) mknodat$null(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400, 0x103) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:58 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:58 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x8) [ 2212.956387][T13935] device syzkaller1 entered promiscuous mode 03:45:58 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:58 executing program 5: r0 = syz_io_uring_setup(0x185, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5469, &(0x7f0000000000)={0x0, 0xf44b, 0x1, 0x1, 0x2, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:58 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x700) [ 2213.097370][T13935] device syzkaller1 entered promiscuous mode 03:45:58 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x5, 0x1ff, 0xfffffffffffffff9, 0x8, 0x0, 0x1, {0x1}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000000)) 03:45:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x1f00) 03:45:59 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x1000000000000) 03:45:59 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:59 executing program 5: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xfffffffffffff466) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf6a87b161091096b) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x9df3) write$midi(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000680020002bbd7000fcdbdf25020000002800000008000500", @ANYRES32=0x0, @ANYBLOB="100008800c00028008000100", @ANYRES32=r0, @ANYBLOB="06000700050000001000080001000000000000080005087e6afa1b00", @ANYRES32=0x0, @ANYBLOB="04000b00080001000100000014000600fe88000000000000000000000000010106000300000000000c000200000000001d000000"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x24000095) r3 = syz_open_dev$mouse(&(0x7f00000004c0), 0x1, 0x4082) r4 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r4, 0x0, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1cd7a2cb4a69a6b3739d3ce130c1119b84b79857c1542247d7e9bff2b273c6e01106a018c7d4eb9850cb37be5e9f3eae9fd0bdc5cef589f0a265fad8", 0x3c}, {&(0x7f0000000200)="2b12ba4e87a15e35b42a38941de65ffbfd2221d1350a47b707ec5a56a695feff99dfb4cc03a6bdeae1052a39ca52ecb30751127e80c866a8a4ae1d964de24e44fb3aaa37fab87debfc579d886fbc2f41af87a416fb23e94938d2fe140f6feb067ef11fcc36a19a0207fe4f4205d8c72ac39199e3e5bc3e26ce3eb54180d3bd72852a33eb5f76196ad2ef76b4f0795a769fedaae5", 0x94}, {&(0x7f0000000340)="ba612e4fcd835bf640d25b65204c8f9c3209a100e4ab1354eed60274d31b99fcb66286fe803bd29946337f188f56d8e40e5b9b4a3ac420a3aa91df07a55d215304e86f2021adfabf8b13afec67d1b4096d9d653f3993e28d5a719ce3371e9d766cf9e6901a0271dd73cc62d5057a32bcad8d95408a6a871fe24798cb1ae7f604063deb5bbf0b8c44433668294060a689975d195daee55942ae57518fd2", 0x9d}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c770800b86d00000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000800001c000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="e2000000"], 0xc0, 0x8080}, 0x8000) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2000) 03:45:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2214.065625][T14018] device syzkaller1 entered promiscuous mode 03:45:59 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:45:59 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="b06f7fc4d4253fb1c913517366b29509d4dfdaa0f6c2ebe5b8e94c9104e8dd0d598ddc9adc604189e9b7ff5980cb61cbeb6ec942d3f96fe7cc555a61d4a74b0160d6ab1392e3b15c5ce186eaf011c5f7c7c0836f3313c1c7f9d0bbed68cac42d25dc7157c477b91a1b07282309220fab38b59a618412a164d0f65df5cbb1fafd292375743009470e1f71c3093df447074272b101cd5d8855445cbee71bdbe3d3df2d3a712d00d525ef995d17de8af3608d", 0xb1, 0x0, 0x1}, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x7ff, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r4, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/bochs_drm', 0x400000, 0x82) accept(r5, &(0x7f0000000580)=@nfc, &(0x7f0000000500)=0x80) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/201, 0xc9}], 0x1, 0xc4, 0x101) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:45:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x20000) [ 2214.192305][T14018] device syzkaller1 entered promiscuous mode 03:46:00 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r6, 0x0, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r7, 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f0000001640)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x134, 0xffffffffffffffff, &(0x7f0000000140)="be9d877b34c0ad31a06d162197ecadb5204d822bf68f31ba9f1ae8bd", 0x1c, 0x0, 0x0, 0x0, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r5, &(0x7f00000001c0)="f2333b21ca033fc869f9df3f9e725ed7ee84c5ed59819d461c2cb050080a4fb03689c9def1eac0a9b8ee74e572f2384ff9327fe85f2046487c1478111a838374f9e82c2a2593fd45b62059c87d7e084b91de344e67b60c7e47f9d7d29dc416783a1eae73a9b22a7583187c2aa10c1244269122841e2cf6bebac10cb2c5ffe98284c179c4a0dcff79845bbb5817a8559bb1f4d0eadef69b9f34649610a746361b410b6b5829dbe4c3aceea0ca3b29957ec1a19502ebbff46b0e3c0c51d92323b7ddc9c46f9699634bdc8578d90512c8b2b061cc67ff5a12f22db8627c6046f78b2790e8fc899f49960612dcf7e590", 0xee, 0x9, 0x0, 0x2}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x8, 0x6, r3, &(0x7f0000000340)="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", 0x1000, 0x8000, 0x0, 0x1}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x8, 0x200, r6, &(0x7f0000001380)="d2e8b8570818165abb32b3038dbbc428e1bca3123b8973b642f3db34a1804c488c8c7225a024b521555c53a670e6d0064d836dcdeb1d57172beb0e34d60b39fcb29d1aae072ffa1acc96fe5418dc33", 0x4f, 0x4, 0x0, 0x3, r0}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x80, r1, &(0x7f0000001440)="22bde64bbbf1c47f3c0f06200f438858300263a0ea359ade3ab06c335107476e929a51ee2e01e3ee189155e2544f0a21338071b4ecbb76d5ece6fdca9ed6d0a330ea5985ddb8dd4615a35d7f8afad8014dbff8e9385e6ac657c76e57ec23818a4c357b4cea327add22f956f73d3f70545dabc4e179159ffe247d1330bc95e0", 0x7f, 0x8, 0x0, 0x2, r0}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0x9, r7, &(0x7f0000001500)="cd68df11611f2b129adf338e19db3b553bd8c219373d59bc66488840dd076c01f2c1165990497c7a61403e1a5f21c7c0409300b8f55047123cec97d83d5aee5737220459ff524da1c81a07b71f6d9c704ef658e96d8e1c019fe0a465acbd1ab13c45067cf822f0b80946a11bf487dc2de35967df90e438aa8f2664dc9b5f655535e4817c0d83d3a3ea19e7b02af60b6934d76b0276bf1d1f6c90380b9f158877444d27fbf6c8bbc9d47ced01d820ec156f4e0d40cf80d700ade268015125e53a685cc4da2967e31de5a28c3f1850799bb1411ee25809ff4a", 0xd8, 0x7, 0x0, 0x1, r0}]) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2214.494362][T14074] device syzkaller1 entered promiscuous mode [ 2214.586129][T14081] device syzkaller1 entered promiscuous mode 03:46:00 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x40000) 03:46:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2000000000000) 03:46:00 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:00 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/780], 0x30c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101200, 0x80) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) dup(r5) 03:46:00 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socket$netlink(0x10, 0x3, 0x0) r2 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f00000000c0)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:00 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:00 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:00 executing program 5: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="73797af462746e6c300000000800000001009618159ba2217ed554d2b5fdc57fc7322093c5e16b5d0cb978a3adfdf907c505b61fc7c801a3a13b94b47fdf7eb8883601960ce52ffbf84c9a6f088f0dfdb5e30ac88724230df9d1ce71990405f7b4d7bfcdce", @ANYRES32=r6, @ANYBLOB="008000400000008100000004411f00840067000001299078ac141434ac1414aa00831737000000000a010102ac1414bb7f000001ac1e01018313637f000001ac1414bb640101010a0101018327e1e0000001ac141436ac1414aae0000002ffffffffac1414aae0000001ac1414160a010101890f62ac1414aa64010102e0000001860800000003060294040000000000"]}) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r7, 0x2537, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 03:46:00 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x1000000) 03:46:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000000540)=""/251, 0xfb}, {&(0x7f0000000640)=""/242, 0xf2}], 0x7, 0x6, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:00 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:01 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:01 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x4000000000000) 03:46:01 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'team0\x00', {0x2, 0x0, @private}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:01 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:01 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x7000000) 03:46:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/135, 0x87}], 0x1, 0xeb0, 0xfffffe00) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:01 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:01 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2215.579159][T14160] device syzkaller1 entered promiscuous mode 03:46:01 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x4, 0x0, r7, &(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x2}, 0x401) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10, 0x12, r0, 0x8000000) syz_io_uring_setup(0x4ca6, &(0x7f0000000000)={0x0, 0xfb56, 0x0, 0x0, 0x2e}, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x10, 0x2000, 0x0, {0x0, r10}}, 0x1000) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2215.696493][T14182] device syzkaller1 entered promiscuous mode 03:46:01 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x8000000) 03:46:01 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:01 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x5d7302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:02 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x100000000000000) 03:46:02 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:02 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x1f000000) 03:46:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0xd5c59000) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000100)='veth0_to_bond\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x1, r4, &(0x7f0000000040)=0x100, 0x81, 0x5) 03:46:02 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r3, 0x0, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000100)="4780058dd3a3c59d0081cdcaffe8f78629adb365f7b8f7826ad1e80e2c08f6602c16e4435b4244bcfc52e746ff39cbd59efb53953c3fa21b5d6b798b2a", 0x3d}, {&(0x7f0000000140)="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", 0xfd}, {&(0x7f0000000240)="1a70f9b900813b97d7", 0x9}], 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2216.609598][T14226] device syzkaller1 entered promiscuous mode 03:46:02 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:02 executing program 5: r0 = syz_io_uring_setup(0x28c8, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x3c5}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000580)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_setup(0x7ac0, &(0x7f0000000340)={0x0, 0xd444, 0x2, 0x0, 0x1ce, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x7, 0xf923, &(0x7f0000000480)="276ebc44fab92701034e9d8ba850ddabb1a193c9538e08333e21a9dfc4e4aa387811847b72fa0948adae8b8ac562e54e08cc14b1cae7ed3e16", 0x39, 0xa, 0x1}, 0xfffff1d4) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', 0x0, 0x5c938d4ebe133cd5}, 0x10) r6 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r5, 0x40, 0x0, 0xffff, 0x6, 0x0, {0x0, r9}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0x8000000) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) r12 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r15}}, 0x0) syz_io_uring_submit(r10, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x0, 0x2, 0x3, 0x3, {0xa, 0x4e20, 0xfe, @loopback}}}, 0x0, 0x0, 0x0, {0x0, r15}}, 0x5) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2216.699244][T14248] device syzkaller1 entered promiscuous mode 03:46:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:02 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x20000000) 03:46:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8936, &(0x7f0000000140)={'ip6gre0\x00', @ifru_data=&(0x7f0000000100)="5085f8211dc6c4464f6b485f5fb71ab755e4a34947d0c5e7c59fb40d19fd1da5"}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:02 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2217.006661][T14273] device syzkaller1 entered promiscuous mode 03:46:03 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x200000000000000) 03:46:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r0, 0x0, &(0x7f0000000000)="7c9fec8027ee406f976836510edaf0919f3ed4a2cc6c31ea3d6da80321820d954d91073d37cca4cd6cf385a092fcc0a62214385b340be1394ac81dceda3ea67b4c8259c6582a6259982d77b657775b07f4eb1bffa8216fc58b042c4add206eca33cd528434e777febb68e5165ce065bae68b7af9c913faa9156886b7e587fdb74da2c97ccfac1a247808a463067a4b95bd423693ff73258d4fc2628757bfabf844be8126361b7ff0b9dc1cbd448bf1603ee24252c8a253b4cb9d6c1b77d55cc6100375805922ab73dbff716df33d035622d369d73abda41b3e1b4706bed18130c95007ce59c4c750ae87ed24ded1bcff084aa8f661", 0xf5, 0x8010, 0x1, {0x0, r10}}, 0x200) 03:46:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:03 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2000000000000) 03:46:03 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x6c, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private0}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="65020000c5fbd93758eb4cb1e35a71583ad0ba45f0a89f0d0ffb05085345b365a2f9d1376e26cc323a109e854c2ee57bf7fc0f54d126d8e4ac67d0cc6b47db6ee84fc17545e3f1ff59cf2f3b01b8b0ea9d26c4b99b65cd49723a2e103cae89ccc7beb5c68326273dcbd99f86422928ee68b7e570022a7a8af21b76b5ae7073703bb4b05bc89e419954868730cfd6c6a745464e1dee852561c8e5f8aa1e9e3d5c507873d07c3b6473139d2483e702e46b31e0cccec0ae6bd1255d8a8467959cc5791b5e99129207391890dc0891", @ANYRES16=r1, @ANYBLOB="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"], 0x264}}, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x2) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@newtaction={0x2c4, 0x30, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{0x2b0, 0x1, [@m_vlan={0xc0, 0x17, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x81, 0x6, "f25d7a4d8c7b2a44b3fc71307b9ec876bcc5e6b2318bc6cfd4470b0697944c225430ca225dfdc31f05dd863da1464793196679afa26b12a82194110361ac7f89dab207b178f8e621b0dda0180fdbe7d54479c20353a1eb9af1147d85b37c1dc7b1d9e7f8fe779c66af27d9351cf6ae8b4c84b57db118a030962e5d9850"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xf8, 0xe, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x5, 0x10000000, 0x1, 0x401}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x1, 0x10000000, 0x80000001, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x5c, 0x6, "f768ed2671c26ce86a2f909be9eadafca2f55f87a0915dbd44347a3a03690c313c7dee758b4bd505b109e27e5ee0c6a9085cdb01044c7459cf068c34dc8893f5179f23822957835abe513f2fe8c070f25d1ddde9564ab2f1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_vlan={0xf4, 0x14, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd6d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x562}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0x200, 0x10000000, 0x7, 0xcfe000}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x84, 0x6, "f90877c439ab3c5b16caa6d81c5786ce6f51f09d6ab8c8a947d11fd01c5e8ddebbf5f09524cfd54338124e07ee3dcd3672e2bb93b0b4c80366f84683cb5c692519d7d7ff958853f80e83300ada0b0a5d05cd0c7ca214ea1695ec3e65674f63ca5eaa2a1abea3a5aeef1b618de68390f83aa41a8b9d92450b1f74a7dc02d3270f"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x200480c0}, 0xc1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2217.648577][T14295] tipc: Enabling of bearer rejected, failed to enable media 03:46:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2217.726327][T14295] device syzkaller1 entered promiscuous mode 03:46:03 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r3, 0x6400, 0x51a8, 0x4, &(0x7f0000000000)={[0x499]}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:03 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x4000000000000) [ 2217.835973][T14313] device syzkaller1 entered promiscuous mode 03:46:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:03 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:04 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x400000000000000) 03:46:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="740828bd7000ffdbdf250000268a000000000000", @ANYRES32=0x0, @ANYBLOB="0600f1ff0700f3ff0200f3ff060005000303000008000100636273000900010063616b65000000000600050002ca00000b0001006d756c74697100000c000100736b627072696f000b0001006d756c74697100000600050000080000"], 0x74}, 0x1, 0x0, 0x0, 0x20040081}, 0x4008000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:04 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f00000000c0)=""/105, 0x69}], 0x2, 0x8, 0x7) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:04 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:04 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x100000000000000) 03:46:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2218.695039][T14352] device syzkaller1 entered promiscuous mode 03:46:04 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:04 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x113f, &(0x7f0000000180)={0x0, 0xc858, 0x0, 0x1, 0x203, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x80, &(0x7f0000000340)=0x30fc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0xa40, 0x0) syz_io_uring_setup(0x5507, &(0x7f00000018c0)={0x0, 0x72f5, 0x20, 0x2, 0x1c0, 0x0, r0}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000cd8000/0x10000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x5f0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x4, 0x80, 0x9, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:04 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="bdb300000000000000000d00a080a8be3f8f29ba313e49bf9f08000004000180695d12d5ad675443d4dd29877b01970c9eb4a242ed6552e878f6ce6f4d604c10950b1daf00000000000010009d997c5f7e3689097297032fbe4f6bd6f1ef216adb953bdca8adbccb00dad1776b1c5f88a5890c335d03"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc24ef2309915aeb0}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000100)={0x3a22, 0x2, 0x1000, 0x839, 0x8001, 0x7}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'sit0\x00'}) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0xa8c80, 0x0) ioctl$TCGETA(r6, 0x5405, &(0x7f0000000180)) 03:46:04 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x700000000000000) 03:46:04 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2218.983150][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2219.081680][T14393] device syzkaller1 entered promiscuous mode [ 2219.152867][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2219.174912][T14393] device syzkaller1 entered promiscuous mode 03:46:05 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x500000000000000) 03:46:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:05 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_setup(0x7cd2, &(0x7f0000000000)={0x0, 0x55e7, 0x8, 0x2, 0x16f}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r9 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x4, 0xd, 0x1, {0x0, r12, r4}}, 0x80) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x3, 0x2, &(0x7f0000000180)="6664b0a6210f5aace61860e5fb03fc7b9d877cda3c66287bd2cc860bf8e300bc5fae3fc9b6454ee2112004692360ec823e048485a78732d3b3e8a89520a474900766a8df5ce0b3dc482be71fe549d2ea6ea2bbef428302f9a685a0d5acbe77afb55134880febc9ccc59d664b46748eb8f0347b882fb6cb8eb6626d4f2f2e52db4a1bb2fe0d834323cbdbb1172fe09942bdd57f3b8322ae", 0x1, 0x0, 0x1, {0x1, r13}}, 0x7ff) fchdir(r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:05 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x800000000000000) 03:46:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)="e36b1df028ab6e22fcd39d796082bb7b6b5383e9d0667a2097d888bf71642479d36e645920b407a88688b6c22f768672d46b663afca34d714c1caefd98955671e2b94c0662334de5175178e6bc858867562df42ce20d2b03092f2930df2bf54b217129bb6e7871dddf7ad4d7abbaaf5373be7a8e9db85cd4e41fb253b8d6dd", 0x7f}, {&(0x7f0000000180)="e9307e60ccc0a7cacf78bc80827ad27bfca53a8c4dedbcb044bd190736cac0d4a0e256e5ae", 0x25}, {&(0x7f0000000340)="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", 0x1000}], 0x3) 03:46:05 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2219.742850][T14418] device syzkaller1 entered promiscuous mode 03:46:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:05 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x1f00000000000000) 03:46:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "75db727d5a53cbf512f246f542c4173a2f5b4ee62567fe999a0b52dd220a4d89592e3324f28d3cfb2f9124f55dd1ec25928b0419dd17bff237bdcd"}, 0x3f) 03:46:05 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:06 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2000000000000000) 03:46:06 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:06 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x600000000000000) 03:46:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x8, @empty, 0x0, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)="a35ab7aea1f202c12e5085631f5699cda87f6e3f97d69ac06aeb960842cc8179afb0778b116f6a58053e530b9a2adb3cc9e4fe5995c54501bfedd95e60d5eefe", 0x40}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x310}, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xe4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000840)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'bridge_slave_1\x00'}}, 0x0, 0x0, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000002a00200a25bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="07190b08f1ff0a000e000c0024764cca6e60aef463051f0fe218956e8a38b79e04ca53c4a64c85fbfe45d3ff5469d7fa6b75"], 0x24}, 0x1, 0x0, 0x0, 0x80010}, 0x8004) 03:46:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r4 = pidfd_getfd(r0, r2, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0xc000) [ 2220.707036][T14482] device syzkaller1 entered promiscuous mode 03:46:06 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x6c, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private0}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="65020000c5fbd93758eb4cb1e35a71583ad0ba45f0a89f0d0ffb05085345b365a2f9d1376e26cc323a109e854c2ee57bf7fc0f54d126d8e4ac67d0cc6b47db6ee84fc17545e3f1ff59cf2f3b01b8b0ea9d26c4b99b65cd49723a2e103cae89ccc7beb5c68326273dcbd99f86422928ee68b7e570022a7a8af21b76b5ae7073703bb4b05bc89e419954868730cfd6c6a745464e1dee852561c8e5f8aa1e9e3d5c507873d07c3b6473139d2483e702e46b31e0cccec0ae6bd1255d8a8467959cc5791b5e99129207391890dc0891", @ANYRES16=r1, @ANYBLOB="20002abd7000fbdbdf2514000000c40002800400040008000100030000005400038008000200ffffff7f080001009b3d000008000100ffff0000080001002dee000008000200fcfc000008000100020000000800010002000000080002000008000008000100b662980108000100010000005400038008000100080000000800020000080000080002000900000008000100040000000800010098000000080001000000000008000200010000000800020000000000080001000008000008000200c0060000080002000100010004000400480005804400028008000200c5c69d510800040000000040080001001d000000080001001e0000000800020040040000080001001b000000080001001000000008000400020000008400018014000280080002008c0a000008000200010000000e0001006574683a776c616e3100000008000300000000000c000280080004000000000008000300080000000800030001000000380004001400010002004e237f0000010000000000000000200002000a004e2400000005fc020000000000000000000000000000400000000c00028008000200ff030000b4000280080001000700000008000100400000000800010000040000080001000600000008000200000100003c00038008000200180a00000800010000000100080001000100000008000100080000000800010007000000080002005c0200000800010006000000440003800800020001890000080002000080000008000200ffff00000800020001000080080001000004000008000200ff030000080002000080000008000200010000000800020032000000"], 0x264}}, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x2) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@newtaction={0x2c4, 0x30, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{0x2b0, 0x1, [@m_vlan={0xc0, 0x17, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x81, 0x6, "f25d7a4d8c7b2a44b3fc71307b9ec876bcc5e6b2318bc6cfd4470b0697944c225430ca225dfdc31f05dd863da1464793196679afa26b12a82194110361ac7f89dab207b178f8e621b0dda0180fdbe7d54479c20353a1eb9af1147d85b37c1dc7b1d9e7f8fe779c66af27d9351cf6ae8b4c84b57db118a030962e5d9850"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xf8, 0xe, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x5, 0x10000000, 0x1, 0x401}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x1, 0x10000000, 0x80000001, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x5c, 0x6, "f768ed2671c26ce86a2f909be9eadafca2f55f87a0915dbd44347a3a03690c313c7dee758b4bd505b109e27e5ee0c6a9085cdb01044c7459cf068c34dc8893f5179f23822957835abe513f2fe8c070f25d1ddde9564ab2f1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_vlan={0xf4, 0x14, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd6d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x562}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0x200, 0x10000000, 0x7, 0xcfe000}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x84, 0x6, "f90877c439ab3c5b16caa6d81c5786ce6f51f09d6ab8c8a947d11fd01c5e8ddebbf5f09524cfd54338124e07ee3dcd3672e2bb93b0b4c80366f84683cb5c692519d7d7ff958853f80e83300ada0b0a5d05cd0c7ca214ea1695ec3e65674f63ca5eaa2a1abea3a5aeef1b618de68390f83aa41a8b9d92450b1f74a7dc02d3270f"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x200480c0}, 0xc1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:06 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 2220.850966][T14504] device syzkaller1 entered promiscuous mode 03:46:06 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2220.922838][T14517] tipc: Enabling of bearer rejected, failed to enable media [ 2220.992649][T14517] device syzkaller1 entered promiscuous mode 03:46:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x4010, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc55}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000340)=""/149, 0x95}], 0x4, 0x8, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x600a00, 0x0) mmap(&(0x7f00006bb000/0x4000)=nil, 0x4000, 0x5, 0x4000010, r4, 0x76f13000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) write$midi(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) 03:46:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:06 executing program 2: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r1, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x9e0000, 0x2161a2d1, 0x81, r1, 0x0, &(0x7f00000000c0)={0x9909d8, 0x4, '\x00', @p_u32=&(0x7f0000000040)=0x7fffffff}}) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r5, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r2, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2221.201868][T14543] device syzkaller1 entered promiscuous mode [ 2221.325678][T14543] device syzkaller1 entered promiscuous mode [ 2221.511123][ T3266] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.517470][ T3266] ieee802154 phy1 wpan1: encryption failed: -22 03:46:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x700000000000000) 03:46:07 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:07 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r5 = dup2(r3, r4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r7, &(0x7f0000002700)=@IORING_OP_WRITEV={0x2, 0x2, 0x2000, @fd_index=0x3, 0x400, &(0x7f0000002680)=[{&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000340)="f6b42844d55b0bffda315ebed95906eb1f5ea2b80ab653b6cde5a3955a88d8bbabf45dda2c5719684663e153169aa9d1b3b80a033a2587c39104b903bc1218255b1a4012d9ed72dfa1006d34d8a422d89ef7e8b150436c4314adf9b692d51ad9dfa1201c9e8c0f7bee40a6a1c4b9d2843e4453c004158868fd9c5274250f661c18e8bed36e2b49dc6738fb0ed72c12803d9a25f3e2a62bfbc3b726599ab7c17ffd0b1624dcdd8bc4a0e0146c67e1b7a386e6231b68b5396a44521f8e9f7a8c0079e66c9caa5ca624798696780128f93ed5d5ecc06c4e43668c1245c0b689af7559c43a8a47", 0xe5}, {&(0x7f0000000040)="82e4b371125ca3a0107ecd90a6525aa7afb38974c32297588049058075afa815dca9016ae8786ec5a12c0b54dfdaa4d750", 0x31}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000000440)="1143ea4f9221c17f18b02250261da9fb68976e1a9fb3aa01b9d2901b5ef5e2367b3c0bd979019d908f74cfc3e9e35a33bae7d6e6d5286bba997e82c38280c51803fa38218b2489cd03f81144f382debfed66096b6c672192b6e54b08b9660b4bda4bff30f882bce0f2b6b96866fdecfcd5649fed5bc286204835535fa519ee1f932ca5edc81b8ed2b9ba63ea5e1c3e4d02f8806045ec4ba543c92bd0565b2818897e2f6ccd34705198720d298fb623b8", 0xb0}, {&(0x7f00000000c0)="4e6ad0505f26fde5f0c7239a159acd5d7f9c445e558f933815bfc604c370dfc1a5552f582ac0599fd6d5ad2509be27bd5ab120ea9a7ea4269d76e13c90ee6fa5be147c875574f36a717a276d23912790582c6359ac35a4823c7c67b009f723e0647185", 0x63}, {&(0x7f0000000500)='H', 0x1}], 0x8, 0x10}, 0x401) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002780), r5) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x5b3959eb32ee1b97}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x70, r9, 0x800, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40084) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000100)) 03:46:07 executing program 2: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r2, 0x175d, 0xf1b7, 0x0, &(0x7f0000000000)={[0x4]}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_complete(r0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) [ 2221.879748][T14577] device syzkaller1 entered promiscuous mode 03:46:07 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:07 executing program 2: r0 = syz_io_uring_setup(0x3c46, &(0x7f00000002c0)={0x0, 0x4b47}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ed5, &(0x7f0000000000)={0x0, 0x93eb, 0x10, 0x1, 0x279, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000001c0)='geneve1\x00', 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r9, 0x17, 0x83da, 0x3, &(0x7f0000000340)={[0x1f40]}, 0x8) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4004, @fd_index=0x3, 0x0, 0x401, 0x6d0, 0x8, 0x1}, 0x6949dde6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth1_to_bond\x00'}) 03:46:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:07 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2222.063190][T14610] device syzkaller1 entered promiscuous mode 03:46:08 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x1f00000000000000) 03:46:08 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x3e3886dce06d9991, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x307) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:08 executing program 2: r0 = syz_io_uring_setup(0xf5f, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2222.821948][T14653] device syzkaller1 entered promiscuous mode 03:46:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:08 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x4, 0x0, 0x0, 0x3, 0x2], 0x4, 0x2}, {0x4, [0x1, 0x1, 0x0, 0x6, 0x2], 0x3, 0x7}}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "bb45"}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0xa1e2, 0x7, 0x3ff, 'snmp\x00', 'syz0\x00', {0x3ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:08 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2222.953379][T14683] device syzkaller1 entered promiscuous mode [ 2222.983574][T14685] x_tables: duplicate underflow at hook 3 03:46:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:08 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000100)) [ 2223.212699][T14715] device syzkaller1 entered promiscuous mode 03:46:09 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:09 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x3c3a, &(0x7f0000000000)={0x0, 0xa258, 0x9, 0x3, 0x399, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000200)) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r5, 0x24c4, 0x73ce, 0x3, &(0x7f00000001c0)={[0x7fffffff]}, 0x8) r6 = socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd=r6, 0xc79, 0x81, 0x0, 0xf, 0x0, {0x1}}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:09 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2000000000000000) 03:46:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x28}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2223.668802][T14741] device syzkaller1 entered promiscuous mode 03:46:09 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2223.742190][T14766] device syzkaller1 entered promiscuous mode 03:46:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x7, 0x103080) mknodat$null(r2, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:09 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:09 executing program 2: r0 = syz_io_uring_setup(0x1a7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3f}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x20010, r0, 0x10000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, r0, 0x10000000) r5 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2ca980, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x100, 0x0, {0x2}}, 0x0) r6 = syz_io_uring_setup(0x1dda, &(0x7f0000000080)={0x0, 0x200000, 0x1, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x1, 0x401, 0x0, 0xe8, 0x3, 0x1, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r9}}, 0x400) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x3, &(0x7f0000000040), 0x1, 0x1}, 0x8001) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/165, 0xa5}], 0x2, 0x80000000, 0xea) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r10, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2224.084627][T14790] device syzkaller1 entered promiscuous mode 03:46:09 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2224.204955][T14812] device syzkaller1 entered promiscuous mode 03:46:10 executing program 2: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r2, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$inet(r3, &(0x7f0000000000)=""/69, 0x45, 0x40010000, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) 03:46:10 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:10 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x3f00000000000000) 03:46:10 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) fgetxattr(r0, &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/251, 0xfb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2, 0x0) dup2(r1, r2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000002c0)={0x5, 0x4, 0x1f}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000140)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x8, 0x6, 0x1, 0xa0, 0x0, 0x0, 0x9e0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x7e, 0x7}, 0x30, 0x9, 0x0, 0x8, 0xffffffff00000002, 0xfff, 0x3, 0x0, 0x726, 0x0, 0x80000001}, 0xffffffffffffffff, 0x6, r5, 0x3) 03:46:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:10 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:10 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x402, 0x23456}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:10 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2225.265027][T14861] device syzkaller1 entered promiscuous mode 03:46:11 executing program 2: r0 = syz_io_uring_setup(0x16cb, &(0x7f0000000340)={0x0, 0x69f3, 0x2, 0x3, 0x32f}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x1, 0x1ff, 0x0, 0x0, 0x4, 0x0, {0x0, r6}}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:11 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x8400000000000000) 03:46:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0x9, 0xfffffffe, '\x00', &(0x7f0000000140)=0x4}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f0000001340)=""/84, 0x54}, {&(0x7f00000013c0)=""/91, 0x5b}, {&(0x7f0000001440)=""/108, 0x6c}, {&(0x7f00000014c0)=""/224, 0xe0}], 0x8, 0x59f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x38) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:11 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:11 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="bfae26f53de15f255f0acded17b1a4574b34172c2f755815cdab12f80b1c37fd4656f130594fc1bf09484541e4e54d1a3c85c8bb54d0c931dfd926f23ae0fdb603e8879306df674c57950097ccc382ba6bec4bf98f848cf1d1b9ae3018e0046ed23883a67d9aafe230270e1f14ccfac5bbb8bf81995a6e0202207c9d5ad2d94f13e4f90eb83c5f2d4660d780662dbbd0c2f1e27d41efd6f191fc87308bfa4a26ea0726b9e925c16c316041a57dcd60c6ab", 0xb1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1010}, 0x0, 0x24044801}, 0x2) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x0, 0x1, {0x0, r4}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r5, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r6 = accept4(r5, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000400)=0x80, 0x800) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x0, &(0x7f0000000440)=0x101a, 0x4) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:11 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2226.090285][T14902] device syzkaller1 entered promiscuous mode 03:46:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:11 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40880, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[0x4, 0x3, 0x5, 0x100, 0x5, 0x9, 0x79d]}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r4, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r1, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:12 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_setup(0x5504, &(0x7f00000018c0)={0x0, 0x0, 0x5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4004, @fd_index=0x6, 0x0, 0x0, 0x0, 0xc, 0x0, {0x1, r5}}, 0xeeb) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2226.474154][T14937] device syzkaller1 entered promiscuous mode [ 2226.558351][T14937] device syzkaller1 entered promiscuous mode 03:46:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0xfeffffff00000000) 03:46:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:12 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) io_uring_enter(r0, 0x786e, 0x1524, 0x0, &(0x7f0000000000)={[0x40]}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x40480, 0x0) sendto$isdn(r4, &(0x7f0000000100)={0x6, 0x2, "8dfbdf89759cdf7568f659dbdbd03babcb01cd6b5ce0aa3d8a01d6664a2ebe46a7"}, 0x29, 0x40000, &(0x7f0000000180)={0x22, 0x3, 0x1f, 0x3, 0x20}, 0x6) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f00000000c0), 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:12 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0x9, 0xfffffffe, '\x00', &(0x7f0000000140)=0x4}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f0000001340)=""/84, 0x54}, {&(0x7f00000013c0)=""/91, 0x5b}, {&(0x7f0000001440)=""/108, 0x6c}, {&(0x7f00000014c0)=""/224, 0xe0}], 0x8, 0x59f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x38) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:12 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2227.029030][T14964] device syzkaller1 entered promiscuous mode 03:46:12 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:12 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0xffffff7f00000000) 03:46:13 executing program 1: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:13 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x183041, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000740)=""/25, 0x19}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/87, 0x57}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f0000000600)=""/151, 0x97}], 0x7, 0xd9f, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c9691007") r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x1, 0x0, 0x100000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x7000) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x3000) clone(0x2190c000, &(0x7f00000000c0)="82002fce2135c1d875b392b522edeb22b50a195e99d4988244283794c379ca1ab0a807968676f02aba40c0606d4aed6ebd2d1090fe8f01ab51bf27b643111b4eb6591dceed1ca1c9775bb87847b5164c4090b67fbd144781835e20fb75e013", &(0x7f0000000000), 0x0, &(0x7f0000000180)="79065d3c923da44ae5c8bad446b548d26facfbce00a86b7c4e2108a06ccec654d118d427e50e94d2303b30f7194f28af1c607e29204895ed48a5ab576a5725071e19618f454680f62c53549ac518b09ec37f27ea716eb0bb582e72d04c1a7510c029cdec12e8a87e23f7307408d8a815137ae841fd2ab56ef16a887b4f978c51a942c45dd6029ebc59") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='syzkaller1\x00') r3 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f00008fc000/0x3000)=nil, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x42, 0x0, 0x0, 0x0, 0x50d, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x100, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) 03:46:13 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:13 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x13, r0, 0x8000000) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r5, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4007, @fd=r5, 0x8, 0xaf7, 0x1f, 0x8, 0x0, {0x3, r6}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x100010, r0, 0x10000000) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x20010, r8, 0xb88a6000) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x31713}, 0x1f) 03:46:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:13 executing program 1: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:13 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:13 executing program 2: r0 = add_key(&(0x7f0000000500)='syzkaller\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)="ccd07f4ab5e293d0ef675075319c16d1b1ac34ead795a6c1cb74f628346fcf01a8d19590fb93c3b53a9189f508e8567182fd5f8e05da17b358a694adb931c676e646472b067f8253331e0305b2c06a44f77079b3ca8fe37e75bf1eba8ce24cb5ba72b8e1b95f830e9ae6c9885f55f409f14a3dca01b3", 0x76, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x7f) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000040)={0x3, &(0x7f0000000180)=""/158, &(0x7f00000000c0)=[{0x20, 0xef, 0xdfa, &(0x7f0000000340)=""/239}, {0x3, 0xaa, 0xe4d, &(0x7f0000000440)=""/170}, {0x7ff}]}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) keyctl$set_timeout(0xf, r0, 0x7) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000240)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r4, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r1, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:13 executing program 1: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0xffffffff00000000) 03:46:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:14 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:14 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'tunl0\x00', @ifru_map}}) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:14 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:46:14 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:14 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:14 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:46:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:14 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:14 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:46:14 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) dup2(r3, r0) 03:46:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:15 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:15 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:15 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:15 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r0, r3, r4, r3, r3, r3, r5, r6], 0x8, 0x0, 0x1}, 0x7fffffff) 03:46:15 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = syz_io_uring_setup(0x1dda, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000259000/0x2000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0xfffffffb) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x13, 0xffffffffffffffff, 0x0) preadv(r11, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r11}, 0x10) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:15 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x3001}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x2010, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2007, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in6=@private2}, {@in6=@private0, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0xe000000) 03:46:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:15 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:16 executing program 1 (fault-call:5 fault-nth:0): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:16 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r6, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x2, 0x1, {0x0, r4}, 0x7, 0x3, 0x0, {0x0, r5, r6}}, 0x5) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r12}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r7, r11, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r5}}, 0x3) 03:46:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2230.553430][T15147] FAULT_INJECTION: forcing a failure. [ 2230.553430][T15147] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.582612][T15147] CPU: 0 PID: 15147 Comm: syz-executor.1 Not tainted 5.14.0-rc1-syzkaller #0 [ 2230.591424][T15147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2230.601498][T15147] Call Trace: [ 2230.604817][T15147] dump_stack_lvl+0xcd/0x134 [ 2230.609626][T15147] should_fail.cold+0x5/0xa [ 2230.614177][T15147] should_failslab+0x5/0x10 [ 2230.618706][T15147] kmem_cache_alloc_bulk+0x4a/0x490 [ 2230.623937][T15147] io_submit_sqes+0xddc/0x7bc0 [ 2230.628753][T15147] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2230.634493][T15147] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2230.640072][T15147] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2230.645129][T15147] ? irqentry_enter+0x28/0x50 [ 2230.649837][T15147] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2230.656032][T15147] ? lockdep_hardirqs_on+0x79/0x100 [ 2230.661260][T15147] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2230.667438][T15147] ? trace_hardirqs_on+0x38/0x1c0 [ 2230.672486][T15147] ? syscall_enter_from_user_mode+0x2b/0x70 [ 2230.678441][T15147] do_syscall_64+0x35/0xb0 [ 2230.682882][T15147] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2230.688809][T15147] RIP: 0033:0x4665d9 [ 2230.692724][T15147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.712611][T15147] RSP: 002b:00007f5cc7d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2230.721155][T15147] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2230.729151][T15147] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2230.737133][T15147] RBP: 00007f5cc7d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.745120][T15147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:46:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:16 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) syz_io_uring_setup(0x53c9, &(0x7f0000000180)={0x0, 0x88b9, 0x10, 0x1, 0x87}, &(0x7f0000cdb000/0x2000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x10000000) syz_io_uring_submit(r3, r7, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000440)='./file0\x00', 0x102, 0x80000, 0x23456}, 0x40) r9 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000380)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x6007, @fd=r9, 0x100000001, 0x0, 0x0, 0x2, 0x1, {0x3}}, 0x3ff) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xf6, 0x580000, 0x23456}, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2230.753107][T15147] R13: 0000000000a9fb1f R14: 00007f5cc7d31300 R15: 0000000000022000 03:46:16 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x11c, &(0x7f0000000000)=0xa5, 0x0, 0x4) r7 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r7, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:16 executing program 4 (fault-call:5 fault-nth:0): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2230.971172][T15177] FAULT_INJECTION: forcing a failure. [ 2230.971172][T15177] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.011820][T15177] CPU: 0 PID: 15177 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2231.020633][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2231.030691][T15177] Call Trace: [ 2231.033958][T15177] dump_stack_lvl+0xcd/0x134 [ 2231.038550][T15177] should_fail.cold+0x5/0xa [ 2231.043050][T15177] should_failslab+0x5/0x10 [ 2231.047545][T15177] kmem_cache_alloc_bulk+0x4a/0x490 [ 2231.052742][T15177] io_submit_sqes+0xddc/0x7bc0 [ 2231.057518][T15177] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2231.063232][T15177] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2231.068775][T15177] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2231.073795][T15177] ? find_held_lock+0x2d/0x110 [ 2231.078567][T15177] ? __context_tracking_exit+0xb8/0xe0 [ 2231.084023][T15177] ? lock_downgrade+0x6e0/0x6e0 [ 2231.088862][T15177] ? lock_downgrade+0x6e0/0x6e0 [ 2231.093713][T15177] ? syscall_enter_from_user_mode+0x21/0x70 [ 2231.099601][T15177] do_syscall_64+0x35/0xb0 [ 2231.104006][T15177] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2231.109894][T15177] RIP: 0033:0x4665d9 [ 2231.113783][T15177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.133397][T15177] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2231.141816][T15177] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2231.149781][T15177] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 03:46:16 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2231.157739][T15177] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.165784][T15177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2231.173741][T15177] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:17 executing program 1 (fault-call:5 fault-nth:1): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:17 executing program 4 (fault-call:5 fault-nth:1): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:17 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000003c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r3, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000380)=[{r0, 0x504}, {0xffffffffffffffff, 0x248}, {r0, 0x49}, {r3, 0x9460}, {r4, 0x8018}, {0xffffffffffffffff, 0xe004}, {r5, 0x9600}], 0x7, 0x874) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000002c0)=0xb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r7, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x6, 0x1, &(0x7f0000000180)="1e5f8db48da64a94b257835cf66cedfb5234ca2a5cae8ba66b422b64a6bd7db678fc2d896678e3c8c5f622807ed6ce72aaa62556c01447ede514e5bee5addeedc9b8054b04d03aaa62cf", 0x0, 0x0, 0x1, {0x2}}, 0x8) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0xe5c7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r9, 0x4ba2, 0xc40e, 0x2, &(0x7f0000000240)={[0x11a4]}, 0x8) [ 2231.532619][T15206] FAULT_INJECTION: forcing a failure. [ 2231.532619][T15206] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.570853][T15212] FAULT_INJECTION: forcing a failure. [ 2231.570853][T15212] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.592651][T15206] CPU: 0 PID: 15206 Comm: syz-executor.1 Not tainted 5.14.0-rc1-syzkaller #0 [ 2231.601464][T15206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2231.611540][T15206] Call Trace: [ 2231.614827][T15206] dump_stack_lvl+0xcd/0x134 [ 2231.619437][T15206] should_fail.cold+0x5/0xa [ 2231.623966][T15206] ? io_read+0xdaa/0x1140 [ 2231.628300][T15206] should_failslab+0x5/0x10 [ 2231.632820][T15206] __kmalloc+0x72/0x330 [ 2231.636979][T15206] io_read+0xdaa/0x1140 [ 2231.641135][T15206] ? __do_sys_io_uring_register+0x2890/0x2890 [ 2231.647205][T15206] ? kernel_text_address+0xbd/0xf0 [ 2231.652322][T15206] ? lock_chain_count+0x20/0x20 [ 2231.657263][T15206] ? unwind_get_return_address+0x51/0x90 [ 2231.662937][T15206] ? dma_free_attrs+0x80/0x150 [ 2231.667713][T15206] ? stack_trace_save+0x8c/0xc0 [ 2231.672574][T15206] ? __lock_acquire+0xbc2/0x54a0 [ 2231.677512][T15206] io_issue_sqe+0x20b/0x6920 [ 2231.682100][T15206] ? do_syscall_64+0x35/0xb0 [ 2231.686685][T15206] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2231.692689][T15206] ? io_write+0xed0/0xed0 [ 2231.697037][T15206] ? find_held_lock+0x2d/0x110 [ 2231.701828][T15206] ? __fget_files+0x21b/0x3e0 [ 2231.706682][T15206] ? lock_downgrade+0x6e0/0x6e0 [ 2231.711707][T15206] ? ___slab_alloc+0x17c/0x820 [ 2231.716472][T15206] __io_queue_sqe+0x1ac/0xf10 [ 2231.721146][T15206] ? io_issue_sqe+0x6920/0x6920 [ 2231.725991][T15206] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 2231.731893][T15206] io_submit_sqes+0x63ea/0x7bc0 [ 2231.736761][T15206] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2231.742476][T15206] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2231.748139][T15206] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2231.753158][T15206] ? find_held_lock+0x2d/0x110 [ 2231.757923][T15206] ? __context_tracking_exit+0xb8/0xe0 [ 2231.763389][T15206] ? lock_downgrade+0x6e0/0x6e0 [ 2231.768250][T15206] ? syscall_enter_from_user_mode+0x21/0x70 [ 2231.774231][T15206] do_syscall_64+0x35/0xb0 [ 2231.778639][T15206] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2231.784627][T15206] RIP: 0033:0x4665d9 [ 2231.788559][T15206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.808331][T15206] RSP: 002b:00007f5cc7d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2231.816740][T15206] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2231.824710][T15206] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2231.832670][T15206] RBP: 00007f5cc7d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.840631][T15206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2231.848590][T15206] R13: 0000000000a9fb1f R14: 00007f5cc7d31300 R15: 0000000000022000 [ 2231.895678][T15212] CPU: 0 PID: 15212 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2231.904493][T15212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2231.914752][T15212] Call Trace: [ 2231.918049][T15212] dump_stack_lvl+0xcd/0x134 [ 2231.922674][T15212] should_fail.cold+0x5/0xa [ 2231.927212][T15212] ? io_read+0xdaa/0x1140 [ 2231.931557][T15212] should_failslab+0x5/0x10 [ 2231.936081][T15212] __kmalloc+0x72/0x330 [ 2231.940267][T15212] io_read+0xdaa/0x1140 [ 2231.944453][T15212] ? __do_sys_io_uring_register+0x2890/0x2890 [ 2231.950813][T15212] ? kernel_text_address+0xbd/0xf0 [ 2231.955950][T15212] ? lock_chain_count+0x20/0x20 [ 2231.960823][T15212] ? unwind_get_return_address+0x51/0x90 [ 2231.966482][T15212] ? dma_free_attrs+0x80/0x150 [ 2231.971298][T15212] ? stack_trace_save+0x8c/0xc0 [ 2231.976176][T15212] ? __lock_acquire+0xbc2/0x54a0 [ 2231.981231][T15212] io_issue_sqe+0x20b/0x6920 [ 2231.985934][T15212] ? do_syscall_64+0x35/0xb0 [ 2231.990560][T15212] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2231.996568][T15212] ? io_write+0xed0/0xed0 [ 2232.000916][T15212] ? find_held_lock+0x2d/0x110 [ 2232.005830][T15212] ? __fget_files+0x21b/0x3e0 [ 2232.010530][T15212] ? lock_downgrade+0x6e0/0x6e0 [ 2232.015407][T15212] __io_queue_sqe+0x1ac/0xf10 [ 2232.020134][T15212] ? io_issue_sqe+0x6920/0x6920 [ 2232.025012][T15212] io_submit_sqes+0x63ea/0x7bc0 [ 2232.029992][T15212] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2232.035727][T15212] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2232.041367][T15212] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2232.046387][T15212] ? find_held_lock+0x2d/0x110 [ 2232.051153][T15212] ? __context_tracking_exit+0xb8/0xe0 [ 2232.056609][T15212] ? lock_downgrade+0x6e0/0x6e0 [ 2232.061452][T15212] ? lock_downgrade+0x6e0/0x6e0 [ 2232.066409][T15212] ? syscall_enter_from_user_mode+0x21/0x70 [ 2232.072303][T15212] do_syscall_64+0x35/0xb0 [ 2232.077238][T15212] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2232.083131][T15212] RIP: 0033:0x4665d9 [ 2232.087020][T15212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.106707][T15212] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2232.115292][T15212] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2232.123259][T15212] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2232.131229][T15212] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 03:46:17 executing program 1 (fault-call:5 fault-nth:2): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2232.139200][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2232.147169][T15212] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x9d70}, &(0x7f000006c000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000001640)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00007e5000/0x2000)=nil, 0x2000, 0x2800001, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_newroute={0x24, 0x18, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x80, 0x10, 0x1, 0xfd, 0x2, 0xff, 0x6}, [@RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x24000800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r5, 0x1177, 0x1357, 0x1, &(0x7f0000000040), 0x8) recvmsg$qrtr(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000040)}, {&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f00000000c0)=""/36, 0x24}], 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0xe0}, 0x38, 0x100) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000012c0)=@filter={'filter\x00', 0xe, 0x4, 0xd10, [0x0, 0x20000580, 0x20000eb6, 0x20000ee6], 0x0, &(0x7f0000000380), &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x5, 0x2c, 0xf8, 'team_slave_1\x00', 'xfrm0\x00', 'caif0\x00', 'veth1_to_hsr\x00', @random="900ff58f71b6", [0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x856, 0x8d6, 0x906, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x6, 0x2}, {0x1, 0x2}, {0x2, 0x1}, {0x5, 0x2}, {0x8, 0x2}, {0x7}, {0x1, 0x1}, {0x6, 0x1}, {0xe272, 0x1}, {0x1ff, 0x2}, {0x3, 0x3}], [{0x7f}, {0x1000, 0xff}, {0x2, 0xd7}, {0x8, 0x80}, {0x1000, 0x9}, {0x6, 0x80}, {0x5, 0x3}, {0x6, 0x2}, {0x8, 0x7}, {0x3, 0x3ff}, {0x838, 0x7fff}], 0x9, 0x4}, {[{0x8, 0x1}, {0x10001, 0x3}, {0x8961, 0x3}, {0x3}, {0x11a2e3d7}, {0x80000001, 0x3}, {0xc1}, {0x2, 0x1}, {0x27, 0x2}, {0x401, 0x1}, {0x37}], [{0x7, 0x55b}, {0x40}, {0x8, 0x5}, {0x90b, 0x2}, {0xffffab16, 0xfffffff9}, {0x2, 0x3a3}, {0x48, 0x2}, {0x7fff, 0x800}, {0x40, 0x8}, {0x0, 0x9}, {0x6, 0x60a}], 0x0, 0x8}, {[{0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x3}, {0x8, 0x3}, {0x5}, {0x20, 0x3}, {0xffff, 0x3}, {0x2, 0x3}], [{0x1, 0xfffff84a}, {0xd19c, 0x9b}, {0x4}, {0x2, 0x4}, {0x6, 0x1a8}, {0x5d3, 0x10000}, {0x3, 0xf9}, {0x3, 0x5}, {0xfffffff7, 0x8}, {0x80, 0xc15f}, {0x6, 0x8}], 0x0, 0xa}, {[{0x8, 0x2}, {0x970, 0x1}, {0x40, 0x2}, {0x3, 0x1}, {0x8001, 0x1}, {0x8, 0x2}, {0x26200, 0x1}, {0x4, 0x3}, {0x3f, 0x1}, {0x3, 0x3}, {0x1}], [{0x2, 0x8}, {0xf98, 0x80}, {0x101}, {0x3, 0x1ff}, {0x3, 0x4}, {0x7fff, 0x33}, {0x6, 0x5}, {0x81, 0xbd3}, {0x9c9, 0x81}, {0xfff}, {0x7, 0x1ff}], 0x5, 0x6}, {[{0xff, 0x2}, {0x4, 0x1}, {0x20, 0x2}, {0x7, 0x1}, {0x8c6, 0x3}, {0x8, 0x1}, {0x3}, {0xfffffffe, 0x1}, {0x8, 0x3}, {0x1000, 0x2}, {0x8}], [{0x7, 0xe3a}, {0x91f2, 0x80000001}, {0x8, 0x8}, {0x3ff, 0x40}, {0x0, 0x8}, {0x3e00, 0x14}, {0x3f, 0x6e}, {0x2b, 0x80000001}, {0x2, 0x5}, {0x9, 0x3}, {0xaf, 0xce1}], 0x8, 0x6}, {[{0x2, 0x3}, {0x5d, 0x2}, {0x3}, {0x4, 0x2}, {0x8, 0x2}, {0x5}, {0x4, 0x2}, {0xe375, 0x1}, {0x9, 0x1}, {0x6c72, 0x3}, {0x3, 0x1}], [{0x7, 0xff}, {0x2, 0x9}, {0x100, 0x7}, {0x400, 0x5}, {0x0, 0x40}, {0x400, 0x200}, {0x1, 0x1c1}, {0x5, 0x8}, {0x1a, 0x5}, {0x9, 0x8001}, {0x1000, 0x2}], 0x6, 0x1}, {[{0x2, 0x1}, {0x1000}, {0x4}, {0x98c, 0x1}, {0x2, 0x1}, {0xffff, 0x3}, {0x496, 0x2}, {0x81, 0x3}, {0x1, 0x3}, {0x64000000}, {0x3, 0x2}], [{0x80, 0x5}, {0x4, 0x6}, {0xffffff00, 0x7}, {0x9, 0x1}, {0x1f, 0x7}, {0x2e28, 0x1}, {0x6, 0xffffffff}, {0x80000000, 0x100}, {0xfffffffb, 0x1}, {0xfffffffe, 0x9}, {0x200, 0x7}], 0x2, 0x3}, {[{0xff, 0x2}, {0xff}, {0x9, 0x1}, {0x9}, {0x3, 0x2}, {0x4}, {0x4ef, 0x2}, {0x80000000, 0x1}, {0x2, 0x1}, {0x1000}, {0x8, 0x1}], [{0x0, 0x5b400000}, {0x9, 0x6}, {0x3, 0x4}, {0x6, 0x7}, {0x1, 0x10001}, {0x6, 0x9}, {0x45bb3b32, 0xffffffe1}, {0x3, 0x4}, {0xbd38, 0x4}, {0x7, 0xffffff6f}, {0x2, 0x80000001}], 0x5, 0xa}, {[{0x5, 0x3}, {0x1fb, 0x2}, {0x1, 0x2}, {0x6, 0x3}, {0x9, 0x2}, {0x200, 0xd71ce198919a1e78}, {0x9, 0x1}, {0x5, 0x3}, {0x1, 0x2}, {0x101}, {0x8, 0x1}], [{0x7, 0x4}, {0xffffffff, 0x4}, {0x7754eb3b, 0x800}, {0x3f5, 0x80000000}, {0x81, 0x3f}, {0x1400, 0x4}, {0x101, 0x8001}, {0x6, 0x8001}, {0x2, 0x25af0e1e}, {0x2, 0x6}, {0x800, 0x1}], 0xb, 0x4}, {[{0x8}, {0xad4}, {0x1, 0x2}, {0x9, 0x1}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0x3}, {0x1f, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x80000000}], [{0x5, 0x2}, {0x81}, {0x5, 0x100}, {0x3, 0x1516}, {0x8001, 0x2}, {0x8, 0x8}, {0xd2, 0x9}, {0x101, 0xa58}, {0x9, 0x7}, {0x8, 0xe89}, {0x2, 0x1f8000}], 0xb, 0x8}, {[{0x9, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x4, 0x2}, {0x7f2}, {0x8, 0x3}, {0x8}, {0x401}, {0x20, 0x3}, {0x1, 0x1}, {0x0, 0x2}], [{0x20, 0x3}, {0x9, 0xffffffc0}, {0x0, 0x401}, {0x1, 0x7}, {0x6, 0x5}, {0xfffffe00, 0x20}, {0x578e, 0x4087c634}, {0x40, 0x2}, {0x5, 0x3}, {0x4, 0xf2df}, {0x1, 0x8}], 0x2, 0x5}]}}}], [@common=@log={'log\x00', 0x28, {{0x70, "ab1b192179059b2067931030c38826ed882e71e8ae622117e04db2c03261", 0x8}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x20}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x9, 0xe8e6, 'xfrm0\x00', 'tunl0\x00', 'bridge_slave_0\x00', 'macvlan1\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10000, 'system_u:object_r:semanage_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x3, 0x9, 0xf5, 'ipvlan0\x00', 'vcan0\x00', 'bridge_slave_1\x00', 'bond_slave_0\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, [0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x9, "5ae57b23d8c6af45c1ed25e547ced9909529f8b799bdcd5dad8f3712120c", 0xe}}}}, {0x11, 0x40, 0x8848, 'macsec0\x00', 'batadv_slave_0\x00', 'geneve0\x00', 'team0\x00', @remote, [0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, [0x3d7870c39b531cbf, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffffffff, 'syz1\x00', {0x8}}}}}]}]}, 0xd88) r7 = io_uring_setup(0x68ec, &(0x7f00000015c0)={0x0, 0x574a, 0x8, 0x1, 0x2b3}) close(r7) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:17 executing program 4 (fault-call:5 fault-nth:2): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2232.274457][T15231] FAULT_INJECTION: forcing a failure. [ 2232.274457][T15231] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.328003][T15231] CPU: 0 PID: 15231 Comm: syz-executor.1 Not tainted 5.14.0-rc1-syzkaller #0 [ 2232.336830][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2232.346902][T15231] Call Trace: [ 2232.350183][T15231] dump_stack_lvl+0xcd/0x134 [ 2232.354790][T15231] should_fail.cold+0x5/0xa [ 2232.359294][T15231] ? __io_queue_sqe+0x807/0xf10 [ 2232.364137][T15231] should_failslab+0x5/0x10 [ 2232.368635][T15231] kmem_cache_alloc_trace+0x55/0x3c0 [ 2232.373920][T15231] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2232.380165][T15231] __io_queue_sqe+0x807/0xf10 [ 2232.384849][T15231] ? io_issue_sqe+0x6920/0x6920 [ 2232.389902][T15231] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 2232.395815][T15231] io_submit_sqes+0x63ea/0x7bc0 [ 2232.400685][T15231] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2232.406421][T15231] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2232.411988][T15231] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2232.417010][T15231] ? find_held_lock+0x2d/0x110 [ 2232.421773][T15231] ? __context_tracking_exit+0xb8/0xe0 [ 2232.427228][T15231] ? lock_downgrade+0x6e0/0x6e0 [ 2232.432097][T15231] ? syscall_enter_from_user_mode+0x21/0x70 [ 2232.438024][T15231] do_syscall_64+0x35/0xb0 [ 2232.442449][T15231] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2232.448353][T15231] RIP: 0033:0x4665d9 [ 2232.452252][T15231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:46:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2232.472122][T15231] RSP: 002b:00007f5cc7d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2232.480536][T15231] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2232.488585][T15231] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2232.496546][T15231] RBP: 00007f5cc7d311d0 R08: 0000000000000000 R09: 0000000000000000 [ 2232.504508][T15231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2232.512467][T15231] R13: 0000000000a9fb1f R14: 00007f5cc7d31300 R15: 0000000000022000 03:46:18 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x2}}}}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000400)) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r3, 0x80, &(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xae48}, 0x0, 0x0, 0x0, {0x0, r10}}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r4, 0x7c0e7000) 03:46:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:18 executing program 1 (fault-call:5 fault-nth:3): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2232.705769][T15248] FAULT_INJECTION: forcing a failure. [ 2232.705769][T15248] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.747394][T15248] CPU: 0 PID: 15248 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2232.756221][T15248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2232.766297][T15248] Call Trace: [ 2232.769599][T15248] dump_stack_lvl+0xcd/0x134 [ 2232.774347][T15248] should_fail.cold+0x5/0xa [ 2232.778887][T15248] ? io_read+0xdaa/0x1140 [ 2232.783240][T15248] should_failslab+0x5/0x10 [ 2232.787812][T15248] __kmalloc+0x72/0x330 [ 2232.791208][T15256] FAULT_INJECTION: forcing a failure. [ 2232.791208][T15256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2232.792076][T15248] io_read+0xdaa/0x1140 [ 2232.792117][T15248] ? __do_sys_io_uring_register+0x2890/0x2890 [ 2232.792148][T15248] ? kernel_text_address+0xbd/0xf0 [ 2232.820463][T15248] ? lock_chain_count+0x20/0x20 [ 2232.825340][T15248] ? unwind_get_return_address+0x51/0x90 [ 2232.830996][T15248] ? dma_free_attrs+0x80/0x150 [ 2232.835797][T15248] ? mark_lock+0xef/0x17b0 [ 2232.840232][T15248] ? lock_chain_count+0x20/0x20 [ 2232.845100][T15248] io_issue_sqe+0x20b/0x6920 [ 2232.849714][T15248] ? do_syscall_64+0x35/0xb0 [ 2232.854652][T15248] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2232.860634][T15248] ? io_write+0xed0/0xed0 [ 2232.864966][T15248] ? find_held_lock+0x2d/0x110 [ 2232.869736][T15248] ? __fget_files+0x21b/0x3e0 [ 2232.874410][T15248] ? lock_downgrade+0x6e0/0x6e0 [ 2232.879257][T15248] __io_queue_sqe+0x1ac/0xf10 [ 2232.884018][T15248] ? io_issue_sqe+0x6920/0x6920 [ 2232.888870][T15248] io_submit_sqes+0x63ea/0x7bc0 [ 2232.893731][T15248] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2232.899451][T15248] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2232.905083][T15248] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2232.910191][T15248] ? irqentry_enter+0x28/0x50 [ 2232.914864][T15248] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2232.921010][T15248] ? lockdep_hardirqs_on+0x79/0x100 [ 2232.926204][T15248] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2232.932351][T15248] ? trace_hardirqs_on+0x38/0x1c0 [ 2232.937370][T15248] ? syscall_enter_from_user_mode+0x2b/0x70 [ 2232.943261][T15248] do_syscall_64+0x35/0xb0 [ 2232.947673][T15248] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2232.953563][T15248] RIP: 0033:0x4665d9 [ 2232.957448][T15248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.977049][T15248] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2232.985457][T15248] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2232.993416][T15248] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2233.001375][T15248] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2233.009334][T15248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2233.017293][T15248] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 [ 2233.048875][T15256] CPU: 0 PID: 15256 Comm: syz-executor.1 Not tainted 5.14.0-rc1-syzkaller #0 [ 2233.057682][T15256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2233.067760][T15256] Call Trace: [ 2233.071047][T15256] dump_stack_lvl+0xcd/0x134 [ 2233.075668][T15256] should_fail.cold+0x5/0xa [ 2233.080200][T15256] _copy_to_user+0x2c/0x150 [ 2233.084728][T15256] simple_read_from_buffer+0xcc/0x160 [ 2233.090133][T15256] proc_fail_nth_read+0x187/0x220 [ 2233.095270][T15256] ? proc_fault_inject_read+0x220/0x220 [ 2233.100834][T15256] ? security_file_permission+0x248/0x560 [ 2233.106586][T15256] ? proc_fault_inject_read+0x220/0x220 [ 2233.112156][T15256] vfs_read+0x1b5/0x570 [ 2233.116338][T15256] ksys_read+0x12d/0x250 [ 2233.120599][T15256] ? vfs_write+0xa40/0xa40 [ 2233.125049][T15256] ? syscall_enter_from_user_mode+0x21/0x70 [ 2233.131071][T15256] do_syscall_64+0x35/0xb0 [ 2233.135527][T15256] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2233.141469][T15256] RIP: 0033:0x41935c [ 2233.145373][T15256] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2233.165004][T15256] RSP: 002b:00007f5cc7d31170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2233.173466][T15256] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000041935c [ 2233.181541][T15256] RDX: 000000000000000f RSI: 00007f5cc7d311e0 RDI: 0000000000000006 [ 2233.189521][T15256] RBP: 00007f5cc7d311d0 R08: 0000000000000000 R09: 0000000000000000 03:46:18 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x40, 0x0, 0x3, 0x3, {{0x30, 0x4, 0x2, 0xd, 0xc0, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@lsrr={0x83, 0x1b, 0x42, [@private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @remote, @rand_addr=0x64010100]}, @cipso={0x86, 0x4f, 0x3, [{0x6, 0xd, "2e2e94cb5f222a834c4a9c"}, {0x0, 0x11, "a98dfd0ba561e1f886d770a8abac86"}, {0x6, 0xe, "4e90dfe57ef200b9f47bb4d0"}, {0x1, 0x10, "8091986505afb9f151f1f7399805"}, {0x6, 0xd, "3fcdb8cfa98d949e69f84c"}]}, @timestamp_addr={0x44, 0x14, 0x23, 0x1, 0xf, [{@rand_addr=0x64010102, 0xe7f}, {@rand_addr=0x64010100, 0xb0}]}, @rr={0x7, 0x1b, 0xa8, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @ssrr={0x89, 0x13, 0x1d, [@private=0xa010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x5, @none, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="634c80a488d430de46e5c9b0285cc6cdc26416ab43051f052847e8b610f0d7cf13bed495742438ac00fdb249e48c0e082d1adf6aafa4dbe9a73ef207b272ec11c82fb8d26eeab8f7653cfed1c5486152db3275d5255be2a625", 0x59}, {&(0x7f0000000200)="8aed3fb7db72adc72a4a372a39bfad6e384246c48ad94842e490d9cb947329e0f3c76fc9b87761eaa0727dff151cde09107c237cca01fb8c0dfc1c6c8777ddaa0ea48ec7da2f8a94d6f44562b4bd10701c0c0e55e91db4fe443e8c2bcf", 0x5d}], 0x2, &(0x7f0000000340)=[{0x58, 0x101, 0x80, "249124b26689d23d4c19ee73e01a06f891cb12c6d0386d07579a7ff8de39ae75e94684e8294b60d502cd8ce41238e23f5b7b21e4da9a6a1111ba9adb2e11929667c54c507b8338"}, {0xd0, 0x117, 0x800, "42f317c3c1fe752cbc421e851fd525bc234beb65bef60a08bcb9dfeb1c588cd09019dd1c6f293a01071124191f645bfca1c7f65dc2760f0e8c5df421969461dac46861d2664976e77d2c4474e6c09beb07558995cf2875313da84c85d9bd5ec71f77069841282f58d473a637a78bea4e46086aeca1a25d2b7c45ee664393c7a0bd4d66161f7b22133d23c33bedc3779c8d0015dd5dfbc6695432cd1295fa91b64553f97d0e64162933cbab5cd555e88d06cae3ac1f73fbf833"}], 0x128}}], 0x1, 0x804) [ 2233.197501][T15256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2233.205571][T15256] R13: 0000000000a9fb1f R14: 00007f5cc7d31300 R15: 0000000000022000 03:46:18 executing program 4 (fault-call:5 fault-nth:3): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:19 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2233.439871][T15269] FAULT_INJECTION: forcing a failure. [ 2233.439871][T15269] name failslab, interval 1, probability 0, space 0, times 0 [ 2233.482028][T15269] CPU: 1 PID: 15269 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2233.490843][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2233.501099][T15269] Call Trace: [ 2233.504394][T15269] dump_stack_lvl+0xcd/0x134 [ 2233.509014][T15269] should_fail.cold+0x5/0xa [ 2233.513728][T15269] ? io_read+0xdaa/0x1140 [ 2233.518085][T15269] should_failslab+0x5/0x10 [ 2233.522652][T15269] __kmalloc+0x72/0x330 [ 2233.526837][T15269] io_read+0xdaa/0x1140 [ 2233.531026][T15269] ? __do_sys_io_uring_register+0x2890/0x2890 [ 2233.537127][T15269] ? __io_queue_proc+0xeb/0x5f0 [ 2233.542083][T15269] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2233.548096][T15269] ? mark_lock+0xef/0x17b0 [ 2233.552535][T15269] io_issue_sqe+0x20b/0x6920 [ 2233.557151][T15269] ? find_held_lock+0x2d/0x110 [ 2233.561938][T15269] ? io_write+0xed0/0xed0 [ 2233.566299][T15269] ? __io_queue_sqe+0xad2/0xf10 [ 2233.571173][T15269] ? mark_held_locks+0x9f/0xe0 [ 2233.575966][T15269] __io_queue_sqe+0x1ac/0xf10 [ 2233.580666][T15269] ? io_issue_sqe+0x6920/0x6920 [ 2233.585546][T15269] io_submit_sqes+0x63ea/0x7bc0 [ 2233.590441][T15269] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2233.596188][T15269] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2233.601772][T15269] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2233.606814][T15269] ? find_held_lock+0x2d/0x110 [ 2233.611601][T15269] ? __context_tracking_exit+0xb8/0xe0 [ 2233.617080][T15269] ? lock_downgrade+0x6e0/0x6e0 [ 2233.621944][T15269] ? lock_downgrade+0x6e0/0x6e0 [ 2233.626820][T15269] ? syscall_enter_from_user_mode+0x21/0x70 [ 2233.632737][T15269] do_syscall_64+0x35/0xb0 [ 2233.637173][T15269] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2233.643088][T15269] RIP: 0033:0x4665d9 [ 2233.646996][T15269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2233.666624][T15269] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2233.675064][T15269] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 03:46:19 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:19 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000000)=0x101, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r4, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r5, 0x0, 0x9cde, 0x2, &(0x7f0000000040)={[0x5]}, 0x8) r6 = pidfd_getfd(r5, r0, 0x0) io_uring_enter(r6, 0x338b, 0xf7e5, 0x0, &(0x7f00000000c0)={[0x3]}, 0x8) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2233.683053][T15269] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2233.691038][T15269] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2233.699051][T15269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2233.707054][T15269] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:19 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:19 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x2, 0x0, 0x0, 0x0) 03:46:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:19 executing program 4 (fault-call:5 fault-nth:4): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:19 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$tipc(0x1e, 0x5, 0x0) recvfrom(r6, &(0x7f0000000340)=""/234, 0xea, 0x40000021, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x9) 03:46:19 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x3, 0x0, 0x0, 0x0) 03:46:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2234.099468][T15307] FAULT_INJECTION: forcing a failure. [ 2234.099468][T15307] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.155292][T15307] CPU: 0 PID: 15307 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2234.164111][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2234.174181][T15307] Call Trace: [ 2234.177473][T15307] dump_stack_lvl+0xcd/0x134 [ 2234.182099][T15307] should_fail.cold+0x5/0xa [ 2234.186640][T15307] ? __io_queue_sqe+0x807/0xf10 [ 2234.191508][T15307] should_failslab+0x5/0x10 [ 2234.196029][T15307] kmem_cache_alloc_trace+0x55/0x3c0 [ 2234.201352][T15307] __io_queue_sqe+0x807/0xf10 [ 2234.206082][T15307] ? io_issue_sqe+0x6920/0x6920 [ 2234.210986][T15307] io_submit_sqes+0x63ea/0x7bc0 [ 2234.215884][T15307] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2234.221625][T15307] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2234.227207][T15307] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2234.232253][T15307] ? find_held_lock+0x2d/0x110 [ 2234.237048][T15307] ? __context_tracking_exit+0xb8/0xe0 [ 2234.242551][T15307] ? lock_downgrade+0x6e0/0x6e0 [ 2234.247509][T15307] ? lock_downgrade+0x6e0/0x6e0 [ 2234.252391][T15307] ? syscall_enter_from_user_mode+0x21/0x70 [ 2234.258313][T15307] do_syscall_64+0x35/0xb0 [ 2234.262855][T15307] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2234.268780][T15307] RIP: 0033:0x4665d9 [ 2234.272691][T15307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2234.292429][T15307] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 03:46:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) [ 2234.300942][T15307] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2234.309022][T15307] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2234.317022][T15307] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2234.325101][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2234.333172][T15307] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x300, 0x0, 0x0, 0x0) 03:46:20 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x40000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x2c, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x40041) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000180)=@buf) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r11}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r4, r10, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r3, &(0x7f0000000000), 0x0, 0x0, 0x800}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:20 executing program 4 (fault-call:5 fault-nth:5): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000180)={0xe4, 0x29, 0x2, {0x1f, [{{0x8, 0x4, 0x2}, 0x7f, 0x23, 0x7, './file0'}, {{0x8, 0x4, 0x6}, 0x100000001, 0x0, 0x7, './file0'}, {{0x40, 0x1, 0x4}, 0xfffffffffffff000, 0xdf, 0x7, './file0'}, {{0x2, 0x2, 0x7}, 0x652c3dda, 0x6, 0x7, './file0'}, {{0x8, 0x2, 0x8}, 0x1, 0xf8, 0x7, './file0'}, {{0x20, 0x0, 0x1}, 0x2, 0x2, 0x7, './file0'}, {{0x80, 0x2, 0x2}, 0x7, 0x3, 0x7, './file0'}]}}, 0xe4) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) 03:46:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x2000, 0x0, 0x0, 0x0) [ 2234.753250][T15347] FAULT_INJECTION: forcing a failure. [ 2234.753250][T15347] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.813510][T15347] CPU: 1 PID: 15347 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2234.822321][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2234.832387][T15347] Call Trace: [ 2234.835657][T15347] dump_stack_lvl+0xcd/0x134 [ 2234.840254][T15347] should_fail.cold+0x5/0xa [ 2234.844783][T15347] ? io_read+0xdaa/0x1140 [ 2234.849193][T15347] should_failslab+0x5/0x10 [ 2234.853687][T15347] __kmalloc+0x72/0x330 [ 2234.857842][T15347] io_read+0xdaa/0x1140 [ 2234.861994][T15347] ? mark_lock+0xef/0x17b0 [ 2234.866422][T15347] ? __do_sys_io_uring_register+0x2890/0x2890 [ 2234.872494][T15347] ? __io_queue_proc+0xeb/0x5f0 [ 2234.877340][T15347] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2234.883321][T15347] ? mark_lock+0xef/0x17b0 [ 2234.887733][T15347] io_issue_sqe+0x20b/0x6920 [ 2234.892323][T15347] ? find_held_lock+0x2d/0x110 [ 2234.897083][T15347] ? io_write+0xed0/0xed0 [ 2234.901750][T15347] ? __io_queue_sqe+0xad2/0xf10 [ 2234.906593][T15347] ? mark_held_locks+0x9f/0xe0 [ 2234.911355][T15347] __io_queue_sqe+0x1ac/0xf10 [ 2234.916031][T15347] ? io_issue_sqe+0x6920/0x6920 [ 2234.920885][T15347] io_submit_sqes+0x63ea/0x7bc0 [ 2234.925744][T15347] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2234.931543][T15347] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2234.937095][T15347] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2234.942113][T15347] ? find_held_lock+0x2d/0x110 [ 2234.946877][T15347] ? __context_tracking_exit+0xb8/0xe0 [ 2234.952334][T15347] ? lock_downgrade+0x6e0/0x6e0 [ 2234.957174][T15347] ? lock_downgrade+0x6e0/0x6e0 [ 2234.962022][T15347] ? syscall_enter_from_user_mode+0x21/0x70 [ 2234.967914][T15347] do_syscall_64+0x35/0xb0 [ 2234.972332][T15347] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2234.978221][T15347] RIP: 0033:0x4665d9 [ 2234.982112][T15347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.001708][T15347] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2235.010112][T15347] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2235.018084][T15347] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2235.026045][T15347] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.034004][T15347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.041964][T15347] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) 03:46:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:20 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x40}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r4, 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) copy_file_range(r4, 0x0, r5, &(0x7f0000000100)=0xba, 0x8, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newaddr={0x20, 0x14, 0x200, 0x70bd2d, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xfd}, [@IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044840}, 0x2004c0c0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a30f69a7493e13b85eac82da3e0c87aa4d54b2da3640835fca517f595d5d65b95c97a5b4c8f8b93a18fe706d58fe36db121015a2eb4c2b4ce16a261af03ae12f3b39bdad09b5fb4e6774be2a086df4b756eba297ef7926ba4004f6b289f1ddd58838604345e1fe72fc9f66574be27a9a57f386b457cfb3064bd"], 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x20000, 0x0, 0x0, 0x0) 03:46:21 executing program 0 (fault-call:7 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:21 executing program 4 (fault-call:5 fault-nth:6): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:21 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) close(r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002340)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003900)={'sit0\x00', &(0x7f0000003880)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x2, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, 0x40, 0x7, 0xe000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000039c0)={'syztnl2\x00', &(0x7f0000003940)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0xc5, 0x8000, 0x10, @private0, @local, 0x8000, 0x80, 0x4, 0x9}}) sendmmsg$inet(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="6d3656d19fcb5a67bb33040700b6", 0xe}, {&(0x7f0000000040)="06956b95bc35d0af8faa88b55c6a4657ade082b574caee0f27247bdcb4a93a00294f4b3d77d9914772ef2bf898306139b990f9", 0x33}], 0x2, &(0x7f0000000340)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x404}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xe7, [@multicast1, @multicast2]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x20, 0x4b, 0x0, 0xa, [0x7ff, 0x6, 0x6, 0x800, 0x8000, 0x7, 0x200]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc33f}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x37, 0x0, 0x3, [0x80000001]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xf4, [@remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x130}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)="a29450ebe75978e911552e7090d7aff4b037672f7c45b7445903d3f1696603c77a2b9a547dcffce0322dfe17d293de1ed449b47a471ad6906d23ae5206b310e9a043c6e58f5c3a8053799f75284ecc2f0db86daa1c9b98f66da970d17c3d46fb6f6b4032dc182a45dd4733cf549d142a705e269a9681d9ba18127f5415629c08f9", 0x81}, {&(0x7f0000000200)="a6e0d6e8655d94410964cd3b6f2b8ef4154e90afe60f07b789887b8ab319b344fb4841c553236cfac4485a62232e", 0x2e}], 0x2, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffeffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x8a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @empty]}]}}}], 0x68}}, {{&(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000740)="fb59cab79caa", 0x6}, {&(0x7f0000000780)="78be8159b3d416a8e1e373c0f7d401536e3a35f1d84ca6cbe512ffe7ea536fe80a9d4b791abed052087c20553692906623bb898d84935c393f8690fdcf66b93100f4fd939051f345f9dde482d0370d6f7e9e4fa22d620265a6a12cccf08325c7ab7834c60bc892bbfdbe64c539a54c13d0d597aa2806568959e65cd48c33f2849a8fe09967e1662fadcf763f88ca05810e90d59791ef3dd36c9c507d65c6762875fa48778b05229cd8f585efc190376a27f50a", 0xb3}], 0x2}}, {{&(0x7f0000000880)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001c80)=[{&(0x7f00000008c0)="106d7ac72e71ff68b607db", 0xb}, {&(0x7f0000000900)="457048bfd8acc22a9982e06bf2755766a4a80ef7dbb6c66d1a4e46bfae9d7ceda29ca95ca56698aabba70bc393a1207131be9cc1a4bf3ebb543b5713b3fc5ce60055465a18b1cefb1857b1e2d480410af2b8cf82c4b5c5fcd1f1c9c91ab8b9a90e4d839906ff0f6fcad0eb08351967d553", 0x71}, {&(0x7f0000000980)="928370cb531161119f63b7a5185a6ce6a4e68063d5d18cd833089e3cebc45594fb3135f4cf0da5f3461c1e7a447b7414f939c6aa8d919c8399825ac65aeaac28184cb4a8900cf64675cffad814f7c960ece080dc58fc9ba64c4138b09eaa29cc053a600e50a9e24cedd007a9058e258e54d238f2f1760aaf5f20b7d201a8cfc539853abac725b79805f295243580e2f8d2d85c6f7a6335f177072327879400f7a6e8b479b322fd6b1e0b289b61ede9d44aff22c03263a9a9e2ddaf49", 0xbc}, {&(0x7f0000000a40)="cd49280c4755365cefc8352e212e7ca6419037492d16606e5225366cb111b4b5c16bc7c648d5274dccda6a257dd372522a26c88f6c11fa9b6083a0d783bfea8af8cb7d25708ce643d15182d9afea", 0x4e}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="6210ebe8111e09933295261fd1479792336662b062ccbe2dfa9867bf711ac5b421c715a05924ef6c2010d1d0817143221bbd0a2a315fd68332187f682c3bf5f2ea8a44fc8fee0299da242e75cafe0d22b4f9f439f1c42ee3587c5ebf8225711094a217dd67029e6452130c6b107b452731e76b5701b2d5949ec61a12459e1b0fd587c33850ac42c3a5bd31a66fa92c52433216bb4833df7aa40207e452f9370a3979e68f7a4762a44f7d6519c102cc9606ce36bdf57923b4f7d1b47e2803ffc1674ed1dc7806295caf2d61c353fe2ff6bd4868641c502327ad7e4095d803259af7dceda8", 0xe4}, {&(0x7f0000001bc0)="2d78b2f31f5333b521d817e1d3ab29b0712be072824c2b752c8e0a058a9cdaf522fd3c1a4a4c80e96d02300d782ba8d542fba27f9c18ae28e6f284002900e43684a7aa9718b36a2c3c62c6cc14883b0a2dde60ed8730e17de3ab9de619429c7132927b043134bf2e8a5d3fd61928b3875ef79676d98b6b83c3181b55577c32acbb343fb70fd3ba8c5444192d890b58fd6ef07b68f35ea9531d9f96489890856f9d3106db983123215d95b9dd66cf6d0e3a609d8c9008de", 0xb7}], 0x7}}, {{&(0x7f0000001d00)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002200)=[{&(0x7f0000001d40)="dd1ee2285bc24ac27db4334c0e6ec10dad16187156151574de6fe14b662973ed46d6b209e440e55f5ba323ff7638", 0x2e}, {&(0x7f0000001d80)="9b3a9e039d2e463841e332f7d9dd07778e5d71ca08d5e0dc54068865033c7280e317e4ad762aa5a3f01f7a08aef18205c32bc803a745dacb2d2e137733e97a2a1e4b7f84a5d55513a4d421039116afb5bd636e9000dd1bd4b3bbc5150566e4a7eb90bf2ed930d9de21f87a24c3f336218d4fa8eda4909a4827e7383147baf31db6472023feb6297bccb8243a60a6539cfe2929996fae1c5ab987adfbc41e7ec24bea64a1cb6fdba9c079f76708a2b5b16f07d426150ce7dab66c55d207e85e8e13568e1600bb9034775bf289", 0xcc}, {&(0x7f0000001e80)="630ca4cbb78db1e31da0b17c62e1800b3b492e5d6d82f3312ed4b6e622a20d8728bf5bb68d65ea9c3816c08e8e29cf311eed465c353784177517eb57def1ddd1d1b1ed33d60dd6a82dc8bc2b959b295b6d91505f3d600fa3179a4a7fac19fb0e27fe0c1ae46fde7976806926a4655e1ee4c81629f8fa658d43304a7e369ee168babff74fa41f9db142bc08ecd93109c9a2d5119724b1d9f5fda75fe575873047562938bc355b683adf68bdd27046c130516bdad0925ba7c1a8c153900d74435c73b9cff64809f03a2aa4cc9d5abf0851ebb4b29456d6d174e86e42c3b829a37e6b497c", 0xe3}, {&(0x7f0000001f80)="770cc1c2021569999a1eb9e3a4c702b1734bbef4de20dd30fe7fd5679fc211da19d7e58cf38d9f440e529b72e05e580cd2ca11a7ac097ad0d1fb732ea7d7b18b228a79c6653b55bfd41363c1f17fd8eafba4799fe62d9dc88a6dbdaff62563cc78c281a472e21145f629f378f76a50161398f2a78c38598dc9077a50baab2188238c584a", 0x84}, {&(0x7f0000002040)="6e27a92440706330f9e4bce958cbcf501752a4f597d2fb6add59c131662fc0b60568ae03f55dfaecd365d6f326efffc6b7388158ff47db9ffa92b54a0330c4e9b2fab12b6d0ee53260000b2affe2c68061c9c6f37c34dd78d83572efd6d4cac4f7ee6d7bbf39549b1e5e04defec6d02e716ebd0e4e23429434f2a628a43458c81f0d4b6afc09aaa5125d552db93d27d95dd0bcab098c926c934bbb72a62c0f6797241c351d88c2c0c80394a39db02eee4598aa51c59c79ce07282c849954a7ce984f93465e9349a32166cb4bf3becc44f87586836b951795e5d1d65be6f4b93585271881143d0c251e5cad3add", 0xed}, {&(0x7f0000002140)="252959359743aff702fa3039a323ee1ada980450a8ae272e15ba51610e3109fbfaf650697ff6fdc91b961cd3a9e75af91f4871913bf40733eff5cfd81dbd0eb293d63a5ff1283308c37b939eaf52849bef13a612a95f853bae9da9509482dddee4c021af3788f35511d9778b9325862cde7fad8f0aa52dd7dd6678a239540b68a55fa82c720ede7339d0a1c1e7eba002383a119220e547f46d29ef4e8789aadff8666374a2b83e050d4c3dbeeb8bae6d9a8d212886d91fed1354f47d", 0xbc}], 0x6, &(0x7f0000002280)}}, {{&(0x7f00000022c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000002300), 0x0, &(0x7f0000002380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}], 0x40}}, {{&(0x7f00000023c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000002400)="33f7805fb350a03318c64a86", 0xc}, {&(0x7f0000002440)="59115affcfe8c4bf10bcbad78422", 0xe}, {&(0x7f0000002480)="20886057d4ab", 0x6}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="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", 0xfa}, {&(0x7f00000035c0)="0b221639976bbc89c2962e8309f8eab8ab444dc8937220f57beca76800be4de04b01060d10cc0878914660903418da37615b98506809ae8240548f2cd70db6a0bd7b05f887d1c99c654c794113ebb02f1e72e9fd65e0142ebacd4166e9ce96ebdbbb946fcb5872e257cacf0d9704a285c7cfacc9250abef05966437ac8cf3163b58408a38f6f4a75", 0x88}, {&(0x7f0000003680)="e6f7974e13e39d351997ec7128dcaea08912419e516dc75cea5168fb91a9108a12e1b0761372bf0551f0dfc3b2e8ae4ca1f38b609f5312525640a96a14b21882870911a9fd1b00909e0a44c7718d6a6e812ac5bc83c698f915c049f65a683824a68614676d6ff7c55bf0beec388956a02ae0bc00519906bd64b6af9c603503edc1ff7917b8ac7b6b598305be1435680495cf4c922725703e345ce3aceeb0c9c7f7e6e493279f89757ab07d4fd4ac528ab04e7a66473d9f5bc7", 0xb9}, {&(0x7f0000003740)}, {&(0x7f0000003780)="ad312cefe969d7aad8ceee445357ef74c18fad3ae0ed", 0x16}], 0x9, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @local}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x21, 0x1, 0x0, [{@private=0xa010102, 0x7}, {@multicast2, 0x7}, {@broadcast, 0x1}]}, @generic={0x86, 0x2}, @timestamp_addr={0x44, 0x14, 0xac, 0x1, 0x8, [{@broadcast, 0x7}, {@multicast2, 0x9}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x0, 0xf, "038e2fdd82e8d50cf3021965e1"}, @ssrr={0x89, 0x1f, 0xc0, [@rand_addr=0x64010102, @loopback, @multicast1, @local, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x29, 0x3, 0x6, [{@broadcast, 0x20}, {@private=0xa010101, 0x8001}]}, @noop, @lsrr={0x83, 0x7, 0x5e, [@multicast1]}]}}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x168}}], 0x7, 0x8001) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2235.519312][T15386] FAULT_INJECTION: forcing a failure. [ 2235.519312][T15386] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.543791][T15394] FAULT_INJECTION: forcing a failure. [ 2235.543791][T15394] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.559709][T15394] CPU: 1 PID: 15394 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2235.568508][T15394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2235.578579][T15394] Call Trace: [ 2235.581874][T15394] dump_stack_lvl+0xcd/0x134 [ 2235.586493][T15394] should_fail.cold+0x5/0xa [ 2235.591027][T15394] ? __io_queue_sqe+0x807/0xf10 [ 2235.595892][T15394] should_failslab+0x5/0x10 [ 2235.600401][T15394] kmem_cache_alloc_trace+0x55/0x3c0 [ 2235.605706][T15394] __io_queue_sqe+0x807/0xf10 [ 2235.610413][T15394] ? io_issue_sqe+0x6920/0x6920 [ 2235.615315][T15394] io_submit_sqes+0x63ea/0x7bc0 [ 2235.620201][T15394] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2235.625928][T15394] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2235.631489][T15394] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2235.636520][T15394] ? find_held_lock+0x2d/0x110 [ 2235.641298][T15394] ? __context_tracking_exit+0xb8/0xe0 [ 2235.646772][T15394] ? lock_downgrade+0x6e0/0x6e0 [ 2235.651635][T15394] ? lock_downgrade+0x6e0/0x6e0 [ 2235.656497][T15394] ? syscall_enter_from_user_mode+0x21/0x70 [ 2235.662405][T15394] do_syscall_64+0x35/0xb0 [ 2235.666826][T15394] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2235.672729][T15394] RIP: 0033:0x4665d9 [ 2235.676622][T15394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.696231][T15394] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2235.704735][T15394] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2235.712715][T15394] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2235.720679][T15394] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.728648][T15394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.736626][T15394] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 [ 2235.744613][T15386] CPU: 0 PID: 15386 Comm: syz-executor.0 Not tainted 5.14.0-rc1-syzkaller #0 [ 2235.753395][T15386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2235.763456][T15386] Call Trace: [ 2235.766745][T15386] dump_stack_lvl+0xcd/0x134 [ 2235.771363][T15386] should_fail.cold+0x5/0xa [ 2235.775889][T15386] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2235.781623][T15386] should_failslab+0x5/0x10 [ 2235.786135][T15386] __kmalloc+0x72/0x330 [ 2235.790287][T15386] tomoyo_realpath_from_path+0xc3/0x620 [ 2235.795836][T15386] ? tomoyo_profile+0x42/0x50 [ 2235.800549][T15386] tomoyo_path_number_perm+0x1d5/0x590 [ 2235.806009][T15386] ? tomoyo_path_number_perm+0x18d/0x590 [ 2235.811635][T15386] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2235.817456][T15386] ? lock_downgrade+0x6e0/0x6e0 [ 2235.822311][T15386] ? __fget_files+0x23d/0x3e0 [ 2235.826986][T15386] security_file_ioctl+0x50/0xb0 [ 2235.831926][T15386] __x64_sys_ioctl+0xb3/0x200 [ 2235.836601][T15386] do_syscall_64+0x35/0xb0 [ 2235.841012][T15386] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2235.846902][T15386] RIP: 0033:0x4665d9 [ 2235.850788][T15386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.870387][T15386] RSP: 002b:00007fb8524a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2235.878792][T15386] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2235.886751][T15386] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 2235.895507][T15386] RBP: 00007fb8524a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.903506][T15386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.911488][T15386] R13: 0000000000a9fb1f R14: 00007fb8524a3300 R15: 0000000000022000 [ 2235.980461][T15386] ERROR: Out of memory at tomoyo_realpath_from_path. 03:46:21 executing program 2: r0 = syz_io_uring_setup(0x185, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x20, 0x80400, 0x23456, {0x0, r6}}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/37, 0x25) 03:46:21 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x1000000, 0x0, 0x0, 0x0) 03:46:21 executing program 4 (fault-call:5 fault-nth:7): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:21 executing program 0 (fault-call:7 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2236.178699][T15415] FAULT_INJECTION: forcing a failure. [ 2236.178699][T15415] name failslab, interval 1, probability 0, space 0, times 0 [ 2236.220249][T15415] CPU: 0 PID: 15415 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2236.229064][T15415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2236.237124][T15426] FAULT_INJECTION: forcing a failure. [ 2236.237124][T15426] name failslab, interval 1, probability 0, space 0, times 0 [ 2236.239410][T15415] Call Trace: [ 2236.239422][T15415] dump_stack_lvl+0xcd/0x134 [ 2236.260068][T15415] should_fail.cold+0x5/0xa [ 2236.264624][T15415] ? io_read+0xdaa/0x1140 [ 2236.268972][T15415] should_failslab+0x5/0x10 [ 2236.273766][T15415] __kmalloc+0x72/0x330 [ 2236.277941][T15415] io_read+0xdaa/0x1140 [ 2236.282116][T15415] ? mark_lock+0xef/0x17b0 [ 2236.286550][T15415] ? __do_sys_io_uring_register+0x2890/0x2890 [ 2236.292650][T15415] ? __io_queue_proc+0xeb/0x5f0 [ 2236.297614][T15415] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2236.303610][T15415] ? mark_lock+0xef/0x17b0 [ 2236.308048][T15415] io_issue_sqe+0x20b/0x6920 [ 2236.312662][T15415] ? find_held_lock+0x2d/0x110 [ 2236.317447][T15415] ? io_write+0xed0/0xed0 [ 2236.321786][T15415] ? __io_queue_sqe+0xad2/0xf10 [ 2236.326652][T15415] ? mark_held_locks+0x9f/0xe0 [ 2236.331427][T15415] __io_queue_sqe+0x1ac/0xf10 [ 2236.336116][T15415] ? io_issue_sqe+0x6920/0x6920 [ 2236.340994][T15415] io_submit_sqes+0x63ea/0x7bc0 [ 2236.345964][T15415] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2236.351689][T15415] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2236.357266][T15415] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2236.362309][T15415] ? irqentry_enter+0x28/0x50 [ 2236.367037][T15415] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2236.373214][T15415] ? lockdep_hardirqs_on+0x79/0x100 [ 2236.378441][T15415] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2236.384883][T15415] ? trace_hardirqs_on+0x38/0x1c0 [ 2236.389941][T15415] ? syscall_enter_from_user_mode+0x2b/0x70 [ 2236.395853][T15415] do_syscall_64+0x35/0xb0 [ 2236.400290][T15415] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2236.406642][T15415] RIP: 0033:0x4665d9 [ 2236.410540][T15415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2236.430159][T15415] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2236.438856][T15415] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2236.446843][T15415] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2236.454911][T15415] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2236.462900][T15415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:46:22 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x2000000, 0x0, 0x0, 0x0) [ 2236.471264][T15415] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 [ 2236.489634][T15426] CPU: 1 PID: 15426 Comm: syz-executor.0 Not tainted 5.14.0-rc1-syzkaller #0 [ 2236.498536][T15426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2236.508728][T15426] Call Trace: [ 2236.512023][T15426] dump_stack_lvl+0xcd/0x134 [ 2236.516642][T15426] should_fail.cold+0x5/0xa [ 2236.521184][T15426] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2236.526665][T15426] should_failslab+0x5/0x10 [ 2236.531195][T15426] __kmalloc+0x72/0x330 [ 2236.535376][T15426] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2236.540597][T15426] tomoyo_encode+0x28/0x50 [ 2236.545039][T15426] tomoyo_realpath_from_path+0x186/0x620 [ 2236.551137][T15426] tomoyo_path_number_perm+0x1d5/0x590 [ 2236.556613][T15426] ? tomoyo_path_number_perm+0x18d/0x590 [ 2236.562267][T15426] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2236.568126][T15426] ? lock_downgrade+0x6e0/0x6e0 [ 2236.573008][T15426] ? __fget_files+0x23d/0x3e0 [ 2236.577714][T15426] security_file_ioctl+0x50/0xb0 [ 2236.582770][T15426] __x64_sys_ioctl+0xb3/0x200 [ 2236.587486][T15426] do_syscall_64+0x35/0xb0 [ 2236.591926][T15426] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2236.597932][T15426] RIP: 0033:0x4665d9 [ 2236.601838][T15426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:46:22 executing program 4 (fault-call:5 fault-nth:8): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2236.621891][T15426] RSP: 002b:00007fb8524a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2236.630292][T15426] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2236.638267][T15426] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 2236.646247][T15426] RBP: 00007fb8524a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2236.654230][T15426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2236.662217][T15426] R13: 0000000000a9fb1f R14: 00007fb8524a3300 R15: 0000000000022000 03:46:22 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r7 = dup3(r6, r5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r8, 0x7fff, 0xfad, 0x4}, &(0x7f0000000040)=0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2236.718217][T15438] FAULT_INJECTION: forcing a failure. [ 2236.718217][T15438] name failslab, interval 1, probability 0, space 0, times 0 [ 2236.761049][T15438] CPU: 1 PID: 15438 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2236.769858][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2236.779930][T15438] Call Trace: [ 2236.783245][T15438] dump_stack_lvl+0xcd/0x134 [ 2236.787881][T15438] should_fail.cold+0x5/0xa [ 2236.792418][T15438] ? io_read+0xdaa/0x1140 [ 2236.796768][T15438] should_failslab+0x5/0x10 [ 2236.801288][T15438] __kmalloc+0x72/0x330 [ 2236.805471][T15438] io_read+0xdaa/0x1140 [ 2236.809647][T15438] ? mark_lock+0xef/0x17b0 [ 2236.814087][T15438] ? __do_sys_io_uring_register+0x2890/0x2890 [ 2236.820190][T15438] ? __io_queue_proc+0xeb/0x5f0 [ 2236.825061][T15438] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2236.831079][T15438] ? mark_lock+0xef/0x17b0 [ 2236.835516][T15438] io_issue_sqe+0x20b/0x6920 [ 2236.840133][T15438] ? find_held_lock+0x2d/0x110 [ 2236.844922][T15438] ? io_write+0xed0/0xed0 [ 2236.849263][T15438] ? __io_queue_sqe+0xad2/0xf10 [ 2236.854135][T15438] ? mark_held_locks+0x9f/0xe0 [ 2236.858944][T15438] __io_queue_sqe+0x1ac/0xf10 [ 2236.863650][T15438] ? io_issue_sqe+0x6920/0x6920 [ 2236.868531][T15438] io_submit_sqes+0x63ea/0x7bc0 [ 2236.873425][T15438] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2236.879171][T15438] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2236.884749][T15438] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2236.889811][T15438] ? find_held_lock+0x2d/0x110 [ 2236.894606][T15438] ? __context_tracking_exit+0xb8/0xe0 [ 2236.900101][T15438] ? lock_downgrade+0x6e0/0x6e0 [ 2236.904964][T15438] ? lock_downgrade+0x6e0/0x6e0 [ 2236.909845][T15438] ? syscall_enter_from_user_mode+0x21/0x70 [ 2236.915762][T15438] do_syscall_64+0x35/0xb0 [ 2236.920197][T15438] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2236.926210][T15438] RIP: 0033:0x4665d9 [ 2236.930212][T15438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2236.950100][T15438] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 03:46:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:22 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = accept4(r3, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000040)=0x80, 0x80800) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlinkprop={0x64, 0x6c, 0x812, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x400, 0x10000}, [@IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_LINKMODE={0x5, 0x11, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20048081) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000a78f6d1180546b09eacc238dbf4c6d5d0bd64e28a9aed82ed1738c7b1ab2f334564178ddd0ceafad3feb428cda7e5dcd01d1f3a8839b8eb950e19928a011c873aebf31a9ea46d15182199a80933d60f09671ac5417f12e1d019a74b12fcca9296cc7f7f26c907c9d45af", @ANYRES16, @ANYBLOB="02002cbd7000fddbdf251200000008002b00ff0f000005002e000100000008000600", @ANYRES32=0x0, @ANYBLOB="08003400713e00000500350001000000060028000100000008000b000100"], 0x4c}, 0x1, 0x0, 0x0, 0x44841}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'sit0\x00', r7, 0x2f, 0xff, 0x3, 0x7, 0x20, @loopback, @mcast1, 0x40, 0x1, 0x9, 0x1}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f810f8cb6c5"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd2c}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x45}, 0x10) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3ea) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000380)=0xff, 0x4) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:22 executing program 2: r0 = syz_io_uring_setup(0x3fb0, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0xb23, &(0x7f00000000c0)={0x0, 0x97f4, 0x8, 0x0, 0x3a0, 0x0, r0}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x14f7, &(0x7f0000000380)={0x0, 0xe5ba, 0x20, 0x0, 0x122, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000480)=@IORING_OP_NOP={0x0, 0x1}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r6 = inotify_init1(0x80800) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2, 0x10000, 0xffffffff) 03:46:22 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x100000) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x10000000) io_submit(0x0, 0x2, &(0x7f0000001400)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r10 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r10, 0x0, 0x0) r11 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r11, 0x0, 0x0) io_submit(0x0, 0x5, &(0x7f0000000980)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8000, r9, &(0x7f0000000340)="d43f2f17bc7e6c7e7254b3b7c9ead2d36a8323671c0b2e02787adde2e96502a40fd8c6b8b94605454e10d916bd38093fd519d891140d82cc67b4af92eb6a7d7f31685080c0f8cab72b0782576c4253048f93e7e407acf339d8f97ce5aa4f4e4b2c8217ca5bcb6b6cfe6239b98581491563d2b361f8b912bcd127be8e3c257f5262814b33ae8e17de640476a5f9bde314f7e9d764a111a316d7c744fc64d88486fb56dcbc0c2ee032e269336c22d0c8efcb8bbcdd806ef03cd314b1079e495541f8b500", 0xc3, 0x3, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xff, r7, &(0x7f0000000440)="e7c04f8df06a8e9a35f075a86e74a09e9025ab63376e182f4dda9c86d12654af1e38202573814bc6a5a58db5f20077ebcf91c3e7dece18d77c6a15e1855322ef05e11cd50002be9a77cc8a7a0c5bd3c4d1a8177bca9711b4a96e9eb06b78e742b9990a8ba4366bd960c586b6b3cec21b48b25ecfddfd9a4b9d02fc2cbf10596af8209d0fe022c9ce6a445f6aee500ac66ec4a4e729f17314141595b0d2d6301f994e64b1e36b5524be51021b47e232ccf9e90667e85c01925e44abd82b797858819e9f421e8945a1c567b8924f06569ae135118307e205ca562bd0966c77e480e0c8f88c71faa487a91840441b123fb1", 0xf0, 0x3816c29a, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0xa8a, r10, &(0x7f0000000680)="a02ff432551c700f44569d28f39087a2fe4ff266bd932b0922a25c5229bda061112b423c29d9f9ec82ee7f6b2bdead1d703b0104f72514314f1f1806ea1d5ea128c4bf907332dc70feab7737a1a1be93ab9a6acc3c3f7d74a387f2249d82ba4f4926ecd55d48", 0x66, 0xc8, 0x0, 0x1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x1ccd, r11, &(0x7f0000000740)="f1ebfd518347e59c62c89cdb8c65b2c623221c2beb087e2aaffa3dd1799dc10cc602e88e68a95ab20a850294c5c66dc067c12e23d5f2af812583bc60cd573a6ecd44c7f42f79252d4593f39136c87140f7ccc71783dff78eb482439bd1e7c1837d001024ddf4c43c878a8bc4791a5e4d653559645e218980fc1b81fb653a19dfdc633faeadf37856ed624fca40dcc4", 0x8f, 0x1, 0x0, 0x1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xe, 0xfffb, r4, &(0x7f0000000840)="aa619ac0a88bbeef66339db5da641ee7ac834fb481c9e969f40ec0ce89c33f3128e13db3b665f82a3c008214b35e70b37513d764fae7f1ffc8574373f0129919c865d6af84d50976a338847510d9fdde398ba2317525eb9780ea60b1ee031a73a1791c2d4196601a8fdd6557cb9b708dba4b110ab1f7e89fb37932d6dae813ee5114cf70b37ba00a7da9cf7991095a1b5dd525835f46ce037ccf56ba2911b46d0a7bc98436d294325b72623523b43bc65b5300f42b467004567cf5cd83927b449d521deaba740698c59e204593c40caf864f2cd37638b1b80bb4dde8ccd7", 0xde, 0xffffffffffffff26, 0x0, 0x2}]) syz_io_uring_submit(r5, r8, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r12, 0x1, 0x20, &(0x7f0000000000)=0x7fff, 0x4) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:22 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x3000000, 0x0, 0x0, 0x0) [ 2236.958628][T15438] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2236.966747][T15438] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2236.974733][T15438] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2236.982721][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2236.990712][T15438] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:22 executing program 4 (fault-call:5 fault-nth:9): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2237.111370][T15426] ERROR: Out of memory at tomoyo_realpath_from_path. 03:46:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2237.254599][T15466] FAULT_INJECTION: forcing a failure. [ 2237.254599][T15466] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.289185][T15466] CPU: 0 PID: 15466 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2237.297996][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2237.308089][T15466] Call Trace: [ 2237.311379][T15466] dump_stack_lvl+0xcd/0x134 [ 2237.315997][T15466] should_fail.cold+0x5/0xa [ 2237.320511][T15466] ? io_read+0xdaa/0x1140 [ 2237.324832][T15466] should_failslab+0x5/0x10 [ 2237.329326][T15466] __kmalloc+0x72/0x330 [ 2237.333496][T15466] io_read+0xdaa/0x1140 [ 2237.337642][T15466] ? mark_lock+0xef/0x17b0 [ 2237.342072][T15466] ? __do_sys_io_uring_register+0x2890/0x2890 [ 2237.348156][T15466] ? mark_held_locks+0x9f/0xe0 [ 2237.352931][T15466] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2237.359130][T15466] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2237.365295][T15466] ? io_issue_sqe+0x1e9/0x6920 [ 2237.370055][T15466] ? __sanitizer_cov_trace_switch+0x59/0xf0 [ 2237.375960][T15466] io_issue_sqe+0x20b/0x6920 [ 2237.380736][T15466] ? find_held_lock+0x2d/0x110 [ 2237.385520][T15466] ? io_write+0xed0/0xed0 [ 2237.389895][T15466] ? __io_queue_sqe+0xad2/0xf10 [ 2237.394757][T15466] ? mark_held_locks+0x9f/0xe0 [ 2237.399527][T15466] __io_queue_sqe+0x1ac/0xf10 [ 2237.404208][T15466] ? io_issue_sqe+0x6920/0x6920 [ 2237.409060][T15466] io_submit_sqes+0x63ea/0x7bc0 [ 2237.413921][T15466] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2237.419630][T15466] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2237.425188][T15466] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2237.430397][T15466] ? find_held_lock+0x2d/0x110 [ 2237.435181][T15466] ? __context_tracking_exit+0xb8/0xe0 [ 2237.440653][T15466] ? lock_downgrade+0x6e0/0x6e0 [ 2237.445502][T15466] ? lock_downgrade+0x6e0/0x6e0 [ 2237.450358][T15466] ? syscall_enter_from_user_mode+0x21/0x70 [ 2237.456257][T15466] do_syscall_64+0x35/0xb0 [ 2237.460763][T15466] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2237.466668][T15466] RIP: 0033:0x4665d9 [ 2237.470555][T15466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.490152][T15466] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 03:46:23 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x20000000, 0x0, 0x0, 0x0) 03:46:23 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee6000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x8000000) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r4, r6, &(0x7f0000000a00)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @private=0xa010101}, 0x0, 0x3, 0x3, 0x2}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="f7115ae5fef13e1237cc0b7cf64f9f07cade13466df205e9f9d7dc336c41dd5263560d2c6634574c619ead0966cdd894f7a7e62eb6bfc32cfcc135a91663d6cd14ad3c0517ff5008e5a07a61f7a09df27af7bea83a832f92d4ec3a", 0x5b}, {&(0x7f0000000180)="70691915013118c7934ce34694d610ffa02e039a887d1795a8e88df00901c304cfbf0d85de0c1bc477c997f9de61ecbaf1bbc5074a953d9b9f4c5ab281c64ff6ff1345573a0665252d6d46599fd2f67d46b0b5424306b4222704199dfcd117255614d5ba6977f615b8912416509d596db937fb55261fa6bb205b9b71948e2575c3a54ec89e10322da90ad4c9a3ba80870fdebd0b519c6a4ab20d0734ee3e10e6e365ccf243775f41a5c8f8422612c602fa8b46e620896f43a0cde6fee0b49ce71c0e8394de2ab7536a48333507943128192f3bacc1", 0xd5}, {&(0x7f0000000340)="32e2c59c8dd92ab6ca8a5346f2915c0b9d8cde945e06af8f8c82c8a8397c5e7e66952441a4f7", 0x26}, {&(0x7f0000000380)="c96ad86a9ca5ad0a68f5e4cba5f04bad5700e6e1af882377c07c5d063e3170c8f43fc6b1f9fb4a0bbb4a96f216e9ed90e9c30b0ec34f1eaf40905e09d52fcf64d5d7efca9249211b18b41911913632cb95b2118cc4", 0x55}, {&(0x7f0000000400)="70ceedeb14d6848ba16b64eb688d5ac1df70ebdf5e24fa5db17ccea590229f33e0acd49f819400a9e4b89d45af6e777c2943f145da0e1a3655de7778970e8c5dee62d43a8eedae78f8", 0x49}, {&(0x7f0000000480)="1a", 0x1}, {&(0x7f0000000680)="46f88df0768d3b0c34fff345729ffd0864c57b8a2aae1605ae470df184b3cb3d432771e0e99db67f50b977c8617a424080362df6f5014ee2e140f50f1488643de1c68d83a8419c1598d37a06b3234a6ed0a7cff4dfa431ea8494238d376d9d909d6230bd9b46004720a77e1fd88faa97033fd21738e6ce9d11ad0e1247e3df6fd95e2a666c0b0905c09c25f467b8be77087c80", 0x93}], 0x7, &(0x7f0000000740)=[{0xf8, 0x11, 0xf2, "0abf0176cdc1decc9697051578b4f005ee424867a79ce5abb443a48cbe402cb763c3fb1377b28e3bf3e202fd35434ecf7aeca362f3ba6b375bdbc1549a68cad98a358c3b85bc6eec0332824a0dc4d7dbc5b894d10e2d7bac187ddebc3cfaa34701a6310c335e2e3b173bb53cd27cace4f45f089be34fe2ee686a3b88588e2d7b1519e497684d00046e2c9840d427d8b4bc00055f615bce185887fb8f234c1449dae8767d112d9fec92917a5f3a724515b5cb938f2502e28a17f265f5c8126713cde2bae29ebd316ab4acfd7b0d6a779c43e45982630fcab586a9d72bf9f3ca3947"}, {0x50, 0x102, 0x6, "6d15c23476ec039123d69458068eb75173554b559ddb86ef980642844dcf7c6fa328364cd585022041cb962cb737333db21fe0a9d4d194329414ff"}, {0x108, 0x115, 0xf0f, "6cdc6bf155edecdd4d09f18ee5c290d691f2dc7d77451e2be003dbf828e260655ba05a935db7957ca3652578f0ed56efc69ca4df8d38dda8d105acc89033167db598d5ca92277fc910feb2ec98c4538303f994ccb194f98ddabb383b021b97ade4404d069e491d9a10bcfd6ac9fa960f1f95b6394591ef9587ed12afe98469d624f50a01d5edac3cf2f2806ad2062b59cf9c5901d5cf8a9262fe2dd8e29df891d1e74d043e5c3960c8b85092e97c2d821002b3c8427de7241a6b792af72f3c689744e23ecfcd8432a0abf689c2f995452d396f68d30d42da9be226f22591ba2b21828bd6a7da07e90d34c6987c9221492089eb3eaa"}], 0x250}, 0x0, 0x20000000, 0x1}, 0xd94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2237.498557][T15466] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2237.506522][T15466] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2237.514493][T15466] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2237.522545][T15466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.530506][T15466] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x2, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 03:46:23 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0xffffffff, 0x0, 0x0, 0x0) 03:46:23 executing program 4 (fault-call:5 fault-nth:10): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:23 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r4, 0x0, 0x0) write(r4, &(0x7f0000000000)="5ab488138e592209d476991cb905f812bbe5f4913884043584e182e6033e2dba91d507bb8848a7e89aa741af068b0c70b4cf777a", 0x34) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:23 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x2, 0x0, 0x0) 03:46:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 03:46:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x10, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:23 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x6000, @fd_index=0x4, 0x5cb, 0x7, 0x6, 0x8}, 0x7fff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x18d84000) [ 2238.140516][T15525] FAULT_INJECTION: forcing a failure. [ 2238.140516][T15525] name failslab, interval 1, probability 0, space 0, times 0 [ 2238.206290][T15525] CPU: 1 PID: 15525 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2238.215108][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2238.225358][T15525] Call Trace: [ 2238.228742][T15525] dump_stack_lvl+0xcd/0x134 [ 2238.233721][T15525] should_fail.cold+0x5/0xa [ 2238.238269][T15525] ? __io_queue_sqe+0x807/0xf10 [ 2238.243229][T15525] should_failslab+0x5/0x10 [ 2238.247878][T15525] kmem_cache_alloc_trace+0x55/0x3c0 [ 2238.253298][T15525] __io_queue_sqe+0x807/0xf10 [ 2238.258015][T15525] ? io_issue_sqe+0x6920/0x6920 [ 2238.262995][T15525] io_submit_sqes+0x63ea/0x7bc0 [ 2238.267893][T15525] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2238.273723][T15525] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2238.279310][T15525] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2238.284365][T15525] ? find_held_lock+0x2d/0x110 [ 2238.289165][T15525] ? __context_tracking_exit+0xb8/0xe0 [ 2238.294656][T15525] ? lock_downgrade+0x6e0/0x6e0 [ 2238.299531][T15525] ? lock_downgrade+0x6e0/0x6e0 [ 2238.304504][T15525] ? syscall_enter_from_user_mode+0x21/0x70 [ 2238.310432][T15525] do_syscall_64+0x35/0xb0 [ 2238.314875][T15525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2238.320799][T15525] RIP: 0033:0x4665d9 [ 2238.324719][T15525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2238.344346][T15525] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 03:46:23 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x3, 0x0, 0x0) 03:46:23 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x300, 0x0, 0x0) 03:46:24 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x2000, 0x0, 0x0) 03:46:24 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee5000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f0000000340)='!$\x00', 0x6) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000380)={{0x0, 0x1ff, 0x401, 0x2315d027, 0x0, 0x100000, 0x20, 0x4, 0xfa, 0x6, 0x5, 0x3, 0x6, 0xff, 0x9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="6ba50ff932554da3b456bc62d49551286b1e47ea4c7aa4455898bc1cca0c95e4b410cd475d3bc1d55be5b1b467347b3f9e7d833dcbbf4ba10f8d4663c8825fa519815882bede1227d7ea96652c610d742c01533d0c2a0d06d5b3d00261938d14dd628f5d6f42cbf1f5f6eece89103300fc6f8099fdfa08da53b35e3ed59af46e57811307b52a7a878f147b760308f8d08b98e7955d8cfc860e449c0c38ae17217b6c53b05168eb2efd8004", 0xab}, {&(0x7f0000000000)="a6b8e9fe3e8e8774aca33c3b601c804bcb2681389c2d71ff72e00a5af68c2ef396f9027eb6e25f600a977e207025939027e0ded85a1ed35a3ac5e31ccf21ddd1a87d4a44f46923f5d8de9cf238e7b5c51749a0df15", 0x55}], 0x2}, 0x0, 0x0, 0x1}, 0xfff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2238.352787][T15525] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2238.360779][T15525] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2238.368773][T15525] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2238.376765][T15525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2238.384755][T15525] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 03:46:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x4c01, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:24 executing program 4 (fault-call:5 fault-nth:11): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:24 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x20000, 0x0, 0x0) 03:46:24 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x0) syz_io_uring_setup(0x75d1, &(0x7f0000000000)={0x0, 0x18bf, 0x20, 0x0, 0x2ac}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r6, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x3, 0x2004, @fd=r6, 0xd2, &(0x7f0000000180)="4739d9d4bbab49fdcf8d587b1902ffb67b81c77d7c42b7bca9f48f57dacd62618303f074042cc480f30ca01c537b24d8d42c09fb2e235e1a6dac4dd0125eb6095cb43818c2eab6b9c0408c98878e866edb9695aa08174c29316e7c4945d7b8ffb00deb16fcf1d19394db", 0x6a, 0x2}, 0x6f4f) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2238.670160][T15568] FAULT_INJECTION: forcing a failure. [ 2238.670160][T15568] name failslab, interval 1, probability 0, space 0, times 0 [ 2238.686745][T15568] CPU: 0 PID: 15568 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2238.695642][T15568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2238.706069][T15568] Call Trace: [ 2238.709368][T15568] dump_stack_lvl+0xcd/0x134 [ 2238.713998][T15568] should_fail.cold+0x5/0xa [ 2238.718654][T15568] ? __io_queue_sqe+0x807/0xf10 [ 2238.723653][T15568] should_failslab+0x5/0x10 [ 2238.728364][T15568] kmem_cache_alloc_trace+0x55/0x3c0 [ 2238.733718][T15568] __io_queue_sqe+0x807/0xf10 [ 2238.738423][T15568] ? io_issue_sqe+0x6920/0x6920 [ 2238.743289][T15568] io_submit_sqes+0x63ea/0x7bc0 [ 2238.748162][T15568] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2238.753884][T15568] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2238.759435][T15568] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2238.764452][T15568] ? find_held_lock+0x2d/0x110 [ 2238.769218][T15568] ? __context_tracking_exit+0xb8/0xe0 [ 2238.774672][T15568] ? lock_downgrade+0x6e0/0x6e0 [ 2238.779518][T15568] ? lock_downgrade+0x6e0/0x6e0 [ 2238.784458][T15568] ? syscall_enter_from_user_mode+0x21/0x70 [ 2238.790384][T15568] do_syscall_64+0x35/0xb0 [ 2238.794815][T15568] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2238.800733][T15568] RIP: 0033:0x4665d9 [ 2238.804619][T15568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2238.824395][T15568] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2238.832824][T15568] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2238.840791][T15568] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2238.848754][T15568] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2238.856713][T15568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2238.864688][T15568] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:24 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x80, 0x101080) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x1, 0x1, {0x0, r6, r7}}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:24 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x1000000, 0x0, 0x0) 03:46:24 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r4, &(0x7f0000000000)='./file0\x00', 0x801c0, 0x10) 03:46:24 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) close(r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002340)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003900)={'sit0\x00', &(0x7f0000003880)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x2, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, 0x40, 0x7, 0xe000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000039c0)={'syztnl2\x00', &(0x7f0000003940)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0xc5, 0x8000, 0x10, @private0, @local, 0x8000, 0x80, 0x4, 0x9}}) sendmmsg$inet(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="6d3656d19fcb5a67bb33040700b6", 0xe}, {&(0x7f0000000040)="06956b95bc35d0af8faa88b55c6a4657ade082b574caee0f27247bdcb4a93a00294f4b3d77d9914772ef2bf898306139b990f9", 0x33}], 0x2, &(0x7f0000000340)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x404}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xe7, [@multicast1, @multicast2]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x20, 0x4b, 0x0, 0xa, [0x7ff, 0x6, 0x6, 0x800, 0x8000, 0x7, 0x200]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc33f}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x37, 0x0, 0x3, [0x80000001]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xf4, [@remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x130}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)="a29450ebe75978e911552e7090d7aff4b037672f7c45b7445903d3f1696603c77a2b9a547dcffce0322dfe17d293de1ed449b47a471ad6906d23ae5206b310e9a043c6e58f5c3a8053799f75284ecc2f0db86daa1c9b98f66da970d17c3d46fb6f6b4032dc182a45dd4733cf549d142a705e269a9681d9ba18127f5415629c08f9", 0x81}, {&(0x7f0000000200)="a6e0d6e8655d94410964cd3b6f2b8ef4154e90afe60f07b789887b8ab319b344fb4841c553236cfac4485a62232e", 0x2e}], 0x2, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffeffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x8a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @empty]}]}}}], 0x68}}, {{&(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000740)="fb59cab79caa", 0x6}, {&(0x7f0000000780)="78be8159b3d416a8e1e373c0f7d401536e3a35f1d84ca6cbe512ffe7ea536fe80a9d4b791abed052087c20553692906623bb898d84935c393f8690fdcf66b93100f4fd939051f345f9dde482d0370d6f7e9e4fa22d620265a6a12cccf08325c7ab7834c60bc892bbfdbe64c539a54c13d0d597aa2806568959e65cd48c33f2849a8fe09967e1662fadcf763f88ca05810e90d59791ef3dd36c9c507d65c6762875fa48778b05229cd8f585efc190376a27f50a", 0xb3}], 0x2}}, {{&(0x7f0000000880)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001c80)=[{&(0x7f00000008c0)="106d7ac72e71ff68b607db", 0xb}, {&(0x7f0000000900)="457048bfd8acc22a9982e06bf2755766a4a80ef7dbb6c66d1a4e46bfae9d7ceda29ca95ca56698aabba70bc393a1207131be9cc1a4bf3ebb543b5713b3fc5ce60055465a18b1cefb1857b1e2d480410af2b8cf82c4b5c5fcd1f1c9c91ab8b9a90e4d839906ff0f6fcad0eb08351967d553", 0x71}, {&(0x7f0000000980)="928370cb531161119f63b7a5185a6ce6a4e68063d5d18cd833089e3cebc45594fb3135f4cf0da5f3461c1e7a447b7414f939c6aa8d919c8399825ac65aeaac28184cb4a8900cf64675cffad814f7c960ece080dc58fc9ba64c4138b09eaa29cc053a600e50a9e24cedd007a9058e258e54d238f2f1760aaf5f20b7d201a8cfc539853abac725b79805f295243580e2f8d2d85c6f7a6335f177072327879400f7a6e8b479b322fd6b1e0b289b61ede9d44aff22c03263a9a9e2ddaf49", 0xbc}, {&(0x7f0000000a40)="cd49280c4755365cefc8352e212e7ca6419037492d16606e5225366cb111b4b5c16bc7c648d5274dccda6a257dd372522a26c88f6c11fa9b6083a0d783bfea8af8cb7d25708ce643d15182d9afea", 0x4e}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="6210ebe8111e09933295261fd1479792336662b062ccbe2dfa9867bf711ac5b421c715a05924ef6c2010d1d0817143221bbd0a2a315fd68332187f682c3bf5f2ea8a44fc8fee0299da242e75cafe0d22b4f9f439f1c42ee3587c5ebf8225711094a217dd67029e6452130c6b107b452731e76b5701b2d5949ec61a12459e1b0fd587c33850ac42c3a5bd31a66fa92c52433216bb4833df7aa40207e452f9370a3979e68f7a4762a44f7d6519c102cc9606ce36bdf57923b4f7d1b47e2803ffc1674ed1dc7806295caf2d61c353fe2ff6bd4868641c502327ad7e4095d803259af7dceda8", 0xe4}, {&(0x7f0000001bc0)="2d78b2f31f5333b521d817e1d3ab29b0712be072824c2b752c8e0a058a9cdaf522fd3c1a4a4c80e96d02300d782ba8d542fba27f9c18ae28e6f284002900e43684a7aa9718b36a2c3c62c6cc14883b0a2dde60ed8730e17de3ab9de619429c7132927b043134bf2e8a5d3fd61928b3875ef79676d98b6b83c3181b55577c32acbb343fb70fd3ba8c5444192d890b58fd6ef07b68f35ea9531d9f96489890856f9d3106db983123215d95b9dd66cf6d0e3a609d8c9008de", 0xb7}], 0x7}}, {{&(0x7f0000001d00)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002200)=[{&(0x7f0000001d40)="dd1ee2285bc24ac27db4334c0e6ec10dad16187156151574de6fe14b662973ed46d6b209e440e55f5ba323ff7638", 0x2e}, {&(0x7f0000001d80)="9b3a9e039d2e463841e332f7d9dd07778e5d71ca08d5e0dc54068865033c7280e317e4ad762aa5a3f01f7a08aef18205c32bc803a745dacb2d2e137733e97a2a1e4b7f84a5d55513a4d421039116afb5bd636e9000dd1bd4b3bbc5150566e4a7eb90bf2ed930d9de21f87a24c3f336218d4fa8eda4909a4827e7383147baf31db6472023feb6297bccb8243a60a6539cfe2929996fae1c5ab987adfbc41e7ec24bea64a1cb6fdba9c079f76708a2b5b16f07d426150ce7dab66c55d207e85e8e13568e1600bb9034775bf289", 0xcc}, {&(0x7f0000001e80)="630ca4cbb78db1e31da0b17c62e1800b3b492e5d6d82f3312ed4b6e622a20d8728bf5bb68d65ea9c3816c08e8e29cf311eed465c353784177517eb57def1ddd1d1b1ed33d60dd6a82dc8bc2b959b295b6d91505f3d600fa3179a4a7fac19fb0e27fe0c1ae46fde7976806926a4655e1ee4c81629f8fa658d43304a7e369ee168babff74fa41f9db142bc08ecd93109c9a2d5119724b1d9f5fda75fe575873047562938bc355b683adf68bdd27046c130516bdad0925ba7c1a8c153900d74435c73b9cff64809f03a2aa4cc9d5abf0851ebb4b29456d6d174e86e42c3b829a37e6b497c", 0xe3}, {&(0x7f0000001f80)="770cc1c2021569999a1eb9e3a4c702b1734bbef4de20dd30fe7fd5679fc211da19d7e58cf38d9f440e529b72e05e580cd2ca11a7ac097ad0d1fb732ea7d7b18b228a79c6653b55bfd41363c1f17fd8eafba4799fe62d9dc88a6dbdaff62563cc78c281a472e21145f629f378f76a50161398f2a78c38598dc9077a50baab2188238c584a", 0x84}, {&(0x7f0000002040)="6e27a92440706330f9e4bce958cbcf501752a4f597d2fb6add59c131662fc0b60568ae03f55dfaecd365d6f326efffc6b7388158ff47db9ffa92b54a0330c4e9b2fab12b6d0ee53260000b2affe2c68061c9c6f37c34dd78d83572efd6d4cac4f7ee6d7bbf39549b1e5e04defec6d02e716ebd0e4e23429434f2a628a43458c81f0d4b6afc09aaa5125d552db93d27d95dd0bcab098c926c934bbb72a62c0f6797241c351d88c2c0c80394a39db02eee4598aa51c59c79ce07282c849954a7ce984f93465e9349a32166cb4bf3becc44f87586836b951795e5d1d65be6f4b93585271881143d0c251e5cad3add", 0xed}, {&(0x7f0000002140)="252959359743aff702fa3039a323ee1ada980450a8ae272e15ba51610e3109fbfaf650697ff6fdc91b961cd3a9e75af91f4871913bf40733eff5cfd81dbd0eb293d63a5ff1283308c37b939eaf52849bef13a612a95f853bae9da9509482dddee4c021af3788f35511d9778b9325862cde7fad8f0aa52dd7dd6678a239540b68a55fa82c720ede7339d0a1c1e7eba002383a119220e547f46d29ef4e8789aadff8666374a2b83e050d4c3dbeeb8bae6d9a8d212886d91fed1354f47d", 0xbc}], 0x6, &(0x7f0000002280)}}, {{&(0x7f00000022c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000002300), 0x0, &(0x7f0000002380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}], 0x40}}, {{&(0x7f00000023c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000002400)="33f7805fb350a03318c64a86", 0xc}, {&(0x7f0000002440)="59115affcfe8c4bf10bcbad78422", 0xe}, {&(0x7f0000002480)="20886057d4ab", 0x6}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="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", 0xfa}, {&(0x7f00000035c0)="0b221639976bbc89c2962e8309f8eab8ab444dc8937220f57beca76800be4de04b01060d10cc0878914660903418da37615b98506809ae8240548f2cd70db6a0bd7b05f887d1c99c654c794113ebb02f1e72e9fd65e0142ebacd4166e9ce96ebdbbb946fcb5872e257cacf0d9704a285c7cfacc9250abef05966437ac8cf3163b58408a38f6f4a75", 0x88}, {&(0x7f0000003680)="e6f7974e13e39d351997ec7128dcaea08912419e516dc75cea5168fb91a9108a12e1b0761372bf0551f0dfc3b2e8ae4ca1f38b609f5312525640a96a14b21882870911a9fd1b00909e0a44c7718d6a6e812ac5bc83c698f915c049f65a683824a68614676d6ff7c55bf0beec388956a02ae0bc00519906bd64b6af9c603503edc1ff7917b8ac7b6b598305be1435680495cf4c922725703e345ce3aceeb0c9c7f7e6e493279f89757ab07d4fd4ac528ab04e7a66473d9f5bc7", 0xb9}, {&(0x7f0000003740)}, {&(0x7f0000003780)="ad312cefe969d7aad8ceee445357ef74c18fad3ae0ed", 0x16}], 0x9, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @local}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x21, 0x1, 0x0, [{@private=0xa010102, 0x7}, {@multicast2, 0x7}, {@broadcast, 0x1}]}, @generic={0x86, 0x2}, @timestamp_addr={0x44, 0x14, 0xac, 0x1, 0x8, [{@broadcast, 0x7}, {@multicast2, 0x9}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x0, 0xf, "038e2fdd82e8d50cf3021965e1"}, @ssrr={0x89, 0x1f, 0xc0, [@rand_addr=0x64010102, @loopback, @multicast1, @local, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x29, 0x3, 0x6, [{@broadcast, 0x20}, {@private=0xa010101, 0x8001}]}, @noop, @lsrr={0x83, 0x7, 0x5e, [@multicast1]}]}}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x168}}], 0x7, 0x8001) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:24 executing program 4 (fault-call:5 fault-nth:12): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:24 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xe46b, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000079e000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ee7000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x600980, 0x0) io_uring_enter(r0, 0x6261, 0xe502, 0x2, &(0x7f00000000c0)={[0x200]}, 0x8) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x0, 0x10000, 0xfffffffd) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x81, 0x40, 0x20, 0x9, 0x20, 0x5, 0x1f, 0xb9, 0x81, 0x3, 0x5, 0x1, 0x40, 0x6, 0x9, 0x7}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r4, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x541b, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:24 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x2000000, 0x0, 0x0) 03:46:25 executing program 5 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:25 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x3000000, 0x0, 0x0) [ 2239.359758][T15603] FAULT_INJECTION: forcing a failure. [ 2239.359758][T15603] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.444180][T15603] CPU: 1 PID: 15603 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2239.453177][T15603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2239.463512][T15603] Call Trace: [ 2239.466806][T15603] dump_stack_lvl+0xcd/0x134 [ 2239.471428][T15603] should_fail.cold+0x5/0xa [ 2239.475962][T15603] ? __io_queue_sqe+0x807/0xf10 [ 2239.480842][T15603] should_failslab+0x5/0x10 [ 2239.485374][T15603] kmem_cache_alloc_trace+0x55/0x3c0 [ 2239.490690][T15603] __io_queue_sqe+0x807/0xf10 [ 2239.495404][T15603] ? io_issue_sqe+0x6920/0x6920 [ 2239.500292][T15603] io_submit_sqes+0x63ea/0x7bc0 [ 2239.505188][T15603] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2239.510935][T15603] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2239.516520][T15603] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2239.521575][T15603] ? irqentry_enter+0x28/0x50 [ 2239.526290][T15603] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2239.532556][T15603] ? lockdep_hardirqs_on+0x79/0x100 [ 2239.537784][T15603] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2239.543969][T15603] ? trace_hardirqs_on+0x38/0x1c0 [ 2239.549023][T15603] ? syscall_enter_from_user_mode+0x2b/0x70 [ 2239.554949][T15603] do_syscall_64+0x35/0xb0 [ 2239.559379][T15603] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2239.565391][T15603] RIP: 0033:0x4665d9 [ 2239.569476][T15603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:46:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f000058c000/0x4000)=nil, 0x4000, 0x1800001, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000140)=0x6, 0x0, 0x4) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r0, 0x101, {}, 0xdb1, 0xe}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_setup(0x5504, &(0x7f00000018c0)={0x0, 0x1, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r11 = syz_io_uring_setup(0x1dda, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4004, @fd=r9, 0x5, 0x100000001, 0x3ff, 0x15, 0x1, {0x2}}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r4, 0x3, &(0x7f0000000340)=""/222, 0xde}, 0x800) io_uring_enter(r1, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:25 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x20000000, 0x0, 0x0) 03:46:25 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x2000000000000, 0x0, 0x0) [ 2239.589153][T15603] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2239.597726][T15603] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2239.605728][T15603] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2239.613721][T15603] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2239.621716][T15603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2239.629714][T15603] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x5421, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2239.747833][T15632] FAULT_INJECTION: forcing a failure. [ 2239.747833][T15632] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.794988][T15632] CPU: 1 PID: 15632 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2239.803799][T15632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2239.813878][T15632] Call Trace: [ 2239.817169][T15632] dump_stack_lvl+0xcd/0x134 [ 2239.821792][T15632] should_fail.cold+0x5/0xa [ 2239.826324][T15632] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2239.832154][T15632] should_failslab+0x5/0x10 [ 2239.836776][T15632] __kmalloc+0x72/0x330 [ 2239.840966][T15632] tomoyo_realpath_from_path+0xc3/0x620 [ 2239.846541][T15632] ? tomoyo_profile+0x42/0x50 [ 2239.851241][T15632] tomoyo_path_number_perm+0x1d5/0x590 [ 2239.856720][T15632] ? tomoyo_path_number_perm+0x18d/0x590 [ 2239.862377][T15632] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2239.868242][T15632] ? lock_downgrade+0x6e0/0x6e0 [ 2239.873133][T15632] ? __fget_files+0x23d/0x3e0 [ 2239.877851][T15632] security_file_ioctl+0x50/0xb0 [ 2239.882830][T15632] __x64_sys_ioctl+0xb3/0x200 [ 2239.887535][T15632] do_syscall_64+0x35/0xb0 [ 2239.891975][T15632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2239.897898][T15632] RIP: 0033:0x4665d9 [ 2239.901809][T15632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2239.921447][T15632] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2239.929996][T15632] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2239.938077][T15632] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2239.946068][T15632] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2239.954079][T15632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2239.962064][T15632] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 [ 2240.045512][T15632] ERROR: Out of memory at tomoyo_realpath_from_path. 03:46:25 executing program 4 (fault-call:5 fault-nth:13): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:25 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x100000000000000, 0x0, 0x0) 03:46:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x14) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r4, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r1, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x100, &(0x7f00000000c0)=0x3, 0x0, 0x4) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r11 = timerfd_create(0x2, 0x800) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd=r1, 0x1, 0x1f, 0x40, 0x4, 0x0, {0x3}}, 0x81) 03:46:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x5450, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:26 executing program 5 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:26 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x5504, &(0x7f00000018c0)={0x0, 0x0, 0x4, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x4000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd=r5, 0x5, 0x6, 0x3, 0x0, 0x1, {0x1, r9}}, 0x8) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r10 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r12, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r13}}, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2240.386002][T15662] FAULT_INJECTION: forcing a failure. [ 2240.386002][T15662] name failslab, interval 1, probability 0, space 0, times 0 [ 2240.395637][T15664] FAULT_INJECTION: forcing a failure. [ 2240.395637][T15664] name failslab, interval 1, probability 0, space 0, times 0 [ 2240.441589][T15664] CPU: 0 PID: 15664 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2240.450402][T15664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2240.460478][T15664] Call Trace: [ 2240.463768][T15664] dump_stack_lvl+0xcd/0x134 [ 2240.468391][T15664] should_fail.cold+0x5/0xa [ 2240.472927][T15664] ? io_read+0xdaa/0x1140 [ 2240.477271][T15664] should_failslab+0x5/0x10 [ 2240.481899][T15664] __kmalloc+0x72/0x330 [ 2240.486090][T15664] io_read+0xdaa/0x1140 [ 2240.490265][T15664] ? mark_lock+0xef/0x17b0 [ 2240.494696][T15664] ? __do_sys_io_uring_register+0x2890/0x2890 [ 2240.500791][T15664] ? __io_queue_proc+0xeb/0x5f0 [ 2240.505652][T15664] ? lock_chain_count+0x20/0x20 [ 2240.510527][T15664] ? mark_lock+0xef/0x17b0 [ 2240.514973][T15664] io_issue_sqe+0x20b/0x6920 [ 2240.519584][T15664] ? mark_held_locks+0x9f/0xe0 [ 2240.524370][T15664] ? io_write+0xed0/0xed0 [ 2240.528723][T15664] ? lockdep_hardirqs_on+0x79/0x100 [ 2240.533933][T15664] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2240.540147][T15664] __io_queue_sqe+0x1ac/0xf10 [ 2240.544845][T15664] ? io_issue_sqe+0x6920/0x6920 [ 2240.550063][T15664] io_submit_sqes+0x63ea/0x7bc0 [ 2240.554953][T15664] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2240.560689][T15664] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2240.566265][T15664] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2240.571306][T15664] ? find_held_lock+0x2d/0x110 [ 2240.576537][T15664] ? __context_tracking_exit+0xb8/0xe0 [ 2240.582016][T15664] ? lock_downgrade+0x6e0/0x6e0 [ 2240.586867][T15664] ? lock_downgrade+0x6e0/0x6e0 [ 2240.591739][T15664] ? syscall_enter_from_user_mode+0x21/0x70 [ 2240.597645][T15664] do_syscall_64+0x35/0xb0 [ 2240.602073][T15664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2240.607975][T15664] RIP: 0033:0x4665d9 [ 2240.612138][T15664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2240.631760][T15664] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 03:46:26 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x200000000000000, 0x0, 0x0) [ 2240.640175][T15664] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2240.648149][T15664] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2240.656131][T15664] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2240.664104][T15664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2240.672078][T15664] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 [ 2240.691831][T15662] CPU: 1 PID: 15662 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2240.700635][T15662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2240.710710][T15662] Call Trace: [ 2240.714001][T15662] dump_stack_lvl+0xcd/0x134 [ 2240.718626][T15662] should_fail.cold+0x5/0xa [ 2240.723159][T15662] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2240.728553][T15662] should_failslab+0x5/0x10 [ 2240.733078][T15662] __kmalloc+0x72/0x330 [ 2240.737259][T15662] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2240.742495][T15662] tomoyo_encode+0x28/0x50 [ 2240.746935][T15662] tomoyo_realpath_from_path+0x186/0x620 [ 2240.752594][T15662] tomoyo_path_number_perm+0x1d5/0x590 [ 2240.758075][T15662] ? tomoyo_path_number_perm+0x18d/0x590 [ 2240.763734][T15662] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2240.769592][T15662] ? lock_downgrade+0x6e0/0x6e0 [ 2240.774496][T15662] ? __fget_files+0x23d/0x3e0 [ 2240.779206][T15662] security_file_ioctl+0x50/0xb0 [ 2240.784170][T15662] __x64_sys_ioctl+0xb3/0x200 [ 2240.788874][T15662] do_syscall_64+0x35/0xb0 [ 2240.793326][T15662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2240.799594][T15662] RIP: 0033:0x4665d9 [ 2240.803503][T15662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2240.823129][T15662] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2240.831564][T15662] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 03:46:26 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:26 executing program 4 (fault-call:5 fault-nth:14): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2240.839555][T15662] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2240.847550][T15662] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2240.856145][T15662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2240.864141][T15662] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 03:46:26 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x300000000000000, 0x0, 0x0) 03:46:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x5451, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:26 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r6, 0x0, 0x0) splice(r3, &(0x7f00000001c0)=0x2, r6, &(0x7f0000000240)=0x8, 0x0, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r8 = fsmount(0xffffffffffffffff, 0x0, 0x4) io_uring_enter(r8, 0x136e, 0x3ea7, 0x2, &(0x7f0000000180)={[0x400]}, 0x8) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x10000)=nil, 0x10000, 0x1000009, 0x80010, r0, 0x10000000) syz_io_uring_submit(r4, r9, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x4}, 0x4) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 2241.051597][T15695] FAULT_INJECTION: forcing a failure. [ 2241.051597][T15695] name failslab, interval 1, probability 0, space 0, times 0 [ 2241.075657][T15695] CPU: 0 PID: 15695 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2241.084651][T15695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2241.094730][T15695] Call Trace: [ 2241.098028][T15695] dump_stack_lvl+0xcd/0x134 [ 2241.102650][T15695] should_fail.cold+0x5/0xa [ 2241.107184][T15695] ? __io_queue_sqe+0x807/0xf10 [ 2241.112057][T15695] should_failslab+0x5/0x10 [ 2241.116584][T15695] kmem_cache_alloc_trace+0x55/0x3c0 [ 2241.121900][T15695] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2241.128086][T15695] __io_queue_sqe+0x807/0xf10 [ 2241.132799][T15695] ? io_issue_sqe+0x6920/0x6920 [ 2241.137672][T15695] ? io_prep_rw+0x1ac/0xf50 [ 2241.142225][T15695] io_submit_sqes+0x63ea/0x7bc0 03:46:26 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x108, &(0x7f0000000000)=0x7fff, 0x0, 0x4) r8 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000340)=""/243, 0xf3, 0x0, 0x0, {0x0, r11}}, 0x800) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000580)={0x0, 0x0, 0x1, [0xfffffffffffffffd, 0xfffffffffffeffff, 0x4, 0x3, 0x3], [0x101, 0x9, 0x6, 0x0, 0x4, 0x7, 0x3, 0x0, 0x80000000, 0x7ff, 0x1f, 0x8, 0xff, 0x6, 0x3, 0x9, 0xffffffffffffffff, 0xbcf, 0x5, 0xffffffffffff7fff, 0x867, 0x7f, 0x401, 0xfffffffffffffffb, 0x8, 0x79, 0x1, 0x6, 0x401, 0x1, 0x502, 0x3ff, 0xe5d, 0x1, 0x0, 0xfffffffffffffbff, 0xfffffffffffff801, 0x7fffffff, 0x81, 0x6, 0xf3, 0x6, 0x4, 0x10000, 0x7, 0x0, 0x8, 0xd0fc, 0xffffffffa1444328, 0xffffffffffff1c84, 0x8001, 0xd535, 0x80000000, 0x1, 0x5, 0x7eb, 0x0, 0x3, 0x100000000, 0xff, 0x5, 0x2, 0x1, 0x5, 0x101, 0x1f, 0x1320337f, 0x0, 0x3f, 0x6, 0x6, 0x3f, 0x4, 0x2, 0xe2, 0x8, 0x8, 0xff, 0xe58, 0x101, 0x464d, 0x6, 0xd02e, 0x2, 0x0, 0xffffffffffff020d, 0x800, 0x8, 0x8, 0xcb8, 0xe50, 0x7fffffff, 0x2, 0x2, 0x3, 0xfb, 0x401, 0x3f, 0x3ff, 0x4, 0x2, 0x9, 0x0, 0x8, 0x8, 0x9, 0x7, 0x3ff, 0x8, 0x7fffffff, 0x58, 0x4, 0x1, 0x20, 0x7fff, 0x3ff, 0x3, 0x3, 0x4, 0x431, 0xe45]}) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2241.147122][T15695] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2241.152868][T15695] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2241.158467][T15695] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2241.163522][T15695] ? find_held_lock+0x2d/0x110 [ 2241.168320][T15695] ? __context_tracking_exit+0xb8/0xe0 [ 2241.173813][T15695] ? lock_downgrade+0x6e0/0x6e0 [ 2241.178872][T15695] ? lock_downgrade+0x6e0/0x6e0 [ 2241.183761][T15695] ? syscall_enter_from_user_mode+0x21/0x70 [ 2241.189693][T15695] do_syscall_64+0x35/0xb0 [ 2241.194131][T15695] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2241.200085][T15695] RIP: 0033:0x4665d9 [ 2241.200885][T15662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2241.203993][T15695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2241.204021][T15695] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2241.204050][T15695] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 03:46:26 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x2000000000000000, 0x0, 0x0) [ 2241.246921][T15695] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2241.254909][T15695] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2241.262897][T15695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2241.270890][T15695] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:27 executing program 5 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:27 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x7aab, 0x10}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r4) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = syz_io_uring_setup(0x1dd5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2fc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x3ee, 0x0, 0x36e7e86a, 0x2, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, {0x0, r10}}, 0x5) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r5, 0x5a3b, 0x135c, 0x0, &(0x7f0000000000)={[0x7]}, 0x8) 03:46:27 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 2241.611419][T15733] FAULT_INJECTION: forcing a failure. [ 2241.611419][T15733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2241.645774][T15733] CPU: 1 PID: 15733 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2241.654869][T15733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2241.664951][T15733] Call Trace: [ 2241.668243][T15733] dump_stack_lvl+0xcd/0x134 [ 2241.672956][T15733] should_fail.cold+0x5/0xa [ 2241.677498][T15733] _copy_from_user+0x2c/0x180 [ 2241.682205][T15733] __tun_chr_ioctl.isra.0+0x5b2/0x4270 [ 2241.687698][T15733] ? lock_downgrade+0x6e0/0x6e0 [ 2241.692577][T15733] ? tun_chr_read_iter+0x260/0x260 [ 2241.697729][T15733] ? __fget_files+0x23d/0x3e0 [ 2241.702437][T15733] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2241.708699][T15733] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2241.714451][T15733] __x64_sys_ioctl+0x193/0x200 [ 2241.719248][T15733] do_syscall_64+0x35/0xb0 [ 2241.723692][T15733] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2241.729612][T15733] RIP: 0033:0x4665d9 [ 2241.733536][T15733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2241.753167][T15733] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:46:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x5452, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:27 executing program 4 (fault-call:5 fault-nth:15): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:27 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x1194, 0x0, 0x0, 0x8020e}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r6 = fcntl$dupfd(r4, 0x406, r4) syz_io_uring_setup(0x4617, &(0x7f0000000200)={0x0, 0x14d8e, 0x1, 0x3, 0x79, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:27 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000040)) io_uring_enter(r0, 0x76fb, 0xcb17, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) [ 2241.761627][T15733] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2241.769626][T15733] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2241.777619][T15733] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2241.785617][T15733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2241.793613][T15733] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 [ 2241.869655][T15749] FAULT_INJECTION: forcing a failure. [ 2241.869655][T15749] name failslab, interval 1, probability 0, space 0, times 0 [ 2241.923501][T15749] CPU: 1 PID: 15749 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2241.932324][T15749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2241.942489][T15749] Call Trace: [ 2241.945786][T15749] dump_stack_lvl+0xcd/0x134 [ 2241.950415][T15749] should_fail.cold+0x5/0xa [ 2241.954949][T15749] ? __io_queue_sqe+0x807/0xf10 [ 2241.959818][T15749] should_failslab+0x5/0x10 [ 2241.964437][T15749] kmem_cache_alloc_trace+0x55/0x3c0 [ 2241.969756][T15749] __io_queue_sqe+0x807/0xf10 [ 2241.974466][T15749] ? io_issue_sqe+0x6920/0x6920 [ 2241.979358][T15749] io_submit_sqes+0x63ea/0x7bc0 [ 2241.984258][T15749] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2241.990002][T15749] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2241.995587][T15749] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2242.000636][T15749] ? find_held_lock+0x2d/0x110 [ 2242.005446][T15749] ? __context_tracking_exit+0xb8/0xe0 [ 2242.010950][T15749] ? lock_downgrade+0x6e0/0x6e0 [ 2242.015834][T15749] ? lock_downgrade+0x6e0/0x6e0 [ 2242.020730][T15749] ? syscall_enter_from_user_mode+0x21/0x70 [ 2242.026667][T15749] do_syscall_64+0x35/0xb0 [ 2242.031110][T15749] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2242.037036][T15749] RIP: 0033:0x4665d9 [ 2242.040946][T15749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.060580][T15749] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 03:46:27 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2) 03:46:27 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r4, 0x0, 0x0) ftruncate(r4, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) io_uring_enter(r4, 0x680f, 0x5350, 0x0, &(0x7f0000000040)={[0xf8d9]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2242.069030][T15749] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2242.077037][T15749] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2242.085033][T15749] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.093024][T15749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2242.101016][T15749] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 03:46:27 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:27 executing program 5 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:27 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x3) 03:46:27 executing program 4 (fault-call:5 fault-nth:16): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x5460, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:28 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x300) [ 2242.365864][T15786] FAULT_INJECTION: forcing a failure. [ 2242.365864][T15786] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.419609][T15783] FAULT_INJECTION: forcing a failure. [ 2242.419609][T15783] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.421638][T15786] CPU: 1 PID: 15786 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2242.441030][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2242.451185][T15786] Call Trace: [ 2242.454482][T15786] dump_stack_lvl+0xcd/0x134 [ 2242.459107][T15786] should_fail.cold+0x5/0xa [ 2242.463658][T15786] ? __io_queue_sqe+0x807/0xf10 [ 2242.468530][T15786] should_failslab+0x5/0x10 [ 2242.473491][T15786] kmem_cache_alloc_trace+0x55/0x3c0 [ 2242.478808][T15786] __io_queue_sqe+0x807/0xf10 [ 2242.483513][T15786] ? io_issue_sqe+0x6920/0x6920 [ 2242.488395][T15786] io_submit_sqes+0x63ea/0x7bc0 [ 2242.493288][T15786] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2242.499022][T15786] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2242.504589][T15786] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2242.509640][T15786] ? find_held_lock+0x2d/0x110 [ 2242.514434][T15786] ? __context_tracking_exit+0xb8/0xe0 [ 2242.519917][T15786] ? lock_downgrade+0x6e0/0x6e0 [ 2242.524783][T15786] ? lock_downgrade+0x6e0/0x6e0 [ 2242.529645][T15786] ? syscall_enter_from_user_mode+0x21/0x70 [ 2242.535584][T15786] do_syscall_64+0x35/0xb0 [ 2242.540031][T15786] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2242.545947][T15786] RIP: 0033:0x4665d9 [ 2242.549860][T15786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:46:28 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4082, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r6, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000100)={0x3e, 0x0, &(0x7f00000000c0)=[r3, r5]}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:28 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2000) [ 2242.569523][T15786] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2242.577961][T15786] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2242.586057][T15786] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2242.594062][T15786] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.602041][T15786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2242.610031][T15786] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 [ 2242.634030][T15783] CPU: 0 PID: 15783 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2242.642937][T15783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2242.653030][T15783] Call Trace: [ 2242.656327][T15783] dump_stack_lvl+0xcd/0x134 [ 2242.660952][T15783] should_fail.cold+0x5/0xa [ 2242.665494][T15783] ? kvmalloc_node+0xb4/0xf0 [ 2242.670117][T15783] should_failslab+0x5/0x10 [ 2242.674654][T15783] __kmalloc_node+0x75/0x380 [ 2242.679271][T15783] kvmalloc_node+0xb4/0xf0 [ 2242.683709][T15783] tun_attach.isra.0+0x852/0x16b0 [ 2242.688759][T15783] ? lock_downgrade+0x6e0/0x6e0 [ 2242.693629][T15783] ? full_name_hash+0xb5/0xf0 [ 2242.698329][T15783] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2242.704593][T15783] ? netdev_name_node_lookup+0x108/0x150 [ 2242.710256][T15783] __tun_chr_ioctl.isra.0+0x1fb8/0x4270 [ 2242.715837][T15783] ? lock_downgrade+0x6e0/0x6e0 [ 2242.720711][T15783] ? tun_chr_read_iter+0x260/0x260 [ 2242.725869][T15783] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2242.732138][T15783] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2242.737893][T15783] __x64_sys_ioctl+0x193/0x200 [ 2242.742691][T15783] do_syscall_64+0x35/0xb0 [ 2242.747128][T15783] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2242.753052][T15783] RIP: 0033:0x4665d9 [ 2242.756961][T15783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:46:28 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) signalfd4(r4, &(0x7f0000000040)={[0x800]}, 0x8, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2242.776603][T15783] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2242.785043][T15783] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2242.793159][T15783] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2242.801157][T15783] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.809419][T15783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2242.817404][T15783] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 03:46:28 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x20000) 03:46:28 executing program 4 (fault-call:5 fault-nth:17): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2243.211711][T15826] FAULT_INJECTION: forcing a failure. [ 2243.211711][T15826] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.234454][T15826] CPU: 0 PID: 15826 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2243.243439][T15826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2243.253626][T15826] Call Trace: [ 2243.257011][T15826] dump_stack_lvl+0xcd/0x134 [ 2243.261636][T15826] should_fail.cold+0x5/0xa [ 2243.266271][T15826] ? io_read+0xdaa/0x1140 [ 2243.270619][T15826] should_failslab+0x5/0x10 [ 2243.275153][T15826] __kmalloc+0x72/0x330 [ 2243.279336][T15826] io_read+0xdaa/0x1140 [ 2243.283521][T15826] ? mark_lock+0xef/0x17b0 [ 2243.288187][T15826] ? __do_sys_io_uring_register+0x2890/0x2890 [ 2243.294407][T15826] ? __io_queue_proc+0xeb/0x5f0 [ 2243.299291][T15826] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2243.305313][T15826] ? mark_lock+0xef/0x17b0 [ 2243.309765][T15826] io_issue_sqe+0x20b/0x6920 [ 2243.314387][T15826] ? find_held_lock+0x2d/0x110 [ 2243.319180][T15826] ? io_write+0xed0/0xed0 [ 2243.323528][T15826] ? __io_queue_sqe+0xad2/0xf10 [ 2243.328415][T15826] ? mark_held_locks+0x9f/0xe0 [ 2243.333221][T15826] __io_queue_sqe+0x1ac/0xf10 [ 2243.337926][T15826] ? io_issue_sqe+0x6920/0x6920 [ 2243.342825][T15826] io_submit_sqes+0x63ea/0x7bc0 [ 2243.347805][T15826] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2243.353544][T15826] __do_sys_io_uring_enter+0xb03/0x1d30 03:46:29 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r7, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r7, 0xffffffffffffff7f, 0x0, 0x200, 0x0, 0x1}, 0x1) 03:46:29 executing program 5 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:29 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x1000000) 03:46:29 executing program 2: ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) syz_io_uring_setup(0x4c15, &(0x7f00000002c0)={0x0, 0x6cb2, 0x0, 0x0, 0x1db}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0x6, 0x22b1, 0x5}) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = accept$inet(r3, &(0x7f0000001a40)={0x2, 0x0, @multicast2}, &(0x7f0000001a80)=0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r5, 0x540e, 0xb7ce) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001b00)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000001ac0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}, {[0x4, 0x4], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@empty, @multicast2, 0xff000000, 0x0, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x2e, 0x1, 0xa}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x1000, 0x0, [0x28, 0x2c, 0x2f, 0x0, 0x28, 0x2b, 0x8, 0x18, 0x21, 0xe, 0x3b, 0x3a, 0xc, 0x3f, 0x36, 0x34], 0x1, 0xef, 0xda1}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) 03:46:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x6364, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2243.359135][T15826] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2243.364187][T15826] ? find_held_lock+0x2d/0x110 [ 2243.369080][T15826] ? __context_tracking_exit+0xb8/0xe0 [ 2243.374575][T15826] ? lock_downgrade+0x6e0/0x6e0 [ 2243.379448][T15826] ? lock_downgrade+0x6e0/0x6e0 [ 2243.384343][T15826] ? syscall_enter_from_user_mode+0x21/0x70 [ 2243.390272][T15826] do_syscall_64+0x35/0xb0 [ 2243.394858][T15826] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2243.400793][T15826] RIP: 0033:0x4665d9 [ 2243.404712][T15826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2243.425301][T15826] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2243.433739][T15826] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2243.441736][T15826] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2243.449724][T15826] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2243.457715][T15826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2243.465795][T15826] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 [ 2243.530029][T15836] FAULT_INJECTION: forcing a failure. [ 2243.530029][T15836] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.585371][T15836] CPU: 0 PID: 15836 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2243.594201][T15836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2243.604271][T15836] Call Trace: [ 2243.607556][T15836] dump_stack_lvl+0xcd/0x134 [ 2243.612160][T15836] should_fail.cold+0x5/0xa [ 2243.616672][T15836] should_failslab+0x5/0x10 [ 2243.621178][T15836] __kmalloc_track_caller+0x79/0x320 [ 2243.626460][T15836] ? kvasprintf_const+0x60/0x190 [ 2243.631417][T15836] kvasprintf+0xb5/0x150 [ 2243.635656][T15836] ? bust_spinlocks+0xe0/0xe0 [ 2243.640337][T15836] kvasprintf_const+0x60/0x190 [ 2243.645100][T15836] kobject_set_name_vargs+0x56/0x150 [ 2243.650406][T15836] kobject_init_and_add+0xc9/0x160 [ 2243.655546][T15836] ? kobject_create_and_add+0xb0/0xb0 [ 2243.660927][T15836] ? lock_chain_count+0x20/0x20 [ 2243.665784][T15836] netdev_queue_update_kobjects+0x19c/0x450 [ 2243.671711][T15836] netif_set_real_num_tx_queues+0x1b6/0x760 [ 2243.677620][T15836] tun_attach.isra.0+0x645/0x16b0 [ 2243.682705][T15836] __tun_chr_ioctl.isra.0+0x1fb8/0x4270 [ 2243.688288][T15836] ? lock_downgrade+0x6e0/0x6e0 [ 2243.693137][T15836] ? tun_chr_read_iter+0x260/0x260 [ 2243.698271][T15836] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2243.704509][T15836] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2243.710224][T15836] __x64_sys_ioctl+0x193/0x200 [ 2243.715075][T15836] do_syscall_64+0x35/0xb0 [ 2243.719491][T15836] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2243.725413][T15836] RIP: 0033:0x4665d9 [ 2243.729300][T15836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2243.749081][T15836] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2243.757499][T15836] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2243.765548][T15836] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2243.773527][T15836] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2243.781591][T15836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2243.789554][T15836] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 03:46:29 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2000000) 03:46:29 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x143400, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r6, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@nfc, 0x0, 0x80800, 0x0, {0x0, r10}}, 0x9) r11 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$binfmt_elf32(r11, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x27, 0x2, 0x3, 0x7fff, 0x0, 0x6, 0x20, 0xed, 0x38, 0x23c, 0xfd, 0xb2, 0x20, 0x1, 0xb1, 0x8, 0x3f}, [{0x6474e551, 0xfffeffff, 0x2, 0x4, 0x1, 0x7ff, 0xffff8001, 0x3}, {0x70000000, 0x16f0, 0x200, 0x20, 0x80000001, 0x0, 0x1f, 0x10000}], "ffe2e340acfbfa5b2be8b46768cea0a114d2407f8ef47c8e9dc23352c4d750d52c24f6fa78f2f12cef0f7dc97c3555f10381a75e03a25b3826d6eb6162850091d67a73d31dc0084daf92c55d41b05252604e73e5151954e11c92349539cff2fae28944d39b0d2727add89d9ef42d4acb713dd5a2b60a1aa5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7f0) mmap(&(0x7f0000ee7000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r5, 0x5929d000) getsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2243.855057][T15836] kobject: can not set name properly! 03:46:29 executing program 5 (fault-call:4 fault-nth:5): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:29 executing program 4 (fault-call:5 fault-nth:18): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x8913, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2244.070774][T15863] FAULT_INJECTION: forcing a failure. [ 2244.070774][T15863] name failslab, interval 1, probability 0, space 0, times 0 [ 2244.114107][T15863] CPU: 0 PID: 15863 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2244.122920][T15863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2244.133001][T15863] Call Trace: [ 2244.136296][T15863] dump_stack_lvl+0xcd/0x134 [ 2244.140915][T15863] should_fail.cold+0x5/0xa [ 2244.145452][T15863] should_failslab+0x5/0x10 [ 2244.149982][T15863] __kmalloc_track_caller+0x79/0x320 [ 2244.154927][T15869] FAULT_INJECTION: forcing a failure. 03:46:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x28fb, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x527c, &(0x7f00000000c0)={0x0, 0x1769, 0x0, 0x2, 0x9}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r0, 0x7238, 0x11f0, 0x3, &(0x7f00000001c0)={[0x8]}, 0x8) io_uring_enter(r1, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:29 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x3000000) [ 2244.154927][T15869] name failslab, interval 1, probability 0, space 0, times 0 [ 2244.155287][T15863] ? kstrdup_const+0x53/0x80 [ 2244.155329][T15863] kstrdup+0x36/0x70 [ 2244.155357][T15863] kstrdup_const+0x53/0x80 [ 2244.180775][T15863] __kernfs_new_node+0x9d/0x8b0 [ 2244.185656][T15863] ? kernfs_path_from_node+0x60/0x60 [ 2244.190973][T15863] ? map_id_range_down+0x1c4/0x340 [ 2244.196207][T15863] ? projid_m_show+0x220/0x220 [ 2244.201033][T15863] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2244.207297][T15863] ? vsnprintf+0x2ce/0x14f0 [ 2244.211833][T15863] kernfs_create_dir_ns+0x9c/0x220 [ 2244.216976][T15863] sysfs_create_dir_ns+0x128/0x290 [ 2244.222146][T15863] ? sysfs_create_mount_point+0xb0/0xb0 [ 2244.227717][T15863] ? rwlock_bug.part.0+0x90/0x90 [ 2244.232663][T15863] ? kfree+0x226/0x650 [ 2244.236744][T15863] ? do_raw_spin_unlock+0x171/0x230 [ 2244.241964][T15863] kobject_add_internal+0x2d2/0xa60 [ 2244.247179][T15863] kobject_init_and_add+0x101/0x160 [ 2244.252395][T15863] ? kobject_create_and_add+0xb0/0xb0 [ 2244.257774][T15863] ? lock_chain_count+0x20/0x20 [ 2244.262734][T15863] netdev_queue_update_kobjects+0x19c/0x450 [ 2244.268648][T15863] netif_set_real_num_tx_queues+0x1b6/0x760 [ 2244.274577][T15863] tun_attach.isra.0+0x645/0x16b0 [ 2244.279636][T15863] __tun_chr_ioctl.isra.0+0x1fb8/0x4270 [ 2244.285185][T15863] ? lock_downgrade+0x6e0/0x6e0 [ 2244.290037][T15863] ? tun_chr_read_iter+0x260/0x260 [ 2244.295338][T15863] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2244.301587][T15863] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2244.307600][T15863] __x64_sys_ioctl+0x193/0x200 [ 2244.312390][T15863] do_syscall_64+0x35/0xb0 [ 2244.316906][T15863] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2244.322915][T15863] RIP: 0033:0x4665d9 [ 2244.326808][T15863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2244.346691][T15863] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2244.355126][T15863] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2244.363116][T15863] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2244.371096][T15863] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2244.379167][T15863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2244.387170][T15863] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 [ 2244.395345][T15869] CPU: 1 PID: 15869 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2244.404143][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2244.414204][T15869] Call Trace: [ 2244.417579][T15869] dump_stack_lvl+0xcd/0x134 [ 2244.422186][T15869] should_fail.cold+0x5/0xa [ 2244.426695][T15869] should_failslab+0x5/0x10 [ 2244.431197][T15869] kmem_cache_alloc_bulk+0x4a/0x490 [ 2244.436397][T15869] io_submit_sqes+0xddc/0x7bc0 [ 2244.441176][T15869] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2244.446893][T15869] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2244.452448][T15869] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2244.457484][T15869] ? find_held_lock+0x2d/0x110 [ 2244.462250][T15869] ? __context_tracking_exit+0xb8/0xe0 [ 2244.467706][T15869] ? lock_downgrade+0x6e0/0x6e0 [ 2244.472546][T15869] ? lock_downgrade+0x6e0/0x6e0 [ 2244.477401][T15869] ? syscall_enter_from_user_mode+0x21/0x70 [ 2244.483299][T15869] do_syscall_64+0x35/0xb0 [ 2244.487726][T15869] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2244.493617][T15869] RIP: 0033:0x4665d9 [ 2244.497501][T15869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2244.517288][T15869] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2244.525692][T15869] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2244.533653][T15869] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2244.541613][T15869] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2244.549575][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2244.557536][T15869] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 [ 2244.774681][T15863] kobject_add_internal failed for tx-1 (error: -12 parent: queues) 03:46:30 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x4000010, 0xffffffffffffffff, 0x53918000) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x7b22, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$ptp(r4, &(0x7f0000000200)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000200001a0900010073797a300000000048000000030a01020000000000000000020000000900010073797a30000000000900030073"], 0xa4}}, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) fcntl$getown(r3, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r7, 0x86d881631ff68b05, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) 03:46:30 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r5, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xfa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r4, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r1, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:30 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x20000000) 03:46:30 executing program 4 (fault-call:5 fault-nth:19): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:30 executing program 5 (fault-call:4 fault-nth:6): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2245.047367][T15901] FAULT_INJECTION: forcing a failure. [ 2245.047367][T15901] name failslab, interval 1, probability 0, space 0, times 0 [ 2245.074942][T15900] FAULT_INJECTION: forcing a failure. [ 2245.074942][T15900] name failslab, interval 1, probability 0, space 0, times 0 [ 2245.083502][T15901] CPU: 1 PID: 15901 Comm: syz-executor.4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2245.096369][T15901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2245.106440][T15901] Call Trace: [ 2245.109715][T15901] dump_stack_lvl+0xcd/0x134 [ 2245.114500][T15901] should_fail.cold+0x5/0xa [ 2245.119004][T15901] should_failslab+0x5/0x10 [ 2245.123504][T15901] kmem_cache_alloc_bulk+0x4a/0x490 [ 2245.128718][T15901] io_submit_sqes+0xddc/0x7bc0 [ 2245.133494][T15901] ? __do_sys_io_uring_enter+0xb03/0x1d30 [ 2245.139207][T15901] __do_sys_io_uring_enter+0xb03/0x1d30 [ 2245.144752][T15901] ? io_submit_sqes+0x7bc0/0x7bc0 [ 2245.149780][T15901] ? find_held_lock+0x2d/0x110 [ 2245.154550][T15901] ? __context_tracking_exit+0xb8/0xe0 [ 2245.160098][T15901] ? lock_downgrade+0x6e0/0x6e0 [ 2245.164968][T15901] ? lock_downgrade+0x6e0/0x6e0 [ 2245.169822][T15901] ? syscall_enter_from_user_mode+0x21/0x70 [ 2245.175716][T15901] do_syscall_64+0x35/0xb0 [ 2245.180128][T15901] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2245.186024][T15901] RIP: 0033:0x4665d9 [ 2245.189998][T15901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2245.209608][T15901] RSP: 002b:00007f448ead8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2245.218013][T15901] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2245.225998][T15901] RDX: 0000000000000000 RSI: 0000000000002537 RDI: 0000000000000003 [ 2245.234056][T15901] RBP: 00007f448ead81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2245.242018][T15901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2245.250064][T15901] R13: 0000000000a9fb1f R14: 00007f448ead8300 R15: 0000000000022000 [ 2245.309260][T15900] CPU: 1 PID: 15900 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2245.318069][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2245.328439][T15900] Call Trace: [ 2245.331735][T15900] dump_stack_lvl+0xcd/0x134 [ 2245.336363][T15900] should_fail.cold+0x5/0xa [ 2245.340891][T15900] ? __kernfs_new_node+0xd4/0x8b0 [ 2245.345939][T15900] should_failslab+0x5/0x10 [ 2245.350467][T15900] kmem_cache_alloc+0x5e/0x3a0 [ 2245.355270][T15900] __kernfs_new_node+0xd4/0x8b0 [ 2245.360148][T15900] ? kernfs_path_from_node+0x60/0x60 [ 2245.365462][T15900] ? map_id_range_down+0x1c4/0x340 [ 2245.370692][T15900] ? projid_m_show+0x220/0x220 [ 2245.375684][T15900] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2245.382085][T15900] ? vsnprintf+0x2ce/0x14f0 [ 2245.386633][T15900] kernfs_create_dir_ns+0x9c/0x220 [ 2245.391781][T15900] sysfs_create_dir_ns+0x128/0x290 [ 2245.396934][T15900] ? sysfs_create_mount_point+0xb0/0xb0 [ 2245.402517][T15900] ? rwlock_bug.part.0+0x90/0x90 [ 2245.407483][T15900] ? kfree+0x226/0x650 [ 2245.411928][T15900] ? do_raw_spin_unlock+0x171/0x230 [ 2245.417156][T15900] kobject_add_internal+0x2d2/0xa60 [ 2245.422409][T15900] kobject_init_and_add+0x101/0x160 [ 2245.427639][T15900] ? kobject_create_and_add+0xb0/0xb0 [ 2245.433040][T15900] ? lock_chain_count+0x20/0x20 [ 2245.437928][T15900] netdev_queue_update_kobjects+0x19c/0x450 [ 2245.443861][T15900] netif_set_real_num_tx_queues+0x1b6/0x760 [ 2245.449787][T15900] tun_attach.isra.0+0x645/0x16b0 [ 2245.454855][T15900] __tun_chr_ioctl.isra.0+0x1fb8/0x4270 [ 2245.460429][T15900] ? lock_downgrade+0x6e0/0x6e0 [ 2245.465301][T15900] ? tun_chr_read_iter+0x260/0x260 [ 2245.470455][T15900] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2245.476718][T15900] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2245.482464][T15900] __x64_sys_ioctl+0x193/0x200 [ 2245.487775][T15900] do_syscall_64+0x35/0xb0 [ 2245.492218][T15900] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2245.498145][T15900] RIP: 0033:0x4665d9 03:46:31 executing program 4 (fault-call:5 fault-nth:20): r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:31 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2000000000000) [ 2245.502058][T15900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2245.521900][T15900] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2245.530351][T15900] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2245.538365][T15900] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2245.547529][T15900] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2245.547555][T15900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:46:31 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r3, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2007, @fd=r3, 0x3ff, 0x0, 0x0, 0xc, 0x1, {0x0, r4}}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:31 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:31 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000000)="0eba37e0866f892f73b9fbba55b083b0ed6ab275dfd8c45b6dba5f130aa99656", 0x20, 0x10, 0x1, {0x0, r4}}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002580)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @local}, 0x1, 0x7, 0x0, 0x2}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000180)="2262171ebcd41e999f80df5e02ba62a532e81e7d1d3087470c7459780b96db0d55b2f91306f9cf9ab79915684dcc0a88eccc5f628ea87f2134ca406411e3ca9c3d670115b77581c88b33498712413d2f5072c05454db8c1e65d2e2b1ecbc6fd80f30bc06f3a772c776694b46b0635b9fa082b20cb0bf6c38d87d4fee99e7466bbd8359d97afdbbdd84cf44e52b6288efd944a711a805e86be18e0318ed76ccb293d72f3162c059fd86a295d7a661a7cd22ec97dd4096d5f70b7d9f7381fa56032bb1bbb334039b8779089c", 0xcb}, {&(0x7f0000000340)="d9ec86307452e22f4e340dd0bbfc7f1d17db656ba7333444a3a5dd549cb80831ea89bc1d34d1bda32eecc88b4a56d93ce7db6610988dd7534daa1c624f02aeb5740e451f51731026213cd0bb9e3b7e4660f295fe3e0820d37fc8a3c2f0c246c9054c8715877ffe1750e78e11bcc92af3bdc28175bafcc20ebc7bc76238db23902605923cfc55280ac5868b2f2b72c89ad7d5cf6abcd3b4053b94d4280f4546b4de7c5ae029d9fc35ba4b55a248133bf9566f68ade7b6e63b33e7fff83fccdb3571b0ce434d1c", 0xc6}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000440)="449bc605b98fd96c2f78c5fa02ab921ace1ec0bbeeb6841c2a5e79844a8317e4c11c37e6274e1d99a0bd7dd137caff3c349a99224fbfd14c5422bad20d8eec27be44950f2e90fe9531ef5da7a2ddd561f3ebc84894589eb9da8ddf6c2aac0a23fec426951d4600255290ebbbb50e09caa3bcb8ada23349e5743d07f1b2972d050297a9457ed83e6425635117b2b73161ab1adb2f56680894db3424c9a768c5d9632394e95a16", 0xa6}, {&(0x7f0000001580)="1d02fc15758bca93eabae6a2a6bb92933f518d9cfc81cac87d03242fc424cec5f3c61760d955475be3d90b1df113f6c0a5bc509f3a0bd9cf68ca970daa0951f1c66d2e5472f67559a1f5def655f65f8499615b7bc673f9ac5fb945b320f2be6105106ba8ca870496c4db3305cd749bda553da2dd12413fe97dc45e9c5b1edfd3c0ef", 0x82}, {&(0x7f0000001640)="f7b185b8d3d5e01731775de7a44d7e3fd809f3a32f488bbc460d81e551f62cdb64dbcc3ad11eb9a2a6c852daed45966fd889b6148fec45654acdba84d0d5cde6a18ac7ba8be0e7c8ff7aec19375f4f39c03f13784d34d5d0fbdffc887f7ea0fe325b9f94c2b3b037dc94947d816c4ec98402b22c700dd9a6492b2d7ca9343c80828bb17dc8042a7a5f031885b12ff09480cdcef6582fac49cc422c495e0c94514413b4c0209330c029", 0xa9}], 0x6, &(0x7f0000001780)=[{0x88, 0x102, 0x9, "9a70aaac15485a82dee082d66be87d3a91eca540b195039a28cb435c095f9696174db3f66b55757057eda030fda47b68c63be83cddb1ce19a16eca0dda597ac276fcac5a0cd27a52c99c898582699a8f365d09e5596296f4ade7ad874bcd81a733c5a082636e73650a1596f0227c172d52eb875a76cd"}, {0xa8, 0x103, 0x80, "0ed54117d4eff1288aa6a877d07da3c981742b34091a59e5cb63a7ffa1b22e04619f3769ea6f2a4f75f5daac9b9cf4a61c5002b75a8c0d8d26f19f35a3f143aecd0d84f2252349242a78ee7b750566775f24b80de9d3e147a48050d812e64a2a9fb2930441673dfa5f248986a3fb62f52f4080333a10a4c25647ab5d069f6c6f244ff1c2b1d25251e37b67d2c7b0dfa20486e1"}, {0x10, 0x16b, 0x3a06}, {0x40, 0x0, 0x2, "f2f6b626f0b36497b48af26dffc823198cd47559ed4c01a7393faffbabc790eb67a45c072840ac78fc2a24251bc5ca"}, {0x60, 0x115, 0x3, "45aae95f863889420bc2176d52c64558212fe92a7ebab101326873236dd56dd8c1a854351b9a53c45097511c7bd581c9607cbf86dbb769af025969980af526593ab39d3654ae86677168f22b7153"}], 0x1e0}}, {{&(0x7f0000001980)=@isdn={0x22, 0x1, 0x40, 0x72, 0x3f}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001a00)="faaf4aa58bcbcb6390a0fd3a739dd6bb79cb5ed52cc8ffb2db0fd71df6db6d10b6d74804b8cd732e009cd75396a8d8e0a05629cd32028a6e4f836c306b63c203fc53b0e82cad0ee382ac918065cda0f3f28309140c9093c97763b1ec6c29cf94fa6b567a7b49513ee8b1c343adbd4a2aff085f3607b65a4a02fa0eaae1416b879293df7f6090ae62b9b7aa006666bfd7c3c5b020907a913621ddcbae0ce6cb4488063682889a2ea0d9f70c199c71e7153d42057b3bbca4d1", 0xb8}, {&(0x7f0000001ac0)="b7eaddbdfc0ccbe2a602b7cb10473a72d8e31e9d2208466ae2e02dfa41c27e46f37be5b0374812e0952a6b17cb3244e91adf856bfd01f0a2bfb837bb6128e51dc857585dfa0b83eb25704eb1a43c9c85e6796bdb8ee7ff11eadcf5b53b8ddf16f315203873af20e7aed7e4238cbf6835c8bd2b7f5f5465a45588aaf3967825c75042111ddd4618b64d8540", 0x8b}, {&(0x7f0000001b80)="9627ec804376a94e27f3627c30ee76217c0cb60aeb719b55e8b2499540cba46e39baf898c9306e00698fa66b3efa23913a953fab8085fa09a10de51841c85d35a6b4f4a4e01344d877a706dd1521c7", 0x4f}, {&(0x7f0000001c00)="81472aadf81496a6f6554c5da3a3fa95345d0cb076707411e5b32b635d92d0ad320a50d57fc9c734727b04dfbe5d57c4e4a537de65364b7add52c948b777eb97790023ca161f326b8ffea5f7ea6c", 0x4e}], 0x4, &(0x7f0000001c80)=[{0x20, 0x105, 0x64f, "3d070188314cb15522208ce937f2"}, {0xe8, 0x88, 0x5, "cc2c405a8be805688c33d603f4405d57487bd071b8ad1feb90397f8c1f155fcce9d485e42b92aaf431d028f32f7eddf23edcc43dfae2af2a9ad3a8ddbf79d848f75cd1f60f23a319d26893275cfc705898cc7e2e48937f161fb77f53e1a7ea66b3bddf1294f2a6b34556b0d406dae645486d4773de6cfbc0698e2be784612651336f40e8a3af17e0a1d6205867e41097895fd3b4ebf8a37404edb34ee81da07b1dabb287e916d40754e7015e2ca0aae1c6ee8d2e046a4c0f56145bf0547ad58828fe3c29d64ee2b96c02a52611bf70f915cbdb"}, {0xa0, 0x0, 0x7ff, "dbcf52fb0a8fdb19c738ee9a6f0f9b3081bc11456423517d971a56a4726f4689f35a9e5c488e0875bcef13386eaac13a96b5732ef7269c3040da6516f5a01749a4c22b5cfe6bfa6f9d3183b4653c575e71ad7ffef0fbf7c4efdd4cafad5f2c7fce95fd95fcf95b0a9447622b013bba845b341ccc1fa8b35f3f9eb9e2ff03eae46f6983a974e484215f2c12cca08b"}], 0x1a8}}, {{&(0x7f0000001e40)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001ec0)="2087b9d03d0562a83e0780f580d502ffae078e5764ce1032378aecdc03a262192080bbf79fc08372882e6740f2528d840dc14d80cb8e9aa113716c5acb2928fb86a495c0db764f8476950e167df13384886e61a7863a5598e7a01ca8f08fc89f6dbca334278db80f2582c6a84767327f145d6c4ba61f850ba492a1c470c880e34e454d60f447ef105128cd1a60284d66cd80d3b9704c0ff8861092c5f840dd131bd754653ac0b6377c0f512902f65666b02bbac70b0db7dcec2e7673af949c0602f7ded4e1f91081a2ee21e7ccee67bf66e2d84fef2f068d518874765808ad1bec7375bcd6", 0xe5}, {&(0x7f0000001fc0)="2deb3af46222036fb198ac9eebb5ea2140dfd347c156e116e4df1101435a32586d29afdcf0d4169f7ff42f9790b7deaa9f9bd87704a3781bd2179bb6b4613e68cb03", 0x42}, {&(0x7f0000000500)="97217838d7000ed846abe926460d7ad5e5f841c964722287a574e0e981b9e0393824e965", 0x24}, {&(0x7f0000002040)="443d9ca0b7e6d6f7b92d0914265f8eb90e6a4aed214774d094e9333ca45b6ff21c442e332dd1344e915e3b39d4fc5eca7847c967d2931fd0c9da148f3a62a03eb56f1d78394f64f6f0af0a06d2d026faca2fbd080e52ec00c724414b3607d43425364f9207cf0a5bb8de0f1e9f9ec529d6a63e3899fd73da9600123421", 0x7d}], 0x4}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)="dc404a6a", 0x4}, {&(0x7f0000002140)="23ae7a1b47fab16a9d43c4b76c9df438edf6518a6b5dee890504584739605c92a1a1354c11da42135ccebfdec342b91bd0f4308fbf606fd900ed6bbeabd54cdfabe7e21f30d24a3c39debc68f81fb703b8ba8bf99aba9e46aed24fad7effa8b880a44ba4", 0x64}, {&(0x7f00000021c0)="9cb63788dbd1b0f797072ad6784d77ecd5c1ca8877ab47ae1d44701ee50e83a6e5dba838db56ccbc2db81cb4b6", 0x2d}], 0x3, &(0x7f0000002240)=[{0x68, 0x84, 0x0, "bd5f530fb29fb7b661951127a01ee248fb217c295912e8ddd83fedebf9f2d69b33d0237cb404f3930d4766e2e8243393753477ad3420c7a5a92bfbdc8f8fc3af08d93cfcc2dd467415ce7752c2eb5d247b0cea"}, {0xf8, 0x3a, 0x32, "60796eb990983338d42ca95baa92c33b31a482338b940aa9f1aed58aafac7a0854c54ab7c52b142505155682492fb6c342cd5bfd581e911f008a45338d58dfbf1dc7d20570b971f07cee0f528b9a3d0b468ec0310e60d9d88ec25333c000ccd3f02b2f47cfda1be173990d430fa102176a1950e98f56844fdc950acf9c27910d7ce63cd7bba7a94443ea796468805d4e9c38a0b675c66150857680afdffa44d7ffcfb76b6a54c68769858129470f956f3b2bbd6d2c555d88defc6f0fe70c9960abac6d4403cfcdf3d15e912026231ddb3bb0044d67ba51a5ab7ae43e2010f23859f204ed"}, {0xd8, 0x10a, 0x9, "c2cc680a78cc5840f0117345491c08b0fe253120d9d763b313c48576eb0b8cbfb7a61ec31aad6fffb5ac712491a04c5a9dc90d02cb7cfebb5212b8449ad551d4eec63e5c997eddfb7ba72cd41fb23a283fd462e19284d4fe5ccab8fdfe20ca8e6a13e076632349983c76cdbd3979c860fe60b9c0a9082bc0cb761b5379c0d0b539bac941b69aa5bd6421e5cce146a36b33a3b9a06562c4d16ae11e9c73ce1255426201ad75fc382a81a932aea8253ab46009367e57d188bf029b2f42de79ce97fefc918ac852"}, {0x100, 0x111, 0x4, "c8151486cf5e0859f114c066d840c0dea4a08a8125bbbbf0a48fbd5ad63d67d540624c5a9612d10e9f2c4de3553a0bdc3daa550ea8f775a3b50086f710956f87c81689c75e877ff7f8a673085771bd27934620539d0330769bf09dc464d6057f9653daefe6976174f249b9b88a7389708d303f427978b11f82f7bce33f7765e1989dcf18989641ba41efbcfb4c72752585634f6eccffce30b13f95f4c0e3c3e173ca8d4f30f4bc7dd011a27718e40c8b9b30053bf4349c356abd24f0dd296d4bbe8d7f14f97bc6b9e36a363c4e2b765a2e7670149dbd8156f16b6c64cf0126f2155f2ad4b2e6b5aa1bfe98420134bf77"}], 0x338}}], 0x4, 0x1) [ 2245.547572][T15900] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 [ 2245.551513][T15900] kobject_add_internal failed for tx-1 (error: -12 parent: queues) [ 2246.047435][T15918] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 03:46:31 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x100000000000000) 03:46:31 executing program 5 (fault-call:4 fault-nth:7): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:31 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x8000, 0x11) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r5, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x200) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5, r6, r3, r0, r7, r0], 0x6) 03:46:31 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400448c9, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:31 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xfffffffc}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r7, 0x0, 0x0) fstat(r3, &(0x7f0000000340)) r8 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r7}, 0xffff0256) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd=r7, 0x9, 0x0, 0x0, 0x3, 0x0, {0x1, r11}}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r12, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2246.250055][T15961] FAULT_INJECTION: forcing a failure. [ 2246.250055][T15961] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.264375][T15961] CPU: 0 PID: 15961 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2246.273183][T15961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2246.283261][T15961] Call Trace: [ 2246.286552][T15961] dump_stack_lvl+0xcd/0x134 [ 2246.291255][T15961] should_fail.cold+0x5/0xa [ 2246.296022][T15961] ? radix_tree_node_alloc.constprop.0+0x1e4/0x350 [ 2246.302894][T15961] should_failslab+0x5/0x10 [ 2246.307400][T15961] kmem_cache_alloc+0x5e/0x3a0 [ 2246.312164][T15961] radix_tree_node_alloc.constprop.0+0x1e4/0x350 [ 2246.318499][T15961] idr_get_free+0x554/0xa60 [ 2246.323012][T15961] idr_alloc_u32+0x16c/0x2c0 [ 2246.327600][T15961] ? __fprop_inc_percpu_max+0x120/0x120 [ 2246.333179][T15961] idr_alloc_cyclic+0x102/0x230 [ 2246.338117][T15961] ? idr_alloc+0x130/0x130 [ 2246.342523][T15961] ? rwlock_bug.part.0+0x90/0x90 [ 2246.347457][T15961] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2246.353114][T15961] __kernfs_new_node+0x117/0x8b0 [ 2246.358054][T15961] ? kernfs_path_from_node+0x60/0x60 [ 2246.363335][T15961] ? map_id_range_down+0x1c4/0x340 [ 2246.368447][T15961] ? projid_m_show+0x220/0x220 [ 2246.373205][T15961] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2246.379441][T15961] ? vsnprintf+0x2ce/0x14f0 [ 2246.383947][T15961] kernfs_create_dir_ns+0x9c/0x220 [ 2246.389061][T15961] sysfs_create_dir_ns+0x128/0x290 [ 2246.394170][T15961] ? sysfs_create_mount_point+0xb0/0xb0 [ 2246.399713][T15961] ? rwlock_bug.part.0+0x90/0x90 [ 2246.404766][T15961] ? kfree+0x226/0x650 [ 2246.409022][T15961] ? do_raw_spin_unlock+0x171/0x230 [ 2246.414233][T15961] kobject_add_internal+0x2d2/0xa60 [ 2246.419503][T15961] kobject_init_and_add+0x101/0x160 [ 2246.424710][T15961] ? kobject_create_and_add+0xb0/0xb0 [ 2246.430204][T15961] ? lock_chain_count+0x20/0x20 [ 2246.435083][T15961] netdev_queue_update_kobjects+0x19c/0x450 [ 2246.440992][T15961] netif_set_real_num_tx_queues+0x1b6/0x760 [ 2246.446985][T15961] tun_attach.isra.0+0x645/0x16b0 [ 2246.452026][T15961] __tun_chr_ioctl.isra.0+0x1fb8/0x4270 [ 2246.457581][T15961] ? lock_downgrade+0x6e0/0x6e0 [ 2246.462431][T15961] ? tun_chr_read_iter+0x260/0x260 [ 2246.467552][T15961] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2246.473791][T15961] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2246.479512][T15961] __x64_sys_ioctl+0x193/0x200 [ 2246.484279][T15961] do_syscall_64+0x35/0xb0 [ 2246.488691][T15961] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2246.494604][T15961] RIP: 0033:0x4665d9 [ 2246.498501][T15961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.518225][T15961] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2246.526655][T15961] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2246.534720][T15961] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2246.542697][T15961] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.550783][T15961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2246.558752][T15961] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 03:46:32 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x200000000000000) 03:46:32 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5a6f, 0xeabd, 0x2, &(0x7f0000000100), 0x8) 03:46:32 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x2, 0x0, 0x0, 0x0) 03:46:32 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x300000000000000) 03:46:32 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x3, 0x0, 0x0, 0x0) 03:46:32 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe34ea3644c72b7cf}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x100, 0x70bd29, 0x25dfdbfe, {0xa, 0x40, 0x4}, [@IFA_FLAGS={0x8, 0x8, 0x480}, @IFA_CACHEINFO={0x14, 0x6, {0xdd400000, 0x0, 0xc4a7c540, 0x7fff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x8091) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:32 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x2000000000000000) 03:46:32 executing program 5 (fault-call:4 fault-nth:8): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400448dd, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:32 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x7, 0x0, 0x0, 0x0) 03:46:32 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0xffffffffffffffff) 03:46:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x4, 0x1, {0x0, r3, r4}}, 0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1da000, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = signalfd4(r6, &(0x7f00000000c0)={[0x100000001]}, 0x8, 0x0) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xf5f5, 0x2) r1 = syz_io_uring_setup(0x39fc, &(0x7f00000002c0)={0x0, 0xffffffff, 0x0, 0xfffffffc, 0xff77fffe}, &(0x7f000010e000/0x13000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x2, 0x70bd2b, 0x25dfd3ff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r4, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r1, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2247.187948][T16014] FAULT_INJECTION: forcing a failure. [ 2247.187948][T16014] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.232703][T16014] CPU: 1 PID: 16014 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2247.241637][T16014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2247.251801][T16014] Call Trace: [ 2247.255125][T16014] dump_stack_lvl+0xcd/0x134 [ 2247.259748][T16014] should_fail.cold+0x5/0xa [ 2247.264279][T16014] ? __kernfs_new_node+0xd4/0x8b0 [ 2247.269330][T16014] should_failslab+0x5/0x10 [ 2247.273868][T16014] kmem_cache_alloc+0x5e/0x3a0 03:46:33 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), r3}, 0x6) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee8000/0x2000)=nil, 0x2000, 0x3, 0x1010, r0, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13, 0x1}, 0x7ff) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf47, &(0x7f0000000000)={0x0, 0xb130, 0x0, 0x3, 0x1fa, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r9 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r9, 0x0, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x6004, @fd=r9, 0x5, 0x5, 0x2, 0x0, 0x1, {0x2}}, 0x1f) [ 2247.278657][T16014] ? kernfs_add_one+0x36a/0x4c0 [ 2247.283537][T16014] __kernfs_new_node+0xd4/0x8b0 [ 2247.288419][T16014] ? kernfs_path_from_node+0x60/0x60 [ 2247.293736][T16014] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2247.299309][T16014] ? wait_for_completion_io+0x280/0x280 [ 2247.304886][T16014] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2247.311154][T16014] ? kernfs_next_descendant_post+0x1a3/0x290 [ 2247.317173][T16014] kernfs_new_node+0x93/0x120 [ 2247.321883][T16014] __kernfs_create_file+0x51/0x350 [ 2247.327030][T16014] sysfs_add_file_mode_ns+0x226/0x540 [ 2247.332443][T16014] internal_create_group+0x328/0xb20 [ 2247.337772][T16014] ? sysfs_remove_group+0x170/0x170 [ 2247.343091][T16014] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2247.349361][T16014] ? sysfs_create_dir_ns+0x13a/0x290 [ 2247.354664][T16014] ? sysfs_create_dir_ns+0x178/0x290 [ 2247.359978][T16014] ? sysfs_create_mount_point+0xb0/0xb0 [ 2247.365561][T16014] internal_create_groups.part.0+0x90/0x140 [ 2247.371488][T16014] sysfs_create_groups+0x25/0x50 [ 2247.376451][T16014] kobject_add_internal+0x583/0xa60 [ 2247.381675][T16014] kobject_init_and_add+0x101/0x160 [ 2247.386897][T16014] ? kobject_create_and_add+0xb0/0xb0 [ 2247.392294][T16014] ? lock_chain_count+0x20/0x20 [ 2247.397185][T16014] netdev_queue_update_kobjects+0x19c/0x450 [ 2247.403109][T16014] netif_set_real_num_tx_queues+0x1b6/0x760 [ 2247.409040][T16014] tun_attach.isra.0+0x645/0x16b0 [ 2247.414111][T16014] __tun_chr_ioctl.isra.0+0x1fb8/0x4270 [ 2247.419700][T16014] ? lock_downgrade+0x6e0/0x6e0 [ 2247.424612][T16014] ? tun_chr_read_iter+0x260/0x260 03:46:33 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_setup(0x45a4, &(0x7f0000000000)={0x0, 0xbc47, 0x18, 0x3, 0x244, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r7, &(0x7f0000000180)={0x101000, 0x1c4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r8, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2247.430376][T16014] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2247.436650][T16014] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2247.442396][T16014] __x64_sys_ioctl+0x193/0x200 [ 2247.447196][T16014] do_syscall_64+0x35/0xb0 [ 2247.451635][T16014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2247.457552][T16014] RIP: 0033:0x4665d9 [ 2247.461463][T16014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:46:33 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000000)=0x5, 0x0, 0x4) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2247.481096][T16014] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2247.489544][T16014] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2247.497717][T16014] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2247.505705][T16014] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2247.513782][T16014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2247.521777][T16014] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 03:46:33 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x300, 0x0, 0x0, 0x0) 03:46:33 executing program 1: r0 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2247.632628][T16014] kobject_add_internal failed for tx-1 (error: -12 parent: queues) 03:46:33 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x860000, 0x0) io_uring_enter(r4, 0x2a73, 0xd868, 0x2, &(0x7f0000000040)={[0x100]}, 0x8) 03:46:33 executing program 5 (fault-call:4 fault-nth:9): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40049409, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r4, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x220c01, 0x9a) io_uring_enter(r1, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:33 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x700, 0x0, 0x0, 0x0) [ 2247.943419][T16066] FAULT_INJECTION: forcing a failure. [ 2247.943419][T16066] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.984832][T16066] CPU: 1 PID: 16066 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2247.993661][T16066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2248.003738][T16066] Call Trace: [ 2248.007041][T16066] dump_stack_lvl+0xcd/0x134 [ 2248.011668][T16066] should_fail.cold+0x5/0xa [ 2248.016548][T16066] ? __kernfs_new_node+0xd4/0x8b0 [ 2248.021598][T16066] should_failslab+0x5/0x10 [ 2248.026123][T16066] kmem_cache_alloc+0x5e/0x3a0 [ 2248.030957][T16066] ? kernfs_add_one+0x36a/0x4c0 [ 2248.035845][T16066] __kernfs_new_node+0xd4/0x8b0 [ 2248.040755][T16066] ? kernfs_path_from_node+0x60/0x60 [ 2248.046069][T16066] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2248.051642][T16066] ? wait_for_completion_io+0x280/0x280 [ 2248.057211][T16066] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2248.063470][T16066] ? kernfs_next_descendant_post+0x1a3/0x290 [ 2248.069490][T16066] kernfs_new_node+0x93/0x120 [ 2248.074193][T16066] __kernfs_create_file+0x51/0x350 [ 2248.079331][T16066] sysfs_add_file_mode_ns+0x226/0x540 [ 2248.084737][T16066] internal_create_group+0x328/0xb20 [ 2248.090059][T16066] ? sysfs_remove_group+0x170/0x170 [ 2248.095282][T16066] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2248.101545][T16066] ? sysfs_create_dir_ns+0x13a/0x290 [ 2248.106850][T16066] ? sysfs_create_dir_ns+0x178/0x290 [ 2248.112162][T16066] ? sysfs_create_mount_point+0xb0/0xb0 [ 2248.117822][T16066] internal_create_groups.part.0+0x90/0x140 [ 2248.123744][T16066] sysfs_create_groups+0x25/0x50 [ 2248.128709][T16066] kobject_add_internal+0x583/0xa60 [ 2248.133952][T16066] kobject_init_and_add+0x101/0x160 [ 2248.139176][T16066] ? kobject_create_and_add+0xb0/0xb0 [ 2248.144569][T16066] ? lock_chain_count+0x20/0x20 [ 2248.149453][T16066] netdev_queue_update_kobjects+0x19c/0x450 [ 2248.155382][T16066] netif_set_real_num_tx_queues+0x1b6/0x760 [ 2248.161313][T16066] tun_attach.isra.0+0x645/0x16b0 [ 2248.166390][T16066] __tun_chr_ioctl.isra.0+0x1fb8/0x4270 [ 2248.171959][T16066] ? lock_downgrade+0x6e0/0x6e0 [ 2248.176827][T16066] ? tun_chr_read_iter+0x260/0x260 [ 2248.181976][T16066] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2248.188234][T16066] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2248.193982][T16066] __x64_sys_ioctl+0x193/0x200 [ 2248.198774][T16066] do_syscall_64+0x35/0xb0 [ 2248.203241][T16066] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2248.209248][T16066] RIP: 0033:0x4665d9 [ 2248.213156][T16066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2248.232780][T16066] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2248.241214][T16066] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2248.249198][T16066] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2248.257180][T16066] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2248.265161][T16066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2248.273146][T16066] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 03:46:34 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x2957, &(0x7f0000000000)={0x0, 0x733d, 0x2, 0x3, 0x269, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000580)) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:34 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x4, 0x5, 0x20000, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_io_uring_setup(0x5505, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40000001, 0x0, {0x3}}, 0xfffffff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x10}}, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x110, r0, 0x10000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0xfffffff7, 0x0, 0x1}, 0x80000003) syz_open_dev$loop(&(0x7f00000001c0), 0x9, 0x80) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x1000, 0x4) splice(r0, &(0x7f0000000000)=0x1, r4, &(0x7f0000000040)=0x4, 0x1, 0x1) 03:46:34 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x2000, 0x0, 0x0, 0x0) 03:46:34 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee6000/0x3000)=nil, 0x3000, 0x2000007, 0x4010, r0, 0x8000000) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r11 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) write$midi(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000001c0)=[r0, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) syz_io_uring_submit(r8, r2, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2000, @fd, 0x10000, 0x81, 0xb36a, 0x0, 0x1, {0x1, r14}}, 0xfffffa39) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r5, 0x2, 0x0, 0x0, 0x5, 0x0, {0x0, r6}}, 0x9) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2248.358190][T16066] kobject_add_internal failed for tx-1 (error: -12 parent: queues) 03:46:34 executing program 5 (fault-call:4 fault-nth:10): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:34 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="e0c5414216ed8d3e62e1a1d0dcd344f4df25e30073aa2667c3962236de9083db5ba257730280645db48af28ef13a0000ea004000000000fe554d4963e27e8c80e4ed59010000000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x410000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0x5, 0x4, 0xae, 0x0, 0xfe1, 0x8090, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x2, 0x9}, 0x400, 0x3, 0x49, 0x5, 0x5, 0x1, 0xfffd, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xc, r8, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40086602, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:34 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x20000, 0x0, 0x0, 0x0) 03:46:34 executing program 2: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)=0xffff) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) r11 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000500)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, r3}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="79b200c5205182f608419f646c4fab444ada695a2bfcd07a41a0d5f7d178c0b4a42e2e64a7a15b8577948ecff3a835448d31111eeb24d35d4f5a9de9bed420625c7d822f1bd5844f8bb6b897ceb035a9d254d57d39ba7481cbcc4d4cad4d1d31e6aed2672193082a05c7d0092fb14a8f6bcc24fadaeff600a235656d300afad3cfad342527ebb883eeb9b70c2b32a4aa469505d4003a8234f443eaa5", 0x9c}, {&(0x7f0000000400)="0d8a0d665c53251f3e151be5dcd48c611ce0a93df7453d13f598f06c608b3edb3fe9d6d3f1d7e56cec77d739bc4b8fd66e61907e45a63aab3a2a014dc5e61f80bbeecdec5eec40481498eadb0864d0da9b0a1091d59a38a7937584e0bf4757a19c9f11b5119a4a4da7b17e2495198e99386f67d06ce73cd832c82016f1696575798ed380dd28f50dc085f0e5b372d3a894aabb73ef851364f96ab59a78c342e0c0d326e584edf1fa09aa10784079ce34040904ee1c876c79122ecfad3cdbc110727b435554e8", 0xc6}], 0x2}, 0x0, 0x20000800, 0x0, {0x0, r14}}, 0x8425) [ 2248.740129][T16111] FAULT_INJECTION: forcing a failure. [ 2248.740129][T16111] name failslab, interval 1, probability 0, space 0, times 0 [ 2248.755318][T16111] CPU: 1 PID: 16111 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2248.764128][T16111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2248.774197][T16111] Call Trace: [ 2248.777489][T16111] dump_stack_lvl+0xcd/0x134 [ 2248.782111][T16111] should_fail.cold+0x5/0xa [ 2248.786638][T16111] ? __kernfs_new_node+0xd4/0x8b0 [ 2248.791685][T16111] should_failslab+0x5/0x10 [ 2248.796305][T16111] kmem_cache_alloc+0x5e/0x3a0 [ 2248.801095][T16111] ? kernfs_add_one+0x36a/0x4c0 [ 2248.806003][T16111] __kernfs_new_node+0xd4/0x8b0 [ 2248.810879][T16111] ? kernfs_path_from_node+0x60/0x60 [ 2248.816190][T16111] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2248.821764][T16111] ? wait_for_completion_io+0x280/0x280 [ 2248.827335][T16111] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2248.833599][T16111] ? kernfs_next_descendant_post+0x1a3/0x290 [ 2248.839610][T16111] kernfs_new_node+0x93/0x120 [ 2248.844312][T16111] __kernfs_create_file+0x51/0x350 [ 2248.849458][T16111] sysfs_add_file_mode_ns+0x226/0x540 [ 2248.854960][T16111] internal_create_group+0x328/0xb20 [ 2248.860284][T16111] ? sysfs_remove_group+0x170/0x170 [ 2248.865510][T16111] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2248.871769][T16111] ? sysfs_create_dir_ns+0x13a/0x290 [ 2248.877100][T16111] ? sysfs_create_dir_ns+0x178/0x290 [ 2248.882409][T16111] ? sysfs_create_mount_point+0xb0/0xb0 [ 2248.887980][T16111] internal_create_groups.part.0+0x90/0x140 [ 2248.893902][T16111] sysfs_create_groups+0x25/0x50 [ 2248.898865][T16111] kobject_add_internal+0x583/0xa60 [ 2248.904095][T16111] kobject_init_and_add+0x101/0x160 [ 2248.909320][T16111] ? kobject_create_and_add+0xb0/0xb0 [ 2248.914713][T16111] ? lock_chain_count+0x20/0x20 [ 2248.919596][T16111] netdev_queue_update_kobjects+0x19c/0x450 [ 2248.925534][T16111] netif_set_real_num_tx_queues+0x1b6/0x760 [ 2248.931468][T16111] tun_attach.isra.0+0x645/0x16b0 [ 2248.936546][T16111] __tun_chr_ioctl.isra.0+0x1fb8/0x4270 [ 2248.942115][T16111] ? lock_downgrade+0x6e0/0x6e0 [ 2248.946989][T16111] ? tun_chr_read_iter+0x260/0x260 [ 2248.952138][T16111] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2248.958669][T16111] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2248.964411][T16111] __x64_sys_ioctl+0x193/0x200 [ 2248.969202][T16111] do_syscall_64+0x35/0xb0 [ 2248.973671][T16111] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2248.979561][T16111] RIP: 0033:0x4665d9 [ 2248.983443][T16111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2249.003153][T16111] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2249.011578][T16111] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2249.019564][T16111] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2249.027529][T16111] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 03:46:34 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x1000000, 0x0, 0x0, 0x0) 03:46:34 executing program 3: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r0, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x4, 0x2, 0x0, 0x9, 0x2}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r6, 0x6, 0x1, 0x1}) io_uring_enter(r7, 0x2537, 0x0, 0x7c1c68d73aa54ce3, 0x0, 0x0) [ 2249.035489][T16111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2249.043450][T16111] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 03:46:34 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x1ff) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:34 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r6, 0x0, r0}, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x204002, 0x1000}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r7, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r9, 0x0, 0x0) ioctl$int_out(r9, 0x0, &(0x7f0000000100)) 03:46:34 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x2000000, 0x0, 0x0, 0x0) 03:46:35 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2523c0, 0x0) r5 = syz_open_dev$amidi(&(0x7f00000000c0), 0x0, 0x40c00) splice(r4, &(0x7f0000000040)=0x1, r5, &(0x7f0000000100)=0x8, 0x9, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) [ 2249.330643][T16111] kobject_add_internal failed for tx-1 (error: -12 parent: queues) 03:46:35 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x100010, r0, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r8 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0x7, 0x0, 0x0, 0x4, 0x0, {0x0, r11}}, 0x221) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:35 executing program 5 (fault-call:4 fault-nth:11): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:35 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0xe35, &(0x7f0000000140)={0x0, 0xe2b9, 0x20, 0x1, 0x1f4, 0x0, r0}, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="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", 0x104d, 0x2000480, 0x0, {0x0, r4}}, 0xa) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x108000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x2, 0x0, 0x3, 0x0, 0x1, {0x0, r5}}, 0x80000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)={0x18001, 0x160, 0x8}, 0x18) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x2, 0x0, {0x0, r6, r7}}, 0x200) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x4010, r0, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0x6) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40186366, &(0x7f0000000040)={'syzkaller1\x00'}) [ 2249.560808][T16166] FAULT_INJECTION: forcing a failure. [ 2249.560808][T16166] name failslab, interval 1, probability 0, space 0, times 0 [ 2249.619609][T16166] CPU: 1 PID: 16166 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2249.628435][T16166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2249.638512][T16166] Call Trace: [ 2249.641807][T16166] dump_stack_lvl+0xcd/0x134 [ 2249.646431][T16166] should_fail.cold+0x5/0xa [ 2249.651053][T16166] ? __kernfs_new_node+0xd4/0x8b0 [ 2249.656103][T16166] should_failslab+0x5/0x10 [ 2249.660627][T16166] kmem_cache_alloc+0x5e/0x3a0 [ 2249.665418][T16166] ? kernfs_add_one+0x36a/0x4c0 [ 2249.670387][T16166] __kernfs_new_node+0xd4/0x8b0 [ 2249.675268][T16166] ? kernfs_path_from_node+0x60/0x60 [ 2249.680668][T16166] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2249.686235][T16166] ? wait_for_completion_io+0x280/0x280 [ 2249.691818][T16166] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2249.698079][T16166] ? kernfs_next_descendant_post+0x1a3/0x290 [ 2249.704092][T16166] kernfs_new_node+0x93/0x120 [ 2249.708795][T16166] __kernfs_create_file+0x51/0x350 [ 2249.713938][T16166] sysfs_add_file_mode_ns+0x226/0x540 [ 2249.719351][T16166] internal_create_group+0x328/0xb20 [ 2249.724671][T16166] ? sysfs_remove_group+0x170/0x170 [ 2249.729901][T16166] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2249.736159][T16166] ? sysfs_create_dir_ns+0x13a/0x290 [ 2249.741479][T16166] ? sysfs_create_dir_ns+0x178/0x290 [ 2249.746784][T16166] ? sysfs_create_mount_point+0xb0/0xb0 [ 2249.752353][T16166] internal_create_groups.part.0+0x90/0x140 [ 2249.758292][T16166] sysfs_create_groups+0x25/0x50 [ 2249.763228][T16166] kobject_add_internal+0x583/0xa60 [ 2249.768433][T16166] kobject_init_and_add+0x101/0x160 [ 2249.773651][T16166] ? kobject_create_and_add+0xb0/0xb0 [ 2249.779046][T16166] ? lock_chain_count+0x20/0x20 [ 2249.783938][T16166] netdev_queue_update_kobjects+0x19c/0x450 [ 2249.789864][T16166] netif_set_real_num_tx_queues+0x1b6/0x760 [ 2249.795799][T16166] tun_attach.isra.0+0x645/0x16b0 [ 2249.800867][T16166] __tun_chr_ioctl.isra.0+0x1fb8/0x4270 [ 2249.806440][T16166] ? lock_downgrade+0x6e0/0x6e0 [ 2249.811315][T16166] ? tun_chr_read_iter+0x260/0x260 [ 2249.816464][T16166] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2249.822725][T16166] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2249.828474][T16166] __x64_sys_ioctl+0x193/0x200 [ 2249.833276][T16166] do_syscall_64+0x35/0xb0 [ 2249.837800][T16166] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2249.843718][T16166] RIP: 0033:0x4665d9 [ 2249.847627][T16166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:46:35 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000000)=""/75, 0x4b}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f00000000c0)=""/116, 0x74}], 0x4, 0x1, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:35 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet(r4, &(0x7f0000000680)="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", 0x1000, 0x51, 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000040)={0x4d}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:35 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0xa, 0x0, r3, &(0x7f0000000140)={0x40000000}, r0}, 0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r4, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000)=[r5, r4, r4], 0x3}, 0x200) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:35 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000019, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = syz_io_uring_setup(0x1dda, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x65, 0x0, {0x0, r11}}, 0x4) r12 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r12, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000040), 0x0, 0x4) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:35 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x3000000, 0x0, 0x0, 0x0) [ 2249.867428][T16166] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2249.875982][T16166] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2249.884245][T16166] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2249.892230][T16166] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2249.900216][T16166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2249.908203][T16166] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 03:46:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e22, @private=0xa010100}, {0x1, @local}, 0x0, {0x2, 0x4e22, @multicast2}, 'dummy0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r1, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(0xffffffffffffffff, 0x2537, 0xfffffffc, 0x2, 0x0, 0x0) [ 2250.002317][T16166] kobject_add_internal failed for tx-1 (error: -12 parent: queues) 03:46:35 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x2010, r0, 0x8000000) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000028c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x6, 0x0, &(0x7f0000002800)="eddce1c94653f8831efde3f6e6517b78feafbc0a73927a98669852b63e255f9dcc74a705fc74745e5bcd379dd9724680ca363b930645e7d765041a4d3f6e2d7a36db973f28a2055c177510c9992767ee3040e9cd65c637681a0b89361adeb17f40b817909520a961825901cfd19412ebddcb6e028c0618dffba596d17f66a29bd6968bcce7c8b7c7f9f73501e6675f330297d0929c1d429069a5", 0x80000001, 0x0, 0x0, {0x3}}, 0x10001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r4, r6, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd=r0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000000)="581918083fb3ed6408e20373d32f27f8ea5577ba4df0f59b53c863354efc81a4cec9048b1440c167fac7ba8a621b289c80893a492f23f44f4f4a3826c4cdb162ea41b4", 0x43}, {&(0x7f00000000c0)="0c06e30bae060d7a6c391ea03b01f9e0ea2abc3d787542794e27411a096dcf0342bea5d8851c7fa8e34de6ba401cfda74dcaca825f31201069283e06014d0bb2c3c59c7bda9d53835f", 0x49}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000180)="30005bafd028ce9581695d416f877eb139bd5fdccaa2616387dad88a6c8254f832d804016428b47cf8c5238e50b07f8be4fa9320f76e4ddc8fbc976614c17d2ac464f6e0c0697030dd58c88d92e53fc92a1be064604bebb54b053b4305d7", 0x5e}, {&(0x7f0000000200)="8dd87826552eb3c9937a3d5eaaebac119b2a570706a611c68852c0e7a51af34e50793b61b2f6d92c74018fb8f20894ab3397521febf125794c1e9746770147bf7a4ad49c4303b4737a816f8c9bb981db8f7d03748a5f1d8a17eae575cbeb905571be49790b57d898187b33c2c69fecb28dbfe9e5b960acd8c551417013", 0x7d}, {&(0x7f0000000440)="c680cae62bfad96e1d2759eaaba6359c629428a28b8a4f972545e273c2dc3b43557aa2ba1a1c4635e3dc8f015f7bcc18ae07f58d2d2f7df397ce867b2603d7b0ba36dcf9c9b4ca1e2218736ca2a7afef4d6b4e61dcee0fad5602dadcda26d5391b67ae33a1699d2837cedd8d9e5907a2c00a23e7bb536abe6eb121a69c5f16ed7b074615dc9a140eef0f06a34666a04e724cf0581b1e8228", 0x98}, {&(0x7f0000000340)="47eac86229cd74d45bff948ec7e1448241c92d2cd314650c6b64ab7934c9b4b19099d654d8367e2473cd408324b00779ede66fc303a365914b982a007a48ee2a8a9c6770cb8334f9d06c3e0a9102697bf8a7cbc4b034d1e1b89310326355be003bba853c7479", 0x66}, {&(0x7f0000002580)="7c0c1483855d4f56934ea06399e22291f0edf8d75fd9cca747b32867f78d3923578b5e95c7793acf26185736957db05d8cc8f07e88b8b5090633a9a0bc6ecc27eee36dc80d96406dc4e501ad042d7fd399c703c8f876333d6aaf95b1992fa54648f34da0ce0b7a24efa75c9f7efb1c6dde6a352fb2021dfecffd8908fd6fda4bb551d5d41baf21a8254d98d44d58d1e8774021eee77a7c89f73e98785274b1180d9716484b0e1b17c676ac5dbcee6c42a8dc234b5f475844bff3f190c9f42575db9489d1fd574797cf630070b89adf705e838b8860f40c509ed7ec51dc1c8ce7794cf494f5864cd47648780cf6db3bff77", 0xf1}, {&(0x7f0000002680)="e3c25120139a19152a6f3393af6d3ca765e577f3444f30700bcc1c8de2a18660a11da3c757db0d1aae6d7e6595a5607258ce656860c88eb7e4fa02c48274167680acef05bab66ec9f5def7bcb5646108f9bc7a7ca9f3e53660a65486879abc33194e075315007dc82dcf14abcd723621f05260dfe39f4bf745c1d131d0978a72e5b07f3c002aebb11920b6378a25a0190c42", 0x92}], 0xa, 0xc486d47ceb5fa624, 0x0, {0x2}}, 0x5e73) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:35 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x2c7c, &(0x7f0000000000)={0x0, 0x57c3, 0x8, 0x0, 0x28b, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:35 executing program 5 (fault-call:4 fault-nth:12): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x401c5820, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:35 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x7000000, 0x0, 0x0, 0x0) 03:46:35 executing program 2: ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'dummy0\x00', {}, 0x1}) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f00000000c0)=0xfffffff8, 0x0, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) splice(r3, &(0x7f0000000000)=0xf4af, r0, &(0x7f0000000040)=0x100000001, 0x100000001, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2250.293368][T16216] FAULT_INJECTION: forcing a failure. [ 2250.293368][T16216] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.306408][T16216] CPU: 1 PID: 16216 Comm: syz-executor.5 Not tainted 5.14.0-rc1-syzkaller #0 [ 2250.315207][T16216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2250.325364][T16216] Call Trace: [ 2250.328642][T16216] dump_stack_lvl+0xcd/0x134 [ 2250.333239][T16216] should_fail.cold+0x5/0xa [ 2250.337737][T16216] ? radix_tree_node_alloc.constprop.0+0x1e4/0x350 [ 2250.344237][T16216] should_failslab+0x5/0x10 [ 2250.348737][T16216] kmem_cache_alloc+0x5e/0x3a0 [ 2250.353502][T16216] radix_tree_node_alloc.constprop.0+0x1e4/0x350 [ 2250.359833][T16216] idr_get_free+0x554/0xa60 [ 2250.364341][T16216] idr_alloc_u32+0x16c/0x2c0 [ 2250.368938][T16216] ? __fprop_inc_percpu_max+0x120/0x120 [ 2250.374504][T16216] idr_alloc_cyclic+0x102/0x230 [ 2250.379361][T16216] ? idr_alloc+0x130/0x130 [ 2250.383775][T16216] ? rwlock_bug.part.0+0x90/0x90 [ 2250.388719][T16216] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2250.394281][T16216] __kernfs_new_node+0x117/0x8b0 [ 2250.399221][T16216] ? kernfs_path_from_node+0x60/0x60 [ 2250.404505][T16216] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2250.410053][T16216] ? wait_for_completion_io+0x280/0x280 [ 2250.415594][T16216] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2250.421828][T16216] ? kernfs_next_descendant_post+0x1a3/0x290 [ 2250.427806][T16216] kernfs_new_node+0x93/0x120 [ 2250.432483][T16216] __kernfs_create_file+0x51/0x350 [ 2250.437592][T16216] sysfs_add_file_mode_ns+0x226/0x540 [ 2250.442966][T16216] internal_create_group+0x328/0xb20 [ 2250.448249][T16216] ? sysfs_remove_group+0x170/0x170 [ 2250.453443][T16216] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2250.459675][T16216] ? sysfs_create_dir_ns+0x13a/0x290 [ 2250.465045][T16216] ? sysfs_create_dir_ns+0x178/0x290 [ 2250.470509][T16216] ? sysfs_create_mount_point+0xb0/0xb0 [ 2250.476051][T16216] internal_create_groups.part.0+0x90/0x140 [ 2250.481946][T16216] sysfs_create_groups+0x25/0x50 [ 2250.486881][T16216] kobject_add_internal+0x583/0xa60 [ 2250.492081][T16216] kobject_init_and_add+0x101/0x160 [ 2250.497277][T16216] ? kobject_create_and_add+0xb0/0xb0 [ 2250.502642][T16216] ? lock_chain_count+0x20/0x20 [ 2250.507496][T16216] netdev_queue_update_kobjects+0x19c/0x450 [ 2250.513396][T16216] netif_set_real_num_tx_queues+0x1b6/0x760 [ 2250.519297][T16216] tun_attach.isra.0+0x645/0x16b0 [ 2250.524335][T16216] __tun_chr_ioctl.isra.0+0x1fb8/0x4270 [ 2250.529875][T16216] ? lock_downgrade+0x6e0/0x6e0 [ 2250.534719][T16216] ? tun_chr_read_iter+0x260/0x260 [ 2250.539836][T16216] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2250.546072][T16216] ? __tun_chr_ioctl.isra.0+0x4270/0x4270 [ 2250.551801][T16216] __x64_sys_ioctl+0x193/0x200 [ 2250.556564][T16216] do_syscall_64+0x35/0xb0 [ 2250.560975][T16216] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2250.566865][T16216] RIP: 0033:0x4665d9 [ 2250.570751][T16216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.590351][T16216] RSP: 002b:00007f83dad93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2250.598756][T16216] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2250.606716][T16216] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 2250.614678][T16216] RBP: 00007f83dad931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2250.622641][T16216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2250.630604][T16216] R13: 0000000000a9fb1f R14: 00007f83dad93300 R15: 0000000000022000 03:46:36 executing program 1: setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0xeb6, 0x52e5, 0x0, &(0x7f0000000000)={[0x1]}, 0x8) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:36 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0)={0x0, 0x4e09, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$unix(r7, &(0x7f0000000340)=@file={0x1, '.\x00'}, 0x6e) r8 = creat(&(0x7f0000000000)='./file0\x00', 0xa8) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, r8, &(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x100, 0x100, 0x1}, 0x8) 03:46:36 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x20000000, 0x0, 0x0, 0x0) 03:46:36 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r2, 0x0, &(0x7f0000000580)=""/239, 0xef, 0x4}, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1328c77f, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:36 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r3}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:36 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x4, 0xfaa5}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4042}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:37 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_delrule={0x44, 0x21, 0x200, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x4, 0x1a}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_virt_wifi\x00'}, @FRA_SRC={0x14, 0x2, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40d5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:37 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0xffffffff, 0x0, 0x0, 0x0) 03:46:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x4020940d, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:37 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x100000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) sendmsg(r3, &(0x7f0000000500)={&(0x7f0000000000)=@llc={0x1a, 0x306, 0x8, 0x3, 0x40, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)="c7161f018512b27f8926f9521604ad83d1b2b5c84455e310c9890c91fe47a647e41bff94f49a32a9fc2dbab75e593feb54982c418314caa2cf61d47aee496ee82665d3eb51dcea164920", 0x4a}, {&(0x7f0000000180)="02b0bfe8d75fc500bbb00e56ec1ac59d357ae474a218e1e053f6b16f5102bf0f4105b2e9c2d8eb47aaaef986e6428c3bba28288eda1148db9a4b1ab70a633a908b04455d1f239e72608ec390016b28c4c768d49ba12a6a9b8286c43711fd24a8590cb11454f5d8496b1ed0c168a8e922e63fb1e541ef6e978d594f1ea693a40ae7ef500cf25e3af0d162c2108e6f32c731264ad23ba9225462fca21ef240bb2cf59227b7901f1ee304705c2411d9ea064e31b09b5900539cf041f1136545d90d15de4de3df6b812b289d83455e9ee5493edf1a", 0xd3}, {&(0x7f0000000340)="4e325b62db951b0895235be84f24f8ab5ff019b02166c1c8143468ee0cc8a4175b8573022c946abbe7985cb52b308abfce77034632efc1073d4f733903be036449d68c0197cfca0abf2610ae45dd46ba54bd33b35b6da6170a8989c36edfbc71ff1d9d8d0dd9b886391f885b5f10576f58cde8e832", 0x75}, {&(0x7f00000003c0)="9b8baf8c6716446d6feb71c5a6bee080ebfc79e0c9d5561eaf9137d23b48311decb6e44b99e593", 0x27}, {&(0x7f0000000400)="88bb5c0309c021d2cf4e7d55bcf7cea717b5cdd482", 0x15}, {&(0x7f0000000440)="db6a8f995807e99a5a1d66be69c1d30be5bcb02ae7a3c216bb45d78249", 0x1d}], 0x6, &(0x7f0000000680)=[{0x100, 0x114, 0x8001, "a3d8d3afdb5d0cbf8590e7aecc91c84ba8225fb20f32a44e0e53b47d7c6936a3eadb0e1923efb74fb8ded0556d0318ad4057e924ff6008e30b52ff49e87c1b8be0556595f5dfd8976af3309679afaae68b49f98e21a67c414f8b44e02983cf59e8141d42fcf60ab574cca89fb99dcb21db5c0807cd589361dcdbafeeefdcb089275e7663c97518060bfdf414e83f5d6ead3374828e7181c4e442c134b8fe31522da0fb9d3c6f753e760a6d2a9b801b92d9a51e21775d556bed38ff0288e9428c4bf12c2dbb97345cbe7f642dc38141434595fcdcfaf8dd576605d268f2316dd837bc4c2c2121c8afbcf67a49"}], 0x100}, 0x4040814) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:37 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x8000000) r8 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r8, 0x0, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r11}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r9, r6, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="426e56e58c35591ef4f30774faed956c9d0407b8a51c9c0834260ac81ef39b9531da4ab35ffdfa95e9ad325b4a302cd6351589285129153ce993b7c09c53a42dc595b0dd5091e652094caa5ff54db041fa6979dd64286de7333d05080cbcc7518cb7673cccbefd0490f602cb1b312e902b52fc6af3f554fdba2b188447a8018a352b85cf3e2984d084674ced3dfd64b09d9f04d059ff8d354b02ff3140293e99085a09c08e0d1e61eddf53e5f9e1abc656659f6c8975b2", 0xb7}], 0x1, 0x8, 0x1, {0x3}}, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4004, @fd=r4, 0xffffffffffffffc0, 0xbc0b, 0x59a40000, 0x6, 0x0, {0x2}}, 0x7) 03:46:37 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:37 executing program 2: r0 = syz_io_uring_setup(0x1000187, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0xffffffffffffffff, 0x97, 0x7) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4000, @fd_index=0xa, 0x80080000001, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x2, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x80086301, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:37 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x2, 0x0, 0x0) 03:46:37 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r8 = syz_io_uring_setup(0x5be4, &(0x7f00000000c0)={0x0, 0xdb6d, 0x8, 0x0, 0x216}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r10 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r10, 0x0, 0x0) syz_io_uring_submit(r4, r9, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r10, 0x1, 0x0, 0x3, 0x8, 0x0, {0x2}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000240)={r6, 0x96, 0x3ff, 0x8001}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000680)={r8, r12, 0xdb, 0xb8, &(0x7f0000000440)="b99cde08e8d150205af8d2f541cc4d08fff858d3e7bba634cc46c417f84e781b1f6149cf625d4ed61f13b7548e6d1e7cfdaee49f0750780fa3da7cd825f83cd7815807374594a55434891e8b69208d60209442a21497338baa73853cc6bd35983b24180654994638fb929aa1f25af965c7c37f3f1163cdc33dd2924e04d3ecc15fd629b3db65ad020d33bfd88101045274a5dfe14ad7edcf453f5739016b54918e8d9d9ba1e83b286c226a5670dd6d1185908b3c1afd2d45", 0x1, 0x9, 0x101, 0xf3, 0x2, 0x3, 0x1, 'syz0\x00'}) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:37 executing program 2: r0 = syz_io_uring_setup(0x5f4c, &(0x7f0000000400)={0x0, 0x7b0a, 0x0, 0x400, 0x20b}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000003c0)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000240)=0x3, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x2000)=nil, 0x2000, 0x2000002, 0x1010, r4, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee9000/0x4000)=nil, 0x4000, 0x8, 0x4000010, 0xffffffffffffffff, 0x10000000) r9 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x1200}, 0x1}, 0x400) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000380)='./file1\x00', 0x80, 0x280002, 0x12345}, 0x800) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x30, r3, 0x8000000) syz_io_uring_setup(0x184, &(0x7f0000000000)={0x0, 0x5bb3, 0x2, 0x3, 0x3e5, 0x0, r0}, &(0x7f0000ee5000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0x80000000) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:37 executing program 1: r0 = syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) io_uring_enter(r0, 0x2a7c, 0xf7f4, 0x3, &(0x7f0000000000)={[0x4]}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x10, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x80086601, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:38 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x3, 0x0, 0x0) 03:46:38 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xfd39, 0x0, 0x0, 0x1b}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xc993499359b658f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3861c8a}, 0x0, 0x0, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x9) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:38 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x7a9, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x801c581f, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:38 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x7, 0x0, 0x0) 03:46:38 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, r0, 0x0, @inherit={0x88, &(0x7f00000034c0)=ANY=[]}, @name="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"}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000000c0)=r0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee6000/0x4000)=nil, 0x4000, 0x8, 0x10010, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x1, 0x2, &(0x7f0000000000)="b9b2b2506501c241a138734074822b2d55534425aa", 0x0, 0x0, 0x0, {0x1}}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r5, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:38 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/71, 0x47}, {&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/83, 0x53}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/72, 0x48}], 0xa) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r4, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:38 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4007, @fd=r4, 0xfff, 0x100000000, 0x100, 0x8, 0x0, {0x1, r5}}, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x5427, 0xd01, 0x1, &(0x7f00000000c0)={[0x7]}, 0x8) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x2286, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0xc0045878, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:38 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x300, 0x0, 0x0) 03:46:38 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="e22529a393cc", 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r4, &(0x7f0000009140)=[{{&(0x7f00000029c0)=@isdn, 0x80, &(0x7f0000004d80)=[{&(0x7f0000002a40)=""/110, 0x6e}, {&(0x7f0000002ac0)=""/155, 0x9b}, {&(0x7f0000002b80)=""/219, 0xdb}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x6, &(0x7f0000004e00)=""/93, 0x5d}, 0x7}, {{&(0x7f0000004e80)=@sco={0x1f, @none}, 0x80, &(0x7f0000005380)=[{&(0x7f0000004f00)=""/70, 0x46}, {&(0x7f0000004f80)=""/231, 0xe7}, {&(0x7f0000005080)=""/130, 0x82}, {&(0x7f0000005140)=""/80, 0x50}, {&(0x7f00000051c0)=""/133, 0x85}, {&(0x7f0000005280)=""/224, 0xe0}], 0x6}, 0x9}, {{&(0x7f0000005400)=@caif, 0x80, &(0x7f0000005780), 0x0, &(0x7f0000005800)=""/156, 0x9c}, 0x855}, {{&(0x7f00000058c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005940)=""/155, 0x9b}, {&(0x7f0000005a00)=""/225, 0xe1}, {&(0x7f0000005b00)=""/186, 0xba}, {&(0x7f0000005bc0)=""/15, 0xf}, {&(0x7f0000005c00)=""/195, 0xc3}, {&(0x7f0000005d00)=""/111, 0x6f}, {&(0x7f0000005d80)=""/88, 0x58}], 0x7, &(0x7f0000005e80)=""/144, 0x90}, 0x800}, {{&(0x7f0000005f40)=@alg, 0x80, &(0x7f00000061c0)=[{&(0x7f0000005fc0)=""/150, 0x96}, {&(0x7f0000006080)=""/61, 0x3d}, {&(0x7f00000060c0)=""/62, 0x3e}, {&(0x7f0000006100)=""/164, 0xa4}], 0x4, &(0x7f0000006200)=""/167, 0xa7}, 0x8}, {{&(0x7f00000062c0)=@sco, 0x80, &(0x7f0000006380)=[{&(0x7f0000006340)=""/54, 0x36}], 0x1}, 0x1000}, {{&(0x7f00000063c0)=@nfc, 0x80, &(0x7f00000077c0)=[{&(0x7f0000006440)=""/177, 0xb1}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)}, {&(0x7f0000007540)=""/232, 0xe8}, {&(0x7f0000007640)=""/48, 0x30}, {&(0x7f0000007680)=""/168, 0xa8}, {&(0x7f0000007740)=""/124, 0x7c}], 0x7, &(0x7f0000007840)=""/248, 0xf8}, 0x3}, {{&(0x7f0000007940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000007ac0)=[{&(0x7f00000079c0)=""/234, 0xea}], 0x1}}, {{&(0x7f0000007b00)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000007e40)=[{&(0x7f0000007b80)=""/199, 0xc7}, {&(0x7f0000007c80)=""/152, 0x98}, {&(0x7f0000007d40)=""/17, 0x11}, {&(0x7f0000007d80)=""/153, 0x99}], 0x4, &(0x7f0000007e80)=""/4096, 0x1000}, 0xa2}, {{&(0x7f0000008e80)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000009040)=[{&(0x7f0000008f00)=""/65, 0x41}, {&(0x7f0000008f80)=""/22, 0x16}, {&(0x7f0000008fc0)=""/112, 0x70}], 0x3, &(0x7f0000009080)=""/182, 0xb6}, 0x9}], 0xa, 0x40, &(0x7f00000093c0)={0x0, 0x3938700}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1ff9, &(0x7f0000000000)={0x0, 0x63c, 0xa, 0x3, 0x2ef, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) syz_io_uring_setup(0x5504, &(0x7f00000018c0)={0x0, 0xbf4e, 0x0, 0xfffffffc, 0x8, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r9 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000180), 0x1, 0x0, 0x1, {0x0, r12}}, 0x0) 03:46:39 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:39 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x810, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x101000, 0x4, 0x10}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r4}}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r5, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x4c01, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:39 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x700, 0x0, 0x0) 03:46:39 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r4, 0x4bf7, 0x3d5b, 0x1, &(0x7f0000000000)={[0x3]}, 0x8) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0xc0045878, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:39 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x20) 03:46:39 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x810, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x104, &(0x7f0000000000)=0xa10, 0x0, 0x4) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:39 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x2000, 0x0, 0x0) 03:46:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x541b, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0xc0189436, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:39 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2537, 0x0, 0x1, 0x0, 0x0) 03:46:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x20000, 0x0, 0x0) 03:46:40 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x141c02, 0x4, 0x4}, 0x18) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000380)={0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000009c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r6, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=@phonet={0x23, 0x7, 0x7, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="600fcc672b691bf25d55ac7fa98d9666fa2fd8682f64277c017087f49ffa384ed62a9abcd4126d7dd43f9c384d4e2ea6f44663cd0adfc8495c9cfafa3061d73c7cbd168739f165e135efe7c9a37c50dfed618af20e208e15de9289a74ecdcb18539cd4", 0x63}, {&(0x7f00000004c0)="77f2b23d2c9eb1ec4e67aed0c8247bb8d41f5bd0ea6049179384ce2b5f8afb", 0x1f}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="58000000000000000c0100000900000077f7f629215563dd03f1db74682c183faeabadc9c83ff302f5e1de6500a8bc6d108093f14d22aadd371eb4f3c8bc13bc9b16eafebb7c49a30561f28212541472c32bb8800000000000010000000000005c07b03d01000000937f50035f4fbbee585f75553a9ce70a919106bda66950e0765c372d3048b67377970ecc320370550000a59d49f3879e01f877b775db5ea32562a9f666b0e84f9268c1138c4654f655c12249aed82d5491f860550ebd974b1f8b28470ce2663f46f8ddaaa324d4188c94123e77613bc3bf4caaebab45c5cedecf52a8da604082f5f8b0731a4b332634b4e73b29bfb9363288ef0b681fa37faa6fd6795c2972721323a41346c8a6b84fe79402a0795d317e6924fb1db39b96654802132b1d38e515bf2517fb1a3b53f53f95cb6eb26b48c0f4c83178c5fd34a271d817797ac1750578f00260d70557ce3d05c32e060000d0000000000000000a0100007f000000efe076e7aef9a8fdbf10c053913e591f49a817440b1af5e2341ae644a5bdff624e4dc5d642a7bebaecece51b30d43625d391073a76ca5a87062e2c44ee792a82642caeae29d46ab5de6bd3344e3ef906722f6d744e06a9eefeec6e1cb850606fe36ebfcbc8579615a6bd3b180e450f66ec8322aca0ec89fade851ccd582fa4350e1935d4189f24ce1912161460b82c337cd15168f6a77d25d018a37e73b027a43bdbdb23f7070c5d22ace07a8d2054e90b0fc7aa5719665a86721d2500000000c0000000000000000d010000b1590000340f187ccb5530ccb7a76e17d2764a18251ca9513188c83c1a3c7d839b5cc8d748973cefe7df9e77c866c82824d641157d18ac24b29e27650d46990a4281a6b1d6b49d5a0b857ace8d29269b88ed74b707e975e7a236233a848bad38323490e0c8af0de4b101582f2c2bd6eb632bcb6d7fd768537e135df146fa0332de16221d192bff6ac3cd87c61f50c07ee8dd78092454a18c29c4bfe4160e62e286faf25d3c2a0b11afd5c41e0ba6d60000000000"], 0x2e8}, 0x0, 0x40, 0x1, {0x0, r10}}, 0xff) write$midi(r5, 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000200)=""/111, 0x6f}], 0x2, 0x8, 0x5) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:40 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x20010, 0xffffffffffffffff, 0x10000000) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000940)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r8, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=@caif=@rfm, 0x80, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/166, 0xa6}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000340)=""/87, 0x57}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f0000000680)=""/227, 0xe3}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/50, 0x32}, {&(0x7f0000000780)=""/123, 0x7b}], 0xa, &(0x7f00000008c0)=""/39, 0x27}, 0x0, 0x40000160, 0x0, {0x1, r9}}, 0x401) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5421, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:40 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) syz_io_uring_setup(0x5504, &(0x7f00000018c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cdb000/0x1000)=nil, &(0x7f0000001880)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000180)=""/238, 0xee}], 0x2, &(0x7f0000000380)=""/57, 0x39}, 0x0, 0x3, 0x1, {0x1}}, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x5, 0xc0302) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0xc020660b, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x1000000, 0x0, 0x0) 03:46:40 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0, 0x9, 0xf, 0x0, {0x0, r5, r4}}, 0x8001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x50, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ee7000/0x1000)=nil, 0x1000, 0xa, 0x1}, 0x7) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2071, &(0x7f00000000c0)={0x0, 0xc12a, 0x1, 0x2, 0x1bd}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r8 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r8, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x6, 0xb50, {0x0, r8}, 0x1000, 0x0, 0x1, {0x0, r9, r3}}, 0x4) 03:46:40 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = dup3(r3, r0, 0x80000) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@ipv6_getnexthop={0x20, 0x6a, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80044}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd_index, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x1, 0x7ff, 0x1f}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x204) 03:46:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x2000000, 0x0, 0x0) 03:46:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5450, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) splice(r2, &(0x7f0000000100)=0x1, r2, &(0x7f0000000140)=0xe735, 0xffffffffffffffe0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:40 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee7000/0x2000)=nil, 0x2000, 0x1000008, 0x2010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0xdc, &(0x7f0000000040)=0x7, 0x0, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x101b00, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x1010, r4, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x0) write$midi(r5, 0x0, 0x0) r6 = signalfd(r5, &(0x7f0000000180)={[0x57]}, 0x8) r7 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000001c0)="dd09cfa031aa0d435e21b4dd5f28ec6e6a95138fe0fdfcde6cb85ae712aca0763ff276923a7a4368e608f3c6b242f96501b36083ebbaa9180283944265097dcc5bb0d084c7ec76a7336e15f47dd4aca491627ecd3c8968432e1fd311b6abcc3d8d3ebf7c282536fa63d16ed0906e9a63516feb1f9aa00af928daa8fecbfe0c5c83d674dea04775125f455599860405fb22613ef06aa5aa081884dce3edae009d9905207fc24d5c10227c22d45737b8bb30195d4dad4ef282acdd", 0xba, 0x8000, 0x0, {0x0, r10}}, 0x800) r11 = dup(r0) io_uring_enter(r11, 0x253b, 0x0, 0x0, 0x0, 0x0) 03:46:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5451, &(0x7f0000000040)={'syzkaller1\x00'}) 03:46:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x3000000, 0x0, 0x0) [ 2255.136141][T24762] ------------[ cut here ]------------ [ 2255.143809][T24762] kernel BUG at fs/io_uring.c:1293! [ 2255.164296][T24762] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 2255.170436][T24762] CPU: 1 PID: 24762 Comm: kworker/1:4 Not tainted 5.14.0-rc1-syzkaller #0 [ 2255.179030][T24762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2255.189094][T24762] Workqueue: events io_fallback_req_func [ 2255.194926][T24762] RIP: 0010:io_queue_async_work+0x539/0x5f0 [ 2255.200839][T24762] Code: 89 be 89 00 00 00 48 c7 c7 00 86 9a 89 c6 05 28 1c 77 0b 01 e8 28 2d 07 07 e9 6e ff ff ff e8 fe fd 94 ff 0f 0b e8 f7 fd 94 ff <0f> 0b e8 f0 fd 94 ff 0f 0b e9 1a fd ff ff e8 84 1d db ff e9 47 fb [ 2255.220454][T24762] RSP: 0018:ffffc900141e7ba8 EFLAGS: 00010293 [ 2255.226660][T24762] RAX: 0000000000000000 RBX: ffff88801ea9b400 RCX: 0000000000000000 [ 2255.234694][T24762] RDX: ffff88807cf00000 RSI: ffffffff81e089c9 RDI: ffff888025120810 [ 2255.242950][T24762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2255.250955][T24762] R10: ffffffff81e230a7 R11: 0000000000000000 R12: ffff888064b91640 [ 2255.258931][T24762] R13: 0000000000000021 R14: ffff88801ea9b4b0 R15: ffff888064b91698 [ 2255.266908][T24762] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 2255.275850][T24762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2255.282440][T24762] CR2: 0000001b2d828000 CR3: 0000000033b35000 CR4: 00000000001526e0 [ 2255.290419][T24762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2255.298414][T24762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2255.306407][T24762] Call Trace: [ 2255.309684][T24762] __io_queue_sqe+0x913/0xf10 [ 2255.314380][T24762] ? io_issue_sqe+0x6920/0x6920 [ 2255.319240][T24762] ? percpu_ref_put_many+0x14c/0x260 [ 2255.324532][T24762] ? lock_downgrade+0x6e0/0x6e0 [ 2255.329391][T24762] io_req_task_submit+0x100/0x120 [ 2255.334420][T24762] io_fallback_req_func+0x81/0xb0 [ 2255.339454][T24762] process_one_work+0x98d/0x1630 [ 2255.344404][T24762] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2255.349786][T24762] ? rwlock_bug.part.0+0x90/0x90 [ 2255.354907][T24762] ? _raw_spin_lock_irq+0x41/0x50 [ 2255.360076][T24762] worker_thread+0x658/0x11f0 [ 2255.364875][T24762] ? process_one_work+0x1630/0x1630 [ 2255.370092][T24762] kthread+0x3e5/0x4d0 [ 2255.374290][T24762] ? set_kthread_struct+0x130/0x130 [ 2255.379496][T24762] ret_from_fork+0x1f/0x30 [ 2255.384140][T24762] Modules linked in: [ 2255.428963][T24762] ---[ end trace c6aae8f29daf9d8c ]--- [ 2255.444785][T24762] RIP: 0010:io_queue_async_work+0x539/0x5f0 [ 2255.453266][T24762] Code: 89 be 89 00 00 00 48 c7 c7 00 86 9a 89 c6 05 28 1c 77 0b 01 e8 28 2d 07 07 e9 6e ff ff ff e8 fe fd 94 ff 0f 0b e8 f7 fd 94 ff <0f> 0b e8 f0 fd 94 ff 0f 0b e9 1a fd ff ff e8 84 1d db ff e9 47 fb 03:46:41 executing program 3: r0 = syz_io_uring_setup(0x1450, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x7, 0x404080) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) signalfd4(r4, &(0x7f0000000040), 0x8, 0x0) 03:46:41 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r4 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r7}}, 0xffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:41 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd=r3, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) 03:46:41 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x7000000, 0x0, 0x0) [ 2255.473476][T24762] RSP: 0018:ffffc900141e7ba8 EFLAGS: 00010293 [ 2255.481878][T24762] RAX: 0000000000000000 RBX: ffff88801ea9b400 RCX: 0000000000000000 [ 2255.490594][T24762] RDX: ffff88807cf00000 RSI: ffffffff81e089c9 RDI: ffff888025120810 [ 2255.499570][T24762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2255.508374][T24762] R10: ffffffff81e230a7 R11: 0000000000000000 R12: ffff888064b91640 03:46:41 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) [ 2255.533280][T24762] R13: 0000000000000021 R14: ffff88801ea9b4b0 R15: ffff888064b91698 [ 2255.552238][T24762] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 2255.562530][T24762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2255.571267][T24762] CR2: 00007f448eab7718 CR3: 000000009be5d000 CR4: 00000000001526e0 03:46:41 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=""/239, 0xef}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2537, 0x0, 0x20000000, 0x0, 0x0) 03:46:41 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x2bd7, &(0x7f00000000c0)={0x0, 0xc68e, 0x4, 0x3, 0xbd, 0x0, r0}, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x1138af93d5937c33, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r6, 0x3, &(0x7f0000000580)=""/239, 0xef}, 0x800) io_uring_enter(r0, 0x2537, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) [ 2255.592507][T24762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2255.611972][T24762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2255.635278][T24762] Kernel panic - not syncing: Fatal exception [ 2255.642734][T24762] Kernel Offset: disabled [ 2255.647062][T24762] Rebooting in 86400 seconds..