, 0x0) 06:57:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175857fff, 0x11, r2, 0x0) 06:57:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175858fff, 0x11, r2, 0x0) 06:57:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa66fff, 0x11, r2, 0x0) 06:57:29 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa67fff, 0x11, r2, 0x0) 06:57:29 executing program 4: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000019740)='./file1\x00', &(0x7f0000019780)='trusted.overlay.opaque\x00', &(0x7f00000197c0)='y\x00', 0x2, 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000019800)=0x0) ioprio_get$pid(0x1, r1) r2 = dup(r0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000019840)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000019880)=0x28) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000180)) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000195c0)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000196c0)=0xe8) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1, 0x6, &(0x7f0000019500)=[{&(0x7f0000019240)="995fa7700559de9717588bc08af706942e17b89340a48c9dcd1abd836e47149f22ceea6ba5c0261f7c006b01f182d55518e3cd012599769b28a41c96131ac4761624df3783fd7153e95c6b38e62041e96b5ca557a074261a17462bfb4d9da54ba8ed48b0903b74981156fb93642092089d449f82727db97f352bf20ebf61d3071b6ad747ccc439b519c6", 0x8a}, {&(0x7f0000019300)="67116e89d1be1e2031cb709386769cb299245c949ec3586d037f01567b78b9afba1d02eb8c6fa75def579f46605a2a55b23ae90bc5e3e325e1727593c050edf0daffb862a803961c6a2342c84923fdc13a05f0a0d07350822365077a0bad1e999793f40a52b2e840634b2bad8f4ab0dfdc7e", 0x72, 0x9}, {&(0x7f0000019380)="5337024d028b405c121e985493f490e208cdb35de5d8961084a058095efb00b58494be8e206791c1", 0x28, 0x5bd}, {&(0x7f00000193c0)="1a081a09f797dae5e7923746f5d887c39c6c4e0690e7ae522dabb2a322320af25125b8c9944ab0f211d6cf3c08f0bee67d09e68e", 0x34, 0x9}, {&(0x7f0000019400)="0e01bcfc3de8a90ab0e40f0678f6f36fd280d499302e4ed2dc260a3ec54897aa5535dd5882a6bd0838951e2df1ee88395783226161bd89d66d21493988d03afe0f352b5df74bea3bed94672996d9a7b3f036ceaadd53f3a956465483f4d0c36fa6c238b2a3807906bfeb9b4e98374f59d38ee0a9c2b45e54008d", 0x7a, 0x46}, {&(0x7f0000019480)="7b8e96fe8553548d8fcd4036c3796c10041377a7a6b35554b8a48f03693200455251a0f7347fa8b46ae83623c7f981f2d855cc16ac702790a678ce31f07eb8b729854af1f4084ef89b1a8907ef500311c1cf", 0x52, 0x20}], 0x1120015, &(0x7f0000019700)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}], [{@euid_gt={'euid>', r4}}, {@obj_type={'obj_type', 0x3d, 'NLBL_CALIPSO\x00'}}]}) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x894}, 0x40000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175859fff, 0x11, r2, 0x0) 06:57:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x3f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa68fff, 0x11, r2, 0x0) 06:57:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17585afff, 0x11, r2, 0x0) 06:57:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x4000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:29 executing program 5: clone(0x8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa69fff, 0x11, r2, 0x0) 06:57:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x4800, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17585bfff, 0x11, r2, 0x0) 06:57:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x4c00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:30 executing program 5: clone(0x11, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17585cfff, 0x11, r2, 0x0) 06:57:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x6000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa6afff, 0x11, r2, 0x0) 06:57:30 executing program 5: clone(0x1100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:30 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) r5 = socket$netlink(0x10, 0x3, 0xe) signalfd(r1, &(0x7f00000192c0)={[0x3]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000019280)={'vxcan0\x00', r4}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000019240)) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@remote, 0x4e21, 0x7, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x16, r4, r7}, {0x629, 0x1, 0x3, 0x1, 0x8001, 0x7, 0x0, 0x80000001}, {0xfffffffffffffffd, 0x7fffffff, 0xff}, 0x7fff, 0x6e6bb4, 0x0, 0x0, 0x1, 0x3}, {{@in=@remote, 0x4d2, 0xf0}, 0x2, @in=@loopback, 0x3502, 0x2, 0x0, 0xff, 0x647, 0x2, 0x1}}, 0xe8) 06:57:30 executing program 5: clone(0x1f00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x6800, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:30 executing program 5: clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa6bfff, 0x11, r2, 0x0) 06:57:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17585dfff, 0x11, r2, 0x0) 06:57:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x6c00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa6cfff, 0x11, r2, 0x0) 06:57:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17585efff, 0x11, r2, 0x0) 06:57:30 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') dup(r1) dup3(r0, r1, 0x80000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) write$P9_RRENAME(r2, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x7400, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa6dfff, 0x11, r2, 0x0) 06:57:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17585ffff, 0x11, r2, 0x0) 06:57:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x7a00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa6efff, 0x11, r2, 0x0) 06:57:31 executing program 5: clone(0x20010, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175860fff, 0x11, r2, 0x0) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa6ffff, 0x11, r2, 0x0) 06:57:31 executing program 4: r0 = syz_io_uring_complete(0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/124) socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '}--\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ']:\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x9800, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r2, 0x0) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000280)={0x3, 0xfffffffffffffffa, @start={0x0, 0x1, "f732b538caeb759a0fde10e0e6219c2db728fc0e14e5d7a5e4c4562365d9c4216083cdb117c0596cc1707324f8776b55953b773520bbbd49b8724c6679ad58852465ebb987c74a4d4d7948d6675da78ee01159a9e30ef462d9e7a397d7c2850eb328a9a3fba97e3fbe0ee640e06f4741f39834ba84fce95db651f9901dd823b596a3366bb9ffbe8393ecf2ab10011e4423b250f61f57f4b700534dccdaafd1dcb73c754df8dbe7acd95a46fffd01a987682933445ebf2c550b83801989fc695110ab06629e091a9c90fb9f27ea4ff23e1a989208e513a069638b19db880f76cdd26378b19511cba52a89727ea8ca53da781eec003629bd5c0703bbdfd9ebe5859ba98bc408f5a6fa8f96ac7bcfa65e6b486b12de4c06d2abdecfe5314d85f1855ee453595919a57577c1bea70946257f4ad37ae9a04e3c575677552e9f80c2891173e025295dac65abda5c071dd1c001b5014085287e4291fb664e570976669add7e34fd8d5a1f959645f90a31e6f7bbd4cd1409230182e16d42bee744efd32c47c2af9f09b945501d66e2338731944f091790a7ef4b4b77790ae8d180d638511f560234415eca2f89362327d5f56c53281168a958d5643873f073ebc41693f9f35a58aa49d9f90c85622e6f4db260e967633e20d57806dd179b6220e948fd4d27e2a8c5197439c07d90986b564633bb2b80c04d538c948d5030a55c423a1a050cfd22f182f690052338a1e1da4d29c395fd690614952310303a2dee8bccb548ac13899a539bcfc2050a7bc764c1e9163888699c126f759c0f599a825f562b3fc8e54022367ccb7444d80ee3b254221bb2939989355de8b5b3d0a5543e655cb8346a390b709d19526f0b463579a6a41dc3da8c49e365000359ed685ee4f607583ea17e2bc97c6e4352e067b65eaf456868bff8cf5ac602fdc26acc5be1dfb7b9b4f4d0186e3a9898f0c2e1502e2764196379ffe54335c0a3172ccdfaea5b04207bd2b56452d61423465930535a0b5887912714dda63237b05d7ff34b487168f68c9dcef71f94fb9aca0a467222088c21ff77d9c71c0d2b3a13ca5c731a2823eaf8a0ceb8293b386de79730a25eebc1822e3f4280b0af4b9c89a3522bdd449e396f9c60070f2f31b40cd061183e7e0acfe03e1c6eadf404324e1ee604d6da8ebc7ab03afeaedd15a02681d8434db331a35db4e6774cf4d9d378ffb7e7ce98dabec43e57a17edc58784c604b75fa9dd0a523464886114348f821543d94bb6a2b02011633e56389da77c4189572a50976522cb98b1f7a05d3c5bba80f0636203957dc49e4222c062caed71f72ea2ca1e16cbaf57af997b0cc94ff3f1aeac694c2429898778c4062ca57e91037ffe0e217d9ed8fdbd866d5b88166044174432e389f4a41c71e96ec8254163fb37a7cddc0710e1c45be436a0c75a5b2dbc7485b5aab77", "26e73db47136f23268877b4cfc614a278e8e73ac5e5b82f4b9f1e4b5dd87ea8b59aabbd1feb713a0de3e2d069daebd357f160c49506ef14a603ccb31b2880435e3e7b482c3e78a3c4a0a96b93d3afe8d8a426a66d0ccde1a7e67b83da17fa5686eddf9fd0c19e09235f85c6fbb2d446c36a1ed89b27a4ed741afe57cb8ade19c21e0064e029d1ca156a481638b6bb34555d826e9d05e9af4c9d0483e386ddbc19c4579189dc98cc25b593cebea75d21a8015bcdf7f7d73b04f895915d6f400eb96b1023c9f467493906ab2861c24e15af140652444526e1bf5e83b557b6cbba554d5180a62cdba9f248997a15e431121e599e945bfe39b945a34967466de35b3f9dc03fd37860209efad74bd2577e6ef50e68b54e13f31dd8d6da7f71eb1c59cfda2b1b9058eafdc00117976ddf26490be905b1851f2025b114635b9a46ca5dcca7bb1d75397e01353ed5dcaa98c5021420e22c84d1f5aa4656ef58f5a0bf327c8c3b052fd016e3c0540eae77de3005518ba7982a05e44bed6d331cc0c1b35549b6855f95913938d554c7fc6bbd41b8f912613546de8a1f37ce561fb14c56961236b794c6aa9a2e7a8fa73a5f21fe427b67618f11855b15a5b3517012a421650f6d88e083fcbf26e4d202e7d5c1f7a112edfa92491ddda2ffdbc6db39d4f0a44e3cbb7293cd9c514246b3a670e068c36ab289ad3b372d4f1c05de173ea43653e281148c16532cdc8353ca0506ae0d7cc63c570033c5271c99eb2ef0c569c0326511b3d7464183e11c0a4469587f98a2c71b62418be4603f20a39b1c3b8a410fb7d41e57258046d7f38d1b843d6e92ae947d6f057892e5e296ead98d5cc55a776087fc393ff4051c32ce1baf2f1a43281b53b6f0ead80f6282deaf5c76e676f5900d38c7839b4ff22fd03d9cf7ac951b46aa8b1a6674a5ef4c9217e324ebf0aff7745a9d63bf725ecfd139e9e351353f4a48dd24a1848c3204e6037142597885304af73240bf9e7e653b7a5d32f6eae4df2e36140828ea2341e339ce72b3ebb9cf2342dacc1ad7f31d47e1ff81f5095601d09b58888d7cd8ee46caa72d4eac8297c2541389d3f34304bfd49cbe9bd5de554e4f1c73fd9e31d518f5177456acb6e7d66011049b1e5013350380b3137f7f567b74081c6d23334f9fbfac101429fdf018ac187e578e6277ca1da0f06c9c5f6956686a555f398c7b3cf461e220b9c24c54bd328de8c384dd6e36bbe4cb345f85d93d3a5d2301ede30d3d9d8a4b741302467f5759d5c5cf63aa661d2bad3f82dea5becdd6a3c10106932bd7d3b20a51b2f1c7f043d485db1e126eb27bf9fe04d0d990ef6f6959c8b5af3a3f9a9293a1bb854e0cf4b8784c9603947b4f825eda00d7e32148350b8bdba8484b1ee64c349b547dcbb54161bf8809ef958bc47cd4cc206889a9562a0fc16357a34be89b1b8cc"}, [0x8, 0x100000001, 0xa33, 0x101, 0xfffffffffffff32b, 0x3, 0xffffffff, 0x9, 0x1, 0x9, 0x7e1c, 0xffffffff, 0xabc, 0xffffffffffffff01, 0x24, 0x0, 0x0, 0x0, 0x4, 0x8, 0x6, 0xb21, 0x0, 0x4ebe942e, 0x4, 0x3, 0x8001, 0x8, 0xfff, 0x6, 0x3, 0x8, 0x401, 0x3, 0xfff, 0x1f, 0x622, 0x8, 0x7, 0x101, 0x8001, 0x1, 0x3, 0x3, 0x81, 0x5, 0x5, 0x0, 0x1, 0x2, 0x8000, 0x7ff, 0x100, 0x100, 0x71d, 0x4, 0x7, 0x100000000, 0x7, 0x0, 0x10000, 0x7, 0x888, 0x400]}) 06:57:31 executing program 5: clone(0x20200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 5: clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17585ffff, 0x11, r2, 0x0) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa70fff, 0x11, r2, 0x0) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa5afff, 0x11, r2, 0x0) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175861fff, 0x11, r2, 0x0) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x9fff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 5: clone(0x101000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175862fff, 0x11, r2, 0x0) 06:57:31 executing program 4: getgroups(0x6, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0xee00]) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000040)={0x78, 0xffffffffffffffda, 0x0, {0x1, 0xffffffc0, 0x0, {0x9, 0x6, 0x4, 0x3, 0x1, 0x7df3, 0x4, 0x8, 0x80000000, 0x4000, 0x3, 0xffffffffffffffff, r0, 0x1f, 0x6}}}, 0x78) socket$nl_audit(0x10, 0x3, 0x9) clone(0xd981600, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa52fff, 0x11, r2, 0x0) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xa91f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa71fff, 0x11, r2, 0x0) 06:57:31 executing program 5: clone(0x159000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xc000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175829fff, 0x11, r2, 0x0) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175863fff, 0x11, r2, 0x0) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa72fff, 0x11, r2, 0x0) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175829fff, 0x11, r2, 0x0) 06:57:31 executing program 5: clone(0x1ff000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa73fff, 0x11, r2, 0x0) 06:57:31 executing program 4: clone(0x821c0600, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 5: clone(0x400000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xff00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175864fff, 0x11, r2, 0x0) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175829fff, 0x11, r2, 0x0) 06:57:31 executing program 5: clone(0x901500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xff9f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175865fff, 0x11, r2, 0x0) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) dup(r1) 06:57:31 executing program 5: clone(0x907d1e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa74fff, 0x11, r2, 0x0) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x100000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x64, 0x0, &(0x7f00000002c0)=[@register_looper, @increfs={0x40046304, 0x3}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/203, 0xcb, 0x2, 0x3d}, @fd, @flat=@handle={0x73682a85, 0x0, 0x2}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}], 0x23, 0x0, &(0x7f0000000340)="117dce6aabc8b13f88603e6b2040a21e6b48f8fa08e5e03e901279f756c4938ebfc2cc"}) clone(0xbd9b937f4463013b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x8000, 0x4) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175866fff, 0x11, r2, 0x0) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:57:31 executing program 5: clone(0xf01f00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x1c6aa2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa75fff, 0x11, r2, 0x0) 06:57:31 executing program 5: clone(0x1000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa76fff, 0x11, r2, 0x0) 06:57:31 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175867fff, 0x11, r2, 0x0) 06:57:31 executing program 5: clone(0x10000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fremovexattr(r0, &(0x7f0000000000)=@known='system.advise\x00') 06:57:31 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175868fff, 0x11, r2, 0x0) 06:57:31 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa77fff, 0x11, r2, 0x0) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x200000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 5: clone(0x11000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175869fff, 0x11, r2, 0x0) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa78fff, 0x11, r2, 0x0) 06:57:31 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @remote}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf9}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x4, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x3]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x14) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="80f600001fc5bb2aa8d3cadba441425e4c6c947e4fb8a4d0ffb531ea4daf29af7958945eae66eb653d89f3dcbc462f67573b690b2a5a743a02ff86be6425f032a20cbe785c227a79664200124a4a2526b48f96a536d351a563a5faf4c6055dec549b148026db0cc111596e354c87098b881e17f4d95bc3a630", @ANYRES16=r0, @ANYBLOB="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"], 0x480}, 0x1, 0x0, 0x0, 0x40801}, 0x4040080) r1 = gettid() tkill(r1, 0x40) sched_getscheduler(r1) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa79fff, 0x11, r2, 0x0) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17586afff, 0x11, r2, 0x0) 06:57:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x400000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 5: clone(0x1e7d9000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa7afff, 0x11, r2, 0x0) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17586bfff, 0x11, r2, 0x0) 06:57:31 executing program 5: clone(0x1f000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x600000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:57:31 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000000) 06:57:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17586cfff, 0x11, r2, 0x0) 06:57:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa7bfff, 0x11, r2, 0x0) 06:57:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x800000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:31 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa7cfff, 0x11, r2, 0x0) 06:57:32 executing program 5: clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x80ffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17586dfff, 0x11, r2, 0x0) 06:57:32 executing program 4: clone(0x7cac2c00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "710c93799238d9b1", "b0206ccc66319b7140799a71d3429567", "30bab9cb", "9b55f7a8069dd936"}, 0x28) setgid(0xee01) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000100}, 0x24048000) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xc00000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17586efff, 0x11, r2, 0x0) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x7}) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x1000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa7dfff, 0x11, r2, 0x0) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17586ffff, 0x11, r2, 0x0) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x7}) 06:57:32 executing program 5: clone(0x1b0c31f000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x2000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0xfffffffffffffffe) 06:57:32 executing program 5: clone(0x10000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x7}) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x3000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175870fff, 0x11, r2, 0x0) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa7efff, 0x11, r2, 0x0) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005}) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x4000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 5: clone(0x400000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175871fff, 0x11, r2, 0x0) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa7ffff, 0x11, r2, 0x0) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005}) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x5000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 4: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/102357, 0xc3) syz_open_dev$mouse(&(0x7f0000019080)='/dev/input/mouse#\x00', 0xdd90, 0x765200) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 06:57:32 executing program 5: clone(0x7f1e5b591000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005}) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175872fff, 0x11, r2, 0x0) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa80fff, 0x11, r2, 0x0) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x6000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa7ffff, 0x11, r2, 0x0) 06:57:32 executing program 5: clone(0x2001000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175873fff, 0x11, r2, 0x0) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x7000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 5: clone(0x2020000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175870fff, 0x11, r2, 0x0) 06:57:32 executing program 4: clone(0xa9a74100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa81fff, 0x11, r2, 0x0) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175874fff, 0x11, r2, 0x0) 06:57:32 executing program 5: clone(0x8000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa7cfff, 0x11, r2, 0x0) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x9000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa82fff, 0x11, r2, 0x0) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175875fff, 0x11, r2, 0x0) 06:57:32 executing program 5: clone(0x10100000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/102357, 0xc3) syz_open_dev$mouse(&(0x7f0000019080)='/dev/input/mouse#\x00', 0xdd90, 0x765200) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xa000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 4: syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa83fff, 0x11, r2, 0x0) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175876fff, 0x11, r2, 0x0) 06:57:32 executing program 5: clone(0x10595b1e7f0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xb000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175877fff, 0x11, r2, 0x0) 06:57:32 executing program 5: clone(0x90150000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa84fff, 0x11, r2, 0x0) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175878fff, 0x11, r2, 0x0) 06:57:32 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/102357, 0xc3) syz_open_dev$mouse(&(0x7f0000019080)='/dev/input/mouse#\x00', 0xdd90, 0x765200) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xc000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa85fff, 0x11, r2, 0x0) 06:57:32 executing program 5: clone(0x907d1e00000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xd000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175879fff, 0x11, r2, 0x0) 06:57:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa86fff, 0x11, r2, 0x0) 06:57:32 executing program 4: clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7f, 0x40000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r1, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x422}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) 06:57:32 executing program 5: clone(0xf01f0000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa87fff, 0x11, r2, 0x0) 06:57:33 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/102357, 0xc3) syz_open_dev$mouse(&(0x7f0000019080)='/dev/input/mouse#\x00', 0xdd90, 0x765200) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 06:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xe000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17587afff, 0x11, r2, 0x0) 06:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xf000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa88fff, 0x11, r2, 0x0) 06:57:33 executing program 5: clone(0xf0310c1b000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17587bfff, 0x11, r2, 0x0) 06:57:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa89fff, 0x11, r2, 0x0) 06:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x10000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:33 executing program 4: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:33 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/102357, 0xc3) syz_open_dev$mouse(&(0x7f0000019080)='/dev/input/mouse#\x00', 0xdd90, 0x765200) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) 06:57:33 executing program 5: clone(0x100000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x11000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa8afff, 0x11, r2, 0x0) 06:57:33 executing program 5: clone(0x1100000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x12000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa8bfff, 0x11, r2, 0x0) 06:57:33 executing program 5: clone(0x1f00000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17587cfff, 0x11, r2, 0x0) 06:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x20000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa8cfff, 0x11, r2, 0x0) 06:57:33 executing program 5: clone(0x4000000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:33 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/102357, 0xc3) syz_open_dev$mouse(&(0x7f0000019080)='/dev/input/mouse#\x00', 0xdd90, 0x765200) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r3) 06:57:33 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x140, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, 0x6, &(0x7f0000000200)={[0x1]}, 0x8) dup(r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffc8c) setuid(r2) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x7fff}, {0x6, 0x8000}], r2}, 0x18, 0x2) 06:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x25000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:33 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x20a102) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x100}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa8dfff, 0x11, r2, 0x0) 06:57:33 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x38, &(0x7f0000000000)=""/56) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1050) 06:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x31000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17587dfff, 0x11, r2, 0x0) 06:57:33 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/102357, 0xc3) syz_open_dev$mouse(&(0x7f0000019080)='/dev/input/mouse#\x00', 0xdd90, 0x765200) open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) 06:57:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa8efff, 0x11, r2, 0x0) 06:57:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17587efff, 0x11, r2, 0x0) 06:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x3f000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17587ffff, 0x11, r2, 0x0) 06:57:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa8ffff, 0x11, r2, 0x0) 06:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x40000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:33 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/102357, 0xc3) syz_open_dev$mouse(&(0x7f0000019080)='/dev/input/mouse#\x00', 0xdd90, 0x765200) 06:57:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175880fff, 0x11, r2, 0x0) 06:57:34 executing program 4: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x81, 0x2, 0x2, 0x4, 0x4, 0x8}, &(0x7f0000000040)=0x20) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa90fff, 0x11, r2, 0x0) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175881fff, 0x11, r2, 0x0) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x48000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/102357, 0xc3) 06:57:34 executing program 5: write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deae427b000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff000000000000000000000034000700090000000200000001000000010400003b8ea7fe9b9c532639d011395bb293ca60fd7989627936ab27439f2eb5fb29042d7b52fa87c2ef4d491222408d630c5ef8502d87"], 0x14c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd27, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') socketpair(0x28, 0x3, 0xc6, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x2f, 0x977f, 0x8}, 0xc) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c7}, 0x20024800) 06:57:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa91fff, 0x11, r2, 0x0) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175882fff, 0x11, r2, 0x0) 06:57:34 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x64}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x968}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040404}, 0x10000010) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x4c000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175883fff, 0x11, r2, 0x0) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x68000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) dup(r1) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175884fff, 0x11, r2, 0x0) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x6c000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 5: clone(0x40322300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 06:57:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa92fff, 0x11, r2, 0x0) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175885fff, 0x11, r2, 0x0) 06:57:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa93fff, 0x11, r2, 0x0) 06:57:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x7) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x74000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0x800) 06:57:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa94fff, 0x11, r2, 0x0) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175886fff, 0x11, r2, 0x0) 06:57:34 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) io_setup(0x6626, &(0x7f0000019280)) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x7a000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa95fff, 0x11, r2, 0x0) 06:57:34 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x8004000) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175887fff, 0x11, r2, 0x0) 06:57:34 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000080)=0x80) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000000c0)={{0x0, @loopback, 0x4e24, 0x0, 'lblcr\x00', 0x8, 0x1, 0x1000075}, {@loopback, 0x4e23, 0x7, 0x8, 0x200, 0x4}}, 0x44) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x98000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa96fff, 0x11, r2, 0x0) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175888fff, 0x11, r2, 0x0) 06:57:34 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) open(&(0x7f0000032ff8)='./file0\x00', 0x521000, 0x0) 06:57:34 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1a0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) dup(r0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0x10, r0, 0x180000000) syz_open_dev$ptys(0xc, 0x3, 0x1) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xa26a1c00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e24, @local}, 0x20, 0x0, 0x0, 0x0, 0x401}) 06:57:34 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000019240)=@req3={0x2, 0x1000, 0x1ff, 0x7, 0x1, 0x8, 0xfec}, 0x1c) 06:57:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa97fff, 0x11, r2, 0x0) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175889fff, 0x11, r2, 0x0) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xa91f0000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 5: ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) clone(0x2080c400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x4, 0x0, [], 0x0, &(0x7f0000000040)}) 06:57:34 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) dup(r0) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xff000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17588afff, 0x11, r2, 0x0) 06:57:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa98fff, 0x11, r2, 0x0) 06:57:34 executing program 4: clone(0x2002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:57:34 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) 06:57:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa99fff, 0x11, r2, 0x0) 06:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xff9f0000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17588bfff, 0x11, r2, 0x0) 06:57:34 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) 06:57:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17588cfff, 0x11, r2, 0x0) 06:57:35 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x480400, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008d1}, 0x20000000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa9afff, 0x11, r2, 0x0) 06:57:35 executing program 3: clone(0x800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xffff8000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:35 executing program 4: syz_usb_connect(0x0, 0x7a, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x3c, 0x97, 0xda, 0x40, 0xeba, 0x2080, 0x7744, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x98, 0x46, 0x0, 0x0, [@uac_control={{}, [@extension_unit={0x7}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x4}, @selector_unit={0x5, 0x24, 0x5, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x10, 0x0, "60da8627a375f90b019e30c84888"}]}}]}}]}}]}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 06:57:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17588dfff, 0x11, r2, 0x0) 06:57:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa9bfff, 0x11, r2, 0x0) 06:57:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17588efff, 0x11, r2, 0x0) 06:57:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa97fff, 0x11, r2, 0x0) 06:57:35 executing program 5: ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x193) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000000)={0x3, 0x100, 0x9}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 06:57:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa9cfff, 0x11, r2, 0x0) 06:57:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa8ffff, 0x11, r2, 0x0) 06:57:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17588ffff, 0x11, r2, 0x0) [ 2026.271704][T28064] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2026.631763][T28064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1289, setting to 64 [ 2026.801800][T28064] usb 5-1: New USB device found, idVendor=0eba, idProduct=2080, bcdDevice=77.44 [ 2026.810864][T28064] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.818907][T28064] usb 5-1: Product: syz [ 2026.823144][T28064] usb 5-1: Manufacturer: syz [ 2026.827731][T28064] usb 5-1: SerialNumber: syz [ 2026.834027][T28064] usb 5-1: config 0 descriptor?? [ 2026.872333][T28064] pl2303 5-1:0.0: required endpoints missing [ 2027.073089][T22104] usb 5-1: USB disconnect, device number 26 [ 2027.841715][T28064] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2028.201748][T28064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1289, setting to 64 [ 2028.371743][T28064] usb 5-1: New USB device found, idVendor=0eba, idProduct=2080, bcdDevice=77.44 [ 2028.380839][T28064] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.389380][T28064] usb 5-1: Product: syz [ 2028.393908][T28064] usb 5-1: Manufacturer: syz [ 2028.398496][T28064] usb 5-1: SerialNumber: syz [ 2028.404351][T28064] usb 5-1: config 0 descriptor?? [ 2028.442230][T28064] pl2303 5-1:0.0: required endpoints missing 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175890fff, 0x11, r2, 0x0) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:38 executing program 3: clone(0x1f00000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa9dfff, 0x11, r2, 0x0) 06:57:38 executing program 5: sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x957ae24dbef9db7a) 06:57:38 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000019240)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r2, @ANYBLOB="030008000100736974400c00020008080300000000000000000000005dbb2c38ef2d0ce3e9180496d827d9db3a3f37cf33f88fff15d6ae68eb6c719f8285f6ceb1ab29400b12fbaf39fab180a09d0700dfef9ea2b0a820b5c9159c2db8396724f0a73956db9dac1a1d1a2c4d2e797d1089efe126d1833ae734fb2a7c741c225cc0f0acaadd7a6cee11e1f89d89a31c3410098c951f8b2a", @ANYRES32=r3], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@mcast1, 0x4c, r2}) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @multicast1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) [ 2028.642374][T28064] usb 5-1: USB disconnect, device number 27 06:57:38 executing program 3: clone(0xf0310c1b000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175891fff, 0x11, r2, 0x0) 06:57:38 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000), 0x4) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x8000, 0x4) io_setup(0x0, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') clone3(&(0x7f0000001480)={0x200, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x40}, &(0x7f0000000340)=""/4096, 0x1000, &(0x7f0000001340)=""/240, &(0x7f0000001440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/full\x00', 0x8100, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000019280), &(0x7f00000192c0)=0x40) r5 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r4) r6 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r7 = dup(r6) r8 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r9 = dup(r8) readlinkat(r9, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000019240)) readlinkat(r7, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r10 = signalfd4(r0, &(0x7f0000001940)={[0x62]}, 0x8, 0x80800) io_submit(r1, 0x7, &(0x7f00000019c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000140)="45fa6e754d187087f66c262c5906a61a53739185f2457eee8e32416ae3e7696dbcc808422f9a36326d4bef174a38776a0b9da33e2e79cff340064b25085d7e9ebd600356252cf1cecebeeb161f90f90e863d2b320e49186743c83db44d899ee6a1c2537e9c83657485465c63507eb1791b9b8c83748bdebd81edca593adf84db5c9c8e88fe66588ff19a413d791dca673a4842ad7ac8609a957847c7998b5c3dc66085277bbb1013141992fdd72b56f11317ee1066982570c0b49e8e12e818b28512876aecc2ad1a7352f3ef09fe1850857c81fb1c4baebe", 0xd8, 0x7fffffff, 0x0, 0x1}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0xffff, r3, &(0x7f0000001500)="93bf171e173b255cfb2ef8eff4e368aee019864cfe81ef8bf6995833839399046e99916d5b59607a646ef8d94ce556c19fe6731952dd3144f3ffba731fb420a59871cff516e6b907f0c52d56041a83ea2f5f24071519fdf133fdda601e822535815f2ecc", 0x64, 0x9, 0x0, 0xe7aa61d78ff5e3d7}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x9, r4, &(0x7f0000001600)="f6c2", 0x2, 0x4, 0x0, 0x2}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x2, 0x200, r0, &(0x7f0000001680)="a334f20ed683befb681b8aed251eca6b9e2591dcc0bd10541c2803b7091086594f44e1c74eec78a4546770ae4eb0cf05554e9dd66b21ccc8ee46b6db3d1a509e06758dbb0076632094d856b5977764e3293ddb977b2d3922b6670f12420f485d61f46c51840b7ecc28621d56669fbc86", 0x70, 0x6, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x1ff, r0, &(0x7f0000001740)="4f844b7c330a4af2ea89bfbe48d7", 0xe, 0x7ff, 0x0, 0x3, r5}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f00000017c0)="5b39b5ec3e7d81b7e118f8e3f0f2d321b51d26a22264e2a42011cea62e62", 0x1e, 0x6, 0x0, 0x2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x6, 0x9341, r7, &(0x7f0000001840)="8473f338c02ea374d8378c2badd1d7f4a7dc77436f7046f863d384ebcd71a9e92d7d1aefde84bf97903787e595cf8e6b8983ee490d0e797faa0438137ac8b661bedc21882cad8980312036994c281aa296bb60c268b530c29ea79e37a12394aa1d731de458e12d2f67429f1d4d7e82dfa951463c5de18cdd94edb604bead548c2a56d40b1f6ffa4c3cb2fc04d16eaca5b7cf6185154ca5a56fca453f5a2107e303f7839164c6154aa34c9cec20d131d11afbfc52df8d9c60513c3ea3037e806c094952e51e86dced20ec993fe454313d1bdb3628d25d580912807d7e1c56922df036f47716f4", 0xe6, 0x7fff, 0x0, 0x2, r10}]) 06:57:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa9efff, 0x11, r2, 0x0) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175892fff, 0x11, r2, 0x0) 06:57:38 executing program 3: clone(0x1f000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa9ffff, 0x11, r2, 0x0) 06:57:38 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000019280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000019240)={&(0x7f00000001c0)={0x54, 0x2, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x8400c) sendto$unix(r3, &(0x7f0000000080)="d90a48b07ff1cfb17152ad12c18253cc92c4eb02cfd13d82b54277824a592d86cde8ddcbd6b872d7eb6d9189b8dd906969942a5f24efa4bbc311dd2bb4fc5f45b3970fffca0c5b433be119ab4af17e68ed228ea2fd262ab2ccd3f591a3296f51a04f5a26ea44cf0f", 0x68, 0x140, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket(0x21, 0x3, 0x5) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000193c0)='veth0_macvtap\x00') sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000019380)={&(0x7f00000192c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000019340)={&(0x7f0000019300)={0x38, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, ',$.\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0xe77ba865bd8989de}, 0x8000) [ 2028.780406][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175893fff, 0x11, r2, 0x0) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaa0fff, 0x11, r2, 0x0) 06:57:38 executing program 5: clone(0x80217280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2028.890577][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 06:57:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa9efff, 0x11, r2, 0x0) 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175894fff, 0x11, r2, 0x0) 06:57:38 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5, 0x81}}, 0x30) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:38 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x34) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c040000140021010000005a4c15b3ef6237ea00", @ANYRES32=0x0, @ANYBLOB="1400010000000000000000000000ffffe0000001"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x218, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) dup(r1) r2 = memfd_create(&(0x7f0000000300), 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x22240, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) write(r2, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) fstatfs(r2, &(0x7f0000000300)=""/79) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000003c0)={0xb, 0x9, 0x6}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"de793c416ca1d018c283c9640c65bf4a", r5, 0x0, {0x3, 0x800}, {0x401, 0x4}, 0x3, [0xd0c5, 0xffffffffffff8001, 0x8, 0xb56, 0xfb4, 0x7fffffff, 0x800, 0xe7, 0x100000001, 0x5, 0x7, 0x5f, 0xfffffffffffffeff, 0xfffffffffffffffe, 0xc6d, 0x6]}) 06:57:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaa1fff, 0x11, r2, 0x0) 06:57:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa2dfff, 0x11, r2, 0x0) 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175895fff, 0x11, r2, 0x0) 06:57:38 executing program 5: modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0x20001000, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000100)={{}, 0x0, 0x10, @inherit={0x48, &(0x7f0000000080)={0x1, 0x0, 0x6, 0x4, {0x1, 0x5, 0x1000, 0x8, 0x1}}}, @subvolid=0x1}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0xffffc000, 0x11, r2, 0x0) 06:57:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaa2fff, 0x11, r2, 0x0) 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175896fff, 0x11, r2, 0x0) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:38 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x200) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:38 executing program 4: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/246, 0xf6}, {&(0x7f0000000100)=""/248, 0xf8}], 0x2) 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175897fff, 0x11, r2, 0x0) 06:57:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/191) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x3, 0x0, 0xffffffffffffffff}) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x100e000, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) r3 = dup(r1) prctl$PR_GET_NO_NEW_PRIVS(0x27) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x0, 0x11, r3, 0x0) 06:57:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @multicast1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x13, 0x100, 0x70bd2c, 0x25dfdbff, {0x22, 0x6, 0x1f, 0x0, {0x4e22, 0x4e22, [0x2, 0x8000, 0x80000001, 0x5], [0xed, 0x3, 0x2], r5, [0x4, 0x10000]}, 0x1, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xae, 0x1, "c40cb28e9c78ac17b88126fa098e38f42502f6fbce480b8564e4234757a8e4f2ad4569f39afe9b02b7dc9db6116589b2b7d50a6c88c77aae9e6cee8eac8e24df0a8c1821c71025ee027f71bfba964a67bf0380a96f6d472497547fc4f213ab4d19713a8339f892aa498d88c9cc045e380045ed3e7b4388a2cdb27b280e2a8339b5d7628fe1e36379dba40fcc18d4438c2fef94a422f68762ff8667f873816c8a078c6014ce99688debed"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "1224eda15f6adc571fc5d8669da153a2109bd4f1b0bc896954c2dd629a6bec2a402abe635c80dff19d93dd3cf3bde6910118411aee9047ea2c799f5e02b3ef5843c5eeedabaee92a84979ea5810ac604eda45effa234ec8bccbe45c5220bf044d4f2fa16ac3408538492d8a2d0cd8f0394269b"}]}, 0x174}}, 0x44001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r7) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000040)) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000000000)={0x2, 0x3f, 0x2, 0x1ff, 0x2ebc, 0x3, 0x8}) 06:57:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaa3fff, 0x11, r2, 0x0) 06:57:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/191) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x3, 0x0, 0xffffffffffffffff}) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x100e000, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) r3 = dup(r1) prctl$PR_GET_NO_NEW_PRIVS(0x27) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x0, 0x11, r3, 0x0) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0xb, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175898fff, 0x11, r2, 0x0) 06:57:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaa4fff, 0x11, r2, 0x0) 06:57:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa0cfff, 0x11, r2, 0x0) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019580)='./file0\x00', 0x60) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000040)=@in={0x2, 0x4e20, @broadcast}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="159f12cc96eb9689a1b41314add58596b35d472fe8410a2e", 0x18}, {&(0x7f0000000100)="2ff5cfced876dfb84a6386bcfd5ddbafbb973aa4a14e5a5061db67cfa71fc49a1223af251c5511490f36001d4c9f808e0bdc257baafffac10170b2d8483ff75469a869827bfd9315ec9b71ec778e1cecff4ce62bffc9e26f95cfdc0fd5695d1570239a7ab8b9fe236669f3117f5855cac823b96fa98499e9c0aa011fea5290424bd94d50e79c4d3c", 0x88}, {&(0x7f00000001c0)="e697e14b06bebf0c25c6740880608414392f15d2cd2d9fb62ce2d0cc73c428394286ad2b2f8836eeed8092fbb2c89d4faf8add4d1e98eec82fd660f2fdc625cd702fbcda72510f7d800e1282d58b1195d172d63dd72e919d34f9cc335d26f787d90eae6bac5681dcc13ae52e745559c6db2b2dc4ab9a77ac5bec8f26deb4b9f0cd6a43038df0bde0bdf734be8f7fbd75aba99fbd468b12b6ff7d07ecfba404ec02a498cf80247b7772037eef7c3539772adcb0fb016efd7ab859e7f2b8a79371ca1a632d879c54d5e222daff460444de37db643acbd62ad07dcaa54bed359abc816dd40c9202fcef58bf7edb0a13aa3ee50b960489d31ba74c484c", 0xfb}, {&(0x7f00000002c0)="c43f27bacbb44bc4825c1cd15476b561dde1b6ab0548b57eee6d2ccda8cf9a9edd1cf0459b9145045e674800ceec8ba2c9f503fbd8c9372f76b9787ddb1ab18ee591a671841ea10705b21e266ae9804b6653bb2037e097c79a383b7628e95431ef353e1c79892ff0ee84df53dd6c7c8cdb65143d2d11b498c4", 0x79}, {&(0x7f0000000340)='V', 0x1}, {&(0x7f0000000380)="0163fab9", 0x4}], 0x6, &(0x7f0000000440)=[{0xc8, 0x6, 0x6, "ae2a6ee50267c1e3422a72c86197250a420c6d3d45ab150d905a24b1aaaacea6af0b8c6d8bd78241a79088a390bb1321d000cc91c310ae4382106cb62e21a1e89ea0000eeb5d7d6b23ad58029349a98b00dc95b613f56210ce72cc25f6adc99c6a63a0316f1eb5b2210badd1c7ea4014c88a858c241065f897524b420d56d82b9c8867b2201df42d05d81964696250d3ca5845c7f14701641a6df6b01864697bedf25aa3b102689ed82001fff252f495da745b50"}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="1ef4a6ca29e5b7745278fcbc9908edf152f62eb879de", 0x16}], 0x2, &(0x7f00000015c0)=[{0xe0, 0x100, 0x0, "ec642d72b06fc0b1bde62244c97689a1d65bae06a6ee33414f6064334938e47a892b2020ea161368d6c520cfea12e1c84ad98d88206f66a254fda6c370533a3d5d93af6aa173ebe5e5b22a8fea134829f0206c29890f8caa17948406f71108ae8b9de8819bb9b2ee859ea6b88f669e3513a1b206f9e57503dc225890fc830eea604e3493d449bf71939f04cfa1e29c9e3f1405e1b2ca113fae3c9790fcdd05aa45636af767a1f581bcf393c0d91c7e0b0cfc9f3459868650428076e1b9b8e216a72e1ca5ffdef8ab970745"}], 0xe0}}, {{&(0x7f00000016c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)="a18d445208307e2d957274368ef5ebb6f3e7c810441e9b64193fdf5d863eaa1e67c6bd2312b04e09d67e3f37cba5c96ae103365e93abeda0c713a9c7d42963e7dd3300051a7fe233e7dc6300b0128384f8388bb1cd63c92ec6f848de7ded75452294b7b348dd7d5c1a71f08a8361f8824357e9ac463e9d4fbc026f6cf071c772b5717c068ab3269caaa086eb6e1500b569b6e802987aad3da805da5b2e24014d921ca0bd56426ea4936907341d6fb0313ac421b00d9d0eacec", 0xb9}, {&(0x7f0000001800)="3770176509700891a8a4aadb7f7ff848cca32799629b9cf9c3a67dd08f30bcf044530bcb351e4fdff08f6fb2a924a692a10a5bc5f498426495c39f28a1949e35cd78c9077c4133ae6eecd36200c6172c112c48a8d34e3198f6514104e6f115aec2", 0x61}], 0x2, &(0x7f0000019240)=ANY=[@ANYRESHEX=r2], 0x208}}], 0x3, 0x40000) clone(0x19083200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000001bc0)=0x7) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x600, 0x4) 06:57:38 executing program 4: clone(0x680200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175899fff, 0x11, r2, 0x0) 06:57:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaa5fff, 0x11, r2, 0x0) 06:57:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aa04fff, 0x11, r2, 0x0) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:38 executing program 5: r0 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x11000000, 0x11, r2, 0x0) 06:57:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17589afff, 0x11, r2, 0x0) 06:57:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaa6fff, 0x11, r2, 0x0) 06:57:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17589bfff, 0x11, r2, 0x0) 06:57:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0xe000000, 0x11, r2, 0x0) 06:57:39 executing program 4: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaa7fff, 0x11, r2, 0x0) 06:57:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x2000000, 0x11, r2, 0x0) 06:57:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17589cfff, 0x11, r2, 0x0) 06:57:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaa8fff, 0x11, r2, 0x0) 06:57:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x11, r2, 0x0) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x11, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x12, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaa9fff, 0x11, r2, 0x0) [ 2029.648482][T10467] x86/PAT: syz-executor.3:10467 map pfn RAM range req write-combining for [mem 0x15e900000-0x15e903fff], got write-back 06:57:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x500, 0x11, r2, 0x0) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x1001, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 4: clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x10, 0x11, r2, 0x0) 06:57:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaaafff, 0x11, r2, 0x0) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17589dfff, 0x11, r2, 0x0) 06:57:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400002, 0x0, 0x11, r2, 0x0) 06:57:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaabfff, 0x11, r2, 0x0) 06:57:39 executing program 4: clone(0x83c600, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x14, [], 0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/20}, &(0x7f00000001c0)=0x78) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2008800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040000) 06:57:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17589efff, 0x11, r2, 0x0) 06:57:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaacfff, 0x11, r2, 0x0) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) 06:57:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x14, [], 0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/20}, &(0x7f00000001c0)=0x78) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2008800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040000) [ 2030.037608][T10520] x86/PAT: syz-executor.3:10520 map pfn RAM range req write-combining for [mem 0x172d08000-0x172d08fff], got write-back 06:57:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17589ffff, 0x11, r2, 0x0) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaadfff, 0x11, r2, 0x0) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758a0fff, 0x11, r2, 0x0) 06:57:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaaefff, 0x11, r2, 0x0) [ 2030.145513][T10540] x86/PAT: syz-executor.3:10540 map pfn RAM range req write-combining for [mem 0x17a908000-0x17a908fff], got write-back 06:57:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x14, [], 0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/20}, &(0x7f00000001c0)=0x78) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2008800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040000) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758a1fff, 0x11, r2, 0x0) 06:57:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758a2fff, 0x11, r2, 0x0) [ 2030.240921][T10559] x86/PAT: syz-executor.3:10559 map pfn RAM range req write-combining for [mem 0x165008000-0x165008fff], got write-back 06:57:39 executing program 4: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002100)='/dev/hwrng\x00', 0xb0c40, 0x0) openat$cgroup_devices(r2, &(0x7f0000002140)='devices.deny\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002040)={0x10, 0xfffffffffffffff5, r1}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000019240)={r2}, 0x8) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000020c0)=0xfff) r4 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r5 = dup(r4) readlinkat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000002180)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaaffff, 0x11, r2, 0x0) 06:57:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758a3fff, 0x11, r2, 0x0) 06:57:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x14, [], 0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/20}, &(0x7f00000001c0)=0x78) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x10000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758a4fff, 0x11, r2, 0x0) 06:57:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aab0fff, 0x11, r2, 0x0) [ 2030.379296][T10582] x86/PAT: syz-executor.3:10582 map pfn RAM range req write-combining for [mem 0x163708000-0x163708fff], got write-back 06:57:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0x1e}, 0x64) 06:57:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x14, [], 0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/20}, &(0x7f00000001c0)=0x78) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x10000, 0x0) 06:57:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aab1fff, 0x11, r2, 0x0) 06:57:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758a5fff, 0x11, r2, 0x0) [ 2030.504788][T10611] x86/PAT: syz-executor.3:10611 map pfn RAM range req write-combining for [mem 0x16cd08000-0x16cd08fff], got write-back 06:57:40 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2800, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0xa, 0x1, {0x56, 0x7, 0x42f8, {0x956, 0x997c}, {0x5, 0x12}, @const={0x2, {0x5, 0x8, 0x1, 0x9}}}, {0x51, 0x9, 0x2a0, {0xcbd, 0x101}, {0x1, 0x8001}, @const={0xb0be, {0x2000, 0x0, 0x8, 0x99}}}}) clone(0x3c019280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0x87, 0x29, 0x2, {0xa90, [{{0x1, 0x0, 0x6}, 0x80, 0x3, 0x7, './file0'}, {{0x0, 0x2, 0x5}, 0xf04, 0x5, 0x7, './file0'}, {{0x2, 0x0, 0x8}, 0x0, 0xfa, 0x7, './file0'}, {{0xe6bcd09fcb339fc4, 0x3, 0x8}, 0xa24a, 0x3, 0x7, './file0'}]}}, 0x87) 06:57:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aab2fff, 0x11, r2, 0x0) 06:57:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa, 0x10, 0x0, 0x1e}, 0x64) 06:57:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x14, [], 0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/20}, &(0x7f00000001c0)=0x78) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758a6fff, 0x11, r2, 0x0) 06:57:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758a7fff, 0x11, r2, 0x0) 06:57:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xb, 0x10, 0x0, 0x1e}, 0x64) [ 2030.604449][T10627] x86/PAT: syz-executor.3:10627 map pfn RAM range req write-combining for [mem 0x167108000-0x167108fff], got write-back 06:57:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aab3fff, 0x11, r2, 0x0) 06:57:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc, 0x10, 0x0, 0x1e}, 0x64) 06:57:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758a8fff, 0x11, r2, 0x0) 06:57:40 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x70fb00, 0x5554b5b55c2b3e3f) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) 06:57:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aab4fff, 0x11, r2, 0x0) [ 2030.709182][T10648] x86/PAT: syz-executor.3:10648 map pfn RAM range req write-combining for [mem 0x16a108000-0x16a108fff], got write-back 06:57:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x8000) 06:57:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x1e}, 0x64) 06:57:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758a9fff, 0x11, r2, 0x0) 06:57:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aab5fff, 0x11, r2, 0x0) 06:57:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x8000) 06:57:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758aafff, 0x11, r2, 0x0) 06:57:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xe, 0x10, 0x0, 0x1e}, 0x64) 06:57:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x8000) 06:57:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758abfff, 0x11, r2, 0x0) 06:57:40 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) 06:57:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x10, 0x0, 0x1e}, 0x64) 06:57:40 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x8000) 06:57:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758acfff, 0x11, r2, 0x0) 06:57:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x10, 0x10, 0x0, 0x1e}, 0x64) 06:57:40 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x8000) 06:57:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aab6fff, 0x11, r2, 0x0) 06:57:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x11, 0x10, 0x0, 0x1e}, 0x64) 06:57:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758adfff, 0x11, r2, 0x0) 06:57:40 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x8000) 06:57:40 executing program 4: getgid() ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x905c, 0x10000000009, 0x0, 0x9, 0x9, 0x0, "3c48e843f0f3def81cc9f42ed433d73177db3658daa549827b5430388ea48b04ecff88ad78ea2a83b165f575ab59c544d3908571483daf1f03e71a748ae632e0", "6111eb85cb6765f1bdcfa66e430f8991ca70926f8a2bc6286cf96aff5d63ff6a7f4db79449620bbd5e5722a1aefcb8db0000000000eaffffff00000000000010", "d57aa951555348b73d82f444978d7f15963860a98b735fa100bce3bf729e60d6", [0x6, 0xffffffffffffffff]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:40 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x12, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758aefff, 0x11, r2, 0x0) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aab7fff, 0x11, r2, 0x0) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758affff, 0x11, r2, 0x0) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aab8fff, 0x11, r2, 0x0) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 4: r0 = memfd_create(&(0x7f0000000300), 0x0) write(r0, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) read$FUSE(r1, &(0x7f0000019240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r2, &(0x7f0000000000)={0x18, 0x0, r3, {0x80}}, 0x18) 06:57:41 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758b0fff, 0x11, r2, 0x0) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aab9fff, 0x11, r2, 0x0) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758b1fff, 0x11, r2, 0x0) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:41 executing program 4: clone(0x3010f400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4c, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758b2fff, 0x11, r2, 0x0) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aabafff, 0x11, r2, 0x0) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758b3fff, 0x11, r2, 0x0) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x60, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aabbfff, 0x11, r2, 0x0) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x68, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758b4fff, 0x11, r2, 0x0) 06:57:41 executing program 4: ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 06:57:41 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aabcfff, 0x11, r2, 0x0) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6c, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758b5fff, 0x11, r2, 0x0) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aabdfff, 0x11, r2, 0x0) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x74, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758b6fff, 0x11, r2, 0x0) 06:57:41 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x2}, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x4, 0x0, 0x3f}, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x1000}}, 0x10) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aabefff, 0x11, r2, 0x0) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7a, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758b7fff, 0x11, r2, 0x0) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aabffff, 0x11, r2, 0x0) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x98, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758b8fff, 0x11, r2, 0x0) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aac0fff, 0x11, r2, 0x0) 06:57:41 executing program 4: clone(0x82a000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x48fb803ced488778, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4040800) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758b9fff, 0x11, r2, 0x0) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc0, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aac1fff, 0x11, r2, 0x0) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758bafff, 0x11, r2, 0x0) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x300, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758bbfff, 0x11, r2, 0x0) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x500, 0x10, 0x0, 0x1e}, 0x64) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:41 executing program 4: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x80000, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102355, 0x18fd3) fchmod(r0, 0x106) r2 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x400) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) clone(0x600c000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758bcfff, 0x11, r2, 0x0) 06:57:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x600, 0x10, 0x0, 0x1e}, 0x64) 06:57:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aac2fff, 0x11, r2, 0x0) 06:57:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758bdfff, 0x11, r2, 0x0) 06:57:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x700, 0x10, 0x0, 0x1e}, 0x64) 06:57:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758befff, 0x11, r2, 0x0) 06:57:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aac3fff, 0x11, r2, 0x0) 06:57:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x900, 0x10, 0x0, 0x1e}, 0x64) 06:57:42 executing program 4: r0 = epoll_create1(0x80000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x8000) 06:57:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758bffff, 0x11, r2, 0x0) 06:57:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa00, 0x10, 0x0, 0x1e}, 0x64) 06:57:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aac4fff, 0x11, r2, 0x0) 06:57:42 executing program 5: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x0, 0x4, {0x101, @usage=0x3, 0x0, 0x80, 0xffffffff80000000, 0xffffffff, 0x4, 0xef, 0x1, @struct={0x14a0, 0x6}, 0x80, 0x3, [0x3, 0xdd, 0xffff, 0x6, 0x27, 0x5]}, {0xffffffff, @usage, 0x0, 0x5, 0x9, 0x1, 0x5, 0x3, 0x90, @usage=0x8, 0xb4ec, 0x0, [0x1000, 0x9, 0xd000000000000000, 0x0, 0x7, 0xa]}, {0xffff, @struct={0x7, 0x40000000}, 0x0, 0xb86, 0x2, 0x2, 0x8, 0x5589, 0x438, @struct={0x91cd, 0x69}, 0x6, 0xcb, [0x4, 0x82, 0x1000, 0x200, 0x2, 0x2]}, {0x9, 0x2, 0xfffffffffffff7c5}}) r0 = socket(0x10, 0x6, 0x7fffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') socket(0x2a, 0x3, 0x1) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={0x38, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x83b0}]}, 0x38}}, 0x2004c080) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x400}, 0x4000010) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="45919dfd59f38f6f4826c5550f835ed65820a4cc79eca75581da46c16023a45200ccbaa7df8833f7beead9ffe329e4afa3c292e5aa7fc363a9c5", 0x3a}, {&(0x7f0000000440)="fb6298b76e4f899f91c0dd5d5e8b9cf9a92caebc58d740df8be17cf081ffb3e34722bf056f36fa85defac23dc615166545e0cad339016ce988a7fa7ec0fd11f5b7a92f4602739974e64424bd7373c85b0e0b96117caf24da3229587fd4440686a0c0c31a1913646db8aac6c6a6fd949094dbbd2dd8d3246a3f9824f80a353dd4a3e30b2f6430371b86ae3612c79920060a139b773a7f8d461f7932f53d30927fa7bf05cd2705110e4949265b20c2891c4b8ffb7f0b01b2", 0xb7}, {&(0x7f0000000500)="90f34e1e084f90e92456baf36476a244460a77f5b627dc11e0258e74de1a86871303b3cdf044d562a1c955b61c4baa3cb0ce13e742f946880cdcc900458c20187ae84c777549738b85c9857ef8a441e255e6928c3fccbdc44ea71e2cb04d188f888cc118f5b507f9ef520a6a7a0a938f23dc7c3dacf221a6193b4a98e47ccb9ef5ac06b796126e2de2f5c4320d9c4df7d9c0112fd3398a09c7c51dd942cfa5d54ae0cacd5503a4583c94e96c", 0xac}], 0x3, 0x0) 06:57:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xb00, 0x10, 0x0, 0x1e}, 0x64) 06:57:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000) 06:57:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758c0fff, 0x11, r2, 0x0) 06:57:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000) 06:57:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aac5fff, 0x11, r2, 0x0) 06:57:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc00, 0x10, 0x0, 0x1e}, 0x64) 06:57:42 executing program 4: clone(0x601d0400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) 06:57:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000) 06:57:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758c1fff, 0x11, r2, 0x0) 06:57:42 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)) 06:57:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xd00, 0x10, 0x0, 0x1e}, 0x64) 06:57:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aac6fff, 0x11, r2, 0x0) 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758c2fff, 0x11, r2, 0x0) 06:57:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x8000) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xe00, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 5: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x8) clone(0x3001c000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aac7fff, 0x11, r2, 0x0) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xf00, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 4: clone(0x50020000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000300), 0x0) write(r0, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x3, 0x916}) 06:57:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x8000) 06:57:43 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @rand_addr=0x64010101}}, 0x1e) 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758c3fff, 0x11, r2, 0x0) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1100, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aac8fff, 0x11, r2, 0x0) 06:57:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x8000) 06:57:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aac9fff, 0x11, r2, 0x0) 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758c4fff, 0x11, r2, 0x0) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1200, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 06:57:43 executing program 5: getresgid(&(0x7f0000000080), &(0x7f0000000040), &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2033.729038][T11084] x86/PAT: syz-executor.3:11084 map pfn RAM range req write-combining for [mem 0x169d00000-0x169d00fff], got write-back 06:57:43 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "8be468e8541bb6c7", "274e66a1eca362e544a6ac1a9b0677fc", "5b017f82", "7d4154e5dae393f4"}, 0x28) dup(r0) read$eventfd(r0, &(0x7f0000000000), 0x8) 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758c5fff, 0x11, r2, 0x0) 06:57:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aacafff, 0x11, r2, 0x0) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1fa9, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000019240)=ANY=[@ANYBLOB="c00400001500000127bd7000ffdbdf250040f5000100968d54290eb6d2eaba09b832ae536a324bd0db1852b2b23782d8f427ea51f2c281c9ce5b95cc1fd68792c7c4d8672eb1afb1e5a92e5c42638acd67c9331bbe60ccaca9ae48ef1799b888563fc1f5f7b85fe7433512c8df35b3c5d6f0e0f799cc4b1994cb79b975c56ac67174a855ee18b8123cb30e1b20022ad7983b5f0fd3ca48415e12db701842f95b3180868c5a90e5618351ec241f59f01bfa1cb612348d0154d056fb97107840b8dbc2a6a1bb4406ba6a47d187c404884ed3283ff0cfe494abcdd3e73694556e8ebf6ef44849aded3026d9dfa96bd9b63da89f975e8e81580cf6d9aa8ef3cde2d259fe23b70ea7ff000000f4000100cc2054e08f86c9e1069c771ae1df5d61c47ca2626ab1051fc01945f4efaaa5637ef7df0f2a6e8918a822d80a412d648daee667e6480e521adc443571af07df9d9f5fae4269a4e2cb3d0f2d69a718b673b9a684ae3718c38edd844cf688ed99d548adb77b5ab07f8fb9feaca566ab2193a3653766a8917e2750be59bf89d0f7f303fa6733c82b14fb009c787f0c5d9d4ace89079aa45bc167e205dd6ddc4190911e4b77a99091e10f9750606a780befedbbbb0c3c5cf578e4a0d217144987f75e0a8963fe7fb90d219ac80275aa5259b8fec758cc8478de02ec9d813d32cd7511033270fe809b568e9c12962fbe07235ce1000100178bbab8af20b6d01ea7a5be60caf10ecfd9e6e112903cd6563dbe81c61829f51e071a5bf806fc5f97114fd06bffcf3b0147350b491da052a754efdf8732dc97fbda7e3f29b54c3406a0c72e6659f9f21a8299477b488d64c9c8c4fb3de68b00b18a50cdacf2f73169cb3f659a9258b086b5246bd976053fc083905266e92aad1bb2db8adac5f8185e58157b595e51fa8440a9198db45456efce7b95c12b0c2f5ac5aab18222ae68a001d49bf0d1cdc01a22348faf8cb6cb592a4aa784b76b8689996f7e93967c41ea25a18191fd1c538e442fba66e28d03fdbcc8d0fb000000dd000100ac05b683c6725be3d55f942c934ba94a2dfb9319a2e5b70b5e64f1850cf6e673fe96e71ce2267c4d94b78db4bb12a48c0f88061b4ee197e75e9a227092ca13dfa14b5961c39b5bc50d54ee571ac4039bc629cbee32f4ec80de90daf41884af34653223fd4abd810a2c8727ca3b257c328b36025fda27d4829a87647db001c2826b4cc115335595e818dccd6d54e1b726c8e88ed154932e48e1c705445dcf47ce6a60c820aaa33e7a6f619058b3c5c3d5b4941bf373a60c3f7d62a26ca4156085de8b3cbc34f38e2d29d82acfeefb97d5d71a2a3a64db59a758000000fb000100a78086387a4fa1a1d80223de68ea1642981c24f9419dd48e8ad8e83a8e9b7bdf038979f0b284f600b73004c404bccfa7c2512c1113211040e4eb7004efeefb2eae289bd8d5a93404028308f482671c8d36d4680ef20ccfe23859d013832c9fb377a323d28e12aceb204b5c1adb7db364dce216f6abbb7c9a231ed9d867351cb0a11d045c996344f71ff1dc11754aa621c1cb94f02a21a6363e7c293005e1c6e034e2abecd37e81cc93e26479724d8ae7a394fb89986c701316ae3105c28b5cfc121ecfe4ee6866e2ffb4e097ff921e02a23e28548d4402ff69e14ff9fd6d3aa5d75b958727aea8002718a186fc0000000e502e3e8a0d1a95fb688272b94c26516fc193f1d2630e4409dbc8fba55ed70d9dbf9e25e01e6cc601c6b6aa6761243572c4244fe6aa0ebce1719f66b582767cc6467a44d308629030cdf68210a4dc5f1334f81c00"/1300], 0x4c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r2, 0x29, 0x8, 0xfc, 0x8, 0x0, @dev={0xfe, 0x80, [], 0x33}, @mcast1, 0x8000, 0x40, 0x7, 0x4c}}) 06:57:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2000, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2500, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000000)={0x690, 0x6, [[], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], []]}) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) accept$packet(r1, &(0x7f0000009e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000009e40)=0x14) sendmsg$FOU_CMD_GET(r3, &(0x7f0000009f00)={&(0x7f0000009dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009ec0)={&(0x7f0000009e80)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xc1) 06:57:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aacbfff, 0x11, r2, 0x0) 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758c6fff, 0x11, r2, 0x0) 06:57:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 06:57:43 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x4, 0x4) [ 2033.829643][T11103] x86/PAT: syz-executor.3:11103 map pfn RAM range req write-combining for [mem 0x15fa00000-0x15fa00fff], got write-back 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3100, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758c7fff, 0x11, r2, 0x0) 06:57:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaccfff, 0x11, r2, 0x0) [ 2033.897136][T11125] x86/PAT: syz-executor.3:11125 map pfn RAM range req write-combining for [mem 0x173b00000-0x173b00fff], got write-back 06:57:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x48300, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x0, 0x11, r2, 0x0) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3f00, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758c8fff, 0x11, r2, 0x0) 06:57:43 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000019240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000019300)={&(0x7f0000000180)={0x68, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff7}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1f}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0xc60bfac4e3936816}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x40000c1) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @empty, 0x4e22, 0x0, 'none\x00', 0x0, 0x8, 0x2d}, 0x2c) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000019280)={0x2b, 0x5e, "0e87e2c04499cb140eb54248c27748110ce8590e438e25841614344e0708f04c46aaad5b4b6dd3f9af5436bd24b0679e794ea19cd6f3eafea784ab1143c20d00ec952d95219bf45c2c5d9c11b308f6a85fdb94e0e311a04238bc7a9fe5d7"}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fa, &(0x7f0000000000)="1d17122e1cd45b096000f6356a09a6489910a57d4ce4f2657448eccff9b4c4baadc8fc16eff59b4969c4a555284927eb226b0e621265eb66979f879195ac1d03b12c0ace677c779b3b558ed180c9156abc13a5bc5ced7e10b13ec61c0f28f65af6e9f5a9cb1252259d54f90dd09d4036e76e61635257b9e6e5a76e913d74bd454598f8ac86280d8abdfb8c5a75fcfb36bf977ea92954252700e7c65f5b4b3b7e1bc7ed485a6c6363df7070ee4e260992847fc04a6304b8827511764f89fd2e6e8fef8e99d86803f29fe503") 06:57:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aacdfff, 0x11, r2, 0x0) 06:57:43 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005}) r1 = syz_io_uring_complete(0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000000)=0x3) r2 = memfd_create(&(0x7f0000000300), 0x0) write(r2, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = memfd_create(&(0x7f0000000300), 0x0) write(r3, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r4) r5 = memfd_create(&(0x7f0000000300), 0x0) write(r5, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) clone3(&(0x7f0000000380)={0x20000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000400), {0x32}, &(0x7f0000000140)=""/116, 0x74, &(0x7f0000000280)=""/164, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) r7 = dup(r6) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000010, 0x11, r7, 0x0) 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758c9fff, 0x11, r2, 0x0) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4000, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7f, 0x7fffffff, 0x8}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:43 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000), 0x8) 06:57:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aacefff, 0x11, r2, 0x0) 06:57:43 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758cafff, 0x11, r2, 0x0) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4800, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aacffff, 0x11, r2, 0x0) [ 2034.127994][T11183] FAULT_INJECTION: forcing a failure. [ 2034.127994][T11183] name failslab, interval 1, probability 0, space 0, times 0 [ 2034.155616][T11183] CPU: 0 PID: 11183 Comm: syz-executor.3 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2034.165797][T11183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758cbfff, 0x11, r2, 0x0) 06:57:43 executing program 4: readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/11, 0xb) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2034.175880][T11183] Call Trace: [ 2034.179173][T11183] dump_stack+0x14a/0x1ce [ 2034.183496][T11183] ? devkmsg_release+0x11c/0x11c [ 2034.188433][T11183] ? show_regs_print_info+0x12/0x12 [ 2034.193636][T11183] ? stack_trace_save+0x1f0/0x1f0 [ 2034.198660][T11183] ? __kernel_text_address+0x93/0x110 [ 2034.204031][T11183] should_fail+0x6fb/0x860 [ 2034.208495][T11183] ? setup_fault_attr+0x3d0/0x3d0 [ 2034.213529][T11183] ? vm_area_dup+0x20/0xb0 [ 2034.217950][T11183] should_failslab+0x5/0x20 [ 2034.222455][T11183] kmem_cache_alloc+0x36/0x260 [ 2034.227219][T11183] vm_area_dup+0x20/0xb0 [ 2034.231460][T11183] __split_vma+0xb3/0x430 [ 2034.235790][T11183] ? kstrtol_from_user+0x320/0x320 [ 2034.240905][T11183] ? vmacache_update+0x9f/0xf0 [ 2034.245671][T11183] __do_munmap+0x335/0x11f0 [ 2034.250175][T11183] mmap_region+0x8ef/0x1bb0 [ 2034.254692][T11183] ? cap_mmap_addr+0x164/0x2d0 [ 2034.259458][T11183] ? find_vma+0x150/0x150 [ 2034.263785][T11183] ? security_mmap_addr+0x97/0xb0 [ 2034.268806][T11183] do_mmap+0x945/0x1060 [ 2034.272962][T11183] vm_mmap_pgoff+0x1cb/0x280 [ 2034.277554][T11183] ? account_locked_vm+0x1b0/0x1b0 [ 2034.282689][T11183] ? fget_many+0x20/0x20 [ 2034.286918][T11183] ? ksys_write+0x25d/0x2c0 [ 2034.291422][T11183] ? file_open_root+0x450/0x450 [ 2034.296268][T11183] ? __ia32_sys_read+0x80/0x80 [ 2034.301037][T11183] ksys_mmap_pgoff+0x168/0x1e0 [ 2034.305805][T11183] do_syscall_64+0xcb/0x150 [ 2034.310313][T11183] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2034.316201][T11183] RIP: 0033:0x45d5b9 [ 2034.320108][T11183] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2034.339701][T11183] RSP: 002b:00007f1dd0402c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2034.348105][T11183] RAX: ffffffffffffffda RBX: 0000000000020bc0 RCX: 000000000045d5b9 [ 2034.356084][T11183] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffa000 [ 2034.364044][T11183] RBP: 00007f1dd0402ca0 R08: 0000000000000005 R09: 0000000000008000 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4c00, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 5: setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102355, 0x18fd3) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'bond_slave_0\x00', 0x979}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x4000000) 06:57:43 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x3) 06:57:43 executing program 3 (fault-call:3 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758ccfff, 0x11, r2, 0x0) [ 2034.372004][T11183] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 2034.379968][T11183] R13: 00007fff296e5ebf R14: 00007f1dd04039c0 R15: 000000000118cf4c 06:57:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aad0fff, 0x11, r2, 0x0) 06:57:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6000, 0x10, 0x0, 0x1e}, 0x64) 06:57:43 executing program 5: clone(0xed07c700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "6e66ccbdf78499c01d69257a07f477c3"}, 0x11, 0x2) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x5, 0x4, 0x8}) [ 2034.445862][T11220] FAULT_INJECTION: forcing a failure. [ 2034.445862][T11220] name failslab, interval 1, probability 0, space 0, times 0 [ 2034.488601][T11220] CPU: 1 PID: 11220 Comm: syz-executor.3 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2034.498784][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2034.508837][T11220] Call Trace: [ 2034.512134][T11220] dump_stack+0x14a/0x1ce [ 2034.516469][T11220] ? devkmsg_release+0x11c/0x11c [ 2034.521416][T11220] ? show_regs_print_info+0x12/0x12 [ 2034.526632][T11220] should_fail+0x6fb/0x860 [ 2034.531074][T11220] ? setup_fault_attr+0x3d0/0x3d0 [ 2034.536112][T11220] ? anon_vma_clone+0xa1/0x4b0 [ 2034.540893][T11220] should_failslab+0x5/0x20 [ 2034.545399][T11220] kmem_cache_alloc+0x36/0x260 [ 2034.550178][T11220] anon_vma_clone+0xa1/0x4b0 [ 2034.554762][T11220] __split_vma+0x180/0x430 [ 2034.559443][T11220] ? vmacache_update+0x9f/0xf0 [ 2034.564197][T11220] __do_munmap+0x335/0x11f0 [ 2034.568711][T11220] mmap_region+0x8ef/0x1bb0 [ 2034.573209][T11220] ? cap_mmap_addr+0x164/0x2d0 [ 2034.585815][T11220] ? find_vma+0x150/0x150 [ 2034.590137][T11220] ? security_mmap_addr+0x97/0xb0 [ 2034.595176][T11220] do_mmap+0x945/0x1060 [ 2034.599328][T11220] vm_mmap_pgoff+0x1cb/0x280 [ 2034.603929][T11220] ? account_locked_vm+0x1b0/0x1b0 [ 2034.609038][T11220] ? fget_many+0x20/0x20 [ 2034.613279][T11220] ? ksys_write+0x25d/0x2c0 [ 2034.617782][T11220] ? file_open_root+0x450/0x450 [ 2034.622651][T11220] ? __ia32_sys_read+0x80/0x80 [ 2034.627413][T11220] ksys_mmap_pgoff+0x168/0x1e0 [ 2034.632179][T11220] do_syscall_64+0xcb/0x150 [ 2034.636682][T11220] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2034.642586][T11220] RIP: 0033:0x45d5b9 [ 2034.646474][T11220] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2034.666074][T11220] RSP: 002b:00007f1dd0402c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2034.674480][T11220] RAX: ffffffffffffffda RBX: 0000000000020bc0 RCX: 000000000045d5b9 06:57:44 executing program 4: add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aad1fff, 0x11, r2, 0x0) 06:57:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6800, 0x10, 0x0, 0x1e}, 0x64) 06:57:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758cdfff, 0x11, r2, 0x0) [ 2034.682460][T11220] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffa000 [ 2034.690424][T11220] RBP: 00007f1dd0402ca0 R08: 0000000000000005 R09: 0000000000008000 [ 2034.698392][T11220] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 2034.706358][T11220] R13: 00007fff296e5ebf R14: 00007f1dd04039c0 R15: 000000000118cf4c 06:57:44 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x80, 0x5, 0x7}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x2}) r1 = open(&(0x7f0000000080)='./file0\x00', 0xa80, 0x40) write$P9_RAUTH(r1, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x1, 0x2}}, 0x14) 06:57:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aad2fff, 0x11, r2, 0x0) 06:57:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6c00, 0x10, 0x0, 0x1e}, 0x64) 06:57:44 executing program 3 (fault-call:3 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758cefff, 0x11, r2, 0x0) 06:57:44 executing program 4: clone(0x34048880, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x40) fcntl$setown(0xffffffffffffffff, 0x8, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) ioctl$CHAR_RAW_ROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000080)) 06:57:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aad3fff, 0x11, r2, 0x0) 06:57:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7400, 0x10, 0x0, 0x1e}, 0x64) 06:57:44 executing program 5: setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), 0x4) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x2}, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x7, 0x1000, 0x9}, &(0x7f0000000140)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x3}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r1, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000300)={{0x3, 0x0, @identifier="72b5819f0f78137ace8fd91b9dc4dab0"}}) inotify_rm_watch(r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) [ 2034.818487][T11220] x86/PAT: syz-executor.3:11220 map pfn RAM range req write-combining for [mem 0x17c508000-0x17c508fff], got write-back 06:57:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7a00, 0x10, 0x0, 0x1e}, 0x64) 06:57:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758cffff, 0x11, r2, 0x0) 06:57:44 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 06:57:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aad4fff, 0x11, r2, 0x0) [ 2034.879904][T11271] FAULT_INJECTION: forcing a failure. [ 2034.879904][T11271] name failslab, interval 1, probability 0, space 0, times 0 [ 2034.949132][T11271] CPU: 0 PID: 11271 Comm: syz-executor.3 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2034.959306][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2034.969373][T11271] Call Trace: [ 2034.972676][T11271] dump_stack+0x14a/0x1ce [ 2034.977018][T11271] ? devkmsg_release+0x11c/0x11c [ 2034.981983][T11271] ? show_regs_print_info+0x12/0x12 [ 2034.987219][T11271] ? vma_interval_tree_augment_rotate+0x200/0x200 [ 2034.993647][T11271] should_fail+0x6fb/0x860 [ 2034.998079][T11271] ? setup_fault_attr+0x3d0/0x3d0 [ 2035.003112][T11271] ? __vma_adjust+0x621/0x1d90 [ 2035.007890][T11271] ? vm_area_dup+0x20/0xb0 [ 2035.012340][T11271] should_failslab+0x5/0x20 [ 2035.016858][T11271] kmem_cache_alloc+0x36/0x260 [ 2035.021631][T11271] vm_area_dup+0x20/0xb0 [ 2035.025884][T11271] __split_vma+0xb3/0x430 [ 2035.030216][T11271] ? vmacache_update+0x9f/0xf0 [ 2035.034979][T11271] __do_munmap+0x3b4/0x11f0 [ 2035.039482][T11271] mmap_region+0x8ef/0x1bb0 [ 2035.043986][T11271] ? cap_mmap_addr+0x164/0x2d0 [ 2035.048763][T11271] ? find_vma+0x150/0x150 [ 2035.053081][T11271] ? security_mmap_addr+0x97/0xb0 [ 2035.058098][T11271] do_mmap+0x945/0x1060 [ 2035.062266][T11271] vm_mmap_pgoff+0x1cb/0x280 [ 2035.066886][T11271] ? account_locked_vm+0x1b0/0x1b0 [ 2035.076770][T11271] ? fget_many+0x20/0x20 [ 2035.081002][T11271] ? ksys_write+0x25d/0x2c0 [ 2035.085516][T11271] ? file_open_root+0x450/0x450 [ 2035.090360][T11271] ? __ia32_sys_read+0x80/0x80 [ 2035.095121][T11271] ksys_mmap_pgoff+0x168/0x1e0 [ 2035.099880][T11271] do_syscall_64+0xcb/0x150 [ 2035.104380][T11271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2035.110963][T11271] RIP: 0033:0x45d5b9 [ 2035.114867][T11271] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2035.134457][T11271] RSP: 002b:00007f1dd0402c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 06:57:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x9800, 0x10, 0x0, 0x1e}, 0x64) 06:57:44 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r1, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x422}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xffffffffffffc42d]}, 0x8, 0x180000) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r1, 0x403, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0xc050011) clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2035.142861][T11271] RAX: ffffffffffffffda RBX: 0000000000020bc0 RCX: 000000000045d5b9 [ 2035.150825][T11271] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffa000 [ 2035.158789][T11271] RBP: 00007f1dd0402ca0 R08: 0000000000000005 R09: 0000000000008000 [ 2035.166755][T11271] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 2035.174719][T11271] R13: 00007fff296e5ebf R14: 00007f1dd04039c0 R15: 000000000118cf4c 06:57:44 executing program 3 (fault-call:3 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758d0fff, 0x11, r2, 0x0) 06:57:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x9fff, 0x10, 0x0, 0x1e}, 0x64) 06:57:44 executing program 5: sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', r3, 0x29, 0x81, 0x2, 0x5, 0x15, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7800, 0x7800, 0x0, 0x3}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@loopback, @broadcast, 0x0}, &(0x7f0000000180)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x138, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 2035.322320][T11312] FAULT_INJECTION: forcing a failure. [ 2035.322320][T11312] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.351362][T11312] CPU: 1 PID: 11312 Comm: syz-executor.3 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2035.361564][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2035.371622][T11312] Call Trace: [ 2035.374919][T11312] dump_stack+0x14a/0x1ce [ 2035.379257][T11312] ? devkmsg_release+0x11c/0x11c [ 2035.384213][T11312] ? show_regs_print_info+0x12/0x12 [ 2035.389429][T11312] should_fail+0x6fb/0x860 [ 2035.393853][T11312] ? setup_fault_attr+0x3d0/0x3d0 [ 2035.398923][T11312] ? anon_vma_clone+0xa1/0x4b0 [ 2035.403690][T11312] should_failslab+0x5/0x20 [ 2035.408196][T11312] kmem_cache_alloc+0x36/0x260 [ 2035.412955][T11312] anon_vma_clone+0xa1/0x4b0 [ 2035.417529][T11312] __split_vma+0x180/0x430 [ 2035.421932][T11312] ? vmacache_update+0x9f/0xf0 [ 2035.426683][T11312] __do_munmap+0x3b4/0x11f0 [ 2035.431174][T11312] mmap_region+0x8ef/0x1bb0 [ 2035.435779][T11312] ? cap_mmap_addr+0x164/0x2d0 [ 2035.440530][T11312] ? find_vma+0x150/0x150 [ 2035.444844][T11312] ? security_mmap_addr+0x97/0xb0 [ 2035.449855][T11312] do_mmap+0x945/0x1060 [ 2035.453998][T11312] vm_mmap_pgoff+0x1cb/0x280 [ 2035.458611][T11312] ? account_locked_vm+0x1b0/0x1b0 [ 2035.463704][T11312] ? fget_many+0x20/0x20 [ 2035.467928][T11312] ? ksys_write+0x25d/0x2c0 [ 2035.472420][T11312] ? file_open_root+0x450/0x450 [ 2035.477253][T11312] ? __ia32_sys_read+0x80/0x80 [ 2035.481998][T11312] ksys_mmap_pgoff+0x168/0x1e0 [ 2035.486746][T11312] do_syscall_64+0xcb/0x150 [ 2035.491232][T11312] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2035.497133][T11312] RIP: 0033:0x45d5b9 [ 2035.501009][T11312] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:57:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758d1fff, 0x11, r2, 0x0) 06:57:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa91f, 0x10, 0x0, 0x1e}, 0x64) 06:57:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758d2fff, 0x11, r2, 0x0) 06:57:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc000, 0x10, 0x0, 0x1e}, 0x64) [ 2035.520611][T11312] RSP: 002b:00007f1dd0402c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2035.529025][T11312] RAX: ffffffffffffffda RBX: 0000000000020bc0 RCX: 000000000045d5b9 [ 2035.536987][T11312] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffa000 [ 2035.544946][T11312] RBP: 00007f1dd0402ca0 R08: 0000000000000005 R09: 0000000000008000 [ 2035.552900][T11312] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000003 [ 2035.560853][T11312] R13: 00007fff296e5ebf R14: 00007f1dd04039c0 R15: 000000000118cf4c 06:57:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xff00, 0x10, 0x0, 0x1e}, 0x64) [ 2035.600337][T11312] x86/PAT: syz-executor.3:11312 map pfn RAM range req write-combining for [mem 0x163308000-0x163308fff], got write-back 06:57:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aad5fff, 0x11, r2, 0x0) 06:57:45 executing program 3 (fault-call:3 fault-nth:4): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758d3fff, 0x11, r2, 0x0) 06:57:45 executing program 5: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x1, 0xcd, "e73d2bd6d88f7da03193074157c5af72041cf21b8e24bc4bcc5469df78efee9ebecd5f0a3ceea7cf45647b4eaa5ada890fd109ce5a03d1d379919b64a7782a7a22aa4d6a0b0214687d14f8388c322946eddd19493d999782a22375d037fa691405c2fd002ebd79f65714466f254d8a97c6b79e9643ca522364ae45be9df5a20686179eb0779a162bc7ed3130c247104d1ec85f00585cfc95873a84fc0e518bfa68dfa79ccae015925d85df69c8376da971674044d98c9152fe88783182b6bae36072222605134158e02b198a11"}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xff9f, 0x10, 0x0, 0x1e}, 0x64) 06:57:45 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4a0100, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x4, 0x428, 0x100, 0x100, 0x100, 0x340, 0x340, 0x340, 0x4, &(0x7f0000001240), {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9afdd2ce53b5f671d71a70fda07a970c18e971fc75fe67e671cec9af19a6"}}, {{@arp={@multicast2, @multicast1, 0xffffffff, 0xff000000, 0xd, 0x0, {@mac=@dev={[], 0x31}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x40, 0x200, 0xff, 0x5, 0x0, 'veth0_to_bond\x00', 'ipvlan1\x00', {0xd647d60dab46ea20}, {0xff}, 0x0, 0xed}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x7ece, 0x8, 0x1, 0x0, "c58bff50bf66db4833057f252c911bc6367b3148ebf9b6da1725b5e9c8de29931158e472356fc56f2c4d9c668e778f3097015aaf8879f2ec7ddff2a49e684a51"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x478) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000006bbc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0xbe, "cbab7ffcace4a6"}) bpf$MAP_CREATE(0x0, &(0x7f0000001040)={0x1, 0x1, 0xfff, 0x8000, 0x0, 0xffffffffffffffff, 0xa304, [], 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x40) r10 = memfd_create(&(0x7f0000000300), 0x0) write(r10, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000001700)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000006bbc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0xbe, "cbab7ffcace4a6"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000040)={r2, 0x45b}) 06:57:45 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="569a65bbe7e8be4756e211e06df77b2d59eeaa27c55beeafefac664fefb58f2426e73aa616d0a831743ef49ed6b59c3864a78f9c1a283ba399f46d5b9e970467d0e5", 0x42}], 0x1, 0x1) clone(0x50002a00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758d4fff, 0x11, r2, 0x0) [ 2035.786272][T11349] FAULT_INJECTION: forcing a failure. [ 2035.786272][T11349] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.812472][T11349] CPU: 0 PID: 11349 Comm: syz-executor.3 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2035.822682][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2035.832738][T11349] Call Trace: [ 2035.836045][T11349] dump_stack+0x14a/0x1ce [ 2035.840396][T11349] ? devkmsg_release+0x11c/0x11c [ 2035.845341][T11349] ? show_regs_print_info+0x12/0x12 [ 2035.850537][T11349] should_fail+0x6fb/0x860 [ 2035.854951][T11349] ? setup_fault_attr+0x3d0/0x3d0 [ 2035.859981][T11349] ? vm_area_alloc+0x20/0xf0 [ 2035.864575][T11349] should_failslab+0x5/0x20 [ 2035.869094][T11349] kmem_cache_alloc+0x36/0x260 [ 2035.873866][T11349] vm_area_alloc+0x20/0xf0 [ 2035.878276][T11349] mmap_region+0xa97/0x1bb0 [ 2035.882781][T11349] ? cap_mmap_addr+0x164/0x2d0 [ 2035.887540][T11349] ? find_vma+0x150/0x150 [ 2035.891865][T11349] ? security_mmap_addr+0x97/0xb0 [ 2035.896880][T11349] do_mmap+0x945/0x1060 [ 2035.901033][T11349] vm_mmap_pgoff+0x1cb/0x280 [ 2035.905627][T11349] ? account_locked_vm+0x1b0/0x1b0 [ 2035.910731][T11349] ? fget_many+0x20/0x20 [ 2035.914970][T11349] ? ksys_write+0x25d/0x2c0 [ 2035.919467][T11349] ? file_open_root+0x450/0x450 [ 2035.924344][T11349] ? __ia32_sys_read+0x80/0x80 [ 2035.929112][T11349] ksys_mmap_pgoff+0x168/0x1e0 06:57:45 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r2, 0xeb3032a6a9f9adac}, 0x10) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100)={r3, 0xc7, 0x5d}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'crc32\x00'}}, &(0x7f0000019240)="8aaeaeeb7cae7d3ef5605031d67252a3b9f0dfdfd7d6d40e1819ed0bf6762bf455c994363aa127deb9e53565833a0e856c6843d570b456621ea8e83bbf05fe03acc579bfc6d5a2af293a5e475359dbf7a1fabd98af339f29466ad754b05297e29cc79f9091fb4fae6eab7f6e2b7c1951de807372e73c82bfe7f6fca9b93c4f308d082050ca7c6df6cad8786e36bebca3923ed1a5eeb54623709c3b09b60ac8d7407421adcbcb1e185d06b756dba0ce419d7f3e48e93bd6cd41156a3cb13bc9559e2cf492f12b6c", &(0x7f00000001c0)="06d93b8059ce3ecf484da18e209a28125b1b4fb0e75f1c402b3e4c6dfe27f7d36015eac058ca870d23f49defab2200f4a0058ee5eb1b3ad3623ba64479c96cadaf7006a10eeadd4f4cd01b4fb274cea76ee6554001dbaa188f13b683b2") [ 2035.933875][T11349] do_syscall_64+0xcb/0x150 [ 2035.938378][T11349] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2035.944269][T11349] RIP: 0033:0x45d5b9 [ 2035.948160][T11349] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2035.967784][T11349] RSP: 002b:00007f1dd0402c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2035.976194][T11349] RAX: ffffffffffffffda RBX: 0000000000020bc0 RCX: 000000000045d5b9 06:57:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758d5fff, 0x11, r2, 0x0) 06:57:45 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000300), 0x0) write(r0, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)=r2) 06:57:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aad6fff, 0x11, r2, 0x0) 06:57:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aad7fff, 0x11, r2, 0x0) [ 2035.984164][T11349] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffa000 [ 2035.992134][T11349] RBP: 00007f1dd0402ca0 R08: 0000000000000005 R09: 0000000000008000 [ 2036.000103][T11349] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000004 [ 2036.008678][T11349] R13: 00007fff296e5ebf R14: 00007f1dd04039c0 R15: 000000000118cf4c 06:57:45 executing program 3 (fault-call:3 fault-nth:5): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x100000, 0x10, 0x0, 0x1e}, 0x64) 06:57:45 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x5) write$9p(r0, &(0x7f0000000040)="3cdf0bb54ce3652de0d12a5e87d404ceb36f014e32b41806e458878e36d0116ed03fd012650a45e53724bad010350f83c49c024f6e80ca70dae0ebadde7e17fb84cf202a21c92df04d8768c27f743a1b296eee5174c8e0", 0x57) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @local, 0x4e23, 0x0, 'lc\x00', 0x20, 0x3, 0x55}, 0x2c) 06:57:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758d6fff, 0x11, r2, 0x0) 06:57:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aad8fff, 0x11, r2, 0x0) 06:57:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1c6aa2, 0x10, 0x0, 0x1e}, 0x64) 06:57:45 executing program 5: clone(0x19570400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioperm(0x6, 0x80, 0x0) keyctl$setperm(0x5, 0x0, 0x1000) 06:57:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758d7fff, 0x11, r2, 0x0) 06:57:45 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, 0x3, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x97e}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffe01}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}]}, 0x74}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7e) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048015}, 0x5) [ 2036.115203][T11396] x86/PAT: syz-executor.3:11396 map pfn RAM range req write-combining for [mem 0x15ee08000-0x15ee08fff], got write-back 06:57:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aad9fff, 0x11, r2, 0x0) 06:57:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758d8fff, 0x11, r2, 0x0) [ 2036.155679][T11396] FAULT_INJECTION: forcing a failure. [ 2036.155679][T11396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2036.187974][T11396] CPU: 1 PID: 11396 Comm: syz-executor.3 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2036.198152][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2036.208200][T11396] Call Trace: [ 2036.211493][T11396] dump_stack+0x14a/0x1ce [ 2036.215825][T11396] ? devkmsg_release+0x11c/0x11c [ 2036.220796][T11396] ? show_regs_print_info+0x12/0x12 [ 2036.230517][T11396] ? walk_system_ram_range+0x308/0x320 [ 2036.236019][T11396] should_fail+0x6fb/0x860 [ 2036.240452][T11396] ? setup_fault_attr+0x3d0/0x3d0 [ 2036.245921][T11396] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2036.251659][T11396] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2036.257208][T11396] ? track_pfn_remap+0x13c/0x980 [ 2036.262138][T11396] ? __kasan_kmalloc+0x189/0x1c0 [ 2036.267068][T11396] ? reserve_pfn_range+0xde0/0xde0 [ 2036.272274][T11396] ? __kasan_kmalloc+0x12c/0x1c0 [ 2036.277206][T11396] ? kmem_cache_alloc+0x1d5/0x260 [ 2036.282221][T11396] pte_alloc_one+0x1b/0xb0 [ 2036.286631][T11396] __pte_alloc+0x1d/0x1d0 [ 2036.291826][T11396] remap_pfn_range+0x846/0xa30 [ 2036.297465][T11396] ? vmf_insert_mixed_mkwrite+0x30/0x30 [ 2036.303019][T11396] ion_heap_map_user+0x227/0x340 [ 2036.307942][T11396] ion_dma_buf_mmap+0x133/0x180 [ 2036.312778][T11396] mmap_region+0x1426/0x1bb0 [ 2036.317355][T11396] ? find_vma+0x150/0x150 [ 2036.321841][T11396] ? security_mmap_addr+0x97/0xb0 [ 2036.326855][T11396] do_mmap+0x945/0x1060 [ 2036.331021][T11396] vm_mmap_pgoff+0x1cb/0x280 [ 2036.335600][T11396] ? account_locked_vm+0x1b0/0x1b0 [ 2036.340699][T11396] ? fget_many+0x20/0x20 [ 2036.344928][T11396] ? ksys_write+0x25d/0x2c0 [ 2036.349449][T11396] ? file_open_root+0x450/0x450 [ 2036.354298][T11396] ? __ia32_sys_read+0x80/0x80 [ 2036.359044][T11396] ksys_mmap_pgoff+0x168/0x1e0 [ 2036.363822][T11396] do_syscall_64+0xcb/0x150 [ 2036.368328][T11396] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2036.374224][T11396] RIP: 0033:0x45d5b9 [ 2036.378101][T11396] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2036.397703][T11396] RSP: 002b:00007f1dd0402c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 06:57:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x200000, 0x10, 0x0, 0x1e}, 0x64) [ 2036.406107][T11396] RAX: ffffffffffffffda RBX: 0000000000020bc0 RCX: 000000000045d5b9 [ 2036.414846][T11396] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffa000 [ 2036.422807][T11396] RBP: 00007f1dd0402ca0 R08: 0000000000000005 R09: 0000000000008000 [ 2036.430769][T11396] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 2036.439341][T11396] R13: 00007fff296e5ebf R14: 00007f1dd04039c0 R15: 000000000118cf4c 06:57:46 executing program 3 (fault-call:3 fault-nth:6): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:46 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xc8f60ca71629bcd1) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x210002, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/40) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aadafff, 0x11, r2, 0x0) 06:57:46 executing program 4: clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$CHAR_RAW_ZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x484, 0x80000001}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) 06:57:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758d9fff, 0x11, r2, 0x0) 06:57:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x400000, 0x10, 0x0, 0x1e}, 0x64) [ 2036.477592][T11396] ion_dma_buf_mmap: failure mapping buffer to userspace 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aadbfff, 0x11, r2, 0x0) 06:57:46 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000040)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x5, 0x3a31, 0x1, 0x25, 'syz1\x00', "4eabff7217cfc298039a79e58726c6f6abfb117000b3646183f279e6a53f53c1", "1eb386bd525f8410a2674f75a27cc4e8bb5a33a18160035d832ec3f659e3d876", [{0x5, 0x5, {0x3, 0x6}}, {0x4, 0x4, {0x2, 0x3}}, {0x1000, 0x4, {0x0, 0x2}}, {0x1f, 0x4, {0x1, 0x7090}}, {0x7, 0x0, {0x1, 0x8}}, {0x340f, 0x8000, {0x2}}, {0xff, 0x8, {0x1, 0x1f}}, {0xfff, 0x9, {0x1}}, {0x8, 0xfff, {0x2, 0x4}}, {0xf5, 0x3f, {0x1, 0x2}}, {0x9, 0x5, {0x1, 0x7f}}, {0x6, 0x4}, {0x2, 0x7, {0x3, 0x3}}, {0x2, 0x3, {0x3, 0x3}}, {0x1, 0x0, {0x2, 0x5}}, {0x3, 0x3, {0x2, 0xffffffe0}}, {0x3e8, 0xfff8, {0x0, 0x7}}, {0x40, 0x1, {0x0, 0x101}}, {0x5, 0x2}, {0x1000, 0x6, {0x2, 0xb9ca}}, {0xf800, 0x4, {0x0, 0x7fff}}, {0x1ff, 0x9a6b, {0x1, 0x7fff}}, {0x1, 0xfffe, {0x0, 0x4}}, {0x6, 0x3f, {0x0, 0x18c7}}, {0x7, 0x5, {0x0, 0xffff0000}}, {0x4, 0x401, {0x1, 0x4}}, {0x8, 0x3f, {0x0, 0xc55}}, {0x0, 0x2, {0x1, 0x9}}, {0x3, 0x6154, {0x0, 0x7}}, {0x0, 0x7ff, {0x0, 0x4}}, {0x3ff, 0x7fff, {0x2, 0x6d9}}, {0x400, 0xfff7, {0x3, 0x3}}, {0x810, 0x6, {0x2, 0xc28}}, {0x4, 0x39d, {0x2, 0x3}}, {0x3, 0x7, {0x2, 0x8}}, {0x200, 0x3, {0x0, 0x100}}, {0x9, 0x5, {0x3, 0xfffffff9}}, {0x96e1, 0x2, {0x1, 0x20}}, {0x9, 0x6, {0x0, 0x9}}, {0x71, 0x5c50, {0x2, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x1, 0xd7d}, 0x3f, 0x7f, 0x0, 0x3, 0x5, 'syz0\x00', "291b59c088b722e9d01f443039801caf44d780a6f4c92eed1f109935904d0da5", "855c8485c85069db00650b92f48f389a033540065c313fd21dbb81dc9f8afdc9", [{0x200, 0x1f31, {0x3, 0x200}}, {0x0, 0x0, {0x1, 0x80000001}}, {0x0, 0xc5, {0x0, 0x2620}}, {0x2, 0x8000, {0x0, 0xffffffff}}, {0x7ff, 0x7, {0x3, 0x9}}, {0x7ff, 0x81, {0x1, 0x2}}, {0x5, 0x4, {0x1, 0x7fffffff}}, {0x1, 0x101, {0x0, 0x85}}, {0x2, 0x1f, {0x3, 0x8}}, {0x200, 0x0, {0x2, 0x6ee3}}, {0x1, 0xd79, {0x0, 0xfff}}, {0x0, 0x3, {0x0, 0x20}}, {0x200, 0x4, {0x2, 0xc1a5}}, {0x400, 0x1, {0x1, 0x101}}, {0xfffe, 0x8, {0x1, 0x3}}, {0xfffb, 0x7cd0, {0x3, 0x3f}}, {0x1f, 0x6, {0x2, 0x10000}}, {0x8, 0x8, {0x1, 0x1}}, {0x4, 0x1ff, {0x2, 0x1ff}}, {0x4, 0x5, {0x2, 0x7}}, {0x9d1, 0x3ff, {0x1, 0x8001}}, {0x2, 0xfffc, {0x1, 0x7f}}, {0x5, 0x80, {0x2, 0x5}}, {0x1ff, 0xfffa, {0x1, 0x9}}, {0xffff, 0x4, {0x1, 0x9}}, {0x8, 0x0, {0x0, 0xaeb}}, {0x5, 0x9, {0x2, 0x8f}}, {0x3, 0x7f, {0x3, 0x7}}, {0x3, 0xd00, {0x3, 0x9}}, {0x8, 0xc1, {0x3, 0x5}}, {0x20, 0xffff, {0x3, 0x6}}, {0x9, 0x6}, {0x2, 0xf9, {0x0, 0x10001}}, {0x9, 0x5, {0x3, 0x5bf}}, {0x2, 0x179, {0x1, 0x101}}, {0x9, 0x9c5, {0x2, 0x8}}, {0x800, 0x2d18, {0x3}}, {0x0, 0x2b24, {0x1, 0x6}}, {0x4, 0x26c2, {0x2, 0x7}}, {0x4, 0x0, {0x1, 0x2c2}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x24000040}, 0x1) 06:57:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x600000, 0x10, 0x0, 0x1e}, 0x64) 06:57:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758dafff, 0x11, r2, 0x0) [ 2036.552988][T11447] x86/PAT: syz-executor.3:11447 map pfn RAM range req write-combining for [mem 0x17cd08000-0x17cd08fff], got write-back 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aadcfff, 0x11, r2, 0x0) [ 2036.593541][T11447] FAULT_INJECTION: forcing a failure. [ 2036.593541][T11447] name failslab, interval 1, probability 0, space 0, times 0 [ 2036.629312][T11447] CPU: 1 PID: 11447 Comm: syz-executor.3 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2036.639521][T11447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2036.649765][T11447] Call Trace: [ 2036.653064][T11447] dump_stack+0x14a/0x1ce [ 2036.657407][T11447] ? devkmsg_release+0x11c/0x11c [ 2036.662356][T11447] ? show_regs_print_info+0x12/0x12 [ 2036.667562][T11447] should_fail+0x6fb/0x860 [ 2036.671974][T11447] ? setup_fault_attr+0x3d0/0x3d0 [ 2036.677005][T11447] ? perf_event_mmap+0xe72/0x1a50 [ 2036.682016][T11447] should_failslab+0x5/0x20 [ 2036.687395][T11447] kmem_cache_alloc_trace+0x39/0x280 [ 2036.692669][T11447] perf_event_mmap+0xe72/0x1a50 [ 2036.697529][T11447] ? _raw_spin_trylock_bh+0x190/0x190 [ 2036.703241][T11447] ? pfn_modify_allowed+0x253/0x290 [ 2036.708429][T11447] ? perf_event_namespaces_output+0x510/0x510 [ 2036.714500][T11447] ? up_write+0xa1/0x190 [ 2036.718730][T11447] ? down_write+0xd8/0x150 [ 2036.723156][T11447] ? up_read+0x10/0x10 [ 2036.727211][T11447] ? vma_link+0x245/0x290 [ 2036.731526][T11447] mmap_region+0xa33/0x1bb0 [ 2036.736044][T11447] ? find_vma+0x150/0x150 [ 2036.740367][T11447] ? security_mmap_addr+0x97/0xb0 [ 2036.746085][T11447] do_mmap+0x945/0x1060 [ 2036.750253][T11447] vm_mmap_pgoff+0x1cb/0x280 [ 2036.754836][T11447] ? account_locked_vm+0x1b0/0x1b0 [ 2036.759936][T11447] ? fget_many+0x20/0x20 [ 2036.764171][T11447] ? ksys_write+0x25d/0x2c0 [ 2036.768678][T11447] ? file_open_root+0x450/0x450 [ 2036.773529][T11447] ? __ia32_sys_read+0x80/0x80 [ 2036.778278][T11447] ksys_mmap_pgoff+0x168/0x1e0 [ 2036.783041][T11447] do_syscall_64+0xcb/0x150 [ 2036.787529][T11447] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2036.793417][T11447] RIP: 0033:0x45d5b9 [ 2036.797301][T11447] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2036.816892][T11447] RSP: 002b:00007f1dd0402c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2036.825308][T11447] RAX: ffffffffffffffda RBX: 0000000000020bc0 RCX: 000000000045d5b9 [ 2036.833272][T11447] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffa000 06:57:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758dbfff, 0x11, r2, 0x0) [ 2036.841234][T11447] RBP: 00007f1dd0402ca0 R08: 0000000000000005 R09: 0000000000008000 [ 2036.849211][T11447] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000006 [ 2036.857185][T11447] R13: 00007fff296e5ebf R14: 00007f1dd04039c0 R15: 000000000118cf4c 06:57:46 executing program 3 (fault-call:3 fault-nth:7): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:46 executing program 5: clone(0xc001000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaddfff, 0x11, r2, 0x0) 06:57:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x800000, 0x10, 0x0, 0x1e}, 0x64) 06:57:46 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x2, 0x80000, 0xd84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f00000020c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002080)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x11ac, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x112c, 0x3, 0x0, 0x1, [{0x2a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x118, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "a2223adcaad05bf26d52e7566b143bcafaed23dc3f764519a4e697184acdbbc484582be33a9b0fdf61da8ca62ebcfafd9cf550bc3d116612178673398ef3e3f8f096de90737705cc92b7bfe03372a375c12fb5bf2bccae654546cbbe198b88ca81ad1999e4d9c4c8f5dff006aba967e14dbce85855c88787baa663d6c25503bc5e82c2f98cf29e25fd0350f1033fcfad80c2cd0c407df1c28faf187767369905b5961267d9adf76fd5b2077c75a3a79e2af96351f938a3c68de552abaec415d01c27df5df602b9013162877f0dd64676d8efc3c7dbae"}, @NFTA_DATA_VALUE={0x35, 0x1, "415b5e52d68401c54f5b877b86009324acf3942a855a9dc08f8d837bd229adbfde2832ddcac693eed48db8975deb05b569"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x80, 0x1, "be7cb5d20140885b1a33115208278df322faa156f38de56c39cc11ede48f34c13eca53c18b620700b777e2bec44d47f99edd299d1ff9502b6ab0a5d50262a9cba011b794d44e9e7e546831e13e9ccb99c2979507a98a3e9e70331a0886783ca34a15cbceca18352c93085d7574431f3ee5d4f4519d25f2c57bcf513f"}, @NFTA_DATA_VALUE={0xd2, 0x1, "1be90ab6f2120b2906ad51357a43c608dfedb5f2d96e1394911717901dcf2637795cd41789e031059b435cae5294d6f8686ba10eb387fd5a4d89c11ad402826f75f848c2296461515fcc8054e029099dc96df8567841e6122fdbf9ae32444c96c1d2a0a76fa5ead232d2c77a77e1d415332c798613bf1c60de510794135a92898d01889a114e286ddcd3699c2ea859c7cdbbd72d08b03a5f9fb6969303aaa8ac68b97a25208359d842f2fa44198098e0ed8e9e353263f225cac9152f6282c499ca4c7a5e7095450e973ded4c3064"}, @NFTA_DATA_VALUE={0x13, 0x1, "e9ad5db643bd886d59c6965e8de5c4"}]}]}, {0x368, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "5e3d8f3bf926bf1d56a7b5c3b3a703a911c8f2a02bc0161dfe26bcfbcdbf7b3483ef90b7db0008f6b4fcdee12413c4c7450bbb61f6ce3af5eedae6208c84ba3c55610a28052e09ec3460ed214257bb3677e18ca54a8d0a650028506e0738058860227021d436046748f6f787c834972dbff28e1b0773f78187a773481469bda13096aa29a71b35b951d550bd57ac05f7f45435e64d6cb3388349f072ac690d8fc7d8f699c9ae6d6ff8"}]}, @NFTA_SET_ELEM_KEY_END={0x2a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "a7f25c0d84545083216ee41f0ce246927f95a079b91b6e5284a92c9511d7c16e2a7d3036575284548b8d9d3063a47d2f549fd3f636a9585b69a607749ccc1796742b8e3c2322103e52347b4adae3559cc339bd90a7214c209960a2b0988b0f12a4779a808ec591b9ba76db2e435f9267a36a27b6c018a605a8dc32409af57552"}, @NFTA_DATA_VALUE={0x66, 0x1, "5651f03d57ea287aeec3d83f99619c4c1ac1f4a8a19e5ae881fca9b808cb494613a417f49cab4d898bc11f46161542a994a60b477fd507ade481d3535212ce44d5819f24537bcc9b53d4cd8822b6ad00cf992cb0a46381259fdfe8bf092829f12fa6"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb8, 0x1, "4e9f19d6da4a196be101b1c2e4c686c4f081fb25e517527afae0ba214e0ad2c88bb9cb3e5270f84eb858a5ffce0a107b52d198527ba55ed0556f6757dcfa5671ea8e79e9f8c5031e3aca1bf3c3e37c0a382f93f255c5ac7e72f68f87924d26bf4a00f69da3c653abe7aac278c112128def8fc3e4ba6007cdf8c90b0c4f10b01495dc6f2970f1cd7189ea76aa4e409cb8e007db6012dc9ec31a399de8dcf194eb883f312e714600bb1f5d0bad7739ed01e93b9468"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffeff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9f}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0xad0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x70, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6c, 0x1, "0664b388128aaac3981e2becbd90ad85350868180e18ff2b7962a875ec99c539b830c01d831c16aa5ca25ea3397330af7d7ca209dbc76db3291c5d996317e81b1f18ebc4c1eb01088f6749abfca46628fb5b71bf1fa6806114e0afb65fe79229bbe227ca52f92e99"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x3d0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "affcebce24167cd7ff6ca8fef2f74df3d970dff556379a6dcb45cca2e991c2afcab172f41896eefcbc7c1c3b4d47953b9e816a4f88f93a2deb3946c76931eb0fd458b9009db39ea8f67aed51569ac7487bb77b6fd43260438d96401d912f56e32ea5b757704bd39ccff5871c110c8603854de22f97f6"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "e46e6948973a4f8ce6c84d505d151b26b7cb1ab0135cbdde076281d7ef8094dd5c2281046c07250461aadb44ffe4a3b5c2e2eca00400614d7c57a1e9dac180bbce73f7b81fbeb7afbe0997a72d7b48461e569cc69fc364aad7198fe6daa428ab26520e66149d35a80fab65c44477b805566b48d192ebce7c2fd69b364fcd8f10cde0ef700efd5c13a540bbbacdafccebc1590028808f0aec130a963b369a13737b395919f20fadf89dc95dce59bafe678032247a73ff3a11396b5b5d7f4682898ff7bd4b91a70187ef32115b0b48522fb2437ecf6f5821c001fc5728b488992c55f061861200bce2463072f42c8c09b804fb2655"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x518, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "db6e531c9c9d867f18780afd70d1d18ca0c1f2704671910ad558215ef1aa0243a3d2b83781eeaf03a576c863be1ba96c6a27e901f823b435edd0b2a2c5c40778bedd119595353894e3292333743cd106492ee155d1181cf090de9a076168aa2723e702ddb62c95fb764edea02225bae37dda0fb8857122970ec34f7bd38df1df111876e7c11263820dd9c63e7ff68fe6075526350a26d1b8f26da63ee00741181c9e045182f9bd9610a4cc0eafea3229b5fe732392cc61ac1a14ae115626f72be10fac211455e904017574d9f6030707d2ff9faac7f86d7a4b00bba72ed4dc3049f1f58862c1be95ca1b8c93e07e524873650dd3bb0b64dc"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "44a3e4fc4d20b427a0b400af7bf5d1ee8f40bc65daf463090a154901a595bff9aad4553eecd08d88011baad5b0b134cc3e8fc1df14e1bd7a324339cfe85d9d7f7d4815b1bc7e2a74520763e6deada483a5412c85bf5fdbf31ad888b77542c063b48b88e4a6926a5d739becc90aedc194e06c861fbb09bb3f6676"}, @NFTA_DATA_VALUE={0xee, 0x1, "e5da81af767573e05efe846205e9fac3f975b07d5375040e9e257f161f4128722c4b37d3a8d42461d9fa40d510f7716e2f8e7fc8d611bf889f02addd039732f657f93d76061ab434af33efa965ccdb8c3d1a2f308d998337c6abadfac23cd576eca31e95a5514216637f621560c702ae6680d54e3654a4f800c05f8be6c189391a11ae7a4a562f46f5e71f94c04f62763e658bdcd8bc74d0c43d3b80c7f400cf5e601149059be6d3507ca654d7feb71eeb54d699e1be89c509f0cbae7b2679978a59382e493bcbbf7255f86fbdb8103f44424f8d6f998fbf09883ff7c908d1d8f7e21233ceed4131c532"}, @NFTA_DATA_VALUE={0xcc, 0x1, "c41c35af078e954813a031e84058cc61b606266a9c951874c4d8985091c88b11bd73cc61c08eec5ba271620670dfaf3942f0049685a89c3a18c5f738088ce86652348c50f047d875e3d3b7d6e6b4c37f1e1ac0a87dd485e31b6c645af81746444c7ef0685715c7d649041cf4abda40b583412237038c382dffbf192745c2f87da4c07f4ede9647ca79243ef8e07c54968ee5d31dc19c6178b30c243be81b3bec041281eabb33053ea54a525f611b7da5fbc17c82acb3c5323358698a285e51693b6129d0d6ff3ca9"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "9bf66018b448ec2732f74b460e349a0e074e879c1a5b227f95179664bd75e19974250af178e53b4b5a104ab7fda881ae2e470959d32488dfeb023e62055841b31462557a6e75c3f5609cb612a07c6c7ac8ef9cf1db1833e25ba44c11d09dc2c4a748a4eca4397bb13914eb59d4ef68968e022b1fce2d66ddcbf625d5ce6722dda69e392a33bf75ad089ad7537ed538686e3524c8dc94282303f821c4b9fa4eef51ea83240eada92e8124017a60ea27d31b1293e5418888047068b57194f4b82b3da8bbbf2af10a1c2feb8bdee0532bc6fed43d0d5af7ce221816a0294f11c569b6091839186c9b95d4c0ef0a13"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xcb, 0x1, "ec620b98c62639dc72b33de1095b21862f6bf008130caf632aa72f77171a829fb06c6539be6d8c4ca96094226fab0cc7a2fd224984ec5a388da244b1369261e80719c4c15790b4b9278a20c277a3b7ec42b8dd1a9009ffaa130fd611caadd8c4f225803022a0bf9eeb2feef4c926989637d4d7018ddfe0292fc9441e4942b39c4ab7ddc450d48859552c846ffb78dbf47c90e003b3d1089ee4b62a7eb464406ddfbbe33f195f5f11d5aae09dcb47b1b98e88a0936cf32bfce262f596545cea4af70798eebe7b79"}, @NFTA_DATA_VALUE={0x6d, 0x1, "e38fc56748f141be4c98fd0c352e37f64d73fc2f4ff47d259149982e6547cc70c7ff5f1fec5ec195edf53237f0b1ca1e5427ded73ab25d0057a6b6e9fbd44dc5b8f3432c8e16664a7f695841b3e305cf530fa1025788fc73aed9c0b23e014296fc87eb857852e96b13"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x50, 0x14, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0xc3ed3854f337864f, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0xb0, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @void}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x60, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70000000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x401b6ba13758e9aa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, @NFT_MSG_DELRULE={0x94, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "e6f1e3a4f5371ce85c6dde77893668a5edee914b8683ca34cc64"}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x3ce463a0905c4d9}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x6c0, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x6ac, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x4f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_USERDATA={0xa4, 0x6, 0x1, 0x0, "f52a0ecaf1c02cab3cf1a9841d86d0f32a498b4634b61a0861c5b8f3143f043abb8d73a1e066c0899188b993181a529a0ae80147ec2588d90f04b06c6ebe84d449e40b545d0d2fce4b902ae01cc7906f327754e98e856d5ba0fc536458fa67219c978e694f9f1437b0b16321015d6ed38f398d95bb18a46db804ea01107b1fa61acf8986ce01f3ddcd9b60bb594c78108c06fd95aa87696337ba37f84724958b"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x59}, @NFTA_SET_ELEM_KEY={0x31c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd5, 0x1, "230d8cf0a00c94a7df6c07295a5ccb77cedde418d67f616f41e7a531599438e3b051a3a9aca20eae2290f6370fdbe4116330280743d2e2b7b6c539c8b9d3b1c2eee13cd780ee1c0a89bdade8271d67007a823a9c2baef408e79316088eec08155a7ed114a37000cfa6755d7a11783de900c38960f88bae0c7c1ca47036cc0ea1e495b1701f3714b33e234b4d3f8c2e5ec019e3567636fa3345bd4d2369b7db7be70d048f4c93cff94847cd802c71b287694cb6fee926de65d99c1c1eb9c4444afbcf9790986e8bfcfd0cac9d0938e87764"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd2, 0x1, "965ef795990cda696293d63cc3d55e2e38849ccf2404b90c610c581f2ac220ea1b1c21897fb2e451e6892b37fc8b84a2d09fa9f419af87ff77ec8d2d2a88678890ebbdd7f1665353e5dddc4d42f0a6c128dbd9125290fd3f6d17790243a74882bd16bb5346a39f6527f84b331e84eb9f67564ed964587a37bb0f7f15af72bbf92e755faffcfc1c085dec56ec58e628134f3eadc0e00982e6ca3cafb2909d188abaaf9e95d8e10be2b136b90d9b739e6c7ad1205fea844ab592594a341f554b522b9e73ebc3c57d4c1d1f8ac35fe2"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xca, 0x1, "35191a5ee84416ac1d998910f30b3347fa11ed5791de9aa58cc70ead3255ecda48ee3c6baf443d490dc7f58792ac0442da97ff4456964918d8c3b645ba40c174efa8f82c57f65a6d0b38e73fe46adce1264099de464cdf106c3d03ae8f46eb243b967ab6f8eb4fcf8e2b12dc024b8b97a20048b2c2f370788f97d11c79ef8dbe5d6280a851520e7cf40e07627b80679b20cfcd8cc8ca22e0ccad116325ae77cc743d6917ed71a13b582aeddbdfdf16b141bb0157fffc5bb45869b3fe5d12ed6716364d9d4c55"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY={0xf8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "2094da717e88055695f8f5a476febba719d6d6fbf43a831538be06bd2121c9539ee5352d23b2f04c30e73e9a374bfdddb64420c524bbced938aa03c8a74b4e2777a780f529a1846e18c2397727c0087f694102192802e0b1d6c763c4b31b66df16fcfd2aaa4070f13c4df9927898d54b1009f50bafd3cd11956449afd0859b1e3d4563c023e08bdc89dccbfdbf55900b3ddfccce992955048f33df24be5e6e15391417f5bfca67ad0d12a9fdc9d6f62ab667f62cc916e29030da5719fd43ec77c71efcd50bfdb912065df5878da7c4ae51aabd3ef42a8b9270b3cacb76b0f695d43dc03a1be9b86bad610582b01fbd"}]}, @NFTA_SET_ELEM_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0x4e, 0x6, 0x1, 0x0, "b0286051d1fceb7b0576e22d2100db6d7260084b2c14f44bd81408a1de3b7a53c5cadd53ec8134e5b201ef8a99207e84765a6e9918edfe6e4cc0194712037ded386fb8726614f061dcec"}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x110, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "3678b7d1ca07686e99cd544aa7c2562bd55a476acbde6914f5b72e11d7ce3a7a0a2822fdbaa22920cd5098c29fdd6bae81be72571af1f7448fcb88335c00839a44a53742f46f3d8592147de0d6d01af675172912b4"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x23, 0x1, "e0cdb345bc28af3af8a9e2125cc380aa5ac3d3f7637fef8cccd8c6858e5b01"}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x188, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x148, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf4f}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14}}, 0x1c50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r3 = socket$netlink(0x10, 0x3, 0x14) sendmmsg(r2, &(0x7f0000007bc0)=[{{&(0x7f0000002100)=@rc={0x1f, @none, 0x50}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)="dee565636631b2d7243d9dc296684aab1e241132c92656254d03f119b33120c6562a6d6713d094eafbfaef733f1b941e708cdff63d1bec5be872f063968588fc15b53bc80dd5c55a7f8664febb6f8d809636f6da40d69717dc5dd2dd0b03a34d0d608b47b85086f0f8ace2a04e8767355ee30608c4a61f08e1a1fd1a15f71f1f82f6b9da1c18fd18340dba6199d7aa0d7811d16656d181df22cbe0f5ebcb82312ecf7b8531d64c3c972521f73b1a4ec1b8de2d6fa4bd10a781eac7804340e6c34147feb743ad503d", 0xc8}, {&(0x7f0000002280)="030b3481ff8602ba367c6b8b21ab3cbdd5de87563a70d3e71a773ddc308449b289919c2d81133ad838e8731d9ee47a3344a768ec8c685b7144b3132f2004196e32aec75860c0a1b4f14d7f985eeb6ff824ea39d6af3b3c6fb1bcd193393007dbb0c74ba2d16e7a43", 0x68}, {&(0x7f0000002300)="7bae7c173b40f1a13967e470fdb8be11fc83a2cb62c8c25b9ff26f696d2e787c85919a1d2a68b38afe6d4748020f9a3a195425c672530251b53636482367007ce8f7642b3ace0013544c124fb234a14f2d2c3b341a085ab121da7afceb", 0x5d}], 0x3, &(0x7f00000023c0)=[{0x30, 0x10d, 0x8, "eba19725f44e907615348a5f378360078ec3ed83df2014ed09"}, {0x88, 0x105, 0x176, "7188f7f9167e71bee007f6133a0eae2b12115818e2655d8d724a8eb54973bcc8e6c119140f7d3b215dbd531cd364db05f0da1bb19d09379d440abf39986ddc4e6cd305e9c123e5014bfbf553e87a18521e94fc13d07b9962a75044e256a6c5106f5d729d90f1071b7062c61d1deee9a9e4bb"}, {0x40, 0x111, 0x8000, "e3ad6c9570f177c68cfa795ec987f012952eed142733b39a45e7247dd7d4ccd35f2b53a9cf37dfc1d0fd351c91587b"}], 0xf8}}, {{&(0x7f00000024c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @loopback}, 0x4, 0x2}}, 0x80, &(0x7f0000004880)=[{&(0x7f0000002540)="ea48ffde7d5fd24aec50e17bd8fb8b656dd4e8119562dad06e68190aa5d465110d99eca25b8e67cd31c28a9bd6227e7a5329f4132c7690de63fdafed5627ab44471f127a7b3d089bea5b601ca0453da7098cfa09fb49be528b8dcfa2053a274288ff3da8d823855efce9eca83d2bedf5edbecc6a0564ccc48d43f30b2b2868904b576517dcaf1b", 0x87}, {&(0x7f0000002600)="fe19d21250311a9930726e795d56e036ad38942bc6d968057e7fef9d8a0f652097c23ca3004b510fa3361e2e7887e2b93bcca325c54ef22d956561619d47e41f8cc61a53f7893f19c85ccafaa7ac70580109", 0x52}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)="506179841bf7aa828de490877766b8c02d97948206036dfd2da1de5d6784525ee6853e9c1b867d881927b32d342757153b6001213569c8bbeb39521e413e702c907272e96d30dd87c241c6d14f82718394c7658e7fe83562f048f312", 0x5c}, {&(0x7f0000003700)="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", 0x1000}, {&(0x7f0000004700)="6ff853417b09f21a77447ac697d5b4b47e1cbe0ad3f8699661356e72e699aafef62883bd3eac21be41f45171c9af966d6413093dc436d3827b540b3f04131e44afdebcf322fdecb98d6e01f0028de7722e702936e4d46295d0713cb7b0b5590364234af14dc945b47f04f052f832559c4260cf53c8b0baf2ff3b0ea15a8531ae860a82863d48cca5d9cbb9c941912a46d4ab6a3d7d0f6ae5e8d1caa510b3bd3fdf7db97cd14925782a6a928a7ff87a079bc084c6e660eff0d36fbd70c9b8dfbaa16ed1001f84fbcf32c31d7db673cb27c974488f342f2d08ab2e4b0a49a6a6aa1f1d0897e1383430cf01a0af5ef2709b04", 0xf1}, {&(0x7f0000004800)="ab2b9f2491e9458f2ac72ff98b90d4d64b29fbf84e3b4f0b3dfbc25a1c03684202bdc23669b10b5fb3aa303cf6297a100a7c38f1700b7ad45fc4a61ec55b7044298e6b649fab2cf1c3fdffee07643b7f39781ce4281322179531cd0cc994e3fd4d8207fc7bf123031f31", 0x6a}], 0x7}}, {{&(0x7f0000004900)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x4, 0x3, 0x3, 0x1}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004980)="c1b86d2239c5ece165c4c1069c026279959ddb01e46b1091da6d0c72bf6c021c52f93502d36678535bf236186e0b9b6f3ad461396af031358168bd323a6b876d6551798243b1e189ce0ecbd14b566d7ff50208d4986f56ca9473291af15a10250d0fb8e9000ecb15f81fe7a6be0daa8e884680a8e6f7b4c714e40f7bf9a5ba01415e10985b61cc3261369f46b33395b6d2317ea968c45c12293af11b716657c540ae6486dae44782e9b5268d83cd3941804440b9a6e5938ca56fcdf05122fb57a514f257d214b058eefbbba8233c051dd65e07409c7f41f6b8bad9d3e52484056aa79731bda499f4f3e108d6b0dd52bfa3edd164fb79f808e7b55ad62f28", 0xfe}, {&(0x7f0000004a80)="3a9547bf9a45dc8d02e1238e835bc2f2e3b559dcc734eed16852a878ca738bb07a723e97b4dc4d488a23667624904d0e9fc27ab6536b69a653248bb5b16c6ac203851c2b6a2b3fd6dbeeeee1c0750af4a39a", 0x52}, {&(0x7f0000004b00)="7c9a520f9ff6181f02d8bd721173b98040216fa527e65ad1d8c9a2df", 0x1c}, {&(0x7f0000004b40)="2b795da0781761ae59cd2e556fa77098ba667237dd9def359a138b0160e20c688e24eab017a96a6d7da7dd450761abb213f3a71c72e097c590835f5d22e699b7aae6e73247a8972888adbdab2b70dfde38cfd81ccf36fdeadcb3cf2df13eed4f20", 0x61}], 0x4}}, {{&(0x7f0000004c00)=@pppoe={0x18, 0x0, {0x2, @dev={[], 0x14}, 'wg0\x00'}}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004c80)="24d0232db014c853a5aef47639c203cd7b3dc99b2524f9aab259c5368c900c8cb2b22ce7ad68f42334af2f57173ebf4065bd5658b857f1f09af810bf2a462b78a1b5a21d35d7bc743c0b90b20b3f7351dcfa7d6dc85814e715e8cd38c6e2c93640a40dfdb8290edb25c16ae6bf37c261c5d30b14", 0x74}, {&(0x7f0000004d00)="14163bf87a9898769873f6dec9111b8f7c17e6525dee2bc2d8e12c44da7fd450d691856d49c80803b7a81260c9efe8daf410d85abd0878dd7be326be4917f3f87be8f4c1dbfc9cdf4edbf91a08de881b458cd2f2d6b6916e150be7a782bfdf", 0x5f}, {&(0x7f0000004d80)="66a4d31736042cd456d79200e4bd2c4b30a2a4ddf42d3e89994f1c53b1350371aab198f5139fdd81838fd31859884787d66f67a28eac79fbfeb56ab099c9efe0297c2eb7ba07438722235c28cb93c79b047cc08e32a5fee384c7dc3f9b64afcc58ec3574ed9cc680023c984f7112cbc47f1c94c494eec3a95f5a3b1128b9c54aede8e372af2c45b6d8747576af0d6ebd451022c5191c5f7dff3f53da462cf0ffb345c5a8b11a78bba29a4003cf4bb2bc8e066b054812e8d60baabb165aa6b2e38e0be2aafdca8553987fb043252775624636d9b48b0b89d3d47c8b09c6c3c8e3f298d0c7fc1b77c10b423be46a02", 0xee}], 0x3, &(0x7f0000004ec0)=[{0x40, 0x11, 0xfffffffd, "4e2d422ce7a4caa05970c6f36d1220e060571e7b9cbf72026ca5ac9c6c103e0437c15b1c81cab530df54"}, {0x88, 0x10c, 0xfffffff8, "3b1a01893497837b35cc68de4d66f3c6ffb09213b3a99b51e2e1728709b12aeb63e67723655bf234459bcac586e02f8fbb23e3ec33a518dca3c75b2dcf982ca3d4c6b791f7086de5a5dd77d4d45c6a93da081293cc8c0a50d97c5e743e6422a6767ca8827f739a9a705ac0c8827c9db3d1a6ce12aae6"}], 0xc8}}, {{&(0x7f0000004fc0)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005040)="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", 0xfb}, {&(0x7f0000005140)="d9862588217d35ba8c64804aa02f728373aa4ac5a9c08465c76213c5a0f36a13f7b439094c9819d1a757b3c54d630480f5467bf815c6ca836e524417d7dd3f4a6d34ac7be208a29dcf14810922031984e60d23", 0x53}, {&(0x7f00000051c0)="3ba7d9d680f66f12298e925b75e61d6cadd33460ef90c0e984e973e88cb71ca5982fdbc19a13868ef7233a8840c7eaa710c5cc4606cf49861c43794320aa6996f1b2e8f36fdf06464b8a75ff67c439d8a740df9bc475f4fc082a8cdb16c9d276776d979ede35069c2c26dd38fc92984d8e68c51d5b9d78ce449fa5af56fc92f114182d38dfc959443b7cd3a3455794d6cab2b33703fea9d267b7bbe4881f858c5066391a587fc224dd69259810e100f8fd7ca473d2c6f23dbdbef9f162c94f7cab0552b807541058c0698ce18fefa2219559c132f5edcdb38737a002051385ab0c5735c9fd2942f6e584f48fe1eb52d68e4dff0b0516", 0xf6}], 0x3}}, {{&(0x7f0000005300)=@nfc={0x27, 0x1, 0x2}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005380)="19d14ea109f50a88b0b723b0a2b672ee48b5012a21144b820dde686a55efbbf0e4c45a03c8aed87c17d4d2bdd8f56f3e586ad3315e9e244d912d2bd2ea63ba61632982695c2d95509931892debe90277218f7e012684729127a746ef40721ed04600bb1b5f531f19e459555a295dde5edbbf6b8004a7984b6af8b0044cdbe416547c44c544d4522f34544f40dfb949afdcd2ed119bd6d0bc3813654c22ec245fe01a55647c", 0xa5}, {&(0x7f0000005440)="480f7cf2d761806e0353e6f364a7629790c0a0baf80ef2bb747089828b6ee0f84a075894e134ada9fddc086ed995c02a3541d2c5d06ddca51fdce233fdc552a5aae346c08b608ff40f23489ad3900adb5fe747fac97056e212f71afe34362976b8196d26add5caff4fd955b3686b08cf29a42137a757f07b3ae1ce", 0x7b}, {&(0x7f00000054c0)="c711d070e3e85f9c6bb406aa8fde721af3ef54f5141c2a0da1ea20600c7100731f2d6f9547afb9f787cbca5a642a4332ad8bbfab5b18bf475fe9948e3d513687730251112c306328fed6edec99ebf620ed32a073507895b29da54983cf304c4bad6895f015f37e90fb8f80eb6ef6ae384331357b9fdab5df", 0x78}, {&(0x7f0000005540)="b47a2df1369b46b1341c8fd9fe03ee325792c2fc1a223782e43ba3cf0f5e130750e14fb9820300105f04405fa864ef4e6685a2afc34daa528f42d467847a053dd4a7ba221198bfd408a98980b5f5fb2bac2d496d171dd168cfc0b0e6237070f50820c53f4763d1ce9ca406f4bbd320328fa32050ec3e7d8711dad6b28e65b9a2706eae759a61f69ddd2b59d7a95c0401e5ed26079b76f153c65667dcef7d5607dc39dcde7d200aadfbe5fe4d84fe1bcf6508de192d8b0a2912cf732ff39da09c18fb6e204ebb5e43e35cfdcf3235a89e95b95e66810981e1ba7b81201e19e29b48f0619ace9d0507", 0xe8}, {&(0x7f0000005640)="6e04f0f60f1cb42ece71993f96c0c2ff5739f25fb80354ca244488dd63bea98bc4b856429d66b6a0", 0x28}, {&(0x7f0000005680)="c3eef8245d02f8cf49eeee72f1151c340690d73f6501ae6e3ad372d1e5f652cd6df9c064511b44beb96b922bc97602f282fea2cf228eb13456d72ae54291f3ced0d23955cb76a515d6168010a98c6f9366e1e5c19811679273c4dcfb856ca2dff4926e579c14e6764790bb112e8f31e58884e0a5bb0b5f376396abdf484336c596386fa2fbc6b44f7ce1e319eaeb594120d59a87e2c76ce38d7a4f770d6de8597ff1f5f6ae6ea4671113ea633d1443a3442396387c49f9f3ec7af2cc63da291de402641a0355bf", 0xc7}, {&(0x7f0000005780)="6d688bd72d92d9f2c4a3db1e8bd3208d2a26627c8ebef2fa1b8e5a350fef11561b8eb5a1ee9e08d4de707bf7df04bcb91d2e98fcd1cf4889bed769d323a1ebd0dab8ed27266619d41a29878600cebc3687da6812024ed47ae150d4179f53b7bda2a31e31a4ba625d0fb4e2e217d33fa4da89da02b93328fe9e7d8501aec01c0b5258d7782d397f05ef", 0x89}], 0x7}}, {{0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f00000058c0)="a8430dc4afa6154b1d8990a7707b9ac4a52bb5076fa2ef5397aeb74479d6c4ad165ec0f2dddc3717c7b50d4085", 0x2d}, {&(0x7f0000005900)="3d660159dcf5999ee1f923b0bcb07b280e2d8602092ba9ef954a6d0638ddd8959b14b654d1ba271c95fbea6941c59aa0b70bb42952c02b55fd6ceb0aafb3965ce8a042fe3b1fbbc12dbef2adb2c4af5677946f264e1fe6a0492b80ca9ce2dafdc60704e09c986bede019dcdf342bbf765ffaa7e22df8c71ba451a06f947fa0d5b48b4ee6b72f122ce5bca69b09cc408189391e6f31a747d3509c49a69fe3690527e97437b0075646aa0abfd8079563d472d0718fcae35023200f0c1bd4778b42f9a4ae1e8b9796e7a72a413d58f05d82c2f20a3b40f028782a4ccc2799c38236a09a5929f8b637ed8a828a3f15aa4e0c958b2107d4dc9cb0b7e8cafb03324257d9e0d4c2e560dad9e6e943bf74db3c9f1d80f7f528acc8d3f3ad70c8c693c7fc39b7b9f596700d8fb02d5cd599aca1b59120815833c54c9573310fd1e0895556b1e59ae50edb450bfbb9784b411249413b31e479c4d1582b642984a7fd2fa5926f6280c9676ef480272bf2ecad295d2974d374ed391c8960e48f888147453eaada9c0eeb86711c5e54209b996381fa93a2186578049c317747e91266497955ade915114c020a9a0b762bbbd579c070942b896503f6a20271d50540cec819eb7f622872602ed3b82e949b06eb209131a97092a17feed32055be10fd65de44c1383baf1a31a159c542a1b2d2ccf555fa0a1009ac5b78cc30193e5e992a92cd68f0b0b4bcc5c2373aab659acbe2cf42d71ce1b4e28ef60d5e79566bebf27f90e78ff8f4f9252fa8b2b89d2277e95c0dc1703f467c699cabbb2b1941d5cc50337047e04628f0fb2218e3442a7689a7a5376cb472d778c246f20dc009f9fdb0b64a87a73d8bc16e5e6f392587da41577957b3bff56589f5115e8acb95312aca86bef83e2b2845a760381e5ccef8c946e2e6f5b58ec661abb1c719cb3f2a4a4cf9dde234e417a098c05e5f353996c42af8cfcd41593b5f6be8abe337f6f557b753be379b306a029b6190e28bb1e574fa87904b790a0b9f58f6ee5c80340b9b6bc166e634bf7859af00ff051265ac06311ec54b72591e4bd8e92c15dfeb5972b05f5b21f485405d63ce13db23fd37a1bff6a1dac1214386a9135b5aba71b5a05a5b85d1c08fd26d258df405a398a943e2dc13a981033039155720dd04694910addf44610a9870741fd39945ada481eb779e4006d2014efdcd97d3d0cc0e267abbeafd114c8935bdd89c1fd9f603c86dd9ed5667079f32b36e373163e7954fa0d51e75916b79eafbf903a10fb8276acbd66c3c4f19bf835b0bf3f6ac506c9fd9539c3898db5074d53cf1bcc2d2438b6c5d963b1914185ddc72f0ecc288bae094f3cf8b3f30c223a3ce6069d30e29e3a381147d330b101da41f24c2747113322cba39326ae887f591107454437d1ccd6e1c655408ff9a377df5e17847ee24ccf68087ccaf6083a6205673f5a3409ac0d23220f387ab598836ff6640e9e063ccffbbab750403348171596242eff6c15dd6318b04f663620fc04145e3b216a1fd8788a4154e599c34d192da99c28fd6363e66a7ea546ab7f4e8414fecd7a347ce13b8df8ff0ba8ec710340743386a97f1f6bd9306dfc52e172bca36167545e2f547fdc07c4e5c01c4615b20efcf855f7eacae968eb4d8e7e386a7b42eba518ef4bbfe47b31c9641b07f7e23d73ad7c7f5477e8a08ed0ab3c8361b2ffe7dcbcb403b23a71de2579fdacc3ae22a114963fc380d4b834b35954b19b52deb35684054ae2a400cbc5e3456c50457431f436add790ea12ee7f9aee9a143d88e1f83a8671a67fa4888ed173bcf3e5440ae8085e9f6ef50550e099be3120901562c9a36f27726f1588fb7155c23989048cc9ac5d8c6874bf6ee0e0ed3da6748bfc223015dc997987239b6dcbbbec1414af518c2a72fa64def87a877e70dbbbff079ade849e69ec2c8dedaab1458b7552a10d5dbe98d0a5aba5111fd1571248f61fea920384b514264c76e989c3cb8bf3cb90dee25d824106afe518c3adab97bfef338ce702c8cf2f7994d485c025a40fadc5ed2796c593e4d861ee53e7d1751f4a349fe41b1317b9b54763f70a1d33b08f58094391928790e25828a5248036c4511a69903d15783dceec52090451d573da45dd30b2b1a668f267ce28f61b9fb04938be343301547390a386d842593009b61620e14c4b0a3145da14bf3adc02a16c968611adcc67a8f85d02d3fb27273d465567dd9738ca424649fd5b97b485b05badfcdf293ffb9b6df76049fe44ebb8c3cdff16f792feba171d4ed5ab19f3a883919e4b927b772fd4f0b4e983e80b06331136dbb7c079249743862e114bef83e0b73a1daa5387f5ebd85936f6ed4667f57bf07f669d75639c8297e58de819b72525a0b75ad7d3a5fc39a855ecdb5523d8dca6e0dd6d37647625042319d5247189e232ce6324ce92e0814e6f673845a895e3b3bf4ff44385a61838d6a3bd7e9b04dd776db36daa4c86b2746ecae69f23bca712545b167e638b5d6a8a737fa4b118e32518e0a72ce8226672c610e859035db5a802ac2bb1d3543be01a39f54917d672da34a386bce856bfc7b172e8fea3b602c659a28284ac6c41a1b47f5df5ea83da6aa2c04b399608298f69abed38b7a4824bd4600342ea1af8e5fa5e3bcdddb0fe5460bd77478748f890fbd9805e0e809be02dba8770c8007ebef60a240d6ddfd6705e5e26d5f210089958679a407c4d9d04b6762f12f6d6dcc586dd6b69429a3581cd18e024a8fefa4e53c1a20cc918a15023a1cfb6cc1073b8293198da5cbeb761355ac989c55210d649ae8f27d57ed790dbaf08c063a400629571a03e558337f73874542a9ffc9f920ca23fa13a3be3cfd4fff4744a21af76121a52967e67499e151d2a45f7f85fd32ab0178f4277060abbee848c054a10ba5a9786079347fd99c315c3e5672ab822ea277da5d87fefb66bc72b27af408f64fc31b9ad4fce2f93036f1ab05388ce4ab61644c1c020510b2d5476a43bfdc65285753b9d71e052b68ed5b486d38da1d128538e3583e3d1efa0abc7a88d515da7cbd7dc21caa516bd9dfa123079150342ba1d315153c337b4178728691c4c1d64310ced5a9c1a4a6c3df671ca70ee4716c3dbc9242d00894c8960079a3bc64ddfe97dc54a906ab6ece2af18ef9bccd56d3c013c9f0d6df5832905c3ee2108e84ef7859e13088ca8e53b2f36febc4bfd475982c80823d183b76dd5f9b7b72294852ff4cbf6c66fdcab1abcc39a7073c9f552ed6f867f5b1e3a6b72549ebc2d0c82ecffd4890924b9d47dd0ad177c8698701192ed3ead86fbace9b769499b8f539ed6a7a608bab5f75d79d96167ae61b4fe2fd2c0ed69f6d073fe29ed8e3ba0f348be35baf5eab34579fbc4816ed692709c636dce4efb37986562aa8797db1f6dbc0b2d9ca61bf6be06832768a00f4d190f2aa4c68fd7cd7b6050107ebe9ccac6c7c208131bd52e2dea7452c0be7145cb77002e35a4ff2e561edc31395be579d43174ffa996d52b54ea09f0a79ee3245739a969dbd3db3c4ad4976a2fe0f01a7bdb67500eaa6ed3ee43e15fdbc5fe29a230a691d60a50a5916f6b6a322dd589118414b4fc0a92596340c04dfa92b6b160f856d1f1850f67b0005cea738fbaf42bf336fbc7cc4526bc5385250c19e0dcf356317c27ba07d0b5857376a100bb7ce93df1b1c142b1e58e34213de209463b2160310648e034ae75cc4d7e5dbb994dd7d70872693f54a384e591186fd5869b741df8d5b50d7cf0ce0158705086a8e75cdb33f9756186f8d16b7b269ffeb2934257e388d37525fbbd29ddae5f17f08ea21540d452165e07507edf7ad0d2475b057cde06d9e33c36394b3eeb06fcbc479840fc4bcbb79541d4e4e490c81ce9874afc8503352d8ab70b0595c1a934e030dc1301859b9688e1e9e8deb9aa98f5f36d35f898b1526da697f5db09b8f8021b8de33d93ec7214ab11cf55dd34b31c1cafd56fede9291b1ba5ecb0d7e83658f4815a662c2c91ffb654a2af75ca1f5c905167f4639ac52a3ab9e55959132d22d91beaebcf9f3036b0c5f0b4ba756d5cb8b442c0b9c9f514359cec0a1af5992bdab05154fd0d1f40114980890118ce2f63433ab467f8e88a62ddf067e5a72bf2831e611ddd6ebe2226c53be1f597cd1d41576e6e112812f882a5bb22e4702b8e0622190f89819e2b1d4926f34f160d79a58cc1e801b1bc1d2e7b5e98bcf90c734aa3c3a2990cb4a671b0351fc049dd8f2cd3fbbeba8ac6ff2da7479f7c28932c5733561a21a9412448cd9e2d0e71b872094ff6c7d8057363f45239f95d783753bccb2f3e1bb486809b810c589bc83a3dcd829e017348db907ab9ee009f391a2ce05e24d50984be446005afed6866cb6ab03e2ac431fff7ce4a9afc1ccf56ba29c87bb8c8031df9a9187e9b35351f0156c509c28cb1c9efd5d810216af6d85ae66e3cd907bcb45c5e77866d2a04adbc4a9cc3072356820c870021967afc90c3c25b568a268c244e1f46b66325740f97f8f5d95fed4587669ee7bc48b28306434a068f49202f53e9f876b6c6f904fdb656af66632f4879c63c90d9969540fabf5b517c85445141066fa2140c7708928fa7f758aca9679679a5647308b56046f2c4ebf807f5242c11bfd099227e2f7aeb366ebf26defd96cf4cd1629b4c7c166237141e80cb19fe537ac47321b4ca2fbf926939a92607fee0ccb9e6cff75f887471c61e7ee9dd3ade2d755fae8ec8ac229167ecd3280a370f655f75ab61869d46fc36c34fb05fc888e9a82379a5b7684cbd86fe645179558ba0310e5994fe2d112ce4a847666923ee8ae7a7760e9fa9f46796439cc6e0d5cf77f4543735024b06b0dbf729234fe871b2dba2c10c350bed6413b35aedb1415e78c93c1fbc38a1226114e0c51f7c75ce1754e860f337e062fc0e494002ea24782f9552c0d1fe9e199116f0cb602c67c9e7862162a7ae1f2a129e8c30fd4d39db794d928bf22e249502c658768a0825c8a07aa0550e4d2d54442c5a56291d471494558bbc16ee5af8f15887beb0508bb1ec95f855ea52799007b3e5f6828cc61b81e6131beebdd6930a463cec4222cca5627ceef680412d17a155c1cd39649429fbd4bcef1ab76bd889d4be0704d14b5b4822fd92b9d33f0f503c2d9b27c5c32c7d3be21cc71deecc0988b63c70060fe617213d56e56d285aeebf82b9baaf44c45944d5b81547a9d6e4c5cb18a64b9f2a3f8da441af9bdda5b6ef06bb6b2347a6bc5dd7bf9052ff35b5dfdc7b5e0bbaea66f7547144cb4a07e77ad76d76e96c5ba637864357db82d6c138d740fcb74672efa5f28cc58faae8b6541e1411f238eeca091c9c5f3871d1757918b2bd218b49223fa0c80ff1b61d9aec1645bc017eb4b05cb362e80480675ac3757a857d074f9b4b2c84b104a4b19867cba7072a26b852c62c8da6e511c4e184492a57d39325bda5f28a24813d7e8a52f2d643d8ac6209e5859456d733f1f3996db6f1658653fa94f73b1e9592924738fb9cf4aba0983caace3a1ed04576237ecce8a526194de0f06d96e6f6dd81354321dc447ef6cc9ffde134a67dd1aa10fd2e6c86f57d6239b8e36480b16a4b3ec1a8e312dd4b0489a53905c83ce2d9dc8a3eb71b33ac215eefc77d66f8afbcccb4442de4b3875b1b7540f96f61ec66fc9fb24dd6aac7f7434dbd84d301dffa7d14d59e31d276be6743ed379f00866bb4ad8d3163fa73fbca6cda28d16b25d5f528c40673fe8ff4125e4f5cf0b11427227ba125b231df9619a8cdb69ad8678c75a40", 0x1000}, {&(0x7f0000006900)="9f526d4ee0bfe735f2e35c899232bd36ee40e3e7428c43bc60f34637db5367791af0c735021f4a849164044e2d97cee79a14cecba3a83e1742b881e4dff86d4388a1ab986410e19698e8", 0x4a}, {&(0x7f0000006980)="7abed706d8d2e2500a89c98604d3a09654f757b31ab34041c5c54bd89d7d7622f640f011459498ef47175d38572ffd2ca67d12b1f7936f6980e2bec99e41ffcc8adb46e3893277737e2e9074c3315fa25567cde60295d310c8e9b55b4b94572f0c433e499ae8c58dc365697ccdb167f497cfd1b6f113c2905c2cc8cd8c4b0382d7be9c10ca64c0b858cc36cb64d4abb58f864aba13049a22c6a8bd0a0ebb5c1a422123ee8f6eb76cf94284ab90ba209e9280f1e9d75cd9fec25922dbf38c55cf5002fab2cd4dcd77ad17e2e47d499d6bd352e0c5dae175b00880cada774ad8c307267f2eac14c141831f66e66b13c5", 0xef}, {&(0x7f0000006a80)="e5d3e61a9a01d229871eb864b83c87503db781565d60b0212be1b26fbc675fed61428b0434ab2a79dae6d51d17333cd1318a0ef41268e30dd823c143aca48734cbb732e3ecf234b48b9c5891c5d99bbcd577f1a0e2e21a69", 0x58}, {&(0x7f0000006b00)="12d1b89bd4964f6654df5b156b32e8d6fb1d2e2ca7c962c5119cad7e37578e6e9fc675f35432ab139ac7d8d82a43831ddd844dbd0626a7da8ca1f8d868426c81786591b305934d5965b75115dc9b63682d78972642c00ccf010011f93533b8d6da009ff88d5998a046c3c603f0614a1a5ab5457bfd2c705e0c38b24cf2772182c4d9afb26e2a6599428ca0f09e2048a0c722718113f91f8281ae183e1f332839cad7192a470e7f6fd1f8b7118e30a95993cdd80dad76de3480a6756a7fb0ffe612a5efc2d2ef9025d0371c47e6130e3d3b01ef2496dba1267246c1eee7d9cd2d0cf96b9ab5eb215144f732b367", 0xed}], 0x6, &(0x7f0000006c80)=[{0x98, 0x113, 0x3, "95304cf7431e3d70be46df4477228905f3c4b101242799014b7773db6e2149a4eae4def137bb77917126845ae31505526172ca10f50be5c2bdb6e3667840ab890ff035629bb31b0a2bcacfb81e3a4af622da9632e1ad8145f06df9e91c80d0d93580a6505f94c8cfcdfef428c2a2a311c9fbae917e4d2e090de237d7f48165d4862c6c6c2ffc81"}, {0xf0, 0x118, 0xfffffffe, "15c0036d8647b16d4e7ef4ca59fae56d2769841d4c7db1f7ccce0c231ca474c0fb2941e496e4193a4d359dee263ef2fa9539c1637a316058ff964e3b0d7f68cf8c5aa48c3be1f6f2bc85bdddf247e43429ca9058dba6d541055cb6829c234f42b8c1511806cf00921ae3983613867a51194d0a4fedc2fa9d5841b5f91ffe5abeb76bafa8d679f80e8496c6cd7feab514f092b393e4016139d8b6667356f5cf63bec5c754d3abce43570f69d7286e366e4beed239b88949f2819a985b2c9ebdc37bd2bb2c79f5a5e7a046a9be1d2d118b167f1ff37e3ae1c503494f705f2b"}, {0x68, 0x113, 0x200, "edd33e508f01533cff1e13a3fc6115e3ea8e493eacb06fef8a0c81cf0c533bf48eab261974fe2181427cd318fab7009cd75981ab10c1088ad2b195e3a4f4b7d89d0d242e9daaf4b4001be435dda794e6d6e4b1ed41e25b"}, {0x108, 0x116, 0x2, "5a73bfcb5b46aedd6966ea93641c221eff6992388354726b587a4c28e93a24de3831b4616e75e1fb1cf020fa48a19952692eca970882c2a79d1dc5d0a7133676369f9569d96eb751c24dc63ccbfe14bb96049b329b28fecfef95d326f7147adcd9b917e3b63d8cf2d44d3f46832f7960aecf5a219d0d8715e2abfcfcb8c1601f96e3c1cf0ababef0f89c373c852c176833c411f1c28d3ba7b9f4cab254a0726a99154910cd92ea499eec231d80cfab6cf326a0c35a124948e4e1d159e0c78e239618582ee2130ba3a516ac99db0c592fd9a148f40b30032fc3c1c385f4a01c1ca832b72bb612671f9a8062e2991c7a7b411eee2a"}, {0x90, 0x110, 0x1, "88673bb93819ad4e8bddd66a65d3fa11a4f415f7099ee01c491c63b01757e2e310ec78fa4eff5fedd98fb7d62b44f4b74648fbdca6755d98b6c59101095a477d3f8779a820c42d42442521cf7e1ed03e617183b50864f63412448ca444b8f850bbf2aedde9d05c66b856ab956a142b54cbfd79fd09599c788ea5f8a34ed1"}, {0xe8, 0x110, 0xfff, "03a5a59a54fa775a3f943d8087756a67c7719546c01bf2e4e81e7926e15441cf8bba55048a0a07e5c18ee4adcf925a3f1d4aba67748f398394615c0e0e48e483006e2bc3da7a60e94f34d51baab5ce371c9bbc943a22b6184d06b2d40b8a50f6aefea389893ef08d7bd42158de4539c2d1917cd7aaf00a4dba92aef07d893c9215d121532ef86817b17a65e8899dd8975ea576b90fefa04f1a2e6c07c0625ec5ef7babce587fbb6a6e230b1007eabf8b249b7b1ffccd55546d297a516a1198d2aac6deb1ef2d53233966e903200d975f3ee07ddba44032"}], 0x470}}, {{&(0x7f0000007100)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f00000073c0)=[{&(0x7f0000007180)="032e2e5f77cf7d73ab95189e9673f9b931de3ecb522efe92b5f4c8754dad8a70aefad4fe17ef3fc72db48dae6045d5d788e9", 0x32}, {&(0x7f00000071c0)="4ee02431655ee04d1805e7e19fd8729bea5b842e8d", 0x15}, {&(0x7f0000007200)="96edf0e752ef83fa1c965ec72efd6ae3843b9af6cd1103e0d669a6c7d453d741c1518beadc5ef87562473109eb79b0f82afca889a3c5e4eeeac98fd8aef5", 0x3e}, {&(0x7f0000007240)="555dfe745a550802c7d12173e62b011abc1bfe2f09a848fc94407eae0a3f52c5681f79f162237738c3912287b3019f6f759b639d254fc1226f0a5a0b877e153c764896735c53c68ddd12c7f79bdff32f78958fdd71809651acea6ecaa4b477ed483448b3efe16280f4c1752cc1cf1b8be508e6b6aa40755afd5e89e8fc3cb10b95992de0d5a4bc10864305ac9f73e514b28133d9ff03f8957224b38572e6458b0ffcf4630339f4", 0xa7}, {&(0x7f0000007300)="54d1f945a6b001c78666d353ac7c0737cfc6cf720ca1e40261dea8320f1479007dd2db2ff0a55e9c641b9b9bbee5346d616cd398bfdefc96da8b0a928b5641d06d39699a975db33673085684dac9a316bcc4407d3b0331e26a188872b4804408ac22695c238ce1d8f160d1696350e74ad28f9ea9057c7aa66b33052553fdcbcb5c196a", 0x83}], 0x5, &(0x7f0000007440)=[{0xd0, 0x117, 0x6, "7d2e075b32dbeb885f280547c40328214cd14fc96f279818ef0deb988f4609435a093429434814405ec3678d984f761ff7a2c5debab1f1d790279a4650760ac1ba485f1a888225631c397f61ea06575b260ecea858edcc8b50631368d6ba99c30224062dd26294024e8b86becbe237e567e4995e7e2dcb09a119c21fbc23c67c41787b4e1808c78423c15cd4e8318f3e20028d882496967071a2ea5f907aa2e7eec9bd78ea6229e221454a4eaa90ae892181ca1d6e85fae7c9df6c353c20f6"}], 0xd0}}, {{&(0x7f0000007540)=@xdp={0x2c, 0x1, 0x0, 0x3d}, 0x80, &(0x7f00000077c0)=[{&(0x7f00000075c0)="e0e3cb85faaeaf78d0fa822e411771737d37e5fbbca392a0aff0ac60cbff665ecb781999763492a4b8d0", 0x2a}, {&(0x7f0000007600)="86e9a6dc1dad68f79633e1d09a86077e6345385d7e2a4f9921eae30ec41a09ca0797be4fb28b569e74a7f2535493232c86078ab29a972f6556004164f377009c35aaed9c5a83ddb76975940aa37859afc7f75d62aa21b3ece16f5089ab7e80dba8f8b32b195a53d0f09b9c0649793bd3bb067fd11948e7d85ad4aaef9a252dfeca0672cd06f19c", 0x87}, {&(0x7f00000076c0)="000504362f56f502c90634fa3088d08dd1350a5586546b926a7aa6e0843ce12c6fd41027ac5546420e93e77e6e834d713f7e3f8d7ae034bba3f44a05e8daf2bd9b4c8db1307a424cf12a759a38d51083457139a34c51ade1e4c67ba2b1ba67101b4c68b9602ad7f1fc7e0fc23b3d8c10cb094a87091401726eb44f53e33d8df157e5360b25986af0012e4ed12ead0042564a2dbd12e85654a50ac7e27b36e3f37a81b7ca96847072cac4750589216ad1c05df3ce08a0aef3872ee9c999b81e96216ca17e545f9f4ce2ac19888a38ea45611d6acb7ea074cb", 0xd8}], 0x3, &(0x7f0000007800)=[{0x80, 0x100, 0x0, "ee01f685238e7d1439afdd640ce1c96c0a7d9ec9bb0dc6930bc68180c2bf744e411034884e51b7ff5cfd64223db59040fc59242c42c9d9e1bd595c856d68ee2a262b2d7ccae6b10e43c171239bad6a21297af3fbcb17cc017b3c491f59509a9c57812035c38136f2fb85"}, {0x60, 0x10b, 0x3, "7727c0faa719b5e2db8dabe22883ccb5455f2aa4c939fd6eae03afd5689f85a0908c59ab110bb2d329f43e512269c720230ed112090cfc74cc4b10abeb348c51abe13420964c08f220ce8f"}, {0x70, 0x102, 0x8, "c37404e60badf5e4ef02a970c22db40a81b109539907060cbe0048833fcd4bc34ff18f0906db494528ff5a8280206ccb16fba37149e1e6ac299fa9fe1592673e17cc83828471b0293eb481dcc10324068d0370883967d0f6bc1735f8"}, {0xf0, 0x10a, 0x102, "6ab76506bb2c9367a0dd7bec7d889d5f0445e02eaa49314605da054810e6dd524587cf9bd74cab4a0aeb5f6f6871a0fb943ce3a472a1ab6bd76e4d581aa00f258812d2395a0ff30189569fa503072b7a102a7b00f74dcbdc230a682ff93e4ca229ac39824056149e4a251a034af2e3fb87030e14dacaeb904b404e0928f9f416b4cd09fd008fae5599ada4468e5d9d16a9268a81f2b7650785ac3f727c709548b12b8607433a02a92c2e6410e39ff162ffc4e5ae4e3e7f13cb3813679b7a75c00e532bc0ccbea2a985fdb5a170cc4b7377d1882f8163c31543b9b659a0"}, {0xe0, 0x114, 0x3ff, "961a06f4e47bedb3ba0bfe2bd4e56380d17828e75b5825a6e0cfb13ffbe94112374de0fe4101e9f7f3419ef1018db1d16c5b1c6048a81c0e81b75d8ab3529abfbe451eb3ffe8d4d868164caf11fc89af16cc28db73ee3ec4504aaa377d672deb992ec1a75cb143add7638938b70c5824c70c30e6ff604fa652f454e1b4a62761907357592069791ef493eb91841785c1e6d38524746cd7f7521bdb16550735afa490e9a6807b144c774e40f0fc15cec5e8bba9a80239cc61214e4a7b99d01bea603aea54a4f461fef78bb0ac0d7300"}, {0xa0, 0x10f, 0x2, "503e59604931e7f42d51b8bde43ce13161fdd2d5ca9f1d5149c54d5c00d8c522b2bc4f17afcb076487450a226c158c3d5d4e1b564a56c4b5a2c8fbd8d47d97247c38b23555966dd46b802ff419586d29209cfc024adbd01b3e292a446a01447974610bbc17885542b63d020d7147c60c9649c5c9cb1e1e4142b6cfdc3e9d55b4291971b69e00f9385034f9d1300574bd"}], 0x3c0}}], 0x9, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@private0={0xfc, 0x0, [], 0x1}, @mcast1, [0xffffff00, 0xff, 0xff, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff], 'vcan0\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x59}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x200, 0x0, 'snmp\x00', {0x3}}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d3, 0x4d2], 0xa0, 0x9, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x100, 0x6, 'netbios-ns\x00', {0x39}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 06:57:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758dcfff, 0x11, r2, 0x0) 06:57:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x80ffff, 0x10, 0x0, 0x1e}, 0x64) 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aadefff, 0x11, r2, 0x0) 06:57:46 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x2c0001, 0xb1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2036.961142][T11487] x86/PAT: syz-executor.3:11487 map pfn RAM range req write-combining for [mem 0x174508000-0x174508fff], got write-back 06:57:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758ddfff, 0x11, r2, 0x0) 06:57:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000) 06:57:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc00000, 0x10, 0x0, 0x1e}, 0x64) 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aadffff, 0x11, r2, 0x0) 06:57:46 executing program 5: clone(0xa0b06d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x56b, 0x8, &(0x7f0000000580)=[{&(0x7f0000000080)="1e6434b7c5c46bd69a66d77bc8da49b1210d4c0623d69ef1c9e1276b1a2b05c06cf5ea1eaff8b327667471771e8330d12c381ef13f059d522c1073eedc23481c36cf9187", 0x44, 0x6c}, {&(0x7f0000000100)="b350d6215783d56b8c4e2c9c63da4d61574540076eee11fd92ed2892f27c136985d317196e2e123fcad9b9f3c50d561604e6abf8686ac20c139fc8279ea16caa6c024d3b3a531c635bcd52a8f2c43e6c519773dca213140aa0bab01e9101d4782db72e05e50188540cafc77dafe26ed583124d67c895731b8303d1e4a8defe6a6d4b2b6d7ad4e68ad741f967129a70553d95d6e360fb980e46c0c7", 0x9b, 0x3}, {&(0x7f00000001c0)="9196bc1726c0492684b7ea2f9e0a4c89dfad05da86dd428650ac39687bda942192b0c8304de7efee9024cd8c704164d71b6ce2f8873089ec8d8a3ce68b8f12bfd11cab60e8546b329d8165266b9685e037ee509708a13b87bec9f8c55b257661f854fcc4222ec3d4", 0x68, 0xb254}, {&(0x7f0000000240)="3bbe8040fa9e0894fff2aecf66f70fc52177ff7279963aa4c176ede7c1f8", 0x1e, 0x1}, {&(0x7f0000000280)="8390d10a61149fc2378f7f1703b7eb3e572b126ac4d268c9c41bb39a5fda5614e946757036b710617c8e3ed5818c9b4da7c9f1d6dc2f37a7450d5fd3b2891d1a2d9d4127f74ab792b436f9290d9dfff4ffc2bae3db369445f617b8b3ca2d2bca3d3febe262f01ab4eb8cf6da9541fc1dfbdb7fd3e4cf2ce94928db7f4c28d5ee6be7fe2a425257568233c1450de361e60c7485bedb56a56ed207406f7782a74c70cbaf06e5446c65b1dbea0acb80587906", 0xb1, 0x2}, {&(0x7f0000000340)="b70cf82692250bc83e679b9ff801dbdf0a2562d29b4b4564bce41668ddbb805c88b389e79a996e7b822a0cb5e470e901b3245f941f31c47f3000191db38fd2edf9e3d16fb39adf0aac1cdffa1db9ed30af86ef00f99dadaa25716cf5537e4b6e53be5c71fd175e294f8ac7c5ba9af4c04c9a873fe98b77b9ef37a8ccb576be7f508d8cd0c2aa1e8ec9ba3277aaf449a6d6574c2aac6b7de32783b4460ea34320fd77420dc8d5c59d966c6c27e62872ce98127b13801cd51d8e7bac3d79d5ccbcc8ff979794455f", 0xc7, 0x6}, {&(0x7f0000000440)="d511ebd27de82e13a584d0dabc813c90ba1f", 0x12}, {&(0x7f0000000480)="0ac50adef30906c32042b99117b170eab9e7e020ec9cbc27cc604aea30ca92178fc01daa5f6485552cdfdecd414d16dcf5f7dd71e829d8afe1ba9003a458ebf77fcc37bfab8a706c498cd69b78d52bbe3c08f26b718d00ddccfa3b55e980adbb0165bb8f2cdd84ab7d4ee2383ca2501c453118b264da55a83ec8b7282b88b867a5708197e3564bd2473375ed1f4612c30c6d2b25878dad0212fc0a1ac73a87940cb9e1e57733ad8684a1c88cfe4959e4c34f40a71a38a284df56d2b497ab471d0073f98e155aad65", 0xc8}], 0x40, &(0x7f0000000640)={[{@uni_xlate='uni_xlate=1'}, {@numtail='nonumtail=0'}, {@rodir='rodir'}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@appraise='appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x33, 0x37, 0x64, 0x61, 0x34, 0x36, 0x38], 0x2d, [0x65, 0x63, 0x63, 0x62], 0x2d, [0x33, 0x33, 0x66, 0x33], 0x2d, [0x65, 0x35, 0x39, 0x64], 0x2d, [0x30, 0x63, 0x0, 0x33, 0x61, 0x65, 0x43, 0x39]}}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 06:57:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758defff, 0x11, r2, 0x0) 06:57:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1000000, 0x10, 0x0, 0x1e}, 0x64) [ 2037.082465][T11512] x86/PAT: syz-executor.3:11512 map pfn RAM range req write-combining for [mem 0x170408000-0x170408fff], got write-back 06:57:46 executing program 4: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000080)="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", 0xfd) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aae0fff, 0x11, r2, 0x0) 06:57:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x300, 0x0, 0x11, r2, 0x8000) [ 2037.150622][T11530] FAT-fs (loop5): Unrecognized mount option "uid=00000000000000060929" or missing value [ 2037.187698][T11536] FAT-fs (loop5): Unrecognized mount option "uid=00000000000000060929" or missing value 06:57:46 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 06:57:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758dffff, 0x11, r2, 0x0) 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aae1fff, 0x11, r2, 0x0) 06:57:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x500, 0x0, 0x11, r2, 0x8000) 06:57:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3000000, 0x10, 0x0, 0x1e}, 0x64) [ 2037.195699][T11540] x86/PAT: syz-executor.3:11540 map pfn RAM range req write-combining for [mem 0x168f08000-0x168f08fff], got write-back 06:57:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758e0fff, 0x11, r2, 0x0) 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aae2fff, 0x11, r2, 0x0) 06:57:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x600, 0x0, 0x11, r2, 0x8000) [ 2037.266001][T11560] x86/PAT: syz-executor.3:11560 map pfn RAM range req write-combining for [mem 0x176408000-0x176408fff], got write-back 06:57:46 executing program 4: clone(0x4240000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/57) keyctl$update(0x2, 0x0, &(0x7f0000000040)="e772b52cf8c3b9d2a161f65a9c297d011a42e0b4dc3823266c49ea9cecf8ed06ae2124299f89b66f4e1ad2dfa490166267d90d6fac9fc330f6374834efe36590267bb1", 0x43) 06:57:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:46 executing program 5: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aae3fff, 0x11, r2, 0x0) 06:57:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758e1fff, 0x11, r2, 0x0) 06:57:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x700, 0x0, 0x11, r2, 0x8000) [ 2037.337127][T11575] x86/PAT: syz-executor.3:11575 map pfn RAM range req write-combining for [mem 0x167108000-0x167108fff], got write-back [ 2037.354991][T11575] x86/PAT: syz-executor.3:11575 map pfn RAM range req write-combining for [mem 0x171b08000-0x171b08fff], got write-back 06:57:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x900, 0x0, 0x11, r2, 0x8000) 06:57:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aae4fff, 0x11, r2, 0x0) 06:57:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758e2fff, 0x11, r2, 0x0) [ 2037.413709][T11591] x86/PAT: syz-executor.3:11591 map pfn RAM range req write-combining for [mem 0x15e908000-0x15e908fff], got write-back 06:57:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aae5fff, 0x11, r2, 0x0) [ 2037.493658][T11608] x86/PAT: syz-executor.3:11608 map pfn RAM range req write-combining for [mem 0x16c108000-0x16c108fff], got write-back 06:57:47 executing program 4: clone(0x294c5200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758e3fff, 0x11, r2, 0x0) 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aae6fff, 0x11, r2, 0x0) 06:57:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7000000, 0x10, 0x0, 0x1e}, 0x64) [ 2037.555611][T11608] x86/PAT: syz-executor.3:11608 map pfn RAM range req write-combining for [mem 0x15fe08000-0x15fe08fff], got write-back 06:57:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0xa00, 0x0, 0x11, r2, 0x8000) 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aae7fff, 0x11, r2, 0x0) 06:57:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758e4fff, 0x11, r2, 0x0) 06:57:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0xb00, 0x0, 0x11, r2, 0x8000) 06:57:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758e5fff, 0x11, r2, 0x0) 06:57:47 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000040)) 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aae8fff, 0x11, r2, 0x0) [ 2037.676194][T11638] x86/PAT: syz-executor.3:11638 map pfn RAM range req write-combining for [mem 0x15c408000-0x15c408fff], got write-back 06:57:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x9000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758e6fff, 0x11, r2, 0x0) [ 2037.753710][T11654] x86/PAT: syz-executor.3:11654 map pfn RAM range req write-combining for [mem 0x169408000-0x169408fff], got write-back 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aae9fff, 0x11, r2, 0x0) 06:57:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaeafff, 0x11, r2, 0x0) 06:57:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xb000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:47 executing program 4: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/102348, 0x18fcc) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/159) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1800) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaebfff, 0x11, r2, 0x0) 06:57:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0xc00, 0x0, 0x11, r2, 0x8000) 06:57:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaecfff, 0x11, r2, 0x0) 06:57:47 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x7, 0xffff}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x6, 0xfaa4, 0x0, 0x80000000}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758e7fff, 0x11, r2, 0x0) 06:57:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xd000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaedfff, 0x11, r2, 0x0) 06:57:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758e8fff, 0x11, r2, 0x0) [ 2038.243535][T11707] x86/PAT: syz-executor.3:11707 map pfn RAM range req write-combining for [mem 0x174708000-0x174708fff], got write-back 06:57:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0xd00, 0x0, 0x11, r2, 0x8000) 06:57:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758e9fff, 0x11, r2, 0x0) 06:57:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xe000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaeefff, 0x11, r2, 0x0) [ 2038.346291][T11727] x86/PAT: syz-executor.3:11727 map pfn RAM range req write-combining for [mem 0x169c08000-0x169c08fff], got write-back 06:57:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758eafff, 0x11, r2, 0x0) 06:57:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xf000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaeffff, 0x11, r2, 0x0) [ 2038.403542][T11727] x86/PAT: syz-executor.3:11727 map pfn RAM range req write-combining for [mem 0x170608000-0x170608fff], got write-back 06:57:47 executing program 4: writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)="ba1cd974bd65f99d9d18158a63989070e455c54dcf2a465d8799863290d4bf41f7280df32d72d089bc3b33b6fc8b17a037dc6674dea9bc8feefa3cd41f85e3fdb66cf941ae1e18555ff62d1d", 0x4c}, {&(0x7f0000000080)="07d2791a0b93a75dccbb42a606c6525491e50413d7a2101e983846845243ad13e761869c2f5f0ff4d3fabf36c41bf400bc961c53d769637b9ba8fc1f5921a20728682cc6b9416259e5fdf3ea838dc9e7d036dd96735f43d70c3377fea55e4e1ecd230cf053c4e6f50dfc9faf615d8f8909f774930b03e59c1c352eb0a2bf87a80afc4dfcc0d893bcc40116211ba31d29e4674207a2ce72e2c12203dc325442940eb576", 0xa3}, {&(0x7f0000000140)="81dcc91541e8452a14e50bd48da982c5a6246b86b294a334114f4c3a74b67e72a95edd5ffd56055c20099dcf8298424663feb0e290497f2736ee2497b260b4ea063d388ba6119625de9b0957286bd266163083b7510058150533d6c645805f10a10658da2533681047092c7b9fdcc8d1fd0354bcde01592394a784a07ca6ae59fdb27d005e9e6b2853570443055281bc3475338ee4546c9bc260ace7204c997724", 0xa1}, {&(0x7f0000000200)="10d59b40a16ad5acc767556c7ca1a6d3c57067bdf87ecf33e8ae61495104a061d4383a2c0f7c879a1c0ad5177663edde4012891be003645f5050051a659f10bfad0d9203b586f040c327747d", 0x4c}, {&(0x7f0000000280)="e6d8a577d64154c0854cbea6558df74abbec05f32f0d3f5c6ca8691fa140a732a637436771b6941d819297bb61c4eb6be309fe107a8a882656da63c1b9ddb460460f8d5b3f19d541da2e6feecdfbfefaf3be74bed6747f7307a1644b239ab8f760586d07424105ac1ed027ac31ac359e5d9909e5e16d95c326642b741c2f95", 0x7f}, {&(0x7f0000000540)="b09601a0b7ed8241edacf3175b8bee4311922ee3d59facae6fd3212a876fb834159bf740f48fe0a979312b79c3632ecab874f17fc01618e062fab88f7a059c792e4c36e4a93c4fc6d3fbfcca495de87acb37b9128964d447c0507167ea3ce7e6267be73ff7de0e364b6ae50c495eac15042e7d1c9c9a81b327ba699601470ddf072f350addee1c067d69d6d7b67273d05c3340be118b9e1cc01eea2d992ac1b99264414eda62685cfc2e05964ea3d25699a0f6fac08b91159e9ba1fde0209993acbe9822958574529b3b5576a1b677682b317868fd3c84e2d0d514460d469e942ab49a0215f8b7ecfdbf51037547ed1e", 0xf0}, {&(0x7f0000000400)="eef0b6fb3f46ec0a50dfa2e22a55517f45738b63a91e2ce723e79ea1c7f50db70b3e87701a833410f1c83e1b38c239c91d086d510c6259d95f621216c9ca3a7a924a4bb84c7cdf475bfc7bb42f22ce792556875c993f739cbee8542acfe23e943f1024dc2c8fa4f9001e063cead3eecb619629e07af61a4d24e4ea9b86514fcf3f443ae361b8079e5a3fd7420181a0f1dec883bbcd4c9fde0e3c4d57e27a48d09fdf89b5845be9e5787d8a37e3", 0xad}], 0x46) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8805}, 0x0) mlockall(0x1) r0 = open(&(0x7f0000019240)='./file0\x00', 0x101000, 0x88) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000640)=0x3ff, 0x620) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0xe00, 0x0, 0x11, r2, 0x8000) 06:57:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758ebfff, 0x11, r2, 0x0) 06:57:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x10000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf0fff, 0x11, r2, 0x0) 06:57:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758ecfff, 0x11, r2, 0x0) 06:57:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x11000000, 0x10, 0x0, 0x1e}, 0x64) [ 2038.513306][T11756] x86/PAT: syz-executor.3:11756 map pfn RAM range req write-combining for [mem 0x173508000-0x173508fff], got write-back 06:57:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1002, 0x0, 0x11, r2, 0x8000) 06:57:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf1fff, 0x11, r2, 0x0) 06:57:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758edfff, 0x11, r2, 0x0) 06:57:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x12000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf2fff, 0x11, r2, 0x0) [ 2038.624503][T11775] x86/PAT: syz-executor.3:11775 map pfn RAM range req write-combining for [mem 0x175f08000-0x175f09fff], got write-back 06:57:48 executing program 4: clone(0xc0061000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1003, 0x0, 0x11, r2, 0x8000) 06:57:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758eefff, 0x11, r2, 0x0) 06:57:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x20000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf3fff, 0x11, r2, 0x0) 06:57:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf4fff, 0x11, r2, 0x0) 06:57:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758effff, 0x11, r2, 0x0) 06:57:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x25000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1004, 0x0, 0x11, r2, 0x8000) [ 2039.229716][T11806] x86/PAT: syz-executor.3:11806 map pfn RAM range req write-combining for [mem 0x16f308000-0x16f309fff], got write-back 06:57:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758f0fff, 0x11, r2, 0x0) 06:57:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf5fff, 0x11, r2, 0x0) 06:57:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x31000000, 0x10, 0x0, 0x1e}, 0x64) [ 2039.327311][T11823] x86/PAT: syz-executor.3:11823 map pfn RAM range req write-combining for [mem 0x162208000-0x162209fff], got write-back 06:57:48 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) time(&(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r0, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) r1 = open$dir(&(0x7f0000000300)='./file0\x00', 0x100, 0x6) open_tree(r1, &(0x7f0000000340)='./file0\x00', 0x1000) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000002c0)={0x0, 0x6, 0x6e, &(0x7f0000000240)="706ddda6e47ac632a4a4ccd7cc5382eaebfd4a0d32cc0c1f7e59e9e7a9389ca6eda5622dae32558e91782d88770a70ca6a55f7d117a7a6093d081ae5661140a9363c27ba4f96f5859377ed5d40d4d30634fe3808df09f870c085f57d844f1c2fdb6d2e088afd394c5d25b1d0ab23"}) 06:57:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758f1fff, 0x11, r2, 0x0) 06:57:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf6fff, 0x11, r2, 0x0) 06:57:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1005, 0x0, 0x11, r2, 0x8000) 06:57:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3f000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf7fff, 0x11, r2, 0x0) 06:57:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x40000000, 0x10, 0x0, 0x1e}, 0x64) [ 2039.467970][T11847] x86/PAT: syz-executor.3:11847 map pfn RAM range req write-combining for [mem 0x16ab08000-0x16ab09fff], got write-back 06:57:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758f2fff, 0x11, r2, 0x0) 06:57:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf8fff, 0x11, r2, 0x0) 06:57:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1006, 0x0, 0x11, r2, 0x8000) 06:57:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x48000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758f3fff, 0x11, r2, 0x0) 06:57:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf8fff, 0x11, r2, 0x0) 06:57:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aaf9fff, 0x11, r2, 0x0) 06:57:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4c000000, 0x10, 0x0, 0x1e}, 0x64) [ 2039.576375][T11875] x86/PAT: syz-executor.3:11875 map pfn RAM range req write-combining for [mem 0x165508000-0x165509fff], got write-back 06:57:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1007, 0x0, 0x11, r2, 0x8000) 06:57:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aafafff, 0x11, r2, 0x0) 06:57:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758f4fff, 0x11, r2, 0x0) 06:57:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x68000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aafbfff, 0x11, r2, 0x0) 06:57:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1008, 0x0, 0x11, r2, 0x8000) [ 2039.669745][T11890] x86/PAT: syz-executor.3:11890 map pfn RAM range req write-combining for [mem 0x166008000-0x166009fff], got write-back 06:57:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0xd00, 0x0, 0x11, r2, 0x8000) 06:57:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6c000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758f5fff, 0x11, r2, 0x0) 06:57:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aafcfff, 0x11, r2, 0x0) 06:57:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758f6fff, 0x11, r2, 0x0) 06:57:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1009, 0x0, 0x11, r2, 0x8000) 06:57:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x74000000, 0x10, 0x0, 0x1e}, 0x64) [ 2039.757336][T11911] x86/PAT: syz-executor.3:11911 map pfn RAM range req write-combining for [mem 0x164708000-0x164709fff], got write-back [ 2039.794490][T11919] x86/PAT: syz-executor.4:11919 map pfn RAM range req write-combining for [mem 0x17db08000-0x17db08fff], got write-back 06:57:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7a000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758f7fff, 0x11, r2, 0x0) 06:57:49 executing program 4: clone(0xc001000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2039.833503][T11923] x86/PAT: syz-executor.3:11923 map pfn RAM range req write-combining for [mem 0x15e308000-0x15e309fff], got write-back 06:57:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x100a, 0x0, 0x11, r2, 0x8000) 06:57:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x98000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758f8fff, 0x11, r2, 0x0) [ 2039.920704][T11941] x86/PAT: syz-executor.3:11941 map pfn RAM range req write-combining for [mem 0x157708000-0x157709fff], got write-back 06:57:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x100b, 0x0, 0x11, r2, 0x8000) 06:57:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758f9fff, 0x11, r2, 0x0) [ 2040.012146][T11952] x86/PAT: syz-executor.3:11952 map pfn RAM range req write-combining for [mem 0x15dc08000-0x15dc09fff], got write-back 06:57:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aafdfff, 0x11, r2, 0x0) 06:57:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa26a1c00, 0x10, 0x0, 0x1e}, 0x64) 06:57:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758fafff, 0x11, r2, 0x0) 06:57:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x100c, 0x0, 0x11, r2, 0x8000) 06:57:49 executing program 4 (fault-call:0 fault-nth:0): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aafefff, 0x11, r2, 0x0) 06:57:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x100d, 0x0, 0x11, r2, 0x8000) 06:57:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758fbfff, 0x11, r2, 0x0) 06:57:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa91f0000, 0x10, 0x0, 0x1e}, 0x64) [ 2040.237226][T11965] x86/PAT: syz-executor.3:11965 map pfn RAM range req write-combining for [mem 0x15b808000-0x15b809fff], got write-back [ 2040.265236][T11970] FAULT_INJECTION: forcing a failure. [ 2040.265236][T11970] name failslab, interval 1, probability 0, space 0, times 0 [ 2040.301739][T11978] x86/PAT: syz-executor.3:11978 map pfn RAM range req write-combining for [mem 0x172108000-0x172109fff], got write-back [ 2040.332456][T11970] CPU: 0 PID: 11970 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2040.342635][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2040.352705][T11970] Call Trace: [ 2040.355993][T11970] dump_stack+0x14a/0x1ce [ 2040.360320][T11970] ? devkmsg_release+0x11c/0x11c [ 2040.365280][T11970] ? show_regs_print_info+0x12/0x12 [ 2040.370476][T11970] should_fail+0x6fb/0x860 [ 2040.374887][T11970] ? setup_fault_attr+0x3d0/0x3d0 [ 2040.379905][T11970] ? _raw_spin_lock_irq+0xa2/0x180 [ 2040.385010][T11970] ? copy_process+0x5a4/0x5110 [ 2040.389810][T11970] should_failslab+0x5/0x20 [ 2040.394309][T11970] kmem_cache_alloc+0x36/0x260 06:57:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17aafffff, 0x11, r2, 0x0) [ 2040.399070][T11970] copy_process+0x5a4/0x5110 [ 2040.403659][T11970] ? proc_fail_nth_write+0x18f/0x250 [ 2040.409212][T11970] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2040.414407][T11970] ? fork_idle+0x290/0x290 [ 2040.418818][T11970] ? memset+0x1f/0x40 [ 2040.422802][T11970] ? __kernel_write+0x340/0x340 [ 2040.427662][T11970] _do_fork+0x196/0x920 [ 2040.431816][T11970] ? __fsnotify_parent+0x310/0x310 [ 2040.436943][T11970] ? dup_mm+0x300/0x300 [ 2040.441089][T11970] ? __sb_end_write+0xa4/0xf0 [ 2040.445769][T11970] __x64_sys_clone+0x25e/0x2c0 [ 2040.450527][T11970] ? __ia32_sys_vfork+0x110/0x110 [ 2040.455548][T11970] do_syscall_64+0xcb/0x150 [ 2040.460047][T11970] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2040.466017][T11970] RIP: 0033:0x45d5b9 [ 2040.469904][T11970] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2040.489504][T11970] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 06:57:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758fcfff, 0x11, r2, 0x0) 06:57:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xff000000, 0x10, 0x0, 0x1e}, 0x64) 06:57:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x100e, 0x0, 0x11, r2, 0x8000) [ 2040.497935][T11970] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2040.506006][T11970] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2040.514000][T11970] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2040.521965][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2040.530108][T11970] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17bf00fff, 0x11, r2, 0x0) 06:57:50 executing program 4 (fault-call:0 fault-nth:1): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758fdfff, 0x11, r2, 0x0) 06:57:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xff9f0000, 0x10, 0x0, 0x1e}, 0x64) [ 2040.604275][T12001] x86/PAT: syz-executor.3:12001 map pfn RAM range req write-combining for [mem 0x167c08000-0x167c09fff], got write-back 06:57:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1010, 0x0, 0x11, r2, 0x8000) 06:57:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c300fff, 0x11, r2, 0x0) 06:57:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758fefff, 0x11, r2, 0x0) [ 2040.682052][T12014] FAULT_INJECTION: forcing a failure. [ 2040.682052][T12014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2040.716363][T12019] x86/PAT: syz-executor.3:12019 map pfn RAM range req write-combining for [mem 0x168708000-0x168709fff], got write-back 06:57:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffff8000, 0x10, 0x0, 0x1e}, 0x64) 06:57:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c301fff, 0x11, r2, 0x0) [ 2040.727152][T12014] CPU: 0 PID: 12014 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2040.739014][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2040.749069][T12014] Call Trace: [ 2040.752364][T12014] dump_stack+0x14a/0x1ce [ 2040.756688][T12014] ? devkmsg_release+0x11c/0x11c [ 2040.761626][T12014] ? show_regs_print_info+0x12/0x12 [ 2040.766826][T12014] ? _do_fork+0x196/0x920 [ 2040.771146][T12014] ? do_syscall_64+0xcb/0x150 [ 2040.775908][T12014] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2040.781974][T12014] should_fail+0x6fb/0x860 [ 2040.786415][T12014] ? setup_fault_attr+0x3d0/0x3d0 [ 2040.791438][T12014] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2040.796810][T12014] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2040.802350][T12014] ? copy_process+0x5a4/0x5110 [ 2040.807102][T12014] ? copy_process+0x5a4/0x5110 [ 2040.811864][T12014] ? kmem_cache_alloc+0x1d5/0x260 [ 2040.816880][T12014] copy_process+0x5f3/0x5110 [ 2040.821494][T12014] ? proc_fail_nth_write+0x18f/0x250 [ 2040.826795][T12014] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2040.831986][T12014] ? fork_idle+0x290/0x290 [ 2040.836501][T12014] ? memset+0x1f/0x40 [ 2040.840480][T12014] ? __kernel_write+0x340/0x340 [ 2040.845332][T12014] _do_fork+0x196/0x920 [ 2040.849491][T12014] ? __fsnotify_parent+0x310/0x310 [ 2040.854596][T12014] ? dup_mm+0x300/0x300 [ 2040.858747][T12014] ? __sb_end_write+0xa4/0xf0 [ 2040.863446][T12014] __x64_sys_clone+0x25e/0x2c0 [ 2040.868204][T12014] ? __ia32_sys_vfork+0x110/0x110 [ 2040.873223][T12014] do_syscall_64+0xcb/0x150 06:57:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c302fff, 0x11, r2, 0x0) [ 2040.877746][T12014] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2040.883630][T12014] RIP: 0033:0x45d5b9 [ 2040.887515][T12014] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2040.907114][T12014] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2040.915576][T12014] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2040.923543][T12014] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 06:57:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x1758fffff, 0x11, r2, 0x0) [ 2040.931517][T12014] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2040.939491][T12014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2040.947460][T12014] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1011, 0x0, 0x11, r2, 0x8000) 06:57:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffff, 0x10, 0x0, 0x1e}, 0x64) 06:57:50 executing program 4 (fault-call:0 fault-nth:2): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c303fff, 0x11, r2, 0x0) 06:57:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x175900fff, 0x11, r2, 0x0) 06:57:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1e}, 0x64) 06:57:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce00fff, 0x11, r2, 0x0) [ 2041.042648][T12043] x86/PAT: syz-executor.3:12043 map pfn RAM range req write-combining for [mem 0x162308000-0x162309fff], got write-back 06:57:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1012, 0x0, 0x11, r2, 0x8000) 06:57:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c304fff, 0x11, r2, 0x0) 06:57:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c305fff, 0x11, r2, 0x0) 06:57:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce01fff, 0x11, r2, 0x0) [ 2041.127381][T12063] FAULT_INJECTION: forcing a failure. [ 2041.127381][T12063] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.148654][T12064] x86/PAT: syz-executor.3:12064 map pfn RAM range req write-combining for [mem 0x16fb08000-0x16fb09fff], got write-back [ 2041.211457][T12063] CPU: 1 PID: 12063 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2041.221637][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2041.231688][T12063] Call Trace: [ 2041.234997][T12063] dump_stack+0x14a/0x1ce [ 2041.239336][T12063] ? devkmsg_release+0x11c/0x11c [ 2041.244274][T12063] ? show_regs_print_info+0x12/0x12 [ 2041.247181][T12076] x86/PAT: syz-executor.3:12076 map pfn RAM range req write-combining for [mem 0x168108000-0x168109fff], got write-back [ 2041.249467][T12063] ? get_page_from_freelist+0x486/0x7c0 [ 2041.249479][T12063] should_fail+0x6fb/0x860 [ 2041.249499][T12063] ? setup_fault_attr+0x3d0/0x3d0 [ 2041.276935][T12063] ? prepare_creds+0x20/0x380 [ 2041.281600][T12063] should_failslab+0x5/0x20 [ 2041.286093][T12063] kmem_cache_alloc+0x36/0x260 [ 2041.290846][T12063] ? _raw_spin_lock+0x170/0x170 [ 2041.295684][T12063] prepare_creds+0x20/0x380 [ 2041.300179][T12063] copy_creds+0xe6/0x470 [ 2041.304414][T12063] copy_process+0xdc7/0x5110 [ 2041.308997][T12063] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2041.314212][T12063] ? fork_idle+0x290/0x290 [ 2041.318617][T12063] ? memset+0x1f/0x40 [ 2041.322586][T12063] ? __kernel_write+0x340/0x340 [ 2041.322964][T12080] x86/PAT: syz-executor.3:12080 map pfn RAM range req write-combining for [mem 0x174308000-0x174309fff], got write-back [ 2041.327457][T12063] _do_fork+0x196/0x920 [ 2041.327469][T12063] ? __fsnotify_parent+0x310/0x310 [ 2041.327478][T12063] ? dup_mm+0x300/0x300 [ 2041.327487][T12063] ? __sb_end_write+0xa4/0xf0 06:57:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1025, 0x0, 0x11, r2, 0x8000) 06:57:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1048, 0x0, 0x11, r2, 0x8000) 06:57:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x104c, 0x0, 0x11, r2, 0x8000) [ 2041.327502][T12063] __x64_sys_clone+0x25e/0x2c0 [ 2041.363722][T12063] ? __ia32_sys_vfork+0x110/0x110 [ 2041.368743][T12063] do_syscall_64+0xcb/0x150 [ 2041.373245][T12063] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2041.379132][T12063] RIP: 0033:0x45d5b9 [ 2041.383020][T12063] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2041.402624][T12063] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2041.406077][T12083] x86/PAT: syz-executor.3:12083 map pfn RAM range req write-combining for [mem 0x168008000-0x168009fff], got write-back [ 2041.411053][T12063] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2041.411058][T12063] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2041.411063][T12063] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2041.411068][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2041.411073][T12063] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:51 executing program 4 (fault-call:0 fault-nth:3): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce02fff, 0x11, r2, 0x0) 06:57:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1060, 0x0, 0x11, r2, 0x8000) 06:57:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1e}, 0x64) 06:57:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c306fff, 0x11, r2, 0x0) 06:57:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce03fff, 0x11, r2, 0x0) 06:57:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1068, 0x0, 0x11, r2, 0x8000) 06:57:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x4, 0x0, 0x1e}, 0x64) [ 2041.949552][T12097] x86/PAT: syz-executor.3:12097 map pfn RAM range req write-combining for [mem 0x172108000-0x172109fff], got write-back [ 2041.962554][T12098] FAULT_INJECTION: forcing a failure. [ 2041.962554][T12098] name failslab, interval 1, probability 0, space 0, times 0 06:57:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c307fff, 0x11, r2, 0x0) 06:57:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce04fff, 0x11, r2, 0x0) 06:57:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x106c, 0x0, 0x11, r2, 0x8000) [ 2042.018982][T12108] x86/PAT: syz-executor.3:12108 map pfn RAM range req write-combining for [mem 0x17f508000-0x17f509fff], got write-back 06:57:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0x0, 0x1e}, 0x64) [ 2042.094803][T12123] x86/PAT: syz-executor.3:12123 map pfn RAM range req write-combining for [mem 0x16aa08000-0x16aa09fff], got write-back [ 2042.127528][T12098] CPU: 0 PID: 12098 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2042.137720][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2042.147765][T12098] Call Trace: [ 2042.151059][T12098] dump_stack+0x14a/0x1ce [ 2042.155388][T12098] ? devkmsg_release+0x11c/0x11c [ 2042.160328][T12098] ? show_regs_print_info+0x12/0x12 [ 2042.165523][T12098] should_fail+0x6fb/0x860 [ 2042.169945][T12098] ? setup_fault_attr+0x3d0/0x3d0 [ 2042.174991][T12098] ? kzalloc+0x22/0x40 [ 2042.179059][T12098] should_failslab+0x5/0x20 [ 2042.183577][T12098] __kmalloc+0x5f/0x2d0 [ 2042.187730][T12098] kzalloc+0x22/0x40 [ 2042.191608][T12098] security_prepare_creds+0x46/0x220 [ 2042.196883][T12098] prepare_creds+0x290/0x380 [ 2042.201457][T12098] copy_creds+0xe6/0x470 [ 2042.205949][T12098] copy_process+0xdc7/0x5110 [ 2042.210547][T12098] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2042.215727][T12098] ? fork_idle+0x290/0x290 [ 2042.220139][T12098] ? memset+0x1f/0x40 [ 2042.224106][T12098] ? __kernel_write+0x340/0x340 [ 2042.228941][T12098] _do_fork+0x196/0x920 [ 2042.233081][T12098] ? __fsnotify_parent+0x310/0x310 [ 2042.238188][T12098] ? dup_mm+0x300/0x300 [ 2042.242344][T12098] ? __sb_end_write+0xa4/0xf0 [ 2042.247010][T12098] __x64_sys_clone+0x25e/0x2c0 [ 2042.251767][T12098] ? __ia32_sys_vfork+0x110/0x110 [ 2042.256780][T12098] do_syscall_64+0xcb/0x150 [ 2042.261787][T12098] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2042.267662][T12098] RIP: 0033:0x45d5b9 [ 2042.271533][T12098] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:57:51 executing program 4 (fault-call:0 fault-nth:4): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c308fff, 0x11, r2, 0x0) 06:57:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x6, 0x0, 0x1e}, 0x64) 06:57:51 executing program 5: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@remote, 0x0}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf2501000000080031000600000005002a00000000000800310009000000050037000000000008003b000101000008000300", @ANYRES32=r1, @ANYBLOB="0a018000000500300000002ee43b7c6b44dacc74cc4a0d198cc22c997e1060b79e0902c6fd3f44b0dd0b9ca89b050392e8b46eff32d4791c4c466636f46fd105fcf63af27a3923ade763e207db497dcf0029c1a0fe19446bc31330391c3f575557da75308749cbb874dcebcfd39bc60bcff9c83bdffbd0d9451be7fbd8b96509eb6d16eb11d27fe86094a11a1592cc3c4b92bfe2e8ee1a3e76dc13ef20623eb1fe282ae0d55096eb233ab96fa63e337795a9"], 0x58}, 0x1, 0x0, 0x0, 0x20000014}, 0x48850) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = epoll_create(0x80000001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000480)={"d3472c203d9e73dbe9128d653d436cbe", 0x0, r3, {0x0, 0xc3}, {0x41}, 0x9, [0x80000000, 0x3, 0x1, 0x9, 0x5, 0x2, 0x2, 0x10001, 0xfd5b, 0xe4d, 0x100000000, 0x8, 0x8, 0xff, 0x7, 0x5]}) 06:57:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce05fff, 0x11, r2, 0x0) 06:57:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1074, 0x0, 0x11, r2, 0x8000) [ 2042.291839][T12098] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2042.300242][T12098] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2042.308207][T12098] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2042.316170][T12098] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2042.324142][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2042.332097][T12098] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c309fff, 0x11, r2, 0x0) 06:57:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x7, 0x0, 0x1e}, 0x64) 06:57:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce06fff, 0x11, r2, 0x0) 06:57:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c30afff, 0x11, r2, 0x0) 06:57:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x107a, 0x0, 0x11, r2, 0x8000) 06:57:51 executing program 5: r0 = memfd_create(&(0x7f0000000300), 0x0) write(r0, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0xff82) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, 0x2}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x0, 0x2, 0x9}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2042.408116][T12147] FAULT_INJECTION: forcing a failure. [ 2042.408116][T12147] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.422464][T12142] x86/PAT: syz-executor.3:12142 map pfn RAM range req write-combining for [mem 0x162208000-0x162209fff], got write-back [ 2042.500647][T12169] x86/PAT: syz-executor.3:12169 map pfn RAM range req write-combining for [mem 0x16f208000-0x16f209fff], got write-back [ 2042.522712][T12147] CPU: 0 PID: 12147 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2042.532874][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2042.544666][T12147] Call Trace: [ 2042.547966][T12147] dump_stack+0x14a/0x1ce [ 2042.552299][T12147] ? devkmsg_release+0x11c/0x11c [ 2042.557253][T12147] ? avc_has_perm_noaudit+0x30c/0x400 [ 2042.562649][T12147] ? show_regs_print_info+0x12/0x12 [ 2042.567858][T12147] ? avc_denied+0x1c0/0x1c0 [ 2042.572352][T12147] should_fail+0x6fb/0x860 [ 2042.576753][T12147] ? setup_fault_attr+0x3d0/0x3d0 [ 2042.581764][T12147] ? avc_has_perm+0xd5/0x280 [ 2042.586350][T12147] ? avc_has_perm+0x176/0x280 [ 2042.591028][T12147] ? dup_fd+0x6b/0xb70 [ 2042.595083][T12147] should_failslab+0x5/0x20 [ 2042.599572][T12147] kmem_cache_alloc+0x36/0x260 [ 2042.604323][T12147] ? avc_has_perm_noaudit+0x400/0x400 [ 2042.609676][T12147] dup_fd+0x6b/0xb70 [ 2042.613571][T12147] ? audit_filter_inodes+0x410/0x410 [ 2042.618857][T12147] ? sched_fork+0x598/0xe40 [ 2042.623361][T12147] ? security_task_alloc+0x198/0x1f0 [ 2042.628628][T12147] copy_process+0x166e/0x5110 [ 2042.633296][T12147] ? fork_idle+0x290/0x290 [ 2042.637691][T12147] ? memset+0x1f/0x40 [ 2042.641656][T12147] ? __kernel_write+0x340/0x340 [ 2042.646488][T12147] _do_fork+0x196/0x920 [ 2042.650647][T12147] ? __fsnotify_parent+0x310/0x310 [ 2042.656087][T12147] ? dup_mm+0x300/0x300 [ 2042.660224][T12147] ? __sb_end_write+0xa4/0xf0 [ 2042.664896][T12147] __x64_sys_clone+0x25e/0x2c0 [ 2042.669645][T12147] ? __ia32_sys_vfork+0x110/0x110 [ 2042.674666][T12147] do_syscall_64+0xcb/0x150 [ 2042.679151][T12147] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2042.685041][T12147] RIP: 0033:0x45d5b9 [ 2042.688923][T12147] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2042.708508][T12147] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2042.716917][T12147] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2042.724895][T12147] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2042.732861][T12147] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2042.741175][T12147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 06:57:52 executing program 4 (fault-call:0 fault-nth:5): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x8, 0x0, 0x1e}, 0x64) 06:57:52 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce07fff, 0x11, r2, 0x0) 06:57:52 executing program 5: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000), 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x200400d0) 06:57:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c30bfff, 0x11, r2, 0x0) 06:57:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1100, 0x0, 0x11, r2, 0x8000) [ 2042.749219][T12147] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1e}, 0x64) 06:57:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c30cfff, 0x11, r2, 0x0) 06:57:52 executing program 5: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/102349, 0x18fcd) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) clone(0x943000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x20) dup(r2) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000080)={0x101, 0xff, [0x0, 0x58, 0x1, 0x3, 0x389], 0x401}) 06:57:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xa, 0x0, 0x1e}, 0x64) 06:57:52 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce08fff, 0x11, r2, 0x0) 06:57:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c30dfff, 0x11, r2, 0x0) [ 2042.840575][T12187] x86/PAT: syz-executor.3:12187 map pfn RAM range req write-combining for [mem 0x165508000-0x165509fff], got write-back [ 2042.877538][T12204] FAULT_INJECTION: forcing a failure. [ 2042.877538][T12204] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.928917][T12204] CPU: 1 PID: 12204 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2042.939083][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2042.949166][T12204] Call Trace: [ 2042.952470][T12204] dump_stack+0x14a/0x1ce [ 2042.957348][T12204] ? devkmsg_release+0x11c/0x11c [ 2042.962333][T12204] ? show_regs_print_info+0x12/0x12 [ 2042.967573][T12204] should_fail+0x6fb/0x860 [ 2042.971999][T12204] ? setup_fault_attr+0x3d0/0x3d0 [ 2042.977021][T12204] ? alloc_fdtable+0x98/0x270 [ 2042.981697][T12204] should_failslab+0x5/0x20 [ 2042.986184][T12204] kmem_cache_alloc_trace+0x39/0x280 [ 2042.991451][T12204] ? _raw_spin_trylock_bh+0x190/0x190 [ 2042.996805][T12204] alloc_fdtable+0x98/0x270 [ 2043.001305][T12204] dup_fd+0x79a/0xb70 [ 2043.005293][T12204] ? security_task_alloc+0x198/0x1f0 [ 2043.010565][T12204] copy_process+0x166e/0x5110 [ 2043.015234][T12204] ? fork_idle+0x290/0x290 [ 2043.019631][T12204] ? memset+0x1f/0x40 [ 2043.023601][T12204] ? __kernel_write+0x340/0x340 [ 2043.028454][T12204] _do_fork+0x196/0x920 [ 2043.032593][T12204] ? __fsnotify_parent+0x310/0x310 [ 2043.037688][T12204] ? dup_mm+0x300/0x300 [ 2043.041826][T12204] ? __sb_end_write+0xa4/0xf0 [ 2043.046485][T12204] __x64_sys_clone+0x25e/0x2c0 [ 2043.051240][T12204] ? __ia32_sys_vfork+0x110/0x110 [ 2043.056253][T12204] do_syscall_64+0xcb/0x150 [ 2043.060759][T12204] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2043.066638][T12204] RIP: 0033:0x45d5b9 [ 2043.070518][T12204] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2043.090114][T12204] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2043.098513][T12204] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2043.106475][T12204] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2043.114431][T12204] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:57:52 executing program 4 (fault-call:0 fault-nth:6): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1200, 0x0, 0x11, r2, 0x8000) 06:57:52 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce09fff, 0x11, r2, 0x0) 06:57:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xb, 0x0, 0x1e}, 0x64) 06:57:52 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) connect$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0xceb4fbef9e112235, {0x1, 0x4, 0x2}}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x106, 0x5, 0x5, "6ae1bf7caddbc613f6a79c0280e582f0", "8a4556838176a18e217da7329bf8ec13cd212caf05c621ebc398e58a2631e71ceb7b0bcb82d2d8f690f11efc797c298ca0545cc53939485bc37ecc5a7e0585ac838ff639dd1334c0b562541445b85e2b6b62f3f8e5837b43db309970e0d4d60c76d8827bb31f3d9648e3367cdb9f38ef7746640a12938dde7fcd1e56e24dbf2e57e44bbd7a39345c50e2ba1ad5edb4b5204af6095744256673db88d0866572db6d84af27c1875349ac4ca604ccb55e8a0c4ca5bbc23701b68413c0db2b5bc1e94de698a1c8ef2dbdf0a81b19f81607f9857a3fa5d26441d049962088a69c576767b3965cd8f81e7874d6d17db1128ca682"}, 0x106, 0x1) 06:57:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c30efff, 0x11, r2, 0x0) [ 2043.122403][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2043.130359][T12204] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c30ffff, 0x11, r2, 0x0) 06:57:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xc, 0x0, 0x1e}, 0x64) 06:57:52 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce0afff, 0x11, r2, 0x0) 06:57:52 executing program 5: getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x101000, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other='allow_other'}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}]}}) clone(0x20200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x3, 0x0, {0x3, 0x6, 0x0, '&\xa2\xcb&@-'}}, 0x27) fchdir(0xffffffffffffffff) 06:57:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd, 0x0, 0x1e}, 0x64) [ 2043.197079][T12233] x86/PAT: syz-executor.3:12233 map pfn RAM range req write-combining for [mem 0x172f08000-0x172f09fff], got write-back [ 2043.231357][T12240] FAULT_INJECTION: forcing a failure. [ 2043.231357][T12240] name failslab, interval 1, probability 0, space 0, times 0 06:57:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c310fff, 0x11, r2, 0x0) [ 2043.326090][T12240] CPU: 1 PID: 12240 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2043.336314][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2043.346411][T12240] Call Trace: [ 2043.349715][T12240] dump_stack+0x14a/0x1ce [ 2043.354057][T12240] ? devkmsg_release+0x11c/0x11c [ 2043.358998][T12240] ? show_regs_print_info+0x12/0x12 [ 2043.364182][T12240] should_fail+0x6fb/0x860 [ 2043.368597][T12240] ? setup_fault_attr+0x3d0/0x3d0 [ 2043.374309][T12240] ? kvmalloc_node+0xc2/0x120 [ 2043.378973][T12240] should_failslab+0x5/0x20 [ 2043.383464][T12240] __kmalloc+0x5f/0x2d0 [ 2043.387602][T12240] kvmalloc_node+0xc2/0x120 [ 2043.392092][T12240] alloc_fdtable+0xe4/0x270 [ 2043.396604][T12240] dup_fd+0x79a/0xb70 [ 2043.400588][T12240] ? security_task_alloc+0x198/0x1f0 [ 2043.405886][T12240] copy_process+0x166e/0x5110 [ 2043.410854][T12240] ? fork_idle+0x290/0x290 [ 2043.415256][T12240] ? memset+0x1f/0x40 [ 2043.419228][T12240] ? __kernel_write+0x340/0x340 [ 2043.424087][T12240] _do_fork+0x196/0x920 [ 2043.428271][T12240] ? __fsnotify_parent+0x310/0x310 [ 2043.433396][T12240] ? dup_mm+0x300/0x300 [ 2043.437538][T12240] ? __sb_end_write+0xa4/0xf0 [ 2043.442219][T12240] __x64_sys_clone+0x25e/0x2c0 [ 2043.446986][T12240] ? __ia32_sys_vfork+0x110/0x110 [ 2043.452005][T12240] do_syscall_64+0xcb/0x150 [ 2043.456500][T12240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2043.462395][T12240] RIP: 0033:0x45d5b9 [ 2043.466286][T12240] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2043.485875][T12240] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2043.494274][T12240] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2043.502237][T12240] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2043.510217][T12240] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2043.518186][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 06:57:53 executing program 4 (fault-call:0 fault-nth:7): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x2900, 0x0, 0x11, r2, 0x8000) 06:57:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce0bfff, 0x11, r2, 0x0) 06:57:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c311fff, 0x11, r2, 0x0) 06:57:53 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) poll(&(0x7f0000000b40)=[{r0, 0x8000}, {r1, 0x4}, {r0, 0x8}, {r0, 0x8}], 0x4, 0x7) r2 = syz_io_uring_complete(0x0) accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x400) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000140)={0x964, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x2}, 0x40, 0x20, 0x63, 0x7, 0x24, 'syz1\x00', "ffdbcf43241160b47dd6b0542ca945ede9280a433f267ecdceea346b5af8743b", "e39deea2569cff7d8670530c4082390ce47488ad083c1a9d3f2748d0457a898f", [{0x100, 0x3, {0x1, 0x8}}, {0xfff, 0x7, {0x0, 0x1}}, {0x0, 0x1f, {0x0, 0x3}}, {0x6, 0xd2d}, {0x9, 0x9, {0x1, 0x697}}, {0x4, 0x7, {0x2, 0x4}}, {0x9, 0xfffd, {0x1, 0x209}}, {0x5, 0x3, {0x1, 0x9}}, {0x0, 0xfff7, {0x2, 0x3}}, {0x40, 0x3, {0x2, 0x7}}, {0x1f, 0xffc0, {0x1, 0x2}}, {0x1, 0x7ff, {0x2, 0x80000001}}, {0xfce, 0x4a}, {0x2, 0x435, {0x3, 0x4}}, {0x5, 0x5, {0x0, 0x3}}, {0x81, 0x45, {0x2, 0x97}}, {0x47a8, 0x2, {0x0, 0x80000000}}, {0xfff7, 0x8, {0x1, 0x499b}}, {0x7fff, 0x3f, {0x1, 0x1f}}, {0x1, 0x72c, {0x3, 0x5}}, {0x5, 0x2, {0x1, 0x101}}, {0x3, 0x3, {0x1, 0x4}}, {0xfe00, 0x490, {0x1, 0x1}}, {0x6, 0x877, {0x1, 0x1}}, {0x6151, 0x4000, {0x0, 0x7ff}}, {0xfff8, 0x6, {0x2, 0x2}}, {0xfe00, 0x8, {0x2, 0xdba}}, {0x100, 0xffff, {0x2, 0x4}}, {0x1, 0xbc, {0x3, 0x5}}, {0x4, 0xd13, {0x0, 0x3f}}, {0x6e7, 0x883, {0x2, 0x603}}, {0x5f60, 0x100, {0x2, 0x1}}, {0x6, 0xe6, {0x3, 0x5}}, {0x3, 0xfffb, {0x3, 0x6}}, {0x7fff, 0x5, {0x3, 0xcf}}, {0x20f, 0x1, {0x0, 0x4}}, {0x9, 0x6}, {0x1, 0x9, {0x0, 0xec6}}, {0xc6f7, 0x3ff, {0x1, 0xfffffff9}}, {0x400, 0x6, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x8, 0xe6, 0x1, 0x0, 0x0, 'syz1\x00', "f6bbf259d017c41c3eb303b71e0cb2b2f3847d900fd5b4551362db2a8617980c", "1002d01318aecbea2a5150c43b36bcf05cde43266e762a125c60f241b489e97a", [{0x7cd6, 0x36, {0x2, 0x4}}, {0xfffb, 0x2}, {0x9, 0x7, {0x1, 0x3}}, {0x1, 0x1, {0x1, 0x48}}, {0xd7, 0x505, {0x2, 0x5}}, {0x0, 0x40, {0x1, 0x5}}, {0x9, 0x9, {0x0, 0x19}}, {0x25, 0x5, {0x1, 0xff}}, {0x3, 0x9, {0x3, 0xfffffffd}}, {0xfffa, 0x3, {0x2, 0x6}}, {0x3, 0x2, {0x3, 0x5c}}, {0x8, 0x1, {0x3, 0x7}}, {0x7, 0x9, {0x1, 0x5}}, {0x0, 0x1f, {0x3, 0x2}}, {0xd0ea, 0x7fff, {0x1, 0xfffffff9}}, {0x1, 0x7, {0x0, 0x3}}, {0x3f, 0x1, {0x2, 0x1f}}, {0x7, 0x40, {0x3, 0xd907}}, {0x0, 0x0, {0x0, 0x401}}, {0x1, 0x8, {0x2}}, {0x9a6, 0x6, {0x2, 0x6}}, {0xf4, 0x7, {0x2, 0x9}}, {0x8000, 0x7, {0x0, 0x3}}, {0xfff9, 0x5, {0x0, 0x1000}}, {0x6, 0x2, {0x3, 0xffffffc0}}, {0x7, 0xd492, {0x9aa263b1fd5cf6dc, 0x4}}, {0x7, 0x6692, {0x0, 0x1}}, {0x3, 0x200, {0x3}}, {0x9814, 0x200, {0x3, 0xff}}, {0x2, 0xff, {0x0, 0x4}}, {0x0, 0x7f, {0x3, 0x9}}, {0x4, 0xe000, {0x3, 0x9af3}}, {0x7fff, 0x1ff, {0x2, 0xff}}, {0x4, 0x3, {0x2, 0x10000}}, {0x8af, 0x5d6, {0x3, 0x1f}}, {0x0, 0xfff, {0x1, 0x5}}, {0x5, 0x9, {0x0, 0x8}}, {0x2, 0x8, {0x3, 0x181f}}, {0x8, 0xeb5c, {0x1505d272ba1fbd0, 0x8}}, {0x0, 0x0, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffffa}, 0x6, 0x1, 0x5, 0x70, 0x12, 'syz1\x00', "8af992e99e0e591299ce59ca8f2f8c4f9baff4d4a3913042ee1b676009577ccc", "46bcf1307951993c44a133ce2ec963f5b067d8b8e086120995b45b9f41f13851", [{0x7, 0x3, {0x2, 0x4}}, {0x9, 0xff, {0x2, 0x5}}, {0x6, 0x2dd7, {0x1, 0x1f}}, {0x400, 0x1000, {0x2}}, {0x81, 0xfffa, {0x1, 0x3}}, {0x100, 0x80, {0x2, 0x80000000}}, {0x6, 0x7, {0x0, 0xab}}, {0x1, 0x2, {0x3, 0x3}}, {0x1ff, 0x800, {0x3, 0x7}}, {0x1f, 0x2, {0x1}}, {0x3, 0x1, {0x1, 0x101}}, {0x7, 0x9, {0x3, 0x9}}, {0x9, 0x5, {0x3, 0x2}}, {0x81, 0x7fff, {0x0, 0x1}}, {0x8, 0x20, {0x0, 0x513}}, {0x2, 0x0, {0x2, 0xff}}, {0x6, 0x9, {0x3, 0x400}}, {0x6, 0x3, {0x0, 0x9c0}}, {0xfffb, 0x6, {0x2, 0x9}}, {0x5, 0x200, {0x2, 0x3}}, {0xc9, 0x7f, {0x0, 0x7fff}}, {0x40, 0x1, {0x0, 0x7}}, {0x7ff, 0xfc01, {0x3, 0x5}}, {0x4, 0x3f, {0x1, 0x101}}, {0x8d, 0x6, {0x0, 0x6}}, {0x1000, 0x7, {0x3, 0x7}}, {0x81, 0x3, {0x3, 0x4}}, {0x8, 0x0, {0x2, 0x81}}, {0x5, 0x80, {0x2, 0x7}}, {0x1, 0x1, {0x2, 0x7}}, {0x6, 0xa08b, {0x1, 0x800}}, {0xdc, 0xf10, {0x3, 0x5e2}}, {0x3cb7, 0x4, {0x2, 0x6}}, {0x0, 0x1f, {0x0, 0x7}}, {0x3, 0x0, {0xdb4ae313cdee2ce8, 0x4}}, {0x4, 0x7fff, {0x2, 0x4}}, {0x9, 0x80, {0x2, 0x5}}, {0x80, 0xfff9, {0x2, 0xb5}}, {0x1, 0xf800, {0x1, 0x3ff}}, {0x94f1, 0x5, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3}, 0x5, 0x1, 0x2, 0x7, 0x14, 'syz1\x00', "ac7e7c042c4538cbc419931013cdd9808589df9d4bc19972282e5cd27725b38b", "36121ff0ee0db4fe96151e0305c66fc2408914d50de4f2472cf916e17fdd3b41", [{0x2, 0x9, {0x3, 0x7}}, {0x3, 0x9, {0x2}}, {0x401, 0x20, {0x0, 0x3f}}, {0x8001, 0x7, {0x5, 0x1}}, {0x200, 0x187f, {0x3, 0x101}}, {0x81, 0x5, {0x1, 0x81}}, {0x2, 0x1, {0x0, 0xd2fe}}, {0x6e3, 0x3, {0x0, 0x8}}, {0x0, 0x40, {0x9861e1c4e48e7411, 0x10001}}, {0x5, 0x0, {0x0, 0x1f}}, {0x7f, 0x7f, {0x0, 0x9}}, {0x5, 0x4, {0x0, 0x7}}, {0x475d, 0x40, {0x3, 0x4}}, {0x8, 0x40, {0xf1e4f442d3224dd9, 0xfff}}, {0x5, 0x8, {0x0, 0xf60}}, {0x11e, 0x3, {0x2, 0xffff}}, {0x6, 0x3, {0x3, 0x6}}, {0x0, 0x5, {0x3, 0x40}}, {0x0, 0x8, {0x1, 0x80000000}}, {0xf7e, 0x4d2, {0x2, 0x4}}, {0x9, 0x200, {0x2, 0x7}}, {0x4, 0xffff, {0x2, 0x3}}, {0x101, 0x4, {0x3, 0x401}}, {0xfc00, 0x81, {0x3, 0x2}}, {0x5, 0x6, {0x1, 0x1f}}, {0x4, 0x1, {0x2, 0x3}}, {0xa613, 0x0, {0x0, 0xffff85ad}}, {0x5, 0x1, {0x2, 0x7fff}}, {0x1, 0x7f, {0x0, 0x7ff}}, {0x3ff, 0x7fff, {0x2, 0x7}}, {0x9, 0x3, {0x3, 0x6}}, {0x1, 0x8, {0x0, 0x12000}}, {0x4, 0x80, {0x0, 0x8}}, {0x0, 0x297, {0x2, 0x8}}, {0x28c, 0xffff, {0x2, 0x5}}, {0x0, 0x1, {0x3, 0x240000}}, {0x3, 0x101, {0x2, 0x8}}, {0x1ff, 0x8, {0x3, 0x80000001}}, {0x7, 0xff, {0x3, 0x3ff}}, {0xa8e, 0x5, {0x0, 0x81}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x80}, 0x40080) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x1e}, 0x64) [ 2043.526846][T12240] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c312fff, 0x11, r2, 0x0) 06:57:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce0cfff, 0x11, r2, 0x0) 06:57:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x1e}, 0x64) [ 2043.572225][T12267] x86/PAT: syz-executor.3:12267 map pfn RAM range req write-combining for [mem 0x17f208000-0x17f20afff], got write-back 06:57:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0xf8000, 0x0, 0x11, r2, 0x8000) [ 2043.620011][T12282] FAULT_INJECTION: forcing a failure. [ 2043.620011][T12282] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.657219][T12282] CPU: 0 PID: 12282 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 06:57:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce0dfff, 0x11, r2, 0x0) [ 2043.667409][T12282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2043.677467][T12282] Call Trace: [ 2043.680763][T12282] dump_stack+0x14a/0x1ce [ 2043.685128][T12282] ? devkmsg_release+0x11c/0x11c [ 2043.690068][T12282] ? show_regs_print_info+0x12/0x12 [ 2043.695267][T12282] should_fail+0x6fb/0x860 [ 2043.699680][T12282] ? setup_fault_attr+0x3d0/0x3d0 [ 2043.704707][T12282] ? kvmalloc_node+0xc2/0x120 [ 2043.709392][T12282] should_failslab+0x5/0x20 [ 2043.713893][T12282] __kmalloc+0x5f/0x2d0 [ 2043.718050][T12282] ? kvmalloc_node+0xc2/0x120 [ 2043.722731][T12282] kvmalloc_node+0xc2/0x120 [ 2043.727238][T12282] alloc_fdtable+0x162/0x270 [ 2043.731834][T12282] dup_fd+0x79a/0xb70 [ 2043.735831][T12282] ? security_task_alloc+0x198/0x1f0 [ 2043.741122][T12282] copy_process+0x166e/0x5110 [ 2043.745803][T12282] ? fork_idle+0x290/0x290 [ 2043.750218][T12282] ? memset+0x1f/0x40 [ 2043.754202][T12282] ? __kernel_write+0x340/0x340 [ 2043.759060][T12282] _do_fork+0x196/0x920 [ 2043.763221][T12282] ? __fsnotify_parent+0x310/0x310 06:57:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x800000, 0x0, 0x11, r2, 0x8000) [ 2043.768333][T12282] ? dup_mm+0x300/0x300 [ 2043.772491][T12282] ? __sb_end_write+0xa4/0xf0 [ 2043.777177][T12282] __x64_sys_clone+0x25e/0x2c0 [ 2043.781953][T12282] ? __ia32_sys_vfork+0x110/0x110 [ 2043.786981][T12282] do_syscall_64+0xcb/0x150 [ 2043.791492][T12282] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2043.797383][T12282] RIP: 0033:0x45d5b9 06:57:53 executing program 4 (fault-call:0 fault-nth:8): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce0efff, 0x11, r2, 0x0) 06:57:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x12, 0x0, 0x1e}, 0x64) 06:57:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c313fff, 0x11, r2, 0x0) 06:57:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x20ffa000, 0x0, 0x11, r2, 0x8000) [ 2043.801277][T12282] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2043.821840][T12282] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2043.830284][T12282] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2043.838259][T12282] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2043.846234][T12282] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2043.854218][T12282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2043.862228][T12282] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x29, 0x0, 0x1e}, 0x64) 06:57:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x170408fff, 0x0, 0x11, r2, 0x8000) 06:57:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce0ffff, 0x11, r2, 0x0) 06:57:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c314fff, 0x11, r2, 0x0) 06:57:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1b0bf1f000, 0x0, 0x11, r2, 0x8000) 06:57:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x1e}, 0x64) 06:57:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c315fff, 0x11, r2, 0x0) [ 2043.981880][T12323] FAULT_INJECTION: forcing a failure. [ 2043.981880][T12323] name failslab, interval 1, probability 0, space 0, times 0 [ 2044.084878][T12323] CPU: 0 PID: 12323 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2044.095058][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2044.105123][T12323] Call Trace: [ 2044.108420][T12323] dump_stack+0x14a/0x1ce [ 2044.112746][T12323] ? devkmsg_release+0x11c/0x11c [ 2044.117685][T12323] ? show_regs_print_info+0x12/0x12 [ 2044.122879][T12323] ? kvmalloc_node+0xc2/0x120 [ 2044.127551][T12323] should_fail+0x6fb/0x860 [ 2044.131971][T12323] ? setup_fault_attr+0x3d0/0x3d0 [ 2044.137009][T12323] ? memset+0x1f/0x40 [ 2044.140989][T12323] ? copy_fs_struct+0x48/0x230 [ 2044.145748][T12323] should_failslab+0x5/0x20 [ 2044.150244][T12323] kmem_cache_alloc+0x36/0x260 [ 2044.155005][T12323] copy_fs_struct+0x48/0x230 [ 2044.159598][T12323] copy_process+0x17a0/0x5110 [ 2044.164293][T12323] ? fork_idle+0x290/0x290 [ 2044.168711][T12323] ? memset+0x1f/0x40 [ 2044.172693][T12323] ? __kernel_write+0x340/0x340 [ 2044.177563][T12323] _do_fork+0x196/0x920 [ 2044.181715][T12323] ? __fsnotify_parent+0x310/0x310 [ 2044.186827][T12323] ? dup_mm+0x300/0x300 [ 2044.190989][T12323] ? __sb_end_write+0xa4/0xf0 [ 2044.195676][T12323] __x64_sys_clone+0x25e/0x2c0 [ 2044.200543][T12323] ? __ia32_sys_vfork+0x110/0x110 [ 2044.205577][T12323] do_syscall_64+0xcb/0x150 [ 2044.210080][T12323] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2044.216057][T12323] RIP: 0033:0x45d5b9 [ 2044.219952][T12323] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2044.245895][T12323] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2044.254313][T12323] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2044.262282][T12323] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2044.274946][T12323] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:57:53 executing program 4 (fault-call:0 fault-nth:9): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce10fff, 0x11, r2, 0x0) 06:57:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x1001, 0x0, 0x1e}, 0x64) 06:57:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x7fffdf005000, 0x0, 0x11, r2, 0x8000) 06:57:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c316fff, 0x11, r2, 0x0) [ 2044.282922][T12323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 2044.290896][T12323] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2001, 0x0, 0x1e}, 0x64) 06:57:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c317fff, 0x11, r2, 0x0) 06:57:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x11, r2, 0x8000) 06:57:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce11fff, 0x11, r2, 0x0) 06:57:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x1e}, 0x64) 06:57:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce12fff, 0x11, r2, 0x0) 06:57:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c318fff, 0x11, r2, 0x0) [ 2044.426640][T12372] FAULT_INJECTION: forcing a failure. [ 2044.426640][T12372] name failslab, interval 1, probability 0, space 0, times 0 [ 2044.527849][T12372] CPU: 0 PID: 12372 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2044.538030][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2044.548084][T12372] Call Trace: [ 2044.551675][T12372] dump_stack+0x14a/0x1ce [ 2044.556009][T12372] ? devkmsg_release+0x11c/0x11c [ 2044.560950][T12372] ? show_regs_print_info+0x12/0x12 [ 2044.566152][T12372] should_fail+0x6fb/0x860 [ 2044.570576][T12372] ? setup_fault_attr+0x3d0/0x3d0 [ 2044.575603][T12372] ? blk_crypto_keyslot_evict+0x160/0x160 [ 2044.582014][T12372] ? memset+0x1f/0x40 [ 2044.585994][T12372] ? copy_process+0x17fc/0x5110 [ 2044.590845][T12372] should_failslab+0x5/0x20 [ 2044.595614][T12372] kmem_cache_alloc+0x36/0x260 [ 2044.600379][T12372] copy_process+0x17fc/0x5110 [ 2044.606052][T12372] ? fork_idle+0x290/0x290 [ 2044.610480][T12372] ? memset+0x1f/0x40 [ 2044.614458][T12372] ? __kernel_write+0x340/0x340 [ 2044.619305][T12372] _do_fork+0x196/0x920 [ 2044.623458][T12372] ? __fsnotify_parent+0x310/0x310 [ 2044.628571][T12372] ? dup_mm+0x300/0x300 [ 2044.632727][T12372] ? __sb_end_write+0xa4/0xf0 [ 2044.637404][T12372] __x64_sys_clone+0x25e/0x2c0 [ 2044.642199][T12372] ? __ia32_sys_vfork+0x110/0x110 [ 2044.647248][T12372] do_syscall_64+0xcb/0x150 [ 2044.651775][T12372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2044.657689][T12372] RIP: 0033:0x45d5b9 [ 2044.661585][T12372] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2044.681192][T12372] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2044.689606][T12372] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2044.697578][T12372] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2044.705897][T12372] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2044.713874][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2044.721844][T12372] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:54 executing program 4 (fault-call:0 fault-nth:10): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x11, r2, 0x8000) 06:57:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) 06:57:54 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce13fff, 0x11, r2, 0x0) 06:57:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c319fff, 0x11, r2, 0x0) [ 2044.778873][T12393] FAULT_INJECTION: forcing a failure. [ 2044.778873][T12393] name failslab, interval 1, probability 0, space 0, times 0 [ 2044.851611][T12393] CPU: 0 PID: 12393 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2044.861822][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2044.871876][T12393] Call Trace: [ 2044.875178][T12393] dump_stack+0x14a/0x1ce [ 2044.879512][T12393] ? devkmsg_release+0x11c/0x11c [ 2044.884449][T12393] ? show_regs_print_info+0x12/0x12 [ 2044.889646][T12393] should_fail+0x6fb/0x860 [ 2044.894087][T12393] ? setup_fault_attr+0x3d0/0x3d0 06:57:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x8000) [ 2044.899116][T12393] ? blk_crypto_keyslot_evict+0x160/0x160 [ 2044.905702][T12393] ? memset+0x1f/0x40 [ 2044.909681][T12393] ? copy_process+0x17fc/0x5110 [ 2044.914525][T12393] should_failslab+0x5/0x20 [ 2044.919021][T12393] kmem_cache_alloc+0x36/0x260 [ 2044.923781][T12393] copy_process+0x17fc/0x5110 [ 2044.928458][T12393] ? fork_idle+0x290/0x290 [ 2044.932866][T12393] ? memset+0x1f/0x40 [ 2044.936848][T12393] ? __kernel_write+0x340/0x340 [ 2044.941700][T12393] _do_fork+0x196/0x920 [ 2044.945865][T12393] ? __fsnotify_parent+0x310/0x310 [ 2044.950998][T12393] ? dup_mm+0x300/0x300 [ 2044.955149][T12393] ? __sb_end_write+0xa4/0xf0 [ 2044.959855][T12393] __x64_sys_clone+0x25e/0x2c0 [ 2044.966357][T12393] ? __ia32_sys_vfork+0x110/0x110 [ 2044.971418][T12393] do_syscall_64+0xcb/0x150 [ 2044.975923][T12393] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2044.981815][T12393] RIP: 0033:0x45d5b9 [ 2044.985703][T12393] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2045.005302][T12393] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2045.013712][T12393] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2045.021681][T12393] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2045.029648][T12393] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2045.037621][T12393] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a 06:57:54 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce14fff, 0x11, r2, 0x0) 06:57:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x8000) [ 2045.045589][T12393] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x25) 06:57:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c31afff, 0x11, r2, 0x0) 06:57:54 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce15fff, 0x11, r2, 0x0) 06:57:54 executing program 4 (fault-call:0 fault-nth:11): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x2a) 06:57:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c31bfff, 0x11, r2, 0x0) 06:57:54 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce16fff, 0x11, r2, 0x0) [ 2045.160959][T12418] x86/PAT: syz-executor.3:12418 map pfn RAM range req write-combining for [mem 0x164108000-0x164108fff], got write-back 06:57:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x2b) [ 2045.220633][T12418] x86/PAT: syz-executor.3:12418 map pfn RAM range req write-combining for [mem 0x164708000-0x164708fff], got write-back [ 2045.233121][T12432] FAULT_INJECTION: forcing a failure. [ 2045.233121][T12432] name failslab, interval 1, probability 0, space 0, times 0 06:57:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x8000) 06:57:54 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce17fff, 0x11, r2, 0x0) 06:57:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x2d) [ 2045.333462][T12443] x86/PAT: syz-executor.3:12443 map pfn RAM range req write-combining for [mem 0x169f08000-0x169f08fff], got write-back [ 2045.372655][T12432] CPU: 1 PID: 12432 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2045.382833][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2045.392885][T12432] Call Trace: [ 2045.396177][T12432] dump_stack+0x14a/0x1ce [ 2045.400506][T12432] ? devkmsg_release+0x11c/0x11c [ 2045.405446][T12432] ? show_regs_print_info+0x12/0x12 [ 2045.410643][T12432] should_fail+0x6fb/0x860 [ 2045.415054][T12432] ? setup_fault_attr+0x3d0/0x3d0 [ 2045.420076][T12432] ? dup_mm+0x26/0x300 [ 2045.424137][T12432] should_failslab+0x5/0x20 [ 2045.428637][T12432] kmem_cache_alloc+0x36/0x260 [ 2045.433403][T12432] dup_mm+0x26/0x300 [ 2045.437301][T12432] copy_process+0x2052/0x5110 [ 2045.441982][T12432] ? fork_idle+0x290/0x290 [ 2045.446395][T12432] ? memset+0x1f/0x40 [ 2045.450384][T12432] ? __kernel_write+0x340/0x340 [ 2045.455233][T12432] _do_fork+0x196/0x920 [ 2045.459387][T12432] ? __fsnotify_parent+0x310/0x310 [ 2045.464493][T12432] ? dup_mm+0x300/0x300 [ 2045.468647][T12432] ? __sb_end_write+0xa4/0xf0 [ 2045.473318][T12432] __x64_sys_clone+0x25e/0x2c0 [ 2045.478080][T12432] ? __ia32_sys_vfork+0x110/0x110 [ 2045.483105][T12432] do_syscall_64+0xcb/0x150 [ 2045.487620][T12432] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2045.493509][T12432] RIP: 0033:0x45d5b9 [ 2045.497397][T12432] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2045.517025][T12432] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2045.525438][T12432] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:57:54 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce18fff, 0x11, r2, 0x0) 06:57:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x5, 0x11, r2, 0x8000) [ 2045.533413][T12432] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2045.541413][T12432] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2045.549388][T12432] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 2045.562260][T12432] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x2e) 06:57:55 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce19fff, 0x11, r2, 0x0) [ 2045.632595][T12456] x86/PAT: syz-executor.3:12456 map pfn RAM range req write-combining for [mem 0x155508000-0x155508fff], got write-back 06:57:55 executing program 4 (fault-call:0 fault-nth:12): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6, 0x11, r2, 0x8000) [ 2045.813180][T12472] x86/PAT: syz-executor.3:12472 map pfn RAM range req write-combining for [mem 0x15f108000-0x15f108fff], got write-back [ 2045.823024][T12473] FAULT_INJECTION: forcing a failure. [ 2045.823024][T12473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2045.850085][T12472] x86/PAT: syz-executor.3:12472 map pfn RAM range req write-combining for [mem 0x155c08000-0x155c08fff], got write-back [ 2045.862667][T12473] CPU: 1 PID: 12473 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2045.872816][T12473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2045.882867][T12473] Call Trace: [ 2045.886156][T12473] dump_stack+0x14a/0x1ce [ 2045.890478][T12473] ? devkmsg_release+0x11c/0x11c [ 2045.895457][T12473] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2045.901537][T12473] ? show_regs_print_info+0x12/0x12 [ 2045.906745][T12473] should_fail+0x6fb/0x860 [ 2045.911157][T12473] ? setup_fault_attr+0x3d0/0x3d0 [ 2045.916191][T12473] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2045.922533][T12473] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2045.928086][T12473] __get_free_pages+0xa/0x30 [ 2045.932675][T12473] pgd_alloc+0x1e/0x280 [ 2045.936828][T12473] mm_init+0x455/0x720 [ 2045.940908][T12473] dup_mm+0x84/0x300 [ 2045.944809][T12473] copy_process+0x2052/0x5110 [ 2045.949493][T12473] ? fork_idle+0x290/0x290 [ 2045.953909][T12473] ? memset+0x1f/0x40 [ 2045.957906][T12473] ? __kernel_write+0x340/0x340 [ 2045.962762][T12473] _do_fork+0x196/0x920 [ 2045.967012][T12473] ? __fsnotify_parent+0x310/0x310 [ 2045.972138][T12473] ? dup_mm+0x300/0x300 [ 2045.976296][T12473] ? __sb_end_write+0xa4/0xf0 [ 2045.980976][T12473] __x64_sys_clone+0x25e/0x2c0 [ 2045.985744][T12473] ? __ia32_sys_vfork+0x110/0x110 [ 2045.990768][T12473] do_syscall_64+0xcb/0x150 [ 2045.995266][T12473] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2046.001153][T12473] RIP: 0033:0x45d5b9 [ 2046.005041][T12473] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2046.024637][T12473] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2046.033054][T12473] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2046.041029][T12473] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2046.049005][T12473] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:57:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c31cfff, 0x11, r2, 0x0) 06:57:55 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce1afff, 0x11, r2, 0x0) 06:57:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x30) 06:57:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7, 0x11, r2, 0x8000) 06:57:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c31dfff, 0x11, r2, 0x0) [ 2046.057011][T12473] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 2046.064977][T12473] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:55 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce1bfff, 0x11, r2, 0x0) 06:57:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x11, r2, 0x8000) [ 2046.121057][T12487] x86/PAT: syz-executor.3:12487 map pfn RAM range req write-combining for [mem 0x183608000-0x183608fff], got write-back 06:57:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c31efff, 0x11, r2, 0x0) 06:57:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0x11, r2, 0x8000) 06:57:55 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce1cfff, 0x11, r2, 0x0) [ 2046.162531][T12494] x86/PAT: syz-executor.3:12494 map pfn RAM range req write-combining for [mem 0x169008000-0x169008fff], got write-back [ 2046.202503][T12501] x86/PAT: syz-executor.3:12501 map pfn RAM range req write-combining for [mem 0x16fe08000-0x16fe08fff], got write-back 06:57:55 executing program 4 (fault-call:0 fault-nth:13): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c31ffff, 0x11, r2, 0x0) 06:57:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa, 0x11, r2, 0x8000) 06:57:55 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce1dfff, 0x11, r2, 0x0) 06:57:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x4c) 06:57:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x58) 06:57:55 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce1efff, 0x11, r2, 0x0) 06:57:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c320fff, 0x11, r2, 0x0) [ 2046.297969][T12514] x86/PAT: syz-executor.3:12514 map pfn RAM range req write-combining for [mem 0x17f408000-0x17f408fff], got write-back [ 2046.305412][T12522] FAULT_INJECTION: forcing a failure. [ 2046.305412][T12522] name failslab, interval 1, probability 0, space 0, times 0 06:57:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x63) [ 2046.361993][T12522] CPU: 1 PID: 12522 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2046.372210][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2046.382263][T12522] Call Trace: [ 2046.385564][T12522] dump_stack+0x14a/0x1ce [ 2046.389903][T12522] ? devkmsg_release+0x11c/0x11c [ 2046.394848][T12522] ? show_regs_print_info+0x12/0x12 [ 2046.400049][T12522] ? prep_new_page+0x11a/0x380 [ 2046.404822][T12522] should_fail+0x6fb/0x860 [ 2046.409249][T12522] ? setup_fault_attr+0x3d0/0x3d0 [ 2046.414287][T12522] ? get_mm_exe_file+0x1de/0x230 [ 2046.419233][T12522] ? dup_mmap+0x4cf/0xc00 [ 2046.423564][T12522] should_failslab+0x5/0x20 [ 2046.432604][T12522] kmem_cache_alloc+0x36/0x260 [ 2046.437379][T12522] dup_mmap+0x4cf/0xc00 [ 2046.441544][T12522] ? __delayed_free_task+0x20/0x20 [ 2046.446665][T12522] ? mm_init+0x5c6/0x720 [ 2046.450912][T12522] dup_mm+0x98/0x300 [ 2046.454850][T12522] copy_process+0x2052/0x5110 [ 2046.459544][T12522] ? fork_idle+0x290/0x290 [ 2046.463958][T12522] ? memset+0x1f/0x40 [ 2046.467942][T12522] ? __kernel_write+0x340/0x340 [ 2046.472791][T12522] _do_fork+0x196/0x920 [ 2046.476945][T12522] ? __fsnotify_parent+0x310/0x310 [ 2046.482054][T12522] ? dup_mm+0x300/0x300 [ 2046.486215][T12522] ? __sb_end_write+0xa4/0xf0 [ 2046.490891][T12522] __x64_sys_clone+0x25e/0x2c0 [ 2046.495658][T12522] ? __ia32_sys_vfork+0x110/0x110 [ 2046.500771][T12522] do_syscall_64+0xcb/0x150 [ 2046.505273][T12522] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2046.511164][T12522] RIP: 0033:0x45d5b9 [ 2046.515056][T12522] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2046.541165][T12522] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2046.550189][T12522] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:57:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c321fff, 0x11, r2, 0x0) 06:57:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce1ffff, 0x11, r2, 0x0) 06:57:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x68) [ 2046.558167][T12522] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2046.566141][T12522] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2046.574114][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 2046.582085][T12522] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:56 executing program 4 (fault-call:0 fault-nth:14): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xb, 0x11, r2, 0x8000) 06:57:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce20fff, 0x11, r2, 0x0) 06:57:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c322fff, 0x11, r2, 0x0) 06:57:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x69) 06:57:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x6c) 06:57:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce21fff, 0x11, r2, 0x0) 06:57:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc, 0x11, r2, 0x8000) [ 2046.730894][T12554] x86/PAT: syz-executor.3:12554 map pfn RAM range req write-combining for [mem 0x164308000-0x164308fff], got write-back 06:57:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c323fff, 0x11, r2, 0x0) 06:57:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce22fff, 0x11, r2, 0x0) 06:57:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x6f) [ 2046.797427][T12570] x86/PAT: syz-executor.3:12570 map pfn RAM range req write-combining for [mem 0x15eb08000-0x15eb08fff], got write-back [ 2046.798081][T12562] FAULT_INJECTION: forcing a failure. [ 2046.798081][T12562] name failslab, interval 1, probability 0, space 0, times 0 06:57:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xd, 0x11, r2, 0x8000) [ 2046.884454][T12585] x86/PAT: syz-executor.3:12585 map pfn RAM range req write-combining for [mem 0x161308000-0x161308fff], got write-back [ 2046.908173][T12562] CPU: 0 PID: 12562 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2046.918353][T12562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2046.928426][T12562] Call Trace: [ 2046.931752][T12562] dump_stack+0x14a/0x1ce [ 2046.936072][T12562] ? devkmsg_release+0x11c/0x11c [ 2046.940998][T12562] ? copy_page_range+0x1656/0x1710 [ 2046.946275][T12562] ? show_regs_print_info+0x12/0x12 [ 2046.951460][T12562] should_fail+0x6fb/0x860 [ 2046.955863][T12562] ? setup_fault_attr+0x3d0/0x3d0 [ 2046.960873][T12562] ? dup_mmap+0x4cf/0xc00 [ 2046.965203][T12562] should_failslab+0x5/0x20 [ 2046.969692][T12562] kmem_cache_alloc+0x36/0x260 [ 2046.974452][T12562] dup_mmap+0x4cf/0xc00 [ 2046.978594][T12562] ? __delayed_free_task+0x20/0x20 [ 2046.983723][T12562] ? mm_init+0x5c6/0x720 [ 2046.987949][T12562] dup_mm+0x98/0x300 [ 2046.991833][T12562] copy_process+0x2052/0x5110 [ 2046.996499][T12562] ? fork_idle+0x290/0x290 [ 2047.000896][T12562] ? memset+0x1f/0x40 [ 2047.004863][T12562] ? __kernel_write+0x340/0x340 [ 2047.010058][T12562] _do_fork+0x196/0x920 [ 2047.014198][T12562] ? __fsnotify_parent+0x310/0x310 [ 2047.019292][T12562] ? dup_mm+0x300/0x300 [ 2047.023458][T12562] ? __sb_end_write+0xa4/0xf0 [ 2047.028158][T12562] __x64_sys_clone+0x25e/0x2c0 [ 2047.032910][T12562] ? __ia32_sys_vfork+0x110/0x110 [ 2047.037923][T12562] do_syscall_64+0xcb/0x150 [ 2047.042419][T12562] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2047.048314][T12562] RIP: 0033:0x45d5b9 [ 2047.052200][T12562] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2047.071790][T12562] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 06:57:56 executing program 4 (fault-call:0 fault-nth:15): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c324fff, 0x11, r2, 0x0) 06:57:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x70) 06:57:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce23fff, 0x11, r2, 0x0) 06:57:56 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x29) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c854}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @multicast1}, &(0x7f00000001c0)=0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe, 0x11, r2, 0x8000) [ 2047.080200][T12562] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2047.088164][T12562] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2047.096144][T12562] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2047.104118][T12562] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 2047.112076][T12562] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x73) 06:57:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce24fff, 0x11, r2, 0x0) 06:57:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce25fff, 0x11, r2, 0x0) 06:57:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c325fff, 0x11, r2, 0x0) [ 2047.181140][T12600] x86/PAT: syz-executor.3:12600 map pfn RAM range req write-combining for [mem 0x165d08000-0x165d08fff], got write-back 06:57:56 executing program 5: clone(0xf1180800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x10, 0x11, r2, 0x8000) [ 2047.223009][T12610] FAULT_INJECTION: forcing a failure. [ 2047.223009][T12610] name failslab, interval 1, probability 0, space 0, times 0 [ 2047.270383][T12625] x86/PAT: syz-executor.3:12625 map pfn RAM range req write-combining for [mem 0x176308000-0x176308fff], got write-back [ 2047.300074][T12610] CPU: 0 PID: 12610 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2047.310995][T12610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2047.323838][T12610] Call Trace: [ 2047.327155][T12610] dump_stack+0x14a/0x1ce [ 2047.331496][T12610] ? devkmsg_release+0x11c/0x11c [ 2047.336435][T12610] ? show_regs_print_info+0x12/0x12 [ 2047.341624][T12610] ? dup_mm+0x98/0x300 [ 2047.345685][T12610] ? _do_fork+0x196/0x920 [ 2047.350008][T12610] ? __x64_sys_clone+0x25e/0x2c0 [ 2047.354928][T12610] ? do_syscall_64+0xcb/0x150 [ 2047.359589][T12610] should_fail+0x6fb/0x860 [ 2047.363998][T12610] ? setup_fault_attr+0x3d0/0x3d0 [ 2047.369044][T12610] ? anon_vma_clone+0xa1/0x4b0 [ 2047.373803][T12610] should_failslab+0x5/0x20 [ 2047.378301][T12610] kmem_cache_alloc+0x36/0x260 [ 2047.383059][T12610] anon_vma_clone+0xa1/0x4b0 [ 2047.387644][T12610] anon_vma_fork+0x8c/0x4f0 [ 2047.392137][T12610] ? dup_mmap+0x4cf/0xc00 [ 2047.396455][T12610] ? dup_mmap+0x4f8/0xc00 [ 2047.400771][T12610] dup_mmap+0x5a2/0xc00 [ 2047.404941][T12610] ? __delayed_free_task+0x20/0x20 [ 2047.410058][T12610] ? mm_init+0x5c6/0x720 [ 2047.414304][T12610] dup_mm+0x98/0x300 [ 2047.418187][T12610] copy_process+0x2052/0x5110 [ 2047.422855][T12610] ? fork_idle+0x290/0x290 [ 2047.427256][T12610] ? memset+0x1f/0x40 [ 2047.431229][T12610] ? __kernel_write+0x340/0x340 [ 2047.436082][T12610] _do_fork+0x196/0x920 [ 2047.440232][T12610] ? __fsnotify_parent+0x310/0x310 [ 2047.445378][T12610] ? dup_mm+0x300/0x300 [ 2047.449542][T12610] ? __sb_end_write+0xa4/0xf0 [ 2047.454214][T12610] __x64_sys_clone+0x25e/0x2c0 [ 2047.458968][T12610] ? __ia32_sys_vfork+0x110/0x110 [ 2047.463990][T12610] do_syscall_64+0xcb/0x150 [ 2047.468495][T12610] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2047.474373][T12610] RIP: 0033:0x45d5b9 [ 2047.478250][T12610] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2047.497866][T12610] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2047.506264][T12610] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:57:57 executing program 4 (fault-call:0 fault-nth:16): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c326fff, 0x11, r2, 0x0) 06:57:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x74) 06:57:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x26c102, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x4}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce26fff, 0x11, r2, 0x0) 06:57:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x11, 0x11, r2, 0x8000) [ 2047.514244][T12610] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2047.522220][T12610] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2047.530187][T12610] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 2047.538175][T12610] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c [ 2047.556767][T12625] x86/PAT: syz-executor.3:12625 map pfn RAM range req write-combining for [mem 0x16d908000-0x16d908fff], got write-back 06:57:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x75) 06:57:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x78) 06:57:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x12, 0x11, r2, 0x8000) 06:57:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c327fff, 0x11, r2, 0x0) [ 2047.616527][T12643] x86/PAT: syz-executor.3:12643 map pfn RAM range req write-combining for [mem 0x175508000-0x175508fff], got write-back [ 2047.635041][T12648] FAULT_INJECTION: forcing a failure. [ 2047.635041][T12648] name failslab, interval 1, probability 0, space 0, times 0 [ 2047.659162][T12648] CPU: 1 PID: 12648 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2047.670297][T12648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2047.680380][T12648] Call Trace: [ 2047.683672][T12648] dump_stack+0x14a/0x1ce [ 2047.688004][T12648] ? devkmsg_release+0x11c/0x11c [ 2047.692976][T12648] ? show_regs_print_info+0x12/0x12 [ 2047.698185][T12648] should_fail+0x6fb/0x860 [ 2047.702603][T12648] ? setup_fault_attr+0x3d0/0x3d0 [ 2047.707636][T12648] ? anon_vma_clone+0xa1/0x4b0 [ 2047.712396][T12648] should_failslab+0x5/0x20 [ 2047.716885][T12648] kmem_cache_alloc+0x36/0x260 [ 2047.721636][T12648] ? __anon_vma_interval_tree_augment_rotate+0x1c4/0x1d0 [ 2047.728676][T12648] anon_vma_clone+0xa1/0x4b0 [ 2047.733280][T12648] anon_vma_fork+0x8c/0x4f0 [ 2047.737794][T12648] ? dup_mmap+0x4cf/0xc00 [ 2047.742114][T12648] ? dup_mmap+0x4f8/0xc00 [ 2047.746430][T12648] dup_mmap+0x5a2/0xc00 [ 2047.750577][T12648] ? __delayed_free_task+0x20/0x20 [ 2047.755704][T12648] ? mm_init+0x5c6/0x720 [ 2047.759934][T12648] dup_mm+0x98/0x300 [ 2047.763819][T12648] copy_process+0x2052/0x5110 [ 2047.768487][T12648] ? fork_idle+0x290/0x290 [ 2047.772895][T12648] ? memset+0x1f/0x40 [ 2047.776896][T12648] ? __kernel_write+0x340/0x340 [ 2047.781734][T12648] _do_fork+0x196/0x920 [ 2047.785883][T12648] ? __fsnotify_parent+0x310/0x310 [ 2047.790982][T12648] ? dup_mm+0x300/0x300 [ 2047.795151][T12648] ? __sb_end_write+0xa4/0xf0 [ 2047.799841][T12648] __x64_sys_clone+0x25e/0x2c0 [ 2047.804596][T12648] ? __ia32_sys_vfork+0x110/0x110 [ 2047.809614][T12648] do_syscall_64+0xcb/0x150 [ 2047.814136][T12648] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2047.820027][T12648] RIP: 0033:0x45d5b9 [ 2047.823913][T12648] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2047.844590][T12648] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2047.852998][T12648] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:57:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce27fff, 0x11, r2, 0x0) 06:57:57 executing program 5: clone(0x87280100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='veth0_to_bond\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000140)={0x4, 0x1800000000000, 0x3, 0x3, 0x3, [0x6, 0xfb, 0x262, 0xa935]}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x81) [ 2047.860998][T12648] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2047.868969][T12648] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2047.876939][T12648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 2047.885060][T12648] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:57 executing program 4 (fault-call:0 fault-nth:17): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce28fff, 0x11, r2, 0x0) 06:57:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x7a) 06:57:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c328fff, 0x11, r2, 0x0) [ 2047.935117][T12666] x86/PAT: syz-executor.3:12666 map pfn RAM range req write-combining for [mem 0x16f308000-0x16f308fff], got write-back 06:57:57 executing program 5: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000000)={0xe31, "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"}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce29fff, 0x11, r2, 0x0) 06:57:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x202a101c) 06:57:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c329fff, 0x11, r2, 0x0) 06:57:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x25, 0x11, r2, 0x8000) 06:57:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce2afff, 0x11, r2, 0x0) [ 2048.015432][T12688] FAULT_INJECTION: forcing a failure. [ 2048.015432][T12688] name failslab, interval 1, probability 0, space 0, times 0 06:57:57 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) rt_tgsigqueueinfo(r0, 0x0, 0x16, &(0x7f0000000040)={0x20, 0x4, 0x1}) 06:57:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000040)=""/18) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2048.072455][T12702] x86/PAT: syz-executor.3:12702 map pfn RAM range req write-combining for [mem 0x153b08000-0x153b08fff], got write-back [ 2048.122052][T12688] CPU: 1 PID: 12688 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2048.133532][T12688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2048.143913][T12688] Call Trace: [ 2048.147385][T12688] dump_stack+0x14a/0x1ce [ 2048.153122][T12688] ? devkmsg_release+0x11c/0x11c [ 2048.158079][T12688] ? show_regs_print_info+0x12/0x12 [ 2048.164310][T12688] should_fail+0x6fb/0x860 [ 2048.169604][T12688] ? setup_fault_attr+0x3d0/0x3d0 [ 2048.175191][T12688] ? anon_vma_clone+0xa1/0x4b0 [ 2048.180053][T12688] should_failslab+0x5/0x20 [ 2048.184555][T12688] kmem_cache_alloc+0x36/0x260 [ 2048.189358][T12688] anon_vma_clone+0xa1/0x4b0 [ 2048.194007][T12688] anon_vma_fork+0x8c/0x4f0 [ 2048.198727][T12688] ? dup_mmap+0x4cf/0xc00 [ 2048.203236][T12688] ? dup_mmap+0x4f8/0xc00 [ 2048.207910][T12688] dup_mmap+0x5a2/0xc00 [ 2048.212073][T12688] ? __delayed_free_task+0x20/0x20 [ 2048.217351][T12688] ? mm_init+0x5c6/0x720 [ 2048.221750][T12688] dup_mm+0x98/0x300 [ 2048.225763][T12688] copy_process+0x2052/0x5110 [ 2048.230449][T12688] ? fork_idle+0x290/0x290 [ 2048.234974][T12688] ? memset+0x1f/0x40 [ 2048.239088][T12688] ? __kernel_write+0x340/0x340 [ 2048.244112][T12688] _do_fork+0x196/0x920 [ 2048.248448][T12688] ? __fsnotify_parent+0x310/0x310 [ 2048.253647][T12688] ? dup_mm+0x300/0x300 [ 2048.258203][T12688] ? __sb_end_write+0xa4/0xf0 [ 2048.262881][T12688] __x64_sys_clone+0x25e/0x2c0 [ 2048.267791][T12688] ? __ia32_sys_vfork+0x110/0x110 [ 2048.273654][T12688] do_syscall_64+0xcb/0x150 [ 2048.278225][T12688] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2048.284210][T12688] RIP: 0033:0x45d5b9 [ 2048.288288][T12688] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2048.308690][T12688] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2048.317471][T12688] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2048.325458][T12688] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2048.333580][T12688] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2048.343684][T12688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 2048.352673][T12688] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:57 executing program 4 (fault-call:0 fault-nth:18): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c32afff, 0x11, r2, 0x0) 06:57:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x48, 0x11, r2, 0x8000) 06:57:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) getsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f0000000240)=""/197, &(0x7f0000000040)=0xc5) r4 = inotify_init() fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000080)) 06:57:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce2bfff, 0x11, r2, 0x0) 06:57:57 executing program 5: clone(0x23000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file1\x00', 0x4442c0, 0x0) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r1) dup(r1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x800, 0xb4f8}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 06:57:57 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00') 06:57:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/192, 0xc0}) 06:57:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce2cfff, 0x11, r2, 0x0) 06:57:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c32bfff, 0x11, r2, 0x0) [ 2048.447291][T12727] x86/PAT: syz-executor.3:12727 map pfn RAM range req write-combining for [mem 0x154108000-0x154108fff], got write-back [ 2048.500854][T12742] FAULT_INJECTION: forcing a failure. [ 2048.500854][T12742] name failslab, interval 1, probability 0, space 0, times 0 06:57:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @multicast1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x2c}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x20080) 06:57:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce2dfff, 0x11, r2, 0x0) [ 2048.612447][T12742] CPU: 0 PID: 12742 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2048.623151][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2048.633456][T12742] Call Trace: [ 2048.636771][T12742] dump_stack+0x14a/0x1ce [ 2048.641307][T12742] ? devkmsg_release+0x11c/0x11c [ 2048.646378][T12742] ? show_regs_print_info+0x12/0x12 [ 2048.651934][T12742] should_fail+0x6fb/0x860 [ 2048.656958][T12742] ? setup_fault_attr+0x3d0/0x3d0 [ 2048.662195][T12742] ? anon_vma_fork+0xed/0x4f0 [ 2048.667232][T12742] should_failslab+0x5/0x20 [ 2048.671792][T12742] kmem_cache_alloc+0x36/0x260 [ 2048.676788][T12742] anon_vma_fork+0xed/0x4f0 [ 2048.681498][T12742] ? dup_mmap+0x4cf/0xc00 [ 2048.685911][T12742] ? dup_mmap+0x4f8/0xc00 [ 2048.690406][T12742] dup_mmap+0x5a2/0xc00 [ 2048.694717][T12742] ? __delayed_free_task+0x20/0x20 [ 2048.699981][T12742] ? mm_init+0x5c6/0x720 [ 2048.704441][T12742] dup_mm+0x98/0x300 [ 2048.708529][T12742] copy_process+0x2052/0x5110 [ 2048.713400][T12742] ? fork_idle+0x290/0x290 [ 2048.717818][T12742] ? memset+0x1f/0x40 [ 2048.721859][T12742] ? __kernel_write+0x340/0x340 [ 2048.726792][T12742] _do_fork+0x196/0x920 [ 2048.730950][T12742] ? __fsnotify_parent+0x310/0x310 [ 2048.736201][T12742] ? dup_mm+0x300/0x300 [ 2048.740355][T12742] ? __sb_end_write+0xa4/0xf0 [ 2048.745037][T12742] __x64_sys_clone+0x25e/0x2c0 [ 2048.749801][T12742] ? __ia32_sys_vfork+0x110/0x110 [ 2048.754829][T12742] do_syscall_64+0xcb/0x150 [ 2048.759330][T12742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2048.765224][T12742] RIP: 0033:0x45d5b9 [ 2048.769365][T12742] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2048.788967][T12742] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2048.797385][T12742] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2048.805436][T12742] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2048.813409][T12742] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2048.821381][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 2048.829352][T12742] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:58 executing program 4 (fault-call:0 fault-nth:19): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0xb, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x1, 0x2, 0x6, 0x7, 0x18, 0x4}, @call={0x85, 0x0, 0x0, 0x46}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @alu={0x7, 0x0, 0xd, 0x3, 0x7, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x33}, @generic={0x7, 0x0, 0x5, 0x401, 0x1}, @generic={0x13, 0x2, 0xc, 0x314, 0x6}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:57:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4c, 0x11, r2, 0x8000) 06:57:58 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) init_module(&(0x7f0000000000)='[%[[\\\xd3,/\x00', 0x9, &(0x7f0000000040)='\\\x00') 06:57:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce2efff, 0x11, r2, 0x0) 06:57:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c32cfff, 0x11, r2, 0x0) 06:57:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce2ffff, 0x11, r2, 0x0) 06:57:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x800) 06:57:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c32dfff, 0x11, r2, 0x0) [ 2049.035393][T12779] x86/PAT: syz-executor.3:12779 map pfn RAM range req write-combining for [mem 0x151d08000-0x151d08fff], got write-back 06:57:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce30fff, 0x11, r2, 0x0) 06:57:58 executing program 5: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@remote, 0x4e22, 0x400, 0x4e23, 0xa9f2, 0xa, 0x80, 0x20, 0x5e, 0x0, r3}, {0x4, 0xfff, 0x4, 0x7f, 0x1, 0x10000, 0x2, 0xffffffff}, {0x9, 0x95, 0x7, 0x1}, 0x9, 0x6e6bb4, 0x2, 0x0, 0x1}, {{@in6=@empty, 0x4d2, 0xff}, 0xeb51a1845ac56503, @in6=@ipv4={[], [], @private=0xa010100}, 0x3504, 0x3, 0x1, 0xc4, 0x56}}, 0xe8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x60, 0x11, r2, 0x8000) [ 2049.091407][T12792] FAULT_INJECTION: forcing a failure. [ 2049.091407][T12792] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.169723][T12806] x86/PAT: syz-executor.3:12806 map pfn RAM range req write-combining for [mem 0x173608000-0x173608fff], got write-back [ 2049.206165][T12792] CPU: 0 PID: 12792 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2049.216446][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2049.226535][T12792] Call Trace: [ 2049.229962][T12792] dump_stack+0x14a/0x1ce [ 2049.234293][T12792] ? devkmsg_release+0x11c/0x11c [ 2049.239404][T12792] ? show_regs_print_info+0x12/0x12 [ 2049.244598][T12792] should_fail+0x6fb/0x860 [ 2049.249155][T12792] ? setup_fault_attr+0x3d0/0x3d0 [ 2049.254238][T12792] ? anon_vma_fork+0x1c9/0x4f0 [ 2049.258998][T12792] should_failslab+0x5/0x20 [ 2049.263601][T12792] kmem_cache_alloc+0x36/0x260 [ 2049.268366][T12792] anon_vma_fork+0x1c9/0x4f0 [ 2049.273110][T12792] dup_mmap+0x5a2/0xc00 [ 2049.277260][T12792] ? __delayed_free_task+0x20/0x20 [ 2049.282452][T12792] ? mm_init+0x5c6/0x720 [ 2049.286689][T12792] dup_mm+0x98/0x300 [ 2049.290604][T12792] copy_process+0x2052/0x5110 [ 2049.295334][T12792] ? fork_idle+0x290/0x290 [ 2049.300137][T12792] ? memset+0x1f/0x40 [ 2049.304119][T12792] ? __kernel_write+0x340/0x340 [ 2049.309018][T12792] _do_fork+0x196/0x920 [ 2049.313170][T12792] ? __fsnotify_parent+0x310/0x310 [ 2049.318364][T12792] ? dup_mm+0x300/0x300 [ 2049.322523][T12792] ? __sb_end_write+0xa4/0xf0 [ 2049.327331][T12792] __x64_sys_clone+0x25e/0x2c0 [ 2049.332099][T12792] ? __ia32_sys_vfork+0x110/0x110 [ 2049.337355][T12792] do_syscall_64+0xcb/0x150 [ 2049.342215][T12792] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2049.348187][T12792] RIP: 0033:0x45d5b9 [ 2049.352226][T12792] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2049.372120][T12792] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2049.380680][T12792] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2049.388647][T12792] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2049.396617][T12792] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2049.404762][T12792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 2049.412733][T12792] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:58 executing program 4 (fault-call:0 fault-nth:20): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c32efff, 0x11, r2, 0x0) 06:57:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000000c0)=@routing={0x1d, 0x2, 0x0, 0x7f, 0x0, [@loopback]}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r5 = signalfd(r1, &(0x7f0000019240)={[0x6]}, 0x8) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0xc, 0x3, 0x9, 0x1c, 0x4, 0x1, 0x1, 0x8}}) 06:57:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce31fff, 0x11, r2, 0x0) 06:57:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x68, 0x11, r2, 0x8000) 06:57:58 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_getres(0x3, &(0x7f0000000000)) 06:57:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0xa7, &(0x7f0000000040)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:57:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c32ffff, 0x11, r2, 0x0) 06:57:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6c, 0x11, r2, 0x8000) 06:57:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce32fff, 0x11, r2, 0x0) [ 2049.459918][T12819] x86/PAT: syz-executor.3:12819 map pfn RAM range req write-combining for [mem 0x172308000-0x172308fff], got write-back 06:57:59 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioprio_get$pid(0x2, r0) 06:57:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000005000000d0000800000000000240000523c1084009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2049.525728][T12837] FAULT_INJECTION: forcing a failure. [ 2049.525728][T12837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2049.537175][T12842] x86/PAT: syz-executor.3:12842 map pfn RAM range req write-combining for [mem 0x15f208000-0x15f208fff], got write-back [ 2049.597759][T12837] CPU: 0 PID: 12837 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2049.607955][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2049.618028][T12837] Call Trace: [ 2049.621353][T12837] dump_stack+0x14a/0x1ce [ 2049.625963][T12837] ? devkmsg_release+0x11c/0x11c [ 2049.631007][T12837] ? show_regs_print_info+0x12/0x12 [ 2049.636206][T12837] should_fail+0x6fb/0x860 [ 2049.640715][T12837] ? setup_fault_attr+0x3d0/0x3d0 [ 2049.645740][T12837] ? __kasan_kmalloc+0x189/0x1c0 [ 2049.650677][T12837] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2049.656191][T12837] ? dup_mmap+0x5a2/0xc00 [ 2049.660520][T12837] ? dup_mm+0x98/0x300 [ 2049.664585][T12837] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2049.670125][T12837] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2049.676458][T12837] get_zeroed_page+0x15/0x40 [ 2049.681048][T12837] __pud_alloc+0x33/0x180 [ 2049.685380][T12837] copy_page_range+0x160b/0x1710 [ 2049.690581][T12837] ? up_read+0x10/0x10 [ 2049.694653][T12837] ? print_bad_pte+0x650/0x650 [ 2049.699410][T12837] ? memset+0x1f/0x40 [ 2049.703387][T12837] ? init_admin_reserve+0xc0/0xc0 [ 2049.708605][T12837] dup_mmap+0x870/0xc00 [ 2049.712763][T12837] ? __delayed_free_task+0x20/0x20 [ 2049.717871][T12837] ? mm_init+0x5c6/0x720 [ 2049.722105][T12837] dup_mm+0x98/0x300 [ 2049.726136][T12837] copy_process+0x2052/0x5110 [ 2049.730903][T12837] ? fork_idle+0x290/0x290 [ 2049.735401][T12837] ? memset+0x1f/0x40 [ 2049.739547][T12837] ? __kernel_write+0x340/0x340 [ 2049.744479][T12837] _do_fork+0x196/0x920 [ 2049.748683][T12837] ? __fsnotify_parent+0x310/0x310 [ 2049.753971][T12837] ? dup_mm+0x300/0x300 [ 2049.758252][T12837] ? __sb_end_write+0xa4/0xf0 [ 2049.762993][T12837] __x64_sys_clone+0x25e/0x2c0 [ 2049.767759][T12837] ? __ia32_sys_vfork+0x110/0x110 [ 2049.772848][T12837] do_syscall_64+0xcb/0x150 [ 2049.777356][T12837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2049.783337][T12837] RIP: 0033:0x45d5b9 [ 2049.787316][T12837] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2049.807007][T12837] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2049.815420][T12837] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2049.823393][T12837] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2049.831461][T12837] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2049.839438][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 06:57:59 executing program 4 (fault-call:0 fault-nth:21): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce33fff, 0x11, r2, 0x0) 06:57:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c330fff, 0x11, r2, 0x0) 06:57:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x74, 0x11, r2, 0x8000) 06:57:59 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_init1(0x800) 06:57:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000506010c00000000000000000a00000505000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x811) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2049.847410][T12837] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce34fff, 0x11, r2, 0x0) 06:57:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c331fff, 0x11, r2, 0x0) 06:57:59 executing program 5: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) 06:57:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2049.911403][T12866] x86/PAT: syz-executor.3:12866 map pfn RAM range req write-combining for [mem 0x174008000-0x174008fff], got write-back [ 2049.918370][T12871] FAULT_INJECTION: forcing a failure. [ 2049.918370][T12871] name fail_page_alloc, interval 1, probability 0, space 0, times 0 06:57:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce35fff, 0x11, r2, 0x0) 06:57:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7a, 0x11, r2, 0x8000) [ 2050.003039][T12871] CPU: 1 PID: 12871 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2050.013382][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.023677][T12871] Call Trace: [ 2050.026981][T12871] dump_stack+0x14a/0x1ce [ 2050.031323][T12871] ? devkmsg_release+0x11c/0x11c [ 2050.036270][T12871] ? show_regs_print_info+0x12/0x12 [ 2050.041473][T12871] ? kasan_alloc_pages+0x4a/0x60 [ 2050.046416][T12871] should_fail+0x6fb/0x860 [ 2050.050851][T12871] ? setup_fault_attr+0x3d0/0x3d0 [ 2050.055897][T12871] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2050.061297][T12871] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2050.066963][T12871] ? _raw_spin_trylock_bh+0x190/0x190 [ 2050.072351][T12871] __pmd_alloc+0x3a/0x1f0 [ 2050.076842][T12871] copy_page_range+0x1568/0x1710 [ 2050.081781][T12871] ? up_read+0x10/0x10 [ 2050.085976][T12871] ? print_bad_pte+0x650/0x650 [ 2050.090960][T12871] ? memset+0x1f/0x40 [ 2050.095009][T12871] ? init_admin_reserve+0xc0/0xc0 [ 2050.100036][T12871] dup_mmap+0x870/0xc00 [ 2050.104194][T12871] ? __delayed_free_task+0x20/0x20 [ 2050.109477][T12871] ? mm_init+0x5c6/0x720 [ 2050.113715][T12871] dup_mm+0x98/0x300 [ 2050.117637][T12871] copy_process+0x2052/0x5110 [ 2050.122317][T12871] ? fork_idle+0x290/0x290 [ 2050.126724][T12871] ? memset+0x1f/0x40 [ 2050.130844][T12871] ? __kernel_write+0x340/0x340 [ 2050.135693][T12871] _do_fork+0x196/0x920 [ 2050.139950][T12871] ? __fsnotify_parent+0x310/0x310 [ 2050.145065][T12871] ? dup_mm+0x300/0x300 [ 2050.149214][T12871] ? __sb_end_write+0xa4/0xf0 [ 2050.154070][T12871] __x64_sys_clone+0x25e/0x2c0 [ 2050.158838][T12871] ? __ia32_sys_vfork+0x110/0x110 [ 2050.164096][T12871] do_syscall_64+0xcb/0x150 [ 2050.168816][T12871] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2050.174955][T12871] RIP: 0033:0x45d5b9 [ 2050.178933][T12871] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2050.198995][T12871] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2050.207413][T12871] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2050.215473][T12871] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2050.223446][T12871] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2050.231640][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 2050.239875][T12871] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:57:59 executing program 4 (fault-call:0 fault-nth:22): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:57:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c332fff, 0x11, r2, 0x0) 06:57:59 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={@private2={0xfc, 0x2, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @empty}, 0x8, 0x800, 0x8, 0x400, 0x3, 0x80010200, r4}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x10010, r6, 0xfff) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000280)={0x1, 0x2, [@local, @local]}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x12c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x60c}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xcd}, {0x6, 0x11, 0x8000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0xff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb62}, {0x6, 0x11, 0x7fff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4008005) 06:57:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) accept(r4, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x4, 0x6, 0x9, 0x3, 0x8, 0xffffffffffffffff}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6eb31324}, @exit], &(0x7f0000000140)='GPL\x00', 0x104, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x406, r1) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000019240)={0x2c, 0x5, [], [@calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0x8, [0x0, 0x0, 0x5, 0x3b]}}]}, 0x38) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000080)={0x0, 0xff}) 06:57:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce36fff, 0x11, r2, 0x0) 06:57:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x300, 0x11, r2, 0x8000) [ 2050.286210][T12896] x86/PAT: syz-executor.3:12896 map pfn RAM range req write-combining for [mem 0x167108000-0x167108fff], got write-back 06:57:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c333fff, 0x11, r2, 0x0) 06:57:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce37fff, 0x11, r2, 0x0) 06:57:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x500, 0x11, r2, 0x8000) [ 2050.346862][T12912] x86/PAT: syz-executor.3:12912 map pfn RAM range req write-combining for [mem 0x15c108000-0x15c108fff], got write-back [ 2050.347172][T12910] FAULT_INJECTION: forcing a failure. [ 2050.347172][T12910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 06:57:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c334fff, 0x11, r2, 0x0) [ 2050.410608][T12910] CPU: 1 PID: 12910 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2050.421701][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.432359][T12910] Call Trace: [ 2050.435756][T12910] dump_stack+0x14a/0x1ce [ 2050.440530][T12910] ? devkmsg_release+0x11c/0x11c [ 2050.445594][T12910] ? arch_stack_walk+0xd8/0x120 [ 2050.450950][T12910] ? show_regs_print_info+0x12/0x12 06:57:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5) socketpair(0x9, 0x6, 0x9bd2942, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000006c0)=0xe8) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="00000000d68100000000000000cbc98903c4bfbfc141b9ed0433e8e9bfc7639b215c39d88655909f717aadab671d98bc8cfbf3f959e93f992d", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x114}, 0x1, 0x0, 0x0, 0x8001}, 0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000019300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000019400)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r7 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r8 = dup(r7) r9 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r10 = dup(r9) readlinkat(r10, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) readlinkat(r10, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) dup(r7) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f00000195c0)=ANY=[@ANYBLOB="18140000782e200b45ca20e849a8289575b2d48cdc9a3f3b52fe01c2f95497460bbf1e86b6b60424e9ddf13478a35cbb9172d990e17c3fde08259cf327713fd32d0af6a25718425836cbb3ce3da20d9a04c4319e0d8c7b8a9d9a7b81ab72aff88fded1d8e928a2913e3bc6853aeea1eb12b5856282bcbde2b8c8d65a58136b3f65c50510e66746295a2e53b847ddfe8e9104965cf2b846cfdf38a320097ac9f71bf8ab8e10e90807aadbdd6de9249d0acf5839be15216e57264467f771465aabd09abf32052006d82fbf1a463a712173069bd56b0176ae0ec1892b00"/229, @ANYRES32, @ANYBLOB="000000000000000085100000fbffffff32688000faffffff18000000300500000000000000000000180000000600"/56], &(0x7f0000000140)='GPL\x00', 0x8003, 0x99, &(0x7f0000000180)=""/153, 0x40f00, 0x5, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r11 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r11) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000019340)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, {0x306, @local}, 0x8, {0x2, 0x4e22, @remote}, 'veth1_to_team\x00'}) [ 2050.456826][T12910] ? should_fail_alloc_page+0x50/0x50 [ 2050.462495][T12910] should_fail+0x6fb/0x860 [ 2050.466931][T12910] ? setup_fault_attr+0x3d0/0x3d0 [ 2050.471969][T12910] ? get_page_from_freelist+0x486/0x7c0 [ 2050.477528][T12910] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2050.483099][T12910] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2050.488887][T12910] ? _raw_spin_lock+0xa1/0x170 [ 2050.493818][T12910] ? _raw_spin_trylock_bh+0x190/0x190 [ 2050.499199][T12910] pte_alloc_one+0x1b/0xb0 [ 2050.503626][T12910] __pte_alloc+0x1d/0x1d0 06:58:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000500000002e0000000000000024000000000000009500000000e60000df415c3d3316bc10705b322c63d2344f7bbe049eeb3b2f5d3050978295362824f69718ed39d9012e9b5cc5f0c760ccb8c2e64be47b473c3b8a8c90b1bf1328231a490cd4f938740ac1480cf59b983691b52d29cc4b3be95674f5def31a9c8a"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2050.507969][T12910] copy_page_range+0x1452/0x1710 [ 2050.513631][T12910] ? print_bad_pte+0x650/0x650 [ 2050.518404][T12910] ? init_admin_reserve+0xc0/0xc0 [ 2050.523441][T12910] dup_mmap+0x870/0xc00 [ 2050.527612][T12910] ? __delayed_free_task+0x20/0x20 [ 2050.532736][T12910] ? mm_init+0x5c6/0x720 [ 2050.536989][T12910] dup_mm+0x98/0x300 [ 2050.541162][T12910] copy_process+0x2052/0x5110 [ 2050.545877][T12910] ? fork_idle+0x290/0x290 [ 2050.550621][T12910] ? memset+0x1f/0x40 [ 2050.554751][T12910] ? __kernel_write+0x340/0x340 [ 2050.559621][T12910] _do_fork+0x196/0x920 [ 2050.563788][T12910] ? __fsnotify_parent+0x310/0x310 [ 2050.568898][T12910] ? dup_mm+0x300/0x300 [ 2050.573181][T12910] ? __sb_end_write+0xa4/0xf0 [ 2050.577859][T12910] __x64_sys_clone+0x25e/0x2c0 [ 2050.582626][T12910] ? __ia32_sys_vfork+0x110/0x110 [ 2050.587924][T12910] ? __fpregs_load_activate+0x2d3/0x390 [ 2050.593660][T12910] do_syscall_64+0xcb/0x150 [ 2050.598256][T12910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2050.604155][T12910] RIP: 0033:0x45d5b9 [ 2050.608051][T12910] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2050.627832][T12910] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2050.636461][T12910] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2050.644434][T12910] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2050.652481][T12910] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:58:00 executing program 4 (fault-call:0 fault-nth:23): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000900f000000000000ffff00002e00"/27], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce38fff, 0x11, r2, 0x0) 06:58:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c335fff, 0x11, r2, 0x0) 06:58:00 executing program 5: clone(0x1004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2050.660769][T12910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 2050.668815][T12910] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c [ 2050.697333][T12946] x86/PAT: syz-executor.3:12946 map pfn RAM range req write-combining for [mem 0x16c408000-0x16c408fff], got write-back 06:58:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x600, 0x11, r2, 0x8000) 06:58:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce39fff, 0x11, r2, 0x0) 06:58:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c336fff, 0x11, r2, 0x0) 06:58:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce3afff, 0x11, r2, 0x0) [ 2050.796651][T12966] FAULT_INJECTION: forcing a failure. [ 2050.796651][T12966] name failslab, interval 1, probability 0, space 0, times 0 [ 2050.822947][T12973] x86/PAT: syz-executor.3:12973 map pfn RAM range req write-combining for [mem 0x15e008000-0x15e008fff], got write-back 06:58:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) r4 = dup(r2) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x800}, 0x64) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x50, 0x0, 0x800, 0x70ad2c, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x33}, {0x6, 0x11, 0xfbbf}, {0x8, 0x15, 0x1f}}]}, 0x50}}, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = gettid() tkill(r7, 0x40) read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) openat$ion(0xffffffffffffff9c, &(0x7f0000004740)='/dev/ion\x00', 0x10082, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400202) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000004880)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2050.850432][T12966] CPU: 1 PID: 12966 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2050.860630][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.870711][T12966] Call Trace: [ 2050.874171][T12966] dump_stack+0x14a/0x1ce [ 2050.878519][T12966] ? devkmsg_release+0x11c/0x11c [ 2050.883582][T12966] ? copy_page_range+0x16b2/0x1710 [ 2050.888711][T12966] ? show_regs_print_info+0x12/0x12 [ 2050.894108][T12966] should_fail+0x6fb/0x860 [ 2050.898706][T12966] ? setup_fault_attr+0x3d0/0x3d0 [ 2050.903756][T12966] ? dup_mmap+0x4cf/0xc00 [ 2050.908284][T12966] should_failslab+0x5/0x20 [ 2050.913025][T12966] kmem_cache_alloc+0x36/0x260 [ 2050.917807][T12966] dup_mmap+0x4cf/0xc00 [ 2050.921979][T12966] ? __delayed_free_task+0x20/0x20 [ 2050.927175][T12966] ? mm_init+0x5c6/0x720 [ 2050.931577][T12966] dup_mm+0x98/0x300 [ 2050.935532][T12966] copy_process+0x2052/0x5110 [ 2050.940214][T12966] ? fork_idle+0x290/0x290 [ 2050.944687][T12966] ? memset+0x1f/0x40 [ 2050.948718][T12966] ? __kernel_write+0x340/0x340 [ 2050.953565][T12966] _do_fork+0x196/0x920 [ 2050.957716][T12966] ? __fsnotify_parent+0x310/0x310 [ 2050.962820][T12966] ? dup_mm+0x300/0x300 [ 2050.966971][T12966] ? __sb_end_write+0xa4/0xf0 [ 2050.971644][T12966] __x64_sys_clone+0x25e/0x2c0 [ 2050.976598][T12966] ? __ia32_sys_vfork+0x110/0x110 [ 2050.981620][T12966] do_syscall_64+0xcb/0x150 [ 2050.986298][T12966] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2050.992241][T12966] RIP: 0033:0x45d5b9 [ 2050.996218][T12966] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2051.016081][T12966] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2051.024488][T12966] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2051.032588][T12966] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2051.040728][T12966] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:58:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="f69867da608edcbb5374819d0509e2ef", 0x10}, {&(0x7f0000000280)="9300173e8cd09810a15ed332ed3174a7650202329e14013363dd1b56664f871e49a709c824018c21a0e8150f027efb3bcc9f2d4fc468cdc48f0fa2e4c43c5c686e28be89c44bd93d1f3e032e0b0b748210f2342152bb92ab7ff559130b95721b8bfe5cca015e6f2c7a2f66a4febbfabd8b45dd8300cbbcf0df2b613bc06c393b9f83010f12309d7c4094edd4263853e88089", 0x92}, {&(0x7f0000000340)="0be415c91f02b9a6e0e3731d7fcba1a157ec958738f8071b8d4092cbc3fe343f2f5c901d144f68d43815c16b83de382f5ed9cc03", 0x34}, {&(0x7f0000000380)="8c655c32b7d0f0b400397780e23f2d4892f1784b4c089b27aa1a6bd737baef965c4604dd78cadd55ab4b118b197513dba2ccc3ece9ac0e02980441d4cccd3c798db3c2dc4414883fd19ae9937019924a27b53c7036d81f98463f402585affc5f999556f811c681967c321647f8a8e3f9a051de994374f941529d81bf666b2917784e97f8d9e0b12a99ed70452c0c3329bae83afd794fcb5e84825820af5c11bd3733e15fc48450d7376e69c5e08f5c771876", 0xb2}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="cd4c74d8c48f", 0x6}, {&(0x7f0000000580)="9f5ef613b135102b26fcfbede09ca6ae13b39ae3686415966165a0a4e56489490bb9b29d3ace6b66a23f28cb82aeb67279b5ab0736138518c2f2c4e62207d5ccad0b2d92032754b2fd408d8926153fe60313fa9685bdb372e538dc9df8f351f0f988eaf178d0eefb2b9c731e5da2a03ca87e0d5c458dd88d8028cc1a92f3ccc78f704c86a802cae3cfd0cbcb86e9b367fd9795bec70f3f0b8a260a6fe51fe5a0e417f5fd00ff38629fa272595550280c08b0d0c376c6cb65728c8959b99f4d9f0e38ad2534e71e92d2308214b6b4947882dfc0b325a26507d4e9b9d79bebec01e9dbccd90c25408130f0d8e5c56f2a364a66d6979fc5", 0xf6}], 0x7, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x1582}}], 0x90}}, {{&(0x7f00000007c0)=@hci={0x1f, 0x3, 0x1}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)="9ab31e36c427c181eb310ac830b1e98c66fa97d5eff9612dab03973143c582960301fd8d451c5c9a2032452d448912f0835d9554c7b0e120e83fd1ff962240a969ab51dc686473a2df75084a523d9995e40185caf3f71e59c0f7fcda3827b6e7967d7c09a59c0601de0ab106f559e1b3ed38e565b68aa3bd2ce844465281a8446292bfa1cbdae94ada8f3f003a8283401c38a552daa089f5ed8826a25e544ee42c1983ae2e41254eb3ce4857d52ae4646f51f45bb46a02d5570e1d77918aa914417e11e2b912c546cea42e48159591505a6a105a8e03aa11465cb347614ca37cb86ddf77bf66f3410e702fef84", 0xed}], 0x1, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}}, {{&(0x7f00000009c0)=@nfc={0x27, 0x1, 0x2, 0x5}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a40)="9a2fa0a136ad773ce9fcbd403d703ab76dc8e44ac8bdf03859f937903ad933cc142c238a40093d37c6e158e0df6d7a5598f3f6ba6754c7847189dcb849bf7a77d412f31b9130f55095e88100fd45d0a86a1947bcb8de406196c3a9e565baba0fea2f794933262d171df1b419eff06671a1abcb9e92289cb17dd83ecf3d722114508eeb3d3ef947ec7bcce77e48", 0x8d}, {&(0x7f0000000b00)="f5c6267aa7ba1ce8b94fb612aadbf7e7f7fc537ef90cab37663645ef6ae8ac73ae5c7e82bfd9e8f53daf018f8687a9147ae0b1842b6b1b97f6b037f8e658071625cf82e7185c64b093fbc2800f72d864d600b1a7417ba9f5a3e8b1ce44929e0cf3ae9ce477dadba58872a232b5b6c7089e566155dda1f1c04cc45c15b36695f606b943694ae959b3a7e3270a4da1299da9f62cadf0b7c878ebeae977400f8529771d999c24bdb6853f95a7e4e21249bc9a5fb5f10e783ed9f52efca35a36592e960bd61add121c275b5d1833ea89", 0xce}, {&(0x7f0000000c00)="3f09411ee68a44f9c8076e68fcbebb0c787596a6ce46605c4b363e2ce073c407f6737b7fb310db827d6f600fe6dccc652cf650b1e1d9bcf4c61e2518dec3ca53", 0x40}], 0x3, &(0x7f0000000c80)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}, {{&(0x7f0000000cc0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d40)="e558131208267c05d03983028238cae93cd41bab8b6e7646aad7f7ebb97c277540bc77aa23710e4aecd6365916cef39ef1e7852ef3cd8f2e773dfabedcb3a801ef004f6206e64c31eac200032cdbc9f845198010741b236f95ef94daf1a604c0ff07614846145b2fb567ee4574aeca59967c21b693a131c539a7da6ec8f0aa9d2bf072dc9cdcde59273d957e84a0c5701eed0064711e5f9acceba40bcb998bc3f45d37ac0dc7554e0524199e55a324411993248ad1fe0e1ee43e305842479bc9d2e73002b5a0e4050d41b42c15aba7350cb7feb1dacf", 0xd6}], 0x1, &(0x7f0000000e80)=[@txtime={{0x18, 0x1, 0x3d, 0x3e}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4d0}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xda}}], 0xc0}}], 0x4, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) pread64(r1, &(0x7f0000000040)=""/162, 0x6a, 0xffff) 06:58:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c337fff, 0x11, r2, 0x0) [ 2051.048778][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 2051.056746][T12966] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:00 executing program 4 (fault-call:0 fault-nth:24): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce3bfff, 0x11, r2, 0x0) 06:58:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x700, 0x11, r2, 0x8000) 06:58:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) pwrite64(r3, &(0x7f0000000040)="fb166e9d190feb5d4a048b9aa9b47fe298426fae7d75e3437f7b109382f7d41de89cd8784003c16f1b0b63b8a227f0f64a568e418da94635fa5cde9040c6313291fd5a620ac308bd160c4d9b3dcf5b7da2c760e1da850d1244a4452e746860130ca0504a25f591c8fb36220419bd64359fa8e8f8bc6176b0884bf849f6647777f9b734090bc4087a2313a72d", 0x8c, 0x7f) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000019280)=ANY=[@ANYBLOB="85000000500000002e00000000000080000000cee50b30ed180000ef0095000000000000009e42b797c893c9dce1"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) mkdir(&(0x7f0000019240)='./file0\x00', 0x1) [ 2051.141156][T12995] x86/PAT: syz-executor.3:12995 map pfn RAM range req write-combining for [mem 0x165108000-0x165108fff], got write-back [ 2051.187341][T13001] FAULT_INJECTION: forcing a failure. [ 2051.187341][T13001] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.205554][T13001] CPU: 1 PID: 13001 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2051.215906][T13001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2051.226122][T13001] Call Trace: [ 2051.229421][T13001] dump_stack+0x14a/0x1ce [ 2051.233804][T13001] ? devkmsg_release+0x11c/0x11c [ 2051.238839][T13001] ? show_regs_print_info+0x12/0x12 [ 2051.244168][T13001] ? dup_mm+0x98/0x300 [ 2051.248392][T13001] ? _do_fork+0x196/0x920 [ 2051.252944][T13001] ? __x64_sys_clone+0x25e/0x2c0 [ 2051.257878][T13001] ? do_syscall_64+0xcb/0x150 [ 2051.262569][T13001] should_fail+0x6fb/0x860 [ 2051.266978][T13001] ? setup_fault_attr+0x3d0/0x3d0 [ 2051.272160][T13001] ? anon_vma_clone+0xa1/0x4b0 [ 2051.276956][T13001] should_failslab+0x5/0x20 [ 2051.281606][T13001] kmem_cache_alloc+0x36/0x260 [ 2051.286371][T13001] anon_vma_clone+0xa1/0x4b0 [ 2051.291128][T13001] anon_vma_fork+0x8c/0x4f0 [ 2051.295691][T13001] ? dup_mmap+0x4cf/0xc00 [ 2051.300018][T13001] ? dup_mmap+0x4f8/0xc00 [ 2051.304439][T13001] dup_mmap+0x5a2/0xc00 [ 2051.308665][T13001] ? __delayed_free_task+0x20/0x20 [ 2051.313845][T13001] ? mm_init+0x5c6/0x720 [ 2051.318079][T13001] dup_mm+0x98/0x300 [ 2051.321987][T13001] copy_process+0x2052/0x5110 [ 2051.327019][T13001] ? fork_idle+0x290/0x290 [ 2051.331520][T13001] ? memset+0x1f/0x40 [ 2051.335498][T13001] ? __kernel_write+0x340/0x340 [ 2051.340472][T13001] _do_fork+0x196/0x920 [ 2051.344843][T13001] ? __fsnotify_parent+0x310/0x310 [ 2051.350001][T13001] ? dup_mm+0x300/0x300 [ 2051.354371][T13001] ? __sb_end_write+0xa4/0xf0 [ 2051.359046][T13001] __x64_sys_clone+0x25e/0x2c0 [ 2051.363806][T13001] ? __ia32_sys_vfork+0x110/0x110 [ 2051.368911][T13001] do_syscall_64+0xcb/0x150 [ 2051.373412][T13001] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2051.379296][T13001] RIP: 0033:0x45d5b9 [ 2051.383261][T13001] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2051.403017][T13001] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2051.411509][T13001] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2051.419529][T13001] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2051.428048][T13001] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2051.436209][T13001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 2051.444180][T13001] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce3cfff, 0x11, r2, 0x0) 06:58:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c338fff, 0x11, r2, 0x0) 06:58:01 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x31, 0x3, 0x0, {0x2, 0x10, 0x0, '+%:#]{{\xb3/+*${-&^'}}, 0x31) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0x1000}], 0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006b0000002e0000000000000024000000000000009500000000000000"], &(0x7f0000001280)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x900, 0x11, r2, 0x8000) 06:58:01 executing program 4 (fault-call:0 fault-nth:25): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2051.632597][T13017] FAULT_INJECTION: forcing a failure. [ 2051.632597][T13017] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.637149][T13016] x86/PAT: syz-executor.3:13016 map pfn RAM range req write-combining for [mem 0x15e508000-0x15e508fff], got write-back [ 2051.653590][T13017] CPU: 0 PID: 13017 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2051.668455][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2051.678951][T13017] Call Trace: [ 2051.682341][T13017] dump_stack+0x14a/0x1ce [ 2051.686813][T13017] ? devkmsg_release+0x11c/0x11c [ 2051.691809][T13017] ? show_regs_print_info+0x12/0x12 [ 2051.697168][T13017] should_fail+0x6fb/0x860 [ 2051.701765][T13017] ? setup_fault_attr+0x3d0/0x3d0 [ 2051.706866][T13017] ? anon_vma_clone+0xa1/0x4b0 [ 2051.711639][T13017] should_failslab+0x5/0x20 [ 2051.716144][T13017] kmem_cache_alloc+0x36/0x260 [ 2051.721057][T13017] ? __anon_vma_interval_tree_augment_rotate+0x1c4/0x1d0 [ 2051.728171][T13017] anon_vma_clone+0xa1/0x4b0 [ 2051.732766][T13017] anon_vma_fork+0x8c/0x4f0 [ 2051.737271][T13017] ? dup_mmap+0x4cf/0xc00 [ 2051.741601][T13017] ? dup_mmap+0x4f8/0xc00 [ 2051.745934][T13017] dup_mmap+0x5a2/0xc00 [ 2051.750103][T13017] ? __delayed_free_task+0x20/0x20 [ 2051.755405][T13017] ? mm_init+0x5c6/0x720 [ 2051.759653][T13017] dup_mm+0x98/0x300 [ 2051.763547][T13017] copy_process+0x2052/0x5110 [ 2051.768226][T13017] ? fork_idle+0x290/0x290 [ 2051.772650][T13017] ? memset+0x1f/0x40 [ 2051.776729][T13017] ? __kernel_write+0x340/0x340 [ 2051.781838][T13017] _do_fork+0x196/0x920 [ 2051.786125][T13017] ? __fsnotify_parent+0x310/0x310 [ 2051.791385][T13017] ? dup_mm+0x300/0x300 [ 2051.795538][T13017] ? __sb_end_write+0xa4/0xf0 [ 2051.800226][T13017] __x64_sys_clone+0x25e/0x2c0 [ 2051.804996][T13017] ? __ia32_sys_vfork+0x110/0x110 [ 2051.810024][T13017] do_syscall_64+0xcb/0x150 [ 2051.814856][T13017] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2051.820748][T13017] RIP: 0033:0x45d5b9 [ 2051.824799][T13017] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2051.844492][T13017] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2051.852907][T13017] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2051.860991][T13017] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2051.868961][T13017] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:58:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce3dfff, 0x11, r2, 0x0) [ 2051.876932][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 2051.884901][T13017] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce3efff, 0x11, r2, 0x0) 06:58:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c339fff, 0x11, r2, 0x0) 06:58:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000500000002e0000230000000024000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) socket(0x8, 0x4, 0x5) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x80) openat$cgroup_freezer_state(r2, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) 06:58:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa00, 0x11, r2, 0x8000) 06:58:01 executing program 4 (fault-call:0 fault-nth:26): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce3ffff, 0x11, r2, 0x0) 06:58:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c33afff, 0x11, r2, 0x0) 06:58:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce40fff, 0x11, r2, 0x0) [ 2052.002733][T13041] x86/PAT: syz-executor.3:13041 map pfn RAM range req write-combining for [mem 0x151108000-0x151108fff], got write-back 06:58:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xb00, 0x11, r2, 0x8000) [ 2052.047296][T13046] FAULT_INJECTION: forcing a failure. [ 2052.047296][T13046] name failslab, interval 1, probability 0, space 0, times 0 06:58:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c33bfff, 0x11, r2, 0x0) 06:58:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce41fff, 0x11, r2, 0x0) [ 2052.104175][T13058] x86/PAT: syz-executor.3:13058 map pfn RAM range req write-combining for [mem 0x161c08000-0x161c08fff], got write-back [ 2052.163794][T13046] CPU: 0 PID: 13046 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2052.174069][T13046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2052.184622][T13046] Call Trace: [ 2052.187930][T13046] dump_stack+0x14a/0x1ce [ 2052.192266][T13046] ? devkmsg_release+0x11c/0x11c [ 2052.197379][T13046] ? show_regs_print_info+0x12/0x12 [ 2052.202675][T13046] should_fail+0x6fb/0x860 [ 2052.207101][T13046] ? setup_fault_attr+0x3d0/0x3d0 [ 2052.210174][T13068] x86/PAT: syz-executor.3:13068 map pfn RAM range req write-combining for [mem 0x16ed08000-0x16ed08fff], got write-back [ 2052.212418][T13046] ? anon_vma_clone+0xa1/0x4b0 [ 2052.212427][T13046] should_failslab+0x5/0x20 [ 2052.212438][T13046] kmem_cache_alloc+0x36/0x260 [ 2052.212452][T13046] anon_vma_clone+0xa1/0x4b0 [ 2052.244756][T13046] anon_vma_fork+0x8c/0x4f0 [ 2052.249388][T13046] ? dup_mmap+0x4cf/0xc00 [ 2052.253735][T13046] ? dup_mmap+0x4f8/0xc00 [ 2052.258076][T13046] dup_mmap+0x5a2/0xc00 [ 2052.262328][T13046] ? __delayed_free_task+0x20/0x20 [ 2052.267579][T13046] ? mm_init+0x5c6/0x720 [ 2052.272003][T13046] dup_mm+0x98/0x300 [ 2052.276098][T13046] copy_process+0x2052/0x5110 [ 2052.281043][T13046] ? fork_idle+0x290/0x290 [ 2052.285589][T13046] ? memset+0x1f/0x40 [ 2052.289574][T13046] ? __kernel_write+0x340/0x340 [ 2052.294428][T13046] _do_fork+0x196/0x920 [ 2052.298586][T13046] ? __fsnotify_parent+0x310/0x310 [ 2052.303854][T13046] ? dup_mm+0x300/0x300 [ 2052.308014][T13046] ? __sb_end_write+0xa4/0xf0 06:58:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc00, 0x11, r2, 0x8000) 06:58:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="00edfff6", @ANYRES16=r6, @ANYBLOB="000125bd7000fbdbdf25080000000800020007000000140005000000000000000000000000000000000008000800ffffffff14000600fe880000000000000000000000000001080007007f0000010800020000000000"], 0x5c}, 0x1, 0x0, 0x0, 0xd85f45a08a1b2e4c}, 0x48040) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000192c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000019240)={0x6c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'GPL\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r7 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r8 = dup(r7) readlinkat(r8, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="18270000", @ANYRES32=r8, @ANYBLOB="74b18a572c1fc59d27f84b00000006000000487daba4902adb6aeb49a652"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xd00, 0x11, r2, 0x8000) [ 2052.312784][T13046] __x64_sys_clone+0x25e/0x2c0 [ 2052.317553][T13046] ? __ia32_sys_vfork+0x110/0x110 [ 2052.322585][T13046] do_syscall_64+0xcb/0x150 [ 2052.327102][T13046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2052.332997][T13046] RIP: 0033:0x45d5b9 [ 2052.337061][T13046] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2052.348573][T13075] x86/PAT: syz-executor.3:13075 map pfn RAM range req write-combining for [mem 0x171508000-0x171508fff], got write-back [ 2052.356734][T13046] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2052.356742][T13046] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2052.356747][T13046] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2052.356752][T13046] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2052.356756][T13046] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a 06:58:01 executing program 4 (fault-call:0 fault-nth:27): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce42fff, 0x11, r2, 0x0) 06:58:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c33cfff, 0x11, r2, 0x0) [ 2052.356760][T13046] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c [ 2052.489954][T13091] FAULT_INJECTION: forcing a failure. [ 2052.489954][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 2052.507890][T13091] CPU: 0 PID: 13091 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2052.518060][T13091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2052.528410][T13091] Call Trace: [ 2052.531719][T13091] dump_stack+0x14a/0x1ce [ 2052.536225][T13091] ? devkmsg_release+0x11c/0x11c [ 2052.541320][T13091] ? show_regs_print_info+0x12/0x12 [ 2052.546529][T13091] should_fail+0x6fb/0x860 [ 2052.551067][T13091] ? setup_fault_attr+0x3d0/0x3d0 [ 2052.556102][T13091] ? anon_vma_fork+0xed/0x4f0 [ 2052.560785][T13091] should_failslab+0x5/0x20 [ 2052.565400][T13091] kmem_cache_alloc+0x36/0x260 [ 2052.570179][T13091] anon_vma_fork+0xed/0x4f0 [ 2052.575317][T13091] ? dup_mmap+0x4cf/0xc00 [ 2052.579659][T13091] ? dup_mmap+0x4f8/0xc00 [ 2052.584003][T13091] dup_mmap+0x5a2/0xc00 [ 2052.588187][T13091] ? __delayed_free_task+0x20/0x20 [ 2052.593305][T13091] ? mm_init+0x5c6/0x720 [ 2052.597557][T13091] dup_mm+0x98/0x300 [ 2052.601464][T13091] copy_process+0x2052/0x5110 [ 2052.606158][T13091] ? fork_idle+0x290/0x290 [ 2052.610583][T13091] ? memset+0x1f/0x40 [ 2052.614590][T13091] ? __kernel_write+0x340/0x340 [ 2052.619622][T13091] _do_fork+0x196/0x920 [ 2052.623788][T13091] ? __fsnotify_parent+0x310/0x310 [ 2052.628910][T13091] ? dup_mm+0x300/0x300 [ 2052.633394][T13091] ? __sb_end_write+0xa4/0xf0 [ 2052.638173][T13091] __x64_sys_clone+0x25e/0x2c0 [ 2052.643103][T13091] ? __ia32_sys_vfork+0x110/0x110 [ 2052.648134][T13091] do_syscall_64+0xcb/0x150 [ 2052.652856][T13091] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2052.658752][T13091] RIP: 0033:0x45d5b9 [ 2052.662650][T13091] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2052.682502][T13091] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 06:58:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000019480)=ANY=[@ANYBLOB="005c456f225fec41f2e8b4baadbfd846d129e505f427fdd74c2ed9e4e5b6741ea50f0fbab249", @ANYRES16=r3, @ANYBLOB="200026bd7000fedbdf250200000034000380080002000200000008000200000000000800010005000000080002000180000008000300d6b4000008000200000000001c0004800c00078008000400000800000900010073797a3000000000"], 0x64}, 0x1, 0x0, 0x0, 0x30008015}, 0x0) r4 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @multicast1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000019440)={&(0x7f0000019280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000019400)={&(0x7f00000192c0)=@newae={0x114, 0x1e, 0x10, 0x70bd2c, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xa, 0x6c}, @in=@multicast2}, [@mark={0xc, 0x15, {0x35075c, 0xdd}}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@ipv4={[], [], @multicast2}, 0x2, 0x6, 0x4}}, @replay_thresh={0x8, 0xb, 0x5}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@private1={0xfc, 0x1, [], 0x7f}, 0x0, 0xa}}, @XFRMA_IF_ID={0x8}, @tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d2}, 0x2, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x3503, 0x0, 0x1, 0x4, 0x0, 0xa9, 0x7}]}, @offload={0xc, 0x1c, {r7, 0x2}}, @proto={0x5, 0x19, 0x6c}, @lastused={0xc}]}, 0x114}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) r8 = dup(r4) readlinkat(r8, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000340)={0x200, 0x831, 0x7, 0x1ff, 0x5, "5d5e01c8c602bdb0"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000500000002e000000000000002400000000000000950000000000000029f0c9fd8cb68dba815a9120102d610124aacb312cec50339ff84549c2af35e242e0adce8985f28b"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce43fff, 0x11, r2, 0x0) 06:58:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c33dfff, 0x11, r2, 0x0) [ 2052.691015][T13091] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2052.699467][T13091] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2052.707537][T13091] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2052.715524][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 2052.723509][T13091] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe00, 0x11, r2, 0x8000) 06:58:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c33efff, 0x11, r2, 0x0) 06:58:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24, 0x0, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce44fff, 0x11, r2, 0x0) 06:58:02 executing program 4 (fault-call:0 fault-nth:28): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2052.829732][T13108] x86/PAT: syz-executor.3:13108 map pfn RAM range req write-combining for [mem 0x176a08000-0x176a08fff], got write-back 06:58:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce45fff, 0x11, r2, 0x0) 06:58:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c33ffff, 0x11, r2, 0x0) [ 2052.880073][T13108] x86/PAT: syz-executor.3:13108 map pfn RAM range req write-combining for [mem 0x175c08000-0x175c08fff], got write-back 06:58:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1100, 0x11, r2, 0x8000) 06:58:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce46fff, 0x11, r2, 0x0) 06:58:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c340fff, 0x11, r2, 0x0) [ 2052.933804][T13123] FAULT_INJECTION: forcing a failure. [ 2052.933804][T13123] name failslab, interval 1, probability 0, space 0, times 0 06:58:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r5) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="ac00caedcbccc2ff6c23fb66c4baa4fd5c797d99db6dcf", 0x17}, {&(0x7f0000000540)="fd21ea0a5b9620069ce137bef0f37eb12f3ec996c7d6464d801b8c47a6c11a037d6326b9630886c35a4b0df189595595075c7b935cb297efdced6dfbb67d18bb217b340e705149808ec8cb1942955227d6de7d5cce0466b819017c2e786f2f0b61adbcf967a643cd994cba7e8093f4b18edf856c1cd4510d3d629e308996135893e9f120b0a34503c163da5dd12ef21fca8d3ec69ec859cc1f632ed07b435735376afde20874583d08a9d5ccbbd3c65188eb8ef7d37e3247b0d16571db524fedc100b49d16dd9a16344c1c27482a635ac257334662dc9238aaeac13840c470fe0c3aa3f1d898712d9aaf0665f77efa631c5e910217", 0xf5}], 0x2, &(0x7f0000000680)=[@ip_retopts={{0x50, 0x0, 0x7, {[@noop, @ssrr={0x89, 0xb, 0x77, [@remote, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x51, [@local, @empty, @loopback]}, @timestamp_addr={0x44, 0x24, 0x89, 0x1, 0x3, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0x1}, {@rand_addr=0x64010101, 0x103}]}]}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0x27, 0xe4, [@empty, @remote, @multicast2, @broadcast, @loopback, @remote, @broadcast, @local, @empty]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe87}}], 0xb8}}, {{&(0x7f0000000740)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000780)="4edf08e91642ae44fa5cc692f855490f56709f10310b556f8fdd787491e2eefa9f86df7eceec14dbd5aa8613775291d61ff6", 0x32}, {&(0x7f00000007c0)="6404ee29bac6ba0a21f1cff6a16d8ff94f12d0a709", 0x15}, {&(0x7f0000000800)="885081257cd6fd6d71d501da50fde2df50eff7172e7a84dfa038c13d680b13875c8b91b538de529aba74fbaf89a4f3f5fc41fdd75b800bc8a7fd777164dddb0e01c2ad00381e7cbfbd44de1098708af48a8393d9e82845714c3207b7d0f267ef49a99b45a4905691334d442b1274eeb438b2d3ba8c7912b3911e8d1a57b2e0eebc521ea424598edb4549a14407eba5db49db99c1f684a4019603424511df96b84cb2b16d4a360679cb0576a97848db7c089bd7c1af29229e4e660e", 0xbb}], 0x3}}], 0x2, 0x4801) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x98, &(0x7f0000000180)=""/152, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x21, 0x1, 0x3, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x4, 0x6, 0x0, 0x9, 0x4, @local, @private2={0xfc, 0x2, [], 0x1}, 0x7800, 0x20, 0x0, 0x7fffffff}}) ioctl$TIOCNXCL(r4, 0x540d) restart_syscall() r7 = getpgrp(0x0) syz_open_procfs(r7, &(0x7f00000004c0)='net/ip_tables_targets\x00') io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1f) r8 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r8) ioctl$PIO_FONTX(r8, 0x4b6c, &(0x7f0000000d80)={0x1c4, 0x1b, &(0x7f0000000980)="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"}) 06:58:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c341fff, 0x11, r2, 0x0) 06:58:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1200, 0x11, r2, 0x8000) [ 2052.995577][T13135] x86/PAT: syz-executor.3:13135 map pfn RAM range req write-combining for [mem 0x165208000-0x165208fff], got write-back 06:58:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce47fff, 0x11, r2, 0x0) [ 2053.059600][T13148] x86/PAT: syz-executor.3:13148 map pfn RAM range req write-combining for [mem 0x167508000-0x167508fff], got write-back [ 2053.093043][T13123] CPU: 1 PID: 13123 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2053.103330][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2053.113846][T13123] Call Trace: [ 2053.117328][T13123] dump_stack+0x14a/0x1ce [ 2053.121676][T13123] ? devkmsg_release+0x11c/0x11c [ 2053.126644][T13123] ? show_regs_print_info+0x12/0x12 [ 2053.131870][T13123] should_fail+0x6fb/0x860 [ 2053.136306][T13123] ? setup_fault_attr+0x3d0/0x3d0 [ 2053.141554][T13123] ? anon_vma_fork+0xed/0x4f0 [ 2053.146313][T13123] should_failslab+0x5/0x20 [ 2053.150944][T13123] kmem_cache_alloc+0x36/0x260 [ 2053.155782][T13123] anon_vma_fork+0xed/0x4f0 [ 2053.160285][T13123] ? dup_mmap+0x4cf/0xc00 [ 2053.164620][T13123] ? dup_mmap+0x4f8/0xc00 [ 2053.169030][T13123] dup_mmap+0x5a2/0xc00 [ 2053.173277][T13123] ? __delayed_free_task+0x20/0x20 [ 2053.178385][T13123] ? mm_init+0x5c6/0x720 [ 2053.182687][T13123] dup_mm+0x98/0x300 [ 2053.186584][T13123] copy_process+0x2052/0x5110 [ 2053.191262][T13123] ? fork_idle+0x290/0x290 [ 2053.195949][T13123] ? memset+0x1f/0x40 [ 2053.199935][T13123] ? __kernel_write+0x340/0x340 [ 2053.204963][T13123] _do_fork+0x196/0x920 [ 2053.209118][T13123] ? __fsnotify_parent+0x310/0x310 [ 2053.214228][T13123] ? dup_mm+0x300/0x300 [ 2053.218469][T13123] ? __sb_end_write+0xa4/0xf0 [ 2053.223292][T13123] __x64_sys_clone+0x25e/0x2c0 [ 2053.228058][T13123] ? __ia32_sys_vfork+0x110/0x110 [ 2053.233087][T13123] do_syscall_64+0xcb/0x150 [ 2053.237594][T13123] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2053.243649][T13123] RIP: 0033:0x45d5b9 [ 2053.247687][T13123] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2053.267468][T13123] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2053.276065][T13123] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2053.284215][T13123] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2053.292529][T13123] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2053.300591][T13123] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c 06:58:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c342fff, 0x11, r2, 0x0) 06:58:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000, 0x11, r2, 0x8000) [ 2053.308653][T13123] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c [ 2053.356885][T13163] x86/PAT: syz-executor.3:13163 map pfn RAM range req write-combining for [mem 0x163d08000-0x163d08fff], got write-back [ 2053.395538][T13163] x86/PAT: syz-executor.3:13163 map pfn RAM range req write-combining for [mem 0x16c908000-0x16c908fff], got write-back 06:58:02 executing program 4 (fault-call:0 fault-nth:29): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce48fff, 0x11, r2, 0x0) 06:58:02 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}]}]}}}}}}}, 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'sit0\x00', {0x7}, 0x81}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r3) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 06:58:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c343fff, 0x11, r2, 0x0) 06:58:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2500, 0x11, r2, 0x8000) 06:58:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c344fff, 0x11, r2, 0x0) 06:58:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce49fff, 0x11, r2, 0x0) 06:58:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500f2ff4f0000002e00ec7e00000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce4afff, 0x11, r2, 0x0) 06:58:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x11, r2, 0x8000) [ 2053.522564][T13177] x86/PAT: syz-executor.3:13177 map pfn RAM range req write-combining for [mem 0x16c008000-0x16c008fff], got write-back [ 2053.556533][T13187] FAULT_INJECTION: forcing a failure. [ 2053.556533][T13187] name fail_page_alloc, interval 1, probability 0, space 0, times 0 06:58:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c345fff, 0x11, r2, 0x0) 06:58:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce4bfff, 0x11, r2, 0x0) [ 2053.608360][T13197] x86/PAT: syz-executor.3:13197 map pfn RAM range req write-combining for [mem 0x169408000-0x169408fff], got write-back [ 2053.675887][T13187] CPU: 1 PID: 13187 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2053.686645][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2053.697034][T13187] Call Trace: [ 2053.700343][T13187] dump_stack+0x14a/0x1ce [ 2053.704929][T13187] ? devkmsg_release+0x11c/0x11c [ 2053.709886][T13187] ? arch_stack_walk+0xd8/0x120 [ 2053.714853][T13187] ? show_regs_print_info+0x12/0x12 [ 2053.720197][T13187] should_fail+0x6fb/0x860 [ 2053.724718][T13187] ? setup_fault_attr+0x3d0/0x3d0 [ 2053.729763][T13187] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2053.735360][T13187] ? __kasan_kmalloc+0x12c/0x1c0 [ 2053.740315][T13187] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2053.746094][T13187] ? copy_process+0x2052/0x5110 [ 2053.751049][T13187] ? _raw_spin_lock+0xa1/0x170 [ 2053.755995][T13187] pte_alloc_one+0x1b/0xb0 [ 2053.760432][T13187] __pte_alloc+0x1d/0x1d0 [ 2053.764817][T13187] copy_page_range+0x1452/0x1710 [ 2053.769780][T13187] ? print_bad_pte+0x650/0x650 [ 2053.774701][T13187] ? init_admin_reserve+0xc0/0xc0 [ 2053.779748][T13187] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2053.785549][T13187] dup_mmap+0x870/0xc00 [ 2053.789726][T13187] ? __delayed_free_task+0x20/0x20 [ 2053.794859][T13187] ? mm_init+0x5c6/0x720 [ 2053.799119][T13187] dup_mm+0x98/0x300 [ 2053.803029][T13187] copy_process+0x2052/0x5110 [ 2053.807730][T13187] ? fork_idle+0x290/0x290 [ 2053.812250][T13187] ? memset+0x1f/0x40 [ 2053.816254][T13187] ? __kernel_write+0x340/0x340 [ 2053.821132][T13187] _do_fork+0x196/0x920 [ 2053.825310][T13187] ? __fsnotify_parent+0x310/0x310 [ 2053.830441][T13187] ? dup_mm+0x300/0x300 [ 2053.834713][T13187] ? __sb_end_write+0xa4/0xf0 [ 2053.839413][T13187] __x64_sys_clone+0x25e/0x2c0 [ 2053.844320][T13187] ? __ia32_sys_vfork+0x110/0x110 [ 2053.849457][T13187] do_syscall_64+0xcb/0x150 [ 2053.854451][T13187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2053.860616][T13187] RIP: 0033:0x45d5b9 [ 2053.864532][T13187] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2053.884646][T13187] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2053.893075][T13187] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2053.901459][T13187] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2053.909453][T13187] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2053.917592][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d 06:58:03 executing program 4 (fault-call:0 fault-nth:30): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) accept4$inet6(r1, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x80000) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) sync_file_range(r2, 0x9, 0x3, 0x4) dup(r2) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000240)={0x80000000, {{0x2, 0x4e20, @remote}}, 0x1, 0x6, [{{0x2, 0x4e20, @empty}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}]}, 0x390) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@exit]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4800, 0x11, r2, 0x8000) 06:58:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c346fff, 0x11, r2, 0x0) 06:58:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce4cfff, 0x11, r2, 0x0) [ 2053.925579][T13187] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c347fff, 0x11, r2, 0x0) 06:58:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce4dfff, 0x11, r2, 0x0) 06:58:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4c00, 0x11, r2, 0x8000) [ 2053.978117][T13218] x86/PAT: syz-executor.3:13218 map pfn RAM range req write-combining for [mem 0x156408000-0x156408fff], got write-back 06:58:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c348fff, 0x11, r2, 0x0) 06:58:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) r2 = dup(0xffffffffffffffff) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000019240)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r3) getsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000080)={@loopback, @local}, &(0x7f00000000c0)=0x8) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000192c0)={0x3, 0x1, {0x53, 0xd0, 0x6, {0x3, 0x5}, {0x6, 0x1ff}, @const={0x7, {0x8001, 0x0, 0x8, 0x40}}}, {0x53, 0x9, 0x5, {0xff, 0x80}, {0x4, 0x8}, @cond=[{0x3, 0x1, 0xeaa1, 0x67, 0x1ff, 0x200}, {0x1, 0xfff, 0x4, 0x3, 0x3, 0x7}]}}) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfffffffffffffff7) r4 = open(&(0x7f0000032ff8)='./file0\x00', 0x17d442, 0xc2) r5 = dup(r4) readlinkat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000019380)={'vxcan1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f00000193c0)=ANY=[@ANYBLOB="85000000500000002e0000000000000024000a000095000000000000284b0000a7c6f0f9debb65362a92dcebcfed0190e77977eaa94f081520a7cdb9f7dd26bc1244bcdd6378e090b6d07489b4ec1efa5417b3047470c574b32dbee115b4f1391657a5e35c4a347ee4e5eba696ea566528d810f388ef7470af932d7d6f03b1ea507fab845a534d35d0e5a2fa58ab8c0c505456bcf95c9c5b14cf860000000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000019340)) [ 2054.052367][T13233] x86/PAT: syz-executor.3:13233 map pfn RAM range req write-combining for [mem 0x165108000-0x165108fff], got write-back 06:58:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6000, 0x11, r2, 0x8000) [ 2054.097862][T13240] FAULT_INJECTION: forcing a failure. [ 2054.097862][T13240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2054.148525][T13248] x86/PAT: syz-executor.3:13248 map pfn RAM range req write-combining for [mem 0x14f808000-0x14f808fff], got write-back [ 2054.154256][T13240] CPU: 1 PID: 13240 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2054.172003][T13240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2054.183188][T13240] Call Trace: [ 2054.186501][T13240] dump_stack+0x14a/0x1ce [ 2054.191075][T13240] ? devkmsg_release+0x11c/0x11c [ 2054.196249][T13240] ? arch_stack_walk+0xd8/0x120 [ 2054.201245][T13240] ? show_regs_print_info+0x12/0x12 [ 2054.206669][T13240] should_fail+0x6fb/0x860 [ 2054.211106][T13240] ? setup_fault_attr+0x3d0/0x3d0 [ 2054.216150][T13240] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2054.222029][T13240] ? __kasan_kmalloc+0x12c/0x1c0 [ 2054.227161][T13240] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2054.232835][T13240] ? copy_process+0x2052/0x5110 [ 2054.237949][T13240] ? _raw_spin_lock+0xa1/0x170 [ 2054.242733][T13240] pte_alloc_one+0x1b/0xb0 [ 2054.247337][T13240] __pte_alloc+0x1d/0x1d0 [ 2054.251683][T13240] copy_page_range+0x1452/0x1710 [ 2054.257046][T13240] ? print_bad_pte+0x650/0x650 [ 2054.262010][T13240] ? init_admin_reserve+0xc0/0xc0 [ 2054.267059][T13240] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2054.272922][T13240] dup_mmap+0x870/0xc00 [ 2054.277100][T13240] ? __delayed_free_task+0x20/0x20 [ 2054.282225][T13240] ? mm_init+0x5c6/0x720 [ 2054.286480][T13240] dup_mm+0x98/0x300 [ 2054.290478][T13240] copy_process+0x2052/0x5110 [ 2054.295175][T13240] ? fork_idle+0x290/0x290 [ 2054.299615][T13240] ? memset+0x1f/0x40 [ 2054.303707][T13240] ? __kernel_write+0x340/0x340 [ 2054.308609][T13240] _do_fork+0x196/0x920 [ 2054.312969][T13240] ? __fsnotify_parent+0x310/0x310 [ 2054.318104][T13240] ? dup_mm+0x300/0x300 [ 2054.322363][T13240] ? __sb_end_write+0xa4/0xf0 [ 2054.327060][T13240] __x64_sys_clone+0x25e/0x2c0 [ 2054.331864][T13240] ? __ia32_sys_vfork+0x110/0x110 [ 2054.336907][T13240] do_syscall_64+0xcb/0x150 [ 2054.341526][T13240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2054.347551][T13240] RIP: 0033:0x45d5b9 [ 2054.351633][T13240] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2054.372568][T13240] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2054.381081][T13240] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2054.389152][T13240] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 06:58:03 executing program 4 (fault-call:0 fault-nth:31): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xbc, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0xc011) 06:58:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce4efff, 0x11, r2, 0x0) 06:58:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c349fff, 0x11, r2, 0x0) 06:58:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6800, 0x11, r2, 0x8000) [ 2054.397436][T13240] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2054.405980][T13240] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 2054.414128][T13240] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce4ffff, 0x11, r2, 0x0) [ 2054.507544][T13258] x86/PAT: syz-executor.3:13258 map pfn RAM range req write-combining for [mem 0x14e808000-0x14e808fff], got write-back 06:58:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) 06:58:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce50fff, 0x11, r2, 0x0) 06:58:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6c00, 0x11, r2, 0x8000) [ 2054.549364][T13267] FAULT_INJECTION: forcing a failure. [ 2054.549364][T13267] name failslab, interval 1, probability 0, space 0, times 0 06:58:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 06:58:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce51fff, 0x11, r2, 0x0) [ 2054.643809][T13280] x86/PAT: syz-executor.3:13280 map pfn RAM range req write-combining for [mem 0x14c708000-0x14c708fff], got write-back [ 2054.695962][T13267] CPU: 0 PID: 13267 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2054.706350][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2054.716434][T13267] Call Trace: [ 2054.719751][T13267] dump_stack+0x14a/0x1ce [ 2054.724344][T13267] ? devkmsg_release+0x11c/0x11c [ 2054.729417][T13267] ? copy_page_range+0x1656/0x1710 [ 2054.734696][T13267] ? show_regs_print_info+0x12/0x12 [ 2054.739989][T13267] should_fail+0x6fb/0x860 [ 2054.744566][T13267] ? setup_fault_attr+0x3d0/0x3d0 [ 2054.749680][T13267] ? dup_mmap+0x4cf/0xc00 [ 2054.754130][T13267] should_failslab+0x5/0x20 [ 2054.758639][T13267] kmem_cache_alloc+0x36/0x260 [ 2054.763408][T13267] dup_mmap+0x4cf/0xc00 [ 2054.767659][T13267] ? __delayed_free_task+0x20/0x20 [ 2054.772774][T13267] ? mm_init+0x5c6/0x720 [ 2054.777029][T13267] dup_mm+0x98/0x300 [ 2054.780931][T13267] copy_process+0x2052/0x5110 [ 2054.785882][T13267] ? fork_idle+0x290/0x290 [ 2054.790298][T13267] ? memset+0x1f/0x40 [ 2054.794285][T13267] ? __kernel_write+0x340/0x340 [ 2054.799307][T13267] _do_fork+0x196/0x920 [ 2054.803628][T13267] ? __fsnotify_parent+0x310/0x310 [ 2054.808988][T13267] ? dup_mm+0x300/0x300 [ 2054.813290][T13267] ? __sb_end_write+0xa4/0xf0 [ 2054.817978][T13267] __x64_sys_clone+0x25e/0x2c0 [ 2054.822754][T13267] ? __ia32_sys_vfork+0x110/0x110 [ 2054.827956][T13267] do_syscall_64+0xcb/0x150 [ 2054.832474][T13267] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2054.838373][T13267] RIP: 0033:0x45d5b9 [ 2054.842272][T13267] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2054.862062][T13267] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2054.870484][T13267] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2054.879263][T13267] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2054.888156][T13267] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2054.896420][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 2054.904534][T13267] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce52fff, 0x11, r2, 0x0) 06:58:04 executing program 4 (fault-call:0 fault-nth:32): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 06:58:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7400, 0x11, r2, 0x8000) [ 2055.043393][T13300] x86/PAT: syz-executor.3:13300 map pfn RAM range req write-combining for [mem 0x14eb08000-0x14eb08fff], got write-back [ 2055.070012][T13301] FAULT_INJECTION: forcing a failure. [ 2055.070012][T13301] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.100897][T13300] x86/PAT: syz-executor.3:13300 map pfn RAM range req write-combining for [mem 0x16ba08000-0x16ba08fff], got write-back [ 2055.147710][T13301] CPU: 0 PID: 13301 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2055.159278][T13301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2055.169523][T13301] Call Trace: [ 2055.172925][T13301] dump_stack+0x14a/0x1ce [ 2055.177420][T13301] ? devkmsg_release+0x11c/0x11c [ 2055.182401][T13301] ? show_regs_print_info+0x12/0x12 [ 2055.187616][T13301] ? dup_mm+0x98/0x300 [ 2055.191707][T13301] ? _do_fork+0x196/0x920 [ 2055.196368][T13301] ? __x64_sys_clone+0x25e/0x2c0 [ 2055.201679][T13301] ? do_syscall_64+0xcb/0x150 [ 2055.206422][T13301] should_fail+0x6fb/0x860 [ 2055.210854][T13301] ? setup_fault_attr+0x3d0/0x3d0 [ 2055.215986][T13301] ? anon_vma_clone+0xa1/0x4b0 [ 2055.221121][T13301] should_failslab+0x5/0x20 [ 2055.226586][T13301] kmem_cache_alloc+0x36/0x260 [ 2055.231371][T13301] anon_vma_clone+0xa1/0x4b0 [ 2055.236096][T13301] anon_vma_fork+0x8c/0x4f0 [ 2055.240866][T13301] ? dup_mmap+0x4cf/0xc00 [ 2055.245296][T13301] ? dup_mmap+0x4f8/0xc00 [ 2055.249636][T13301] dup_mmap+0x5a2/0xc00 [ 2055.253996][T13301] ? __delayed_free_task+0x20/0x20 [ 2055.262759][T13301] ? mm_init+0x5c6/0x720 [ 2055.267213][T13301] dup_mm+0x98/0x300 [ 2055.271844][T13301] copy_process+0x2052/0x5110 [ 2055.276879][T13301] ? fork_idle+0x290/0x290 [ 2055.281456][T13301] ? memset+0x1f/0x40 [ 2055.285453][T13301] ? __kernel_write+0x340/0x340 [ 2055.290400][T13301] _do_fork+0x196/0x920 [ 2055.294562][T13301] ? __fsnotify_parent+0x310/0x310 [ 2055.299677][T13301] ? dup_mm+0x300/0x300 [ 2055.303930][T13301] ? __sb_end_write+0xa4/0xf0 [ 2055.308912][T13301] __x64_sys_clone+0x25e/0x2c0 [ 2055.313919][T13301] ? __ia32_sys_vfork+0x110/0x110 [ 2055.319044][T13301] do_syscall_64+0xcb/0x150 [ 2055.323847][T13301] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2055.329759][T13301] RIP: 0033:0x45d5b9 [ 2055.333863][T13301] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2055.359220][T13301] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2055.368186][T13301] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2055.376627][T13301] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2055.384790][T13301] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2055.392947][T13301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 2055.401568][T13301] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c34afff, 0x11, r2, 0x0) 06:58:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000016c0)=[{&(0x7f0000000380)="5c4cb9c3149784e5b536a45693903a3f745e8176cef581c99cafeef64ce93c0dd7d99728b9176cdf3424d51c20a2ce0b87f821eaf71ff6afda7f220a07aeeb6d6e152f32a08d33b3dcc9407ff54e8bf5dfa45625ae806a380816bd341eb9fd73e73f58b30677a41f0d09350490148e363a560d200a53fef3a7f1c207de9222b5db5dd88153f32cbd1b444a9614de2a496766fc33bb064ab581e57e3f5dec9b0dda19589200722c26f8d422d7d98ee9f9ca4fa2e7aaf08677a304e02d75763025d2adcfe718239be57bc374deadb530a15d", 0xd1}, {&(0x7f0000000480)="52fbd44fbeb9baf05dffc6ddacc8f629a89a2618d188718fa18b00e70e8ce4b309a077dab7a90e5a9cf18ec538853acd83228166844da159db60204cc6390d9b53739d51427fe5458476028cb1c5a4257e85e3c8460706e54809def8666cb97af0d4f4b8f596e6b7c952573d636e69842ec6ebb6b86578d2f7083404de0c2e00862342a023b0b393a00493eef352221fe4123c4f35202caac536d98915b0", 0x9e}, {&(0x7f0000000540)="5a812e78e4627301fa53822a9b696ce5784d106729ddc41578dc236711f53e338654393788087e113270778f5ca87a0bae88ed0681e94ff4a38e0dfaa35afb2d4e00090f6b2de5d223e6c91626ce296282e5dc32e5d73554a504dbb5e22a423eb53f215f5a06ac9265a28808e423a2c4b9e6591f59a8f9327d309a6a8da83967d801769301813b1fa498de0b0b024c78e0540bedb7c2ea08610fffba2113812f449fd3308306c333ecb7d156da202bc9b4bc34700f6498569780b1e04b13bbac3e558623be9576cc3ba0a289d80a36c41808d55eeb189635e1c34bb1680774ffafda6866b48f6dd564da905197cf43980b08f7d7c7064724da43", 0xfa}, {&(0x7f0000000640)="c8f01466dcd8ff241679930243b163add99d52663ab6524d018215d005da7b4b86608cdc2828908933e57200e64a39974396cc663a31027807fdcc9c274f1be68157fb76e69003c4b60708f116764d53566073d16e0d134470bdf9615a201f2446d87c60758dcdf4ecb5c7765adf388e647e356a", 0x74}, {&(0x7f00000006c0)="aaf01b8bbcae0aef0517dea90f6e673e9d9805e5ce8b0ab4c220a8ab94fef94bb5d95bc9099e632daef2ac3dfe57f80fcee438613986e1ad8a092ca4cb2a1a96a461b379638e15d7da7872269e047aee2a00c1971c752c79d774bc56d256270e944d3602cc23ae2f6d8c14d63cf3c07e6d45b588c3a7fcd1ec368a9680165eb6070e6bcef5b0a0ca5f3223b7365c4b77bd0c8bbe2667f4cef19a4675f72f23df05095f8372fbaa1e1d27c972471f2f4c3905cad56d0e6949e5cfb4267792e18d085b2beda605c4576797caba0e075de1b60ba701608b1ba23e05666a37c61bb0306e7b3ee17b2c26318e51baf400e6f175b772b84de384bb88902c51ca70dcb6abb8012ea499c2f02ecc97058aa4abe46d28024dfc343e669780238c31fc75e927ec8ca873dc86ae0ebd4df7ac9d0e65789aab7eafd2b489fcd7542e22da89dde70338dd65143cc3d8cc47e1e4ec89749c51f4191ceb97f9fa7d3d2c0cf723d39624333ec8b7dfba2111dc945849e92990d06ddb9baa2fb931ba04f42b47e17741574d1697c3621ee46d65cf355446e2bccb415785c7067aea8afcd7736bcc5bdb5563223ed7473fe1ac4685cb7e52e1747bd59b231584822954ece17b1c7e1a65d03aac98b8c0d25059cf6400e0f9961d76318fc737565c26aa30d5c206de25e8fe30824469d8906a2e19cc460fc540c7aa027e8193dfd9ffcfe1b7f5ab5234f2f7cd42be285fcf41e91c087af20065e9902a0215efd35933c498fe3fbba723ec6bf49f754c5025e8ee7b9a73c2003aa02ff57ebfea29d9056e311f66bab052d536940cd8cff2d9d0d454b4a4afa87dca9ccbaf38444cca275602b2543f523365b8ddb1c826da9c11d9264c9b7436c16b9b0902cad26ba2dbcabd709352949f02eb99767afed8ddabdef7034b2356af5c79b8879d7970ec27101230f950eaeb447045a5e69a9ee1f35db19bdbed59f75b9dec7f976b501eb39e0319dbf38de72fab7ea2bed244f20f3d2a28d53c9beb601a58fd539589ac08dbef507a5f9601a5884426406802b58f496166310e7d9b3174bc56e93937c92ab1a411fb6aeeca49262d75792bb1fc01c94229d724f78b39bdcc3a512771449ff610949a5b7f09c1157ed108da463af1fd7fa6059d9d5d2f946d552a90ef8e2a4e59b2608f7331a91c6dd7f9eb105b685629251f4dac260a48eee1f05d8b7b69fc261e2580655335cccb7049fa357b96bf5b8c560023c05c6705dae5078d721d34665849115e5daef7447dde5081796028c2690ea1b70d3aae6a49492f88d4b5000c1addd5013db395571e9bd93d48b96ff2f61c83c4873c388961917e94995e3089bd93ffc1ef1b8edcb4377725722f8f335b63c51c1db79c87194ded8c75ad14325670b6b3dd43ae31f0c0b5b36d1a6dab25a5c04152cce6e0caee46e3ec408c20d5d1fd6959f19496fb2e307918757137708f4e4b63461fc1518afeaeda51edaabe46553f5c5b736965f211fac29d6f5a107494f19d7ff2a446095f366ce521d242ace4c2855b5f16b2be02205abd441ba0c225cf3adbab9aef6ad9c4102b4a0e1ed171819f1dd78aad094f2dcd648604a01026e64fe45fcee05f1c5369402fbd9b47fd23102b51067a26352c766198ced91a494bfe8da3750467072a86e891482823bff48d43cebb43193b0858a909b5b1c98652cbda7f448f63e8a3659fbb2146366fb72a3f1ae952886c1ba672857c2532c9c02c8b2490a687a31a003dec00c6adf8651f095113011725cb3753a5177e7ac6651057fc35ce6931a2db7e2c9da4758fab85c2128cc6658d27d64af128fcc32af5c4f6de142e667f4f2cb7798b13631c367a0fc4c18024cef1be187c1680fae241a077b471bcfa7bbe029d8dc0d5700b959625c419e4ae0b14c6b5478804502a80f4f918b6ffebf5cb4a0b6255170ab1ef18610920141b1cd6c5d96d73e543c8fdbb5cea11dcd57b94ccc4741a9ffc9030a7646231d7baa5574567bfd5c339e45b52a498a6300a16c457c5ba4b2e688d7bf41afa7a6fef786393dc12b76776cfe5fed532b0aca0a5b67154d027da322fd98797a6ef8d8998643a24fb4878465a2f139144f4cf5916de38dad9ddc53690276e24d0a26ff6081c7a29ff560e6865069fce739b5c30a0fa803760bff5537b0418a5af1ad1a7a77a5b4a7023ba283a16e8be4c731e45f9268607d4afbbfb841a1053d2924ca58bf17fbcead4eed9803aed1796dd0e6eb0449ed24bd28636aebf854ea9a43272aee9d86f48b36596b25e627d058e072b91f85553d61d5901b98471899013e430640e41bb43d2e56555153538235aaa12c9f727b3842cb93b8325592fc55004eecf3d313c1f858f33ed2daf9a09a83a36f1113c66390182a7fb6ab6b1ba4a65332a70819be05a0e5437c857a0b5eae549b4888eddea3188d9f76e03d560e0bafccd731bf759713801187ebde766874eaadd01a469e2968f756a6a5b6498be1b05868c40d0a9b2f80f828fb4129ad40977218f050c71287acd5df24a6e89b7b59838f9a489ed12897ba546de97ea3e7dba4b0c19176cb65929df645603a89efc8a609f990c83f9e184bcb0a635e4791aefc08c2e6cbdb182e73e9f433f2a98f53439e79843e9c94c4d9bbe178284780e63148967050ded28f4423821740accf394536842467bd2e084f77e7b4f9ebe79637f91c5ba475636029bd024f9f9a47e79048810a3c904269b7d239c0da0824a7facd1dbbffcf4f59bc9845373b3ed57454ab8c784ef3d51ad28f064cf68ba365afe757be3f1f764bf43502960c0c905011f7962fc51d07551d7b3cbede73cb535909a378f12f96dc931c0e220183d42f3012268633fa5d074d0bc0ef30ac9c932c9dd51fa1cd81a858b76a9af8d0ac381dab46b18c3d99e49b35bc87d1e36585a4eaa4d75b1c744b8552dde858777c8161e8531155fe4fdb459f2f69af877f81269987a72e9493072ac2ad576d75470230b3ab52ec2cc1ae8edde6eb7db87c9952fba1ff803df1cc851b463c69d5520b5dd70d4d728c815630b2bf76de82811edbbd96f16f636ce649f07d24ee2ea640455ff4eb08f362fb63c89e8bbd608122fbda25a5b75503bd45b027245b2d2f4f96985412472628aa8f92b025802ba19e93ea00c9da1493f0a319979f4e24cea9b693f31bfb6d65dbad479884dbb6bdccff9472ce7290a0bf87630e2903eeb2a8473c2d75714a12c5bf6e15aebc8537333043e89a264c14ccbde876ec93e70fcf4a24b7831552a2c524ee2175e997253770a699156494cb296b8b631285dd93226cd69a1a7e6eac95c371215440cd522a618c2ee13acef5a681eb4568e59147d7e9ea9692425e259b201603d704ae1cb91b3114727573d9a77db374cf76f901f018ed4440c0a8c5ac20e304c4d051b106bc2f787418e81f2f4c8622e9f0ce4b2718c55e5f310d7bb8a15453db7c7fdd92490846b0b61121d6d5680c91354cb3d4c1755e64424c29dd7937285f6bec0360883d18a4f119b57cce11aa00c24f54f6c5180e7877081ce3689ace918b35cb06a2c2ffa7815ecd9f98bf97282f13ae5e05709eaf6ec4fa6891c123e8212886bd7564e82d44b0a3cf6e04a550dd92099beeccbc378e0b56f75bc4356d68375cafa6a1e2f6929baea70a37742d7289e7473f16c66e226be9d8a4984a41865120ec3c005f9b4a053b3fa1d19332e814ec823c880252db87c642a242da861572346475befa486fd3f68e429aa10ca7a0e62a6451e290b00f6864dd2a3b46b2dc7ea6dacdc49f6d44e45afefedb5d3c5ce312ef0f40de7258c364ce7befc271704f61b0a07c8cf3d414a67b5eabc150b3721e55f46b32ed77bfa0b4cc438a49a1d616d06374eea23418aef8bf739224cde76147857a8b21827ff63f7d888893436e20a46c197ddbe3ee66d3e5bfacc02186005697adf8aae44a3158374b5498b0469a283b16460462724028c8e58f1550782d45c9772f436d6b33622e2a257c8f309d75ef86965c120c0a00e363839236e10343a9bdde5408775bee92cc5fe43046e6dba1e538fed32b713bb2b14e20390978185985c0d56cdafaadb7805fc81f482cd6252238aef054842b293f7e7d15317e892d321fab02a92b6c64009a93dce866c0fd6747357b38d3f0303cc124460edb8d74e832fe09dab7cc20531c1a9e87449f1df08b9d680f454003e4d563b948295c5742bedb296f34bc8f25a07f6d6c8d4f6a66d0b6b71f3d54398bca735b91fef424b4459767e03991fd8453f3d5d49390c009837340a1cc7c52677956de7a76f5f2bb4a8b579c9fbb37c12c2c9db3df18ad586419cccb2fa964c870915c95180f869f68922e4feb875118516b18b0f05a5e6e683908da39451c2eec74c175f5a584580dae69057494df84eeb95d4d83d633514f2d2198001b85bafb63828e4c577a51440df94bbd426f9ae276b6f67edd0076ca81893c38ff43185df1c1ab26e9925ca04405e7b0486096a7b5c9c4e8106c23d4bb49a9a352d09183148b14178d976b99b32f53dd6c3a71c31245323aebdd00224839498c996f533b20f710c3dca170dc1353aaa1982a8a0a57982dbdd856afa292d1a7a1df6d9bdd516597c0ef320b16e01f2bfc579f704ea6e1f27cbcc8b4118a8bc2df386d4ac0b0d6e8b3a2e19e7bec36a560386c24d8e996403b27627fbf1e9ffe17fe670921df9eac19c383d045ebd96d7febfcef12226763758b7475419caadd38aafae33d2f428a0885d4e98feab8ff09b6cda4b23fd2f22a51bf0223e19ccfd96a548c45104f6da42b743bfc336762f03756da53bbba1cb6877db055b67049647627eea042eed43c38442fca27ecbc9e57197884ed325f21167028a8c2401ff8a3abe438de96dd1891de3a87dd229598362f3075c36b61ffc962d06a7cdea09f802d88a20c2bbd5a8461ade58f1323f74419cf1b4a7913f6e8feea1fdc77d7d5dac799071f8916b6eb1a664ab53bfd0415e0082faa39cc68ce5679409218f32c2c94609484a5cd8ff1a50bb22b65438f0f8b79655f382b87d1a36d2be3eb8bf5742d31889221cf9c826a215ad87dd4aaa71407788f3c2beb843a64870d0b06c1a977b7526dc466679a3fba0cb98ce47f262f4ee702f3e62ac88f585cc09c757b5c2e36fb90aa59e82d1d098d7b8e2c8b112b70a8d2d41e864183e845b90e970c550fd76ba040c22c4d16d65283f65bc0b58e8959c8f3ef3e9aa6bc68c3022601aa8605ed566327f4a56e7dc711c7b4a4d8288a9d861c1aa34be32d67a97532a11df11a93f841b7b97a1ab6de63b88be2ff2b100f58f29a9a5b0b2c2f7ebb5c233a5c77c0ecf5a00d8935af2e25c4281036617f4ed0e47137230eff11846edf5fe4a7631cbace4149f039e03c6ff5f65f66ae6782e9c6d0a96d01c743eb64e1dcfe62b6aa6c7ffc0839427f708f9e9d24100e278920cfefa7e3220cc42c702fa41832f168ee270d0b1d9f5144a638f75e6129b66e44604113204e4144887c5c1cdc70efffbdfbb7990c570b4493760cbdd771072091e0d5715aacdc182d69a61ae22a5d40478eede21a21c9c41f267e72f93411f9d303c64da0b25872fd612f06bba8cba8ac52fc75038426a711c20beccf5f4835c0488d89b3a7825f53e1a11ef9546d9aecf3b0462777ef50df0c656a07f854c64e15083f273a606d5ead2d020aeddb52fe2d3ed2ee8ac5541c2b59b33cb2d164f33c16b67db1ee716e35cccbcc2a9a4de5adfd03055d86cc4429f7158f151d26882cbe0abcc0946d0b1085868cef406", 0x1000}], 0x5, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000240)=0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000040)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000017c0)={{{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}}}, &(0x7f00000018c0)=0xe8) read$FUSE(r3, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_netfilter(r4, &(0x7f0000003c40)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003940)={0x2b8, 0xa, 0x2, 0x201, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x2}, [@nested={0x29a, 0x5a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=r5}, @generic="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", @generic="adfff5c8baeceaf478e5bfeacd6160a4dca541b8a1c0fa0746d304504e90226ecc9b59b8b4772d5627783ab4eec97ca34df5cdd842393e3dccedde901fe8bc93708dd5de207be707a5592b1298b5c4cd3f753526f4d9032055a521efc538178606045a4f463a75aece1fa41e3e951e195142a4678c0d583943ca6e0d31d6b5ff72a706f1d6285d0fd9532990e528cffecc6850c2007458b46916b667f5963c371971d8a0ba20927afbddcdc33d573a8ed74189683f7608dcf1b17e5086dfa1db54a17eea140a9aede506eea85ab12cde36f2359b6583bd5c70b3dd18fa74c6023b32608e8c02e07e259f2353f2", @generic="471d00ccbc9f6aa304db8fb3a3ce2cbe52b8364d02ec16120e864ea771b2fec32dcc03214b7af3b591389b79702bc6532274ddd47f39efed093d8b1202df2ab894e472d77073f377b548bd0ea388f7456a849befa02dc6ab2f2b705d3c2850b8770643ddb4cc6b0605c25e7e7241b2ae966651856cb2e9775ac87ca2a02ae6a588a90f04ba1a8a5386d4ecc8c5dd6a250909e2c00888e7de2fa45515"]}, @typed={0x8, 0x18, 0x0, 0x0, @pid=r6}]}, 0x2b8}}, 0x4040) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r7, 0x8, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x2004880c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x5, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}, @alu={0x7, 0x0, 0xc, 0x15, 0xb, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce53fff, 0x11, r2, 0x0) 06:58:05 executing program 4 (fault-call:0 fault-nth:33): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7a00, 0x11, r2, 0x8000) 06:58:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c34bfff, 0x11, r2, 0x0) 06:58:05 executing program 0: sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xb77}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create(0x4791) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000003c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb8, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23bb3201}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2146bac5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d57b015}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45ed7385}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f3bd281}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54ad8c01}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x417c8dc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1697f6ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefbe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x687a2a0e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3283}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ba9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000050}, 0x40046011) [ 2055.621819][T13315] x86/PAT: syz-executor.3:13315 map pfn RAM range req write-combining for [mem 0x14d808000-0x14d808fff], got write-back 06:58:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce54fff, 0x11, r2, 0x0) 06:58:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c34cfff, 0x11, r2, 0x0) 06:58:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x40000, 0x11, r2, 0x8000) 06:58:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce55fff, 0x11, r2, 0x0) [ 2055.689165][T13328] FAULT_INJECTION: forcing a failure. [ 2055.689165][T13328] name failslab, interval 1, probability 0, space 0, times 0 06:58:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c34dfff, 0x11, r2, 0x0) 06:58:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce56fff, 0x11, r2, 0x0) 06:58:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000500000002e0000000000000024000001010001009500000000000000e1033d3363773fc66af90002655f7a3ef8b2b1dd7ca49f90fd06196c010047a8dcbe643a47178f41f2a3a4069cd2df3408280bc7d33c2bd1be190a51eb1ec8"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2055.760124][T13342] x86/PAT: syz-executor.3:13342 map pfn RAM range req write-combining for [mem 0x173a08000-0x173a08fff], got write-back [ 2055.821079][T13328] CPU: 0 PID: 13328 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2055.831837][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2055.842133][T13328] Call Trace: [ 2055.845571][T13328] dump_stack+0x14a/0x1ce [ 2055.850069][T13328] ? devkmsg_release+0x11c/0x11c [ 2055.855023][T13328] ? show_regs_print_info+0x12/0x12 [ 2055.860464][T13328] ? dup_mm+0x98/0x300 [ 2055.864551][T13328] ? _do_fork+0x196/0x920 [ 2055.868895][T13328] ? __x64_sys_clone+0x25e/0x2c0 [ 2055.873953][T13328] ? do_syscall_64+0xcb/0x150 [ 2055.878641][T13328] should_fail+0x6fb/0x860 [ 2055.883074][T13328] ? setup_fault_attr+0x3d0/0x3d0 [ 2055.888112][T13328] ? anon_vma_clone+0xa1/0x4b0 [ 2055.893023][T13328] should_failslab+0x5/0x20 [ 2055.897748][T13328] kmem_cache_alloc+0x36/0x260 [ 2055.902536][T13328] anon_vma_clone+0xa1/0x4b0 [ 2055.907237][T13328] anon_vma_fork+0x8c/0x4f0 [ 2055.911856][T13328] ? dup_mmap+0x4cf/0xc00 [ 2055.916429][T13328] ? dup_mmap+0x4f8/0xc00 [ 2055.920879][T13328] dup_mmap+0x5a2/0xc00 [ 2055.925229][T13328] ? __delayed_free_task+0x20/0x20 [ 2055.930364][T13328] ? mm_init+0x5c6/0x720 [ 2055.934766][T13328] dup_mm+0x98/0x300 [ 2055.938681][T13328] copy_process+0x2052/0x5110 [ 2055.943467][T13328] ? fork_idle+0x290/0x290 [ 2055.947898][T13328] ? memset+0x1f/0x40 [ 2055.951899][T13328] ? __kernel_write+0x340/0x340 [ 2055.953817][T13359] x86/PAT: syz-executor.3:13359 map pfn RAM range req write-combining for [mem 0x152408000-0x152408fff], got write-back [ 2055.956878][T13328] _do_fork+0x196/0x920 [ 2055.956892][T13328] ? __fsnotify_parent+0x310/0x310 [ 2055.956907][T13328] ? dup_mm+0x300/0x300 [ 2055.983019][T13328] ? __sb_end_write+0xa4/0xf0 [ 2055.987897][T13328] __x64_sys_clone+0x25e/0x2c0 [ 2055.992672][T13328] ? __ia32_sys_vfork+0x110/0x110 [ 2055.997703][T13328] do_syscall_64+0xcb/0x150 [ 2056.002217][T13328] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2056.008116][T13328] RIP: 0033:0x45d5b9 [ 2056.012131][T13328] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2056.032386][T13328] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2056.040926][T13328] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2056.048910][T13328] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2056.056893][T13328] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:58:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x80000, 0x11, r2, 0x8000) [ 2056.064873][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 2056.072852][T13328] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:05 executing program 4 (fault-call:0 fault-nth:34): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x100000, 0x11, r2, 0x8000) 06:58:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c34efff, 0x11, r2, 0x0) 06:58:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce57fff, 0x11, r2, 0x0) 06:58:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r2 = dup(r1) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x44) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@exit]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) 06:58:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c34ffff, 0x11, r2, 0x0) 06:58:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x54, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce58fff, 0x11, r2, 0x0) [ 2056.180868][T13373] x86/PAT: syz-executor.3:13373 map pfn RAM range req write-combining for [mem 0x151308000-0x151308fff], got write-back [ 2056.220399][T13378] FAULT_INJECTION: forcing a failure. 06:58:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x400000, 0x11, r2, 0x8000) [ 2056.220399][T13378] name failslab, interval 1, probability 0, space 0, times 0 06:58:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce59fff, 0x11, r2, 0x0) 06:58:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000500000002e0006000000000024000000000000009500000400000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce5afff, 0x11, r2, 0x0) [ 2056.261920][T13391] x86/PAT: syz-executor.3:13391 map pfn RAM range req write-combining for [mem 0x17ff08000-0x17ff08fff], got write-back [ 2056.309667][T13378] CPU: 0 PID: 13378 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2056.320432][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2056.330620][T13378] Call Trace: [ 2056.334054][T13378] dump_stack+0x14a/0x1ce [ 2056.338390][T13378] ? devkmsg_release+0x11c/0x11c [ 2056.343338][T13378] ? show_regs_print_info+0x12/0x12 [ 2056.348713][T13378] should_fail+0x6fb/0x860 [ 2056.353300][T13378] ? setup_fault_attr+0x3d0/0x3d0 [ 2056.358511][T13378] ? anon_vma_clone+0xa1/0x4b0 [ 2056.363621][T13378] should_failslab+0x5/0x20 [ 2056.368269][T13378] kmem_cache_alloc+0x36/0x260 [ 2056.373223][T13378] anon_vma_clone+0xa1/0x4b0 [ 2056.378004][T13378] anon_vma_fork+0x8c/0x4f0 [ 2056.382519][T13378] ? dup_mmap+0x4cf/0xc00 [ 2056.386996][T13378] ? dup_mmap+0x4f8/0xc00 [ 2056.391335][T13378] dup_mmap+0x5a2/0xc00 [ 2056.395632][T13378] ? __delayed_free_task+0x20/0x20 [ 2056.400875][T13378] ? mm_init+0x5c6/0x720 [ 2056.405426][T13378] dup_mm+0x98/0x300 [ 2056.409506][T13378] copy_process+0x2052/0x5110 [ 2056.414198][T13378] ? fork_idle+0x290/0x290 [ 2056.418811][T13378] ? memset+0x1f/0x40 [ 2056.422900][T13378] ? __kernel_write+0x340/0x340 [ 2056.427992][T13378] _do_fork+0x196/0x920 [ 2056.432580][T13378] ? __fsnotify_parent+0x310/0x310 [ 2056.437895][T13378] ? dup_mm+0x300/0x300 [ 2056.442606][T13378] ? __sb_end_write+0xa4/0xf0 [ 2056.447411][T13378] __x64_sys_clone+0x25e/0x2c0 [ 2056.452252][T13378] ? __ia32_sys_vfork+0x110/0x110 [ 2056.457418][T13378] do_syscall_64+0xcb/0x150 [ 2056.462074][T13378] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2056.467966][T13378] RIP: 0033:0x45d5b9 [ 2056.471861][T13378] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2056.491552][T13378] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2056.500038][T13378] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:58:06 executing program 4 (fault-call:0 fault-nth:35): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c350fff, 0x11, r2, 0x0) 06:58:06 executing program 5: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000019240)={0x14, 0x0, 0x824, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x4000000) r1 = signalfd(r0, &(0x7f0000000040)={[0x4e]}, 0x8) ioctl$RTC_AIE_OFF(r1, 0x7002) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x100, 0x72) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f0000000240)=[{}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="81be17dbcb34590f7136073dc86462b5", 0x10) ioctl$UI_DEV_DESTROY(r3, 0x5502) 06:58:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x600000, 0x11, r2, 0x8000) 06:58:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x4}, @l2={0x1f, 0x5a9, @none, 0x2a0, 0x3}, @l2={0x1f, 0x7, @fixed={[], 0x12}, 0xd}, 0x1, 0x0, 0x0, 0x0, 0xc0f1, &(0x7f0000000240)='veth0_to_bond\x00', 0xffffffffffffc2e6, 0xd7, 0x820}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e, 0x0, 0x0, 0xffffffff}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000040)=""/153, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce5bfff, 0x11, r2, 0x0) [ 2056.508623][T13378] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2056.516600][T13378] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2056.524713][T13378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 2056.532827][T13378] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000500000002e0000000000004fbc00240000000000000095000000000000005b8112c246240d44dfac594c321760a26ed2228849e0c5bcae15db27da7832fedddd3caf51d0c01a81e4a86e3e04fe5cbf8302667b74f29d719fa3410823a5efa69fda04b8ae21d5a9393c5ab083f065594bffbe0e21ffffaebdda7229d9ee6e55148e540e72f2"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c351fff, 0x11, r2, 0x0) [ 2056.615458][T13415] x86/PAT: syz-executor.3:13415 map pfn RAM range req write-combining for [mem 0x14fe08000-0x14fe08fff], got write-back [ 2056.654758][T13428] FAULT_INJECTION: forcing a failure. 06:58:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x800000, 0x11, r2, 0x8000) 06:58:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce5cfff, 0x11, r2, 0x0) 06:58:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000500000002e0000000004000000000000000000009501000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce5dfff, 0x11, r2, 0x0) [ 2056.654758][T13428] name failslab, interval 1, probability 0, space 0, times 0 [ 2056.680749][T13436] x86/PAT: syz-executor.3:13436 map pfn RAM range req write-combining for [mem 0x16b808000-0x16b808fff], got write-back [ 2056.785709][T13428] CPU: 0 PID: 13428 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2056.796238][T13428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2056.806803][T13428] Call Trace: [ 2056.810108][T13428] dump_stack+0x14a/0x1ce [ 2056.814438][T13428] ? devkmsg_release+0x11c/0x11c [ 2056.819383][T13428] ? show_regs_print_info+0x12/0x12 [ 2056.824584][T13428] should_fail+0x6fb/0x860 [ 2056.829093][T13428] ? setup_fault_attr+0x3d0/0x3d0 [ 2056.834144][T13428] ? anon_vma_fork+0xed/0x4f0 [ 2056.839018][T13428] should_failslab+0x5/0x20 [ 2056.843693][T13428] kmem_cache_alloc+0x36/0x260 [ 2056.848539][T13428] anon_vma_fork+0xed/0x4f0 [ 2056.853049][T13428] ? dup_mmap+0x4cf/0xc00 [ 2056.857376][T13428] ? dup_mmap+0x4f8/0xc00 [ 2056.861880][T13428] dup_mmap+0x5a2/0xc00 [ 2056.866041][T13428] ? __delayed_free_task+0x20/0x20 [ 2056.871302][T13428] ? mm_init+0x5c6/0x720 [ 2056.875548][T13428] dup_mm+0x98/0x300 [ 2056.879661][T13428] copy_process+0x2052/0x5110 [ 2056.884342][T13428] ? fork_idle+0x290/0x290 [ 2056.888753][T13428] ? memset+0x1f/0x40 [ 2056.892734][T13428] ? __kernel_write+0x340/0x340 [ 2056.897730][T13428] _do_fork+0x196/0x920 [ 2056.901889][T13428] ? __fsnotify_parent+0x310/0x310 [ 2056.907230][T13428] ? dup_mm+0x300/0x300 [ 2056.911386][T13428] ? __sb_end_write+0xa4/0xf0 [ 2056.916069][T13428] __x64_sys_clone+0x25e/0x2c0 [ 2056.920838][T13428] ? __ia32_sys_vfork+0x110/0x110 [ 2056.926014][T13428] do_syscall_64+0xcb/0x150 [ 2056.930774][T13428] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2056.936667][T13428] RIP: 0033:0x45d5b9 [ 2056.940861][T13428] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2056.961843][T13428] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2056.970400][T13428] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2056.978432][T13428] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 06:58:06 executing program 4 (fault-call:0 fault-nth:36): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c352fff, 0x11, r2, 0x0) 06:58:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x80ffff, 0x11, r2, 0x8000) 06:58:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0)=""/52, &(0x7f0000000040)=0x34) 06:58:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce5efff, 0x11, r2, 0x0) [ 2056.986521][T13428] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2056.994492][T13428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 2057.002746][T13428] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce5ffff, 0x11, r2, 0x0) 06:58:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c353fff, 0x11, r2, 0x0) 06:58:06 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x40, 0x9, 0x14, @remote, @remote, 0x1, 0x7, 0x9, 0x800}}) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x4048014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000500000002e0000000000000024240000000000000095000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc0ffff, 0x11, r2, 0x8000) [ 2057.052170][T13458] x86/PAT: syz-executor.3:13458 map pfn RAM range req write-combining for [mem 0x16a108000-0x16a108fff], got write-back [ 2057.080533][T13465] FAULT_INJECTION: forcing a failure. [ 2057.080533][T13465] name failslab, interval 1, probability 0, space 0, times 0 [ 2057.124075][T13474] x86/PAT: syz-executor.3:13474 map pfn RAM range req write-combining for [mem 0x172d08000-0x172d08fff], got write-back [ 2057.136190][T13465] CPU: 1 PID: 13465 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2057.147115][T13465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2057.157286][T13465] Call Trace: [ 2057.160596][T13465] dump_stack+0x14a/0x1ce [ 2057.165025][T13465] ? devkmsg_release+0x11c/0x11c 06:58:06 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x2000, 0x0) ftruncate(r0, 0x2008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r4 = dup(r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000019280)='/proc/keys\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x55002101}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c71be8b46000000", @ANYRES16=r6, @ANYBLOB="00002bbd7000fedbdf250200000008002b000400000004f47f5d4e7c47c0ac5fbd698e18a322deb49116352eb2354753bbbe61e04b562da7e94a85df3b6b2aa05cd0f1d3f41b7e4af7ffe1d21c946997f0de236e10e810ebe2311cb3f10931a73720dc6ec88feb3d278e4694b03ef3265c2b67e13dd4e8bb88f16fe5dc45db45ce0eda464dc07d7cd51ce93ef4bf76505e081cf3b32ed28bccc36ddf47092fa83ec0d9c3b4e3cc9b1d40c607962a722010f4e48737ded5a9d9928f6bf6619d2277595add6d889789845024c7e9a4f6614785"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000019400)={&(0x7f0000019300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000193c0)={&(0x7f0000019340)={0x54, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) pwritev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="45d3eba42c039ed1dc3fd96c301a88da965636f209c51646edb44041520f9491a2cb4a769882e7c627d45d975f45039269eaec2c12654351be1286c5f069d5a68d8586240dde6082b8862a5168a52e7985c58fad180857c6c20fb8ead4eec4cd8abb0dea266e0542af9872bf5dc574b1f675bc550384a1185cec16ffe7fb", 0x7e}, {&(0x7f0000000100)="900b0bedc879e8f6f2d461e13f4f73d7810529e2f126dc67ff5d3792247cd729ec01d25a27b7a9adc34f60e58123c009b122bd", 0x33}, {&(0x7f0000000140)="1ca97322d2d39bd5b87d4c7cceaafc64d090e04e6a0b4a0177105e58a018796cd6b2", 0x22}, {&(0x7f0000000180)="61b0cc1447806da807cd9a290776deb43505018d83d56cae1dfd04208d025deee16ca1bc46b94a15e10faf589a610d3edf578ed4bf61fc4344d70425623a7f588956d14d92c2a4282149edaafaa0e39fc9f773418e97f5cb342a13d87d2c0219080eb86ffc04bbc764ead771c9ed4ac8574367f6b350330d9fe1b1ee333b1b2e395e557f622cb182e67eae3bdfb686a9714671263deb1d6a97c85fa3172e8028d39f086e6bd22c405a3713a261a0c781baf9af84af1b169a26853462b94a2401c3b1e2dfe3e0b896c351033cbc294b74a5a8a49342f909820f89678187f0a2f6dd337bb4703c5b00a328", 0xea}], 0x4, 0x6d, 0x7) dup2(r2, r1) getsockopt$SO_BINDTODEVICE(r1, 0x6, 0xa, &(0x7f0000000000), 0x20a154cc) clone(0xa09a0100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$security_capability(r2, &(0x7f0000019240)='security.capability\x00', &(0x7f00000192c0)=@v2={0x2000000, [{0x6, 0x400ff}, {0x80000001, 0xfffffff9}]}, 0x14, 0x0) [ 2057.170162][T13465] ? show_regs_print_info+0x12/0x12 [ 2057.175900][T13465] should_fail+0x6fb/0x860 [ 2057.180338][T13465] ? setup_fault_attr+0x3d0/0x3d0 [ 2057.185615][T13465] ? anon_vma_fork+0x1c9/0x4f0 [ 2057.190392][T13465] should_failslab+0x5/0x20 [ 2057.195015][T13465] kmem_cache_alloc+0x36/0x260 [ 2057.199794][T13465] anon_vma_fork+0x1c9/0x4f0 [ 2057.204396][T13465] dup_mmap+0x5a2/0xc00 [ 2057.208572][T13465] ? __delayed_free_task+0x20/0x20 [ 2057.213725][T13465] ? mm_init+0x5c6/0x720 [ 2057.217992][T13465] dup_mm+0x98/0x300 [ 2057.222180][T13465] copy_process+0x2052/0x5110 [ 2057.226859][T13465] ? fork_idle+0x290/0x290 [ 2057.231269][T13465] ? memset+0x1f/0x40 [ 2057.235309][T13465] ? __kernel_write+0x340/0x340 [ 2057.240249][T13465] _do_fork+0x196/0x920 [ 2057.244552][T13465] ? __fsnotify_parent+0x310/0x310 [ 2057.249754][T13465] ? dup_mm+0x300/0x300 [ 2057.253926][T13465] ? __sb_end_write+0xa4/0xf0 [ 2057.258603][T13465] __x64_sys_clone+0x25e/0x2c0 [ 2057.263508][T13465] ? __ia32_sys_vfork+0x110/0x110 [ 2057.268623][T13465] do_syscall_64+0xcb/0x150 [ 2057.273130][T13465] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2057.279023][T13465] RIP: 0033:0x45d5b9 [ 2057.283062][T13465] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2057.303265][T13465] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2057.311680][T13465] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:58:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000500000002e0000000000030024000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c354fff, 0x11, r2, 0x0) 06:58:06 executing program 4 (fault-call:0 fault-nth:37): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce60fff, 0x11, r2, 0x0) 06:58:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x8000) 06:58:06 executing program 5: clone(0xb7b35080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2057.319742][T13465] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2057.327844][T13465] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2057.335910][T13465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 2057.343905][T13465] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c355fff, 0x11, r2, 0x0) 06:58:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce61fff, 0x11, r2, 0x0) 06:58:06 executing program 5: clone(0x50000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c356fff, 0x11, r2, 0x0) 06:58:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500b13225e10000500000002e000000000000002400000000000000950000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) r3 = dup2(r2, r1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'team0\x00', 0x1000}) [ 2057.412823][T13492] x86/PAT: syz-executor.3:13492 map pfn RAM range req write-combining for [mem 0x152208000-0x152208fff], got write-back 06:58:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce62fff, 0x11, r2, 0x0) 06:58:06 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) geteuid() 06:58:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r2, 0x8000) [ 2057.480315][T13514] FAULT_INJECTION: forcing a failure. [ 2057.480315][T13514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2057.532218][T13527] x86/PAT: syz-executor.3:13527 map pfn RAM range req write-combining for [mem 0x159008000-0x159008fff], got write-back [ 2057.558842][T13514] CPU: 1 PID: 13514 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2057.569124][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2057.579286][T13514] Call Trace: [ 2057.582596][T13514] dump_stack+0x14a/0x1ce [ 2057.586927][T13514] ? devkmsg_release+0x11c/0x11c [ 2057.591867][T13514] ? arch_stack_walk+0xd8/0x120 [ 2057.596731][T13514] ? show_regs_print_info+0x12/0x12 [ 2057.601928][T13514] should_fail+0x6fb/0x860 [ 2057.606351][T13514] ? setup_fault_attr+0x3d0/0x3d0 [ 2057.611468][T13514] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2057.616851][T13514] ? __kasan_kmalloc+0x12c/0x1c0 [ 2057.621793][T13514] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2057.627453][T13514] ? copy_process+0x2052/0x5110 [ 2057.632306][T13514] pte_alloc_one+0x1b/0xb0 [ 2057.636724][T13514] __pte_alloc+0x1d/0x1d0 [ 2057.641271][T13514] copy_page_range+0x1452/0x1710 [ 2057.646353][T13514] ? print_bad_pte+0x650/0x650 [ 2057.651273][T13514] ? init_admin_reserve+0xc0/0xc0 [ 2057.656827][T13514] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2057.662550][T13514] dup_mmap+0x870/0xc00 [ 2057.666951][T13514] ? __delayed_free_task+0x20/0x20 [ 2057.672149][T13514] ? mm_init+0x5c6/0x720 [ 2057.676387][T13514] dup_mm+0x98/0x300 [ 2057.680374][T13514] copy_process+0x2052/0x5110 [ 2057.685292][T13514] ? fork_idle+0x290/0x290 [ 2057.689962][T13514] ? memset+0x1f/0x40 [ 2057.693953][T13514] ? __kernel_write+0x340/0x340 [ 2057.698955][T13514] _do_fork+0x196/0x920 [ 2057.703112][T13514] ? __fsnotify_parent+0x310/0x310 [ 2057.708305][T13514] ? dup_mm+0x300/0x300 [ 2057.712551][T13514] ? __sb_end_write+0xa4/0xf0 [ 2057.717234][T13514] __x64_sys_clone+0x25e/0x2c0 [ 2057.722127][T13514] ? __ia32_sys_vfork+0x110/0x110 [ 2057.727156][T13514] do_syscall_64+0xcb/0x150 [ 2057.731713][T13514] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2057.737640][T13514] RIP: 0033:0x45d5b9 [ 2057.741535][T13514] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2057.761233][T13514] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2057.769735][T13514] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:58:07 executing program 4 (fault-call:0 fault-nth:38): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setpriority(0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000100000000002e000000000000060000000000000000950000000000000000000000007890196e7efa61ff1e618a23fba6e5d26f2063"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) prctl$PR_GET_KEEPCAPS(0x7) 06:58:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c357fff, 0x11, r2, 0x0) 06:58:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce63fff, 0x11, r2, 0x0) 06:58:07 executing program 5: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x8, "f57b3275a2e7812f"}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) getsockname(r0, &(0x7f0000019540)=@isdn, &(0x7f00000195c0)=0x80) getsockopt(r0, 0x800, 0x0, &(0x7f00000000c0)=""/46, &(0x7f0000000100)=0x2e) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000019240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"fca532aaf317fb9e52288e38795d4569", r3, 0x0, {0x6, 0x7}, {0x5, 0x6}, 0x5, [0x4, 0x100, 0x6, 0x2, 0x80000000, 0x2, 0x6, 0x5, 0xfffffffffffffc2d, 0x1d, 0x4, 0x4, 0x9, 0x7fffffff, 0x8000000000000008, 0x3]}) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x2) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000019500)={0x80000001, 0x30, [], 0x1, &(0x7f00000194c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = inotify_init1(0x80000) r5 = perf_event_open(&(0x7f0000019440)={0x3, 0x70, 0xf8, 0x8, 0xff, 0xec, 0x0, 0x9, 0x3000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10a, 0x800, 0xfffffff7, 0x4, 0x4, 0x3}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) dup3(r4, r5, 0x80000) 06:58:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000000, 0x11, r2, 0x8000) [ 2057.777789][T13514] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2057.785763][T13514] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2057.793735][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 2057.801732][T13514] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000c070df33ba0ffab0200000024000000000300009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce64fff, 0x11, r2, 0x0) 06:58:07 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x84000}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x390, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00', [0xffffff00, 0xff, 0xffffff00, 0xff], [0x0, 0xff, 0x733b5e1d8792a1a, 0xffffff00], 'team_slave_0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x1, 0x5, 0x18}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1a}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x3, 0xb4e7, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x6}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}, @common=@srh1={{0x90, 'srh\x00'}, {0x2e, 0x6, 0x5, 0xcd, 0x7, @ipv4={[], [], @loopback}, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', [0xff, 0xffffffff, 0xffffff00], [0xff, 0xffffff00, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 0x890, 0xc00}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x7468, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 06:58:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c358fff, 0x11, r2, 0x0) [ 2057.852191][T13536] x86/PAT: syz-executor.3:13536 map pfn RAM range req write-combining for [mem 0x153108000-0x153108fff], got write-back [ 2057.875285][T13544] FAULT_INJECTION: forcing a failure. [ 2057.875285][T13544] name fail_page_alloc, interval 1, probability 0, space 0, times 0 06:58:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000000, 0x11, r2, 0x8000) 06:58:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x480803, 0x1aa) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/73}) dup(r1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000000c0)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, 'SMC_PNETID\x00'}}, 0x2c) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f00000004c0)) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85e600ae000000000006002400"/26], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x7, @bearer=@l2={'ib', 0x3a, 'syz_tun\x00'}}}}}, 0x30}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') [ 2057.916077][T13553] x_tables: duplicate underflow at hook 3 [ 2057.941401][T13563] x86/PAT: syz-executor.3:13563 map pfn RAM range req write-combining for [mem 0x171608000-0x171608fff], got write-back [ 2057.953541][T13567] x_tables: duplicate underflow at hook 3 [ 2057.983369][T13544] CPU: 1 PID: 13544 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2057.993553][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.003707][T13544] Call Trace: [ 2058.007016][T13544] dump_stack+0x14a/0x1ce [ 2058.011547][T13544] ? devkmsg_release+0x11c/0x11c [ 2058.016490][T13544] ? arch_stack_walk+0xd8/0x120 [ 2058.021436][T13544] ? show_regs_print_info+0x12/0x12 [ 2058.026769][T13544] ? kasan_alloc_pages+0x4a/0x60 [ 2058.031805][T13544] should_fail+0x6fb/0x860 [ 2058.036220][T13544] ? setup_fault_attr+0x3d0/0x3d0 [ 2058.041247][T13544] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2058.046628][T13544] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2058.052535][T13544] ? copy_process+0x2052/0x5110 [ 2058.057383][T13544] ? _raw_spin_lock+0xa1/0x170 [ 2058.062203][T13544] ? _raw_spin_lock+0xa1/0x170 [ 2058.067004][T13544] pte_alloc_one+0x1b/0xb0 [ 2058.071545][T13544] __pte_alloc+0x1d/0x1d0 [ 2058.075876][T13544] copy_page_range+0x1452/0x1710 [ 2058.080902][T13544] ? print_bad_pte+0x650/0x650 [ 2058.085836][T13544] ? init_admin_reserve+0xc0/0xc0 [ 2058.091033][T13544] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2058.096755][T13544] dup_mmap+0x870/0xc00 [ 2058.100961][T13544] ? __delayed_free_task+0x20/0x20 [ 2058.107471][T13544] ? mm_init+0x5c6/0x720 [ 2058.111717][T13544] dup_mm+0x98/0x300 [ 2058.115636][T13544] copy_process+0x2052/0x5110 [ 2058.120302][T13544] ? fork_idle+0x290/0x290 [ 2058.124708][T13544] ? memset+0x1f/0x40 [ 2058.128685][T13544] ? __kernel_write+0x340/0x340 [ 2058.133572][T13544] _do_fork+0x196/0x920 [ 2058.137753][T13544] ? __fsnotify_parent+0x310/0x310 [ 2058.142856][T13544] ? dup_mm+0x300/0x300 [ 2058.147017][T13544] ? __sb_end_write+0xa4/0xf0 [ 2058.151685][T13544] __x64_sys_clone+0x25e/0x2c0 [ 2058.156442][T13544] ? __ia32_sys_vfork+0x110/0x110 [ 2058.161453][T13544] do_syscall_64+0xcb/0x150 [ 2058.165956][T13544] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2058.171833][T13544] RIP: 0033:0x45d5b9 [ 2058.175730][T13544] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2058.195323][T13544] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2058.203718][T13544] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2058.211672][T13544] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2058.219630][T13544] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:58:07 executing program 4 (fault-call:0 fault-nth:39): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce65fff, 0x11, r2, 0x0) 06:58:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c359fff, 0x11, r2, 0x0) 06:58:07 executing program 5: clone(0x21200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7fff, 0x1, 0x2, 0x1, 0xcb, 0x8}, &(0x7f00000000c0)=0x20) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f00000193c0)=""/186) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019340)={0x29, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x0, 0x5, 0xa, 0x0, 0xffffffffffffffe1}, @exit], &(0x7f0000000140)='GPL\x00', 0x9, 0xf8, &(0x7f0000019240)=""/248, 0x41000, 0xb, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xb, 0xb924, 0x7f}, 0x10, 0x0, r0}, 0x78) dup3(0xffffffffffffffff, r1, 0x0) r2 = dup(r0) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x4, 0x0, 0x3}}, 0x14) 06:58:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x5000000, 0x11, r2, 0x8000) 06:58:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000000)={@empty, r4}, 0x14) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2058.227606][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 2058.235577][T13544] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce66fff, 0x11, r2, 0x0) 06:58:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6000000, 0x11, r2, 0x8000) 06:58:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce67fff, 0x11, r2, 0x0) 06:58:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c35afff, 0x11, r2, 0x0) [ 2058.300579][T13583] x86/PAT: syz-executor.3:13583 map pfn RAM range req write-combining for [mem 0x16a508000-0x16a508fff], got write-back [ 2058.319989][T13593] FAULT_INJECTION: forcing a failure. [ 2058.319989][T13593] name failslab, interval 1, probability 0, space 0, times 0 06:58:07 executing program 5: clone(0x34044200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:07 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2058.367062][T13602] x86/PAT: syz-executor.3:13602 map pfn RAM range req write-combining for [mem 0x164408000-0x164408fff], got write-back [ 2058.472597][T13593] CPU: 1 PID: 13593 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2058.482775][T13593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.492837][T13593] Call Trace: [ 2058.496145][T13593] dump_stack+0x14a/0x1ce [ 2058.500474][T13593] ? devkmsg_release+0x11c/0x11c [ 2058.505410][T13593] ? copy_page_range+0x16b2/0x1710 [ 2058.510519][T13593] ? show_regs_print_info+0x12/0x12 [ 2058.515713][T13593] should_fail+0x6fb/0x860 [ 2058.520129][T13593] ? setup_fault_attr+0x3d0/0x3d0 [ 2058.525151][T13593] ? dup_mmap+0x4cf/0xc00 [ 2058.529497][T13593] should_failslab+0x5/0x20 [ 2058.534018][T13593] kmem_cache_alloc+0x36/0x260 [ 2058.538785][T13593] dup_mmap+0x4cf/0xc00 [ 2058.542957][T13593] ? __delayed_free_task+0x20/0x20 [ 2058.548073][T13593] ? mm_init+0x5c6/0x720 [ 2058.552311][T13593] dup_mm+0x98/0x300 [ 2058.556204][T13593] copy_process+0x2052/0x5110 [ 2058.560885][T13593] ? fork_idle+0x290/0x290 [ 2058.565330][T13593] ? memset+0x1f/0x40 [ 2058.569312][T13593] ? __kernel_write+0x340/0x340 [ 2058.574164][T13593] _do_fork+0x196/0x920 [ 2058.578329][T13593] ? __fsnotify_parent+0x310/0x310 [ 2058.583438][T13593] ? dup_mm+0x300/0x300 [ 2058.587590][T13593] ? __sb_end_write+0xa4/0xf0 [ 2058.592270][T13593] __x64_sys_clone+0x25e/0x2c0 [ 2058.597034][T13593] ? __ia32_sys_vfork+0x110/0x110 [ 2058.602058][T13593] do_syscall_64+0xcb/0x150 [ 2058.606560][T13593] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2058.612448][T13593] RIP: 0033:0x45d5b9 [ 2058.616337][T13593] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2058.635934][T13593] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2058.644352][T13593] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2058.652323][T13593] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2058.660292][T13593] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:58:08 executing program 4 (fault-call:0 fault-nth:40): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7000000, 0x11, r2, 0x8000) 06:58:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce68fff, 0x11, r2, 0x0) 06:58:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c35bfff, 0x11, r2, 0x0) 06:58:08 executing program 5: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xe8, 0x0, &(0x7f0000000500)=[@exit_looper, @register_looper, @acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/1, 0x1, 0x0, 0x3}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/77, 0x4d, 0x0, 0x3b}, @fda={0x66646185, 0x3, 0x0, 0x5}, @fda={0x66646185, 0x4, 0x2, 0x3e}}, &(0x7f0000000400)={0x0, 0x28, 0x48}}}, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000}, @fda={0x66646185, 0x2, 0x1, 0x19}, @fda={0x66646185, 0x0, 0x1, 0x24}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}}], 0x2e, 0x0, &(0x7f0000000600)="1fe60685d3df4e8781b7141ff5d71e3a6b6edc6eed21b156fac3a9105a23c1db1031dac5086f83c9b38add2414bf"}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x12}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c850) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x900, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2058.668263][T13593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 2058.676234][T13593] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce69fff, 0x11, r2, 0x0) 06:58:08 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_TIMERSLACK(0x1d, 0x81) 06:58:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8000000, 0x11, r2, 0x8000) [ 2058.717651][T13626] x86/PAT: syz-executor.3:13626 map pfn RAM range req write-combining for [mem 0x168a08000-0x168a08fff], got write-back [ 2058.729093][T13634] FAULT_INJECTION: forcing a failure. [ 2058.729093][T13634] name failslab, interval 1, probability 0, space 0, times 0 06:58:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c35cfff, 0x11, r2, 0x0) 06:58:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce6afff, 0x11, r2, 0x0) 06:58:08 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x80) 06:58:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce6bfff, 0x11, r2, 0x0) [ 2058.810753][T13649] x86/PAT: syz-executor.3:13649 map pfn RAM range req write-combining for [mem 0x159708000-0x159708fff], got write-back [ 2058.881594][T13634] CPU: 1 PID: 13634 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2058.891774][T13634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.901824][T13634] Call Trace: [ 2058.905123][T13634] dump_stack+0x14a/0x1ce [ 2058.909456][T13634] ? devkmsg_release+0x11c/0x11c [ 2058.914396][T13634] ? show_regs_print_info+0x12/0x12 [ 2058.919593][T13634] ? dup_mm+0x98/0x300 [ 2058.923659][T13634] ? _do_fork+0x196/0x920 [ 2058.928019][T13634] ? __x64_sys_clone+0x25e/0x2c0 [ 2058.932958][T13634] ? do_syscall_64+0xcb/0x150 [ 2058.937984][T13634] should_fail+0x6fb/0x860 [ 2058.942406][T13634] ? setup_fault_attr+0x3d0/0x3d0 [ 2058.947433][T13634] ? anon_vma_clone+0xa1/0x4b0 [ 2058.952210][T13634] should_failslab+0x5/0x20 [ 2058.956711][T13634] kmem_cache_alloc+0x36/0x260 [ 2058.961491][T13634] anon_vma_clone+0xa1/0x4b0 [ 2058.966083][T13634] anon_vma_fork+0x8c/0x4f0 [ 2058.970586][T13634] ? dup_mmap+0x4cf/0xc00 [ 2058.974937][T13634] ? dup_mmap+0x4f8/0xc00 [ 2058.979288][T13634] dup_mmap+0x5a2/0xc00 [ 2058.983466][T13634] ? __delayed_free_task+0x20/0x20 [ 2058.988606][T13634] ? mm_init+0x5c6/0x720 [ 2058.992867][T13634] dup_mm+0x98/0x300 [ 2058.996762][T13634] copy_process+0x2052/0x5110 [ 2059.001441][T13634] ? fork_idle+0x290/0x290 [ 2059.005849][T13634] ? memset+0x1f/0x40 [ 2059.009828][T13634] ? __kernel_write+0x340/0x340 [ 2059.014673][T13634] _do_fork+0x196/0x920 [ 2059.018826][T13634] ? __fsnotify_parent+0x310/0x310 [ 2059.023934][T13634] ? dup_mm+0x300/0x300 [ 2059.028084][T13634] ? __sb_end_write+0xa4/0xf0 [ 2059.032759][T13634] __x64_sys_clone+0x25e/0x2c0 [ 2059.037525][T13634] ? __ia32_sys_vfork+0x110/0x110 [ 2059.042549][T13634] do_syscall_64+0xcb/0x150 [ 2059.047049][T13634] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2059.052938][T13634] RIP: 0033:0x45d5b9 [ 2059.056833][T13634] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2059.076448][T13634] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2059.084853][T13634] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2059.092842][T13634] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2059.100816][T13634] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2059.108784][T13634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028 [ 2059.116782][T13634] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:08 executing program 4 (fault-call:0 fault-nth:41): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9000000, 0x11, r2, 0x8000) 06:58:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c35dfff, 0x11, r2, 0x0) 06:58:08 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 06:58:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce6cfff, 0x11, r2, 0x0) 06:58:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c35efff, 0x11, r2, 0x0) 06:58:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce6dfff, 0x11, r2, 0x0) 06:58:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c35ffff, 0x11, r2, 0x0) [ 2059.284782][T13680] FAULT_INJECTION: forcing a failure. [ 2059.284782][T13680] name failslab, interval 1, probability 0, space 0, times 0 [ 2059.302084][T13677] x86/PAT: syz-executor.3:13677 map pfn RAM range req write-combining for [mem 0x171208000-0x171208fff], got write-back [ 2059.402009][T13680] CPU: 1 PID: 13680 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2059.412175][T13680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2059.422231][T13680] Call Trace: [ 2059.425530][T13680] dump_stack+0x14a/0x1ce [ 2059.429858][T13680] ? devkmsg_release+0x11c/0x11c [ 2059.434799][T13680] ? show_regs_print_info+0x12/0x12 [ 2059.440002][T13680] should_fail+0x6fb/0x860 [ 2059.444436][T13680] ? setup_fault_attr+0x3d0/0x3d0 [ 2059.449455][T13680] ? anon_vma_clone+0xa1/0x4b0 [ 2059.454207][T13680] should_failslab+0x5/0x20 [ 2059.458710][T13680] kmem_cache_alloc+0x36/0x260 [ 2059.463469][T13680] ? __anon_vma_interval_tree_augment_rotate+0x1c4/0x1d0 [ 2059.470484][T13680] anon_vma_clone+0xa1/0x4b0 [ 2059.475094][T13680] anon_vma_fork+0x8c/0x4f0 [ 2059.479621][T13680] ? dup_mmap+0x4cf/0xc00 [ 2059.483945][T13680] ? dup_mmap+0x4f8/0xc00 [ 2059.488265][T13680] dup_mmap+0x5a2/0xc00 [ 2059.492412][T13680] ? __delayed_free_task+0x20/0x20 [ 2059.497509][T13680] ? mm_init+0x5c6/0x720 [ 2059.501749][T13680] dup_mm+0x98/0x300 [ 2059.505637][T13680] copy_process+0x2052/0x5110 [ 2059.510304][T13680] ? fork_idle+0x290/0x290 [ 2059.514708][T13680] ? memset+0x1f/0x40 [ 2059.518678][T13680] ? __kernel_write+0x340/0x340 [ 2059.523516][T13680] _do_fork+0x196/0x920 [ 2059.527669][T13680] ? __fsnotify_parent+0x310/0x310 [ 2059.532770][T13680] ? dup_mm+0x300/0x300 [ 2059.536909][T13680] ? __sb_end_write+0xa4/0xf0 [ 2059.541573][T13680] __x64_sys_clone+0x25e/0x2c0 [ 2059.546327][T13680] ? __ia32_sys_vfork+0x110/0x110 [ 2059.551346][T13680] do_syscall_64+0xcb/0x150 [ 2059.555854][T13680] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2059.561753][T13680] RIP: 0033:0x45d5b9 [ 2059.565635][T13680] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2059.585232][T13680] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2059.593656][T13680] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:58:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa000000, 0x11, r2, 0x8000) 06:58:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c360fff, 0x11, r2, 0x0) 06:58:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce6efff, 0x11, r2, 0x0) [ 2059.601616][T13680] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2059.609581][T13680] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2059.617553][T13680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 2059.625518][T13680] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c361fff, 0x11, r2, 0x0) [ 2059.642548][T13704] x86/PAT: syz-executor.3:13704 map pfn RAM range req write-combining for [mem 0x14d008000-0x14d008fff], got write-back 06:58:09 executing program 4 (fault-call:0 fault-nth:42): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xb000000, 0x11, r2, 0x8000) [ 2059.712296][T13717] FAULT_INJECTION: forcing a failure. [ 2059.712296][T13717] name failslab, interval 1, probability 0, space 0, times 0 [ 2059.726711][T13717] CPU: 1 PID: 13717 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2059.736860][T13717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2059.746911][T13717] Call Trace: [ 2059.750199][T13717] dump_stack+0x14a/0x1ce [ 2059.754604][T13717] ? devkmsg_release+0x11c/0x11c 06:58:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce6ffff, 0x11, r2, 0x0) 06:58:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c362fff, 0x11, r2, 0x0) [ 2059.759538][T13717] ? show_regs_print_info+0x12/0x12 [ 2059.764727][T13717] should_fail+0x6fb/0x860 [ 2059.769135][T13717] ? setup_fault_attr+0x3d0/0x3d0 [ 2059.774151][T13717] ? anon_vma_clone+0xa1/0x4b0 [ 2059.775096][T13719] x86/PAT: syz-executor.3:13719 map pfn RAM range req write-combining for [mem 0x173208000-0x173208fff], got write-back [ 2059.778907][T13717] should_failslab+0x5/0x20 [ 2059.778918][T13717] kmem_cache_alloc+0x36/0x260 [ 2059.778933][T13717] anon_vma_clone+0xa1/0x4b0 [ 2059.805208][T13717] anon_vma_fork+0x8c/0x4f0 [ 2059.809705][T13717] ? dup_mmap+0x4cf/0xc00 [ 2059.814025][T13717] ? dup_mmap+0x4f8/0xc00 [ 2059.818344][T13717] dup_mmap+0x5a2/0xc00 [ 2059.822493][T13717] ? __delayed_free_task+0x20/0x20 [ 2059.827602][T13717] ? mm_init+0x5c6/0x720 [ 2059.831833][T13717] dup_mm+0x98/0x300 [ 2059.835720][T13717] copy_process+0x2052/0x5110 [ 2059.840393][T13717] ? fork_idle+0x290/0x290 [ 2059.844799][T13717] ? memset+0x1f/0x40 [ 2059.848800][T13717] ? __kernel_write+0x340/0x340 [ 2059.853639][T13717] _do_fork+0x196/0x920 [ 2059.857780][T13717] ? __fsnotify_parent+0x310/0x310 [ 2059.862881][T13717] ? dup_mm+0x300/0x300 [ 2059.867030][T13717] ? __sb_end_write+0xa4/0xf0 [ 2059.871699][T13717] __x64_sys_clone+0x25e/0x2c0 [ 2059.876475][T13717] ? __ia32_sys_vfork+0x110/0x110 [ 2059.881492][T13717] do_syscall_64+0xcb/0x150 [ 2059.886013][T13717] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2059.891896][T13717] RIP: 0033:0x45d5b9 [ 2059.895784][T13717] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2059.915472][T13717] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2059.923877][T13717] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2059.931844][T13717] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2059.939807][T13717] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2059.947771][T13717] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a [ 2059.955770][T13717] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc000000, 0x11, r2, 0x8000) 06:58:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c363fff, 0x11, r2, 0x0) 06:58:09 executing program 4 (fault-call:0 fault-nth:43): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce70fff, 0x11, r2, 0x0) 06:58:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xd000000, 0x11, r2, 0x8000) 06:58:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c364fff, 0x11, r2, 0x0) [ 2060.069617][T13732] x86/PAT: syz-executor.3:13732 map pfn RAM range req write-combining for [mem 0x15e908000-0x15e908fff], got write-back [ 2060.093060][T13738] FAULT_INJECTION: forcing a failure. [ 2060.093060][T13738] name failslab, interval 1, probability 0, space 0, times 0 06:58:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce71fff, 0x11, r2, 0x0) [ 2060.132912][T13746] x86/PAT: syz-executor.3:13746 map pfn RAM range req write-combining for [mem 0x15bf08000-0x15bf08fff], got write-back [ 2060.146671][T13738] CPU: 1 PID: 13738 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2060.156829][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2060.166880][T13738] Call Trace: [ 2060.170175][T13738] dump_stack+0x14a/0x1ce [ 2060.174509][T13738] ? devkmsg_release+0x11c/0x11c [ 2060.179441][T13738] ? show_regs_print_info+0x12/0x12 [ 2060.184653][T13738] should_fail+0x6fb/0x860 [ 2060.189056][T13738] ? setup_fault_attr+0x3d0/0x3d0 [ 2060.194078][T13738] ? anon_vma_fork+0xed/0x4f0 [ 2060.198748][T13738] should_failslab+0x5/0x20 [ 2060.203248][T13738] kmem_cache_alloc+0x36/0x260 [ 2060.208017][T13738] anon_vma_fork+0xed/0x4f0 [ 2060.212516][T13738] ? dup_mmap+0x4cf/0xc00 [ 2060.216842][T13738] ? dup_mmap+0x4f8/0xc00 [ 2060.221167][T13738] dup_mmap+0x5a2/0xc00 [ 2060.225319][T13738] ? __delayed_free_task+0x20/0x20 [ 2060.230429][T13738] ? mm_init+0x5c6/0x720 [ 2060.234664][T13738] dup_mm+0x98/0x300 [ 2060.238552][T13738] copy_process+0x2052/0x5110 [ 2060.243230][T13738] ? fork_idle+0x290/0x290 [ 2060.247640][T13738] ? memset+0x1f/0x40 [ 2060.251623][T13738] ? __kernel_write+0x340/0x340 [ 2060.256474][T13738] _do_fork+0x196/0x920 [ 2060.260630][T13738] ? __fsnotify_parent+0x310/0x310 [ 2060.265741][T13738] ? dup_mm+0x300/0x300 [ 2060.269895][T13738] ? __sb_end_write+0xa4/0xf0 [ 2060.274571][T13738] __x64_sys_clone+0x25e/0x2c0 [ 2060.279338][T13738] ? __ia32_sys_vfork+0x110/0x110 [ 2060.284363][T13738] do_syscall_64+0xcb/0x150 [ 2060.288875][T13738] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2060.294771][T13738] RIP: 0033:0x45d5b9 [ 2060.298663][T13738] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2060.318261][T13738] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 06:58:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce72fff, 0x11, r2, 0x0) 06:58:09 executing program 4 (fault-call:0 fault-nth:44): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c365fff, 0x11, r2, 0x0) [ 2060.326668][T13738] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2060.335163][T13738] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2060.343131][T13738] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2060.351102][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b [ 2060.359072][T13738] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe000000, 0x11, r2, 0x8000) 06:58:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c366fff, 0x11, r2, 0x0) 06:58:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce73fff, 0x11, r2, 0x0) [ 2060.418283][T13762] FAULT_INJECTION: forcing a failure. [ 2060.418283][T13762] name failslab, interval 1, probability 0, space 0, times 0 [ 2060.455394][T13765] x86/PAT: syz-executor.3:13765 map pfn RAM range req write-combining for [mem 0x14bb08000-0x14bb08fff], got write-back [ 2060.524479][T13762] CPU: 1 PID: 13762 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2060.534659][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2060.544709][T13762] Call Trace: [ 2060.548003][T13762] dump_stack+0x14a/0x1ce [ 2060.552331][T13762] ? devkmsg_release+0x11c/0x11c [ 2060.557255][T13762] ? show_regs_print_info+0x12/0x12 [ 2060.562439][T13762] should_fail+0x6fb/0x860 [ 2060.566837][T13762] ? setup_fault_attr+0x3d0/0x3d0 [ 2060.571845][T13762] ? anon_vma_fork+0x1c9/0x4f0 [ 2060.576587][T13762] should_failslab+0x5/0x20 [ 2060.581073][T13762] kmem_cache_alloc+0x36/0x260 [ 2060.585822][T13762] anon_vma_fork+0x1c9/0x4f0 [ 2060.590397][T13762] dup_mmap+0x5a2/0xc00 [ 2060.594557][T13762] ? __delayed_free_task+0x20/0x20 [ 2060.599652][T13762] ? mm_init+0x5c6/0x720 [ 2060.603877][T13762] dup_mm+0x98/0x300 [ 2060.607756][T13762] copy_process+0x2052/0x5110 [ 2060.612419][T13762] ? fork_idle+0x290/0x290 [ 2060.616816][T13762] ? memset+0x1f/0x40 [ 2060.620780][T13762] ? __kernel_write+0x340/0x340 [ 2060.625616][T13762] _do_fork+0x196/0x920 [ 2060.629759][T13762] ? __fsnotify_parent+0x310/0x310 [ 2060.634857][T13762] ? dup_mm+0x300/0x300 [ 2060.639019][T13762] ? __sb_end_write+0xa4/0xf0 [ 2060.643688][T13762] __x64_sys_clone+0x25e/0x2c0 [ 2060.648439][T13762] ? __ia32_sys_vfork+0x110/0x110 [ 2060.653456][T13762] do_syscall_64+0xcb/0x150 [ 2060.657948][T13762] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2060.663831][T13762] RIP: 0033:0x45d5b9 [ 2060.667713][T13762] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2060.687304][T13762] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2060.695718][T13762] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2060.703676][T13762] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2060.711636][T13762] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:58:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x10000000, 0x11, r2, 0x8000) [ 2060.719594][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002c [ 2060.727557][T13762] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x11000000, 0x11, r2, 0x8000) [ 2060.763951][T13776] x86/PAT: syz-executor.3:13776 map pfn RAM range req write-combining for [mem 0x149f08000-0x149f08fff], got write-back [ 2060.793362][T13776] x86/PAT: syz-executor.3:13776 map pfn RAM range req write-combining for [mem 0x17f008000-0x17f008fff], got write-back [ 2060.851808][T13780] x86/PAT: syz-executor.3:13780 map pfn RAM range req write-combining for [mem 0x17c108000-0x17c108fff], got write-back 06:58:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x12000000, 0x11, r2, 0x8000) [ 2060.894642][T13780] x86/PAT: syz-executor.3:13780 map pfn RAM range req write-combining for [mem 0x149d08000-0x149d08fff], got write-back 06:58:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x20000000, 0x11, r2, 0x8000) [ 2060.975357][T13784] x86/PAT: syz-executor.3:13784 map pfn RAM range req write-combining for [mem 0x152108000-0x152108fff], got write-back [ 2061.054800][T13788] x86/PAT: syz-executor.3:13788 map pfn RAM range req write-combining for [mem 0x14b508000-0x14b508fff], got write-back 06:58:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x25000000, 0x11, r2, 0x8000) 06:58:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c367fff, 0x11, r2, 0x0) 06:58:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce74fff, 0x11, r2, 0x0) [ 2061.151452][T13792] x86/PAT: syz-executor.3:13792 map pfn RAM range req write-combining for [mem 0x15f908000-0x15f908fff], got write-back 06:58:10 executing program 4 (fault-call:0 fault-nth:45): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c368fff, 0x11, r2, 0x0) 06:58:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c369fff, 0x11, r2, 0x0) 06:58:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x40000000, 0x11, r2, 0x8000) 06:58:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce75fff, 0x11, r2, 0x0) [ 2061.247168][T13803] FAULT_INJECTION: forcing a failure. [ 2061.247168][T13803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 06:58:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c36afff, 0x11, r2, 0x0) 06:58:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce76fff, 0x11, r2, 0x0) [ 2061.299174][T13809] x86/PAT: syz-executor.3:13809 map pfn RAM range req write-combining for [mem 0x149908000-0x149908fff], got write-back 06:58:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x48000000, 0x11, r2, 0x8000) 06:58:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c36bfff, 0x11, r2, 0x0) 06:58:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce77fff, 0x11, r2, 0x0) [ 2061.392115][T13824] x86/PAT: syz-executor.3:13824 map pfn RAM range req write-combining for [mem 0x152208000-0x152208fff], got write-back [ 2061.416572][T13803] CPU: 0 PID: 13803 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2061.426736][T13803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2061.436787][T13803] Call Trace: [ 2061.440079][T13803] dump_stack+0x14a/0x1ce [ 2061.444490][T13803] ? devkmsg_release+0x11c/0x11c [ 2061.449424][T13803] ? arch_stack_walk+0xd8/0x120 [ 2061.454274][T13803] ? show_regs_print_info+0x12/0x12 [ 2061.459468][T13803] should_fail+0x6fb/0x860 [ 2061.463880][T13803] ? setup_fault_attr+0x3d0/0x3d0 [ 2061.468904][T13803] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2061.474273][T13803] ? __kasan_kmalloc+0x12c/0x1c0 [ 2061.479235][T13803] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2061.484774][T13803] ? copy_process+0x2052/0x5110 [ 2061.489632][T13803] pte_alloc_one+0x1b/0xb0 [ 2061.494043][T13803] __pte_alloc+0x1d/0x1d0 [ 2061.498366][T13803] copy_page_range+0x1452/0x1710 [ 2061.503297][T13803] ? print_bad_pte+0x650/0x650 [ 2061.508055][T13803] ? init_admin_reserve+0xc0/0xc0 [ 2061.513075][T13803] dup_mmap+0x870/0xc00 [ 2061.517226][T13803] ? __delayed_free_task+0x20/0x20 [ 2061.522331][T13803] ? mm_init+0x5c6/0x720 [ 2061.526574][T13803] dup_mm+0x98/0x300 [ 2061.530474][T13803] copy_process+0x2052/0x5110 [ 2061.535156][T13803] ? fork_idle+0x290/0x290 [ 2061.539581][T13803] ? memset+0x1f/0x40 [ 2061.543570][T13803] ? __kernel_write+0x340/0x340 [ 2061.548423][T13803] _do_fork+0x196/0x920 [ 2061.552567][T13803] ? __fsnotify_parent+0x310/0x310 [ 2061.557661][T13803] ? dup_mm+0x300/0x300 [ 2061.561800][T13803] ? __sb_end_write+0xa4/0xf0 [ 2061.566460][T13803] __x64_sys_clone+0x25e/0x2c0 [ 2061.571205][T13803] ? __ia32_sys_vfork+0x110/0x110 [ 2061.576216][T13803] do_syscall_64+0xcb/0x150 [ 2061.580698][T13803] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2061.586575][T13803] RIP: 0033:0x45d5b9 [ 2061.590453][T13803] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2061.610042][T13803] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2061.618436][T13803] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2061.626388][T13803] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2061.634341][T13803] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2061.642291][T13803] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 2061.650241][T13803] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce78fff, 0x11, r2, 0x0) 06:58:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4c000000, 0x11, r2, 0x8000) [ 2061.753744][T13838] x86/PAT: syz-executor.3:13838 map pfn RAM range req write-combining for [mem 0x156d08000-0x156d08fff], got write-back 06:58:11 executing program 4 (fault-call:0 fault-nth:46): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c36cfff, 0x11, r2, 0x0) 06:58:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce79fff, 0x11, r2, 0x0) 06:58:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x60000000, 0x11, r2, 0x8000) 06:58:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce7afff, 0x11, r2, 0x0) 06:58:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c36dfff, 0x11, r2, 0x0) 06:58:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x68000000, 0x11, r2, 0x8000) [ 2061.871087][T13845] FAULT_INJECTION: forcing a failure. [ 2061.871087][T13845] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.886094][T13850] x86/PAT: syz-executor.3:13850 map pfn RAM range req write-combining for [mem 0x16ba08000-0x16ba08fff], got write-back [ 2061.951992][T13859] x86/PAT: syz-executor.3:13859 map pfn RAM range req write-combining for [mem 0x15ef08000-0x15ef08fff], got write-back [ 2061.980231][T13845] CPU: 0 PID: 13845 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2061.990396][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2062.000444][T13845] Call Trace: [ 2062.003729][T13845] dump_stack+0x14a/0x1ce [ 2062.008050][T13845] ? devkmsg_release+0x11c/0x11c [ 2062.012978][T13845] ? copy_page_range+0x16b2/0x1710 [ 2062.018103][T13845] ? show_regs_print_info+0x12/0x12 [ 2062.023295][T13845] should_fail+0x6fb/0x860 [ 2062.027706][T13845] ? setup_fault_attr+0x3d0/0x3d0 [ 2062.032729][T13845] ? dup_mmap+0x4cf/0xc00 [ 2062.037051][T13845] should_failslab+0x5/0x20 [ 2062.041550][T13845] kmem_cache_alloc+0x36/0x260 [ 2062.046304][T13845] dup_mmap+0x4cf/0xc00 [ 2062.050457][T13845] ? __delayed_free_task+0x20/0x20 [ 2062.055561][T13845] ? mm_init+0x5c6/0x720 [ 2062.059790][T13845] dup_mm+0x98/0x300 [ 2062.063686][T13845] copy_process+0x2052/0x5110 [ 2062.068361][T13845] ? fork_idle+0x290/0x290 [ 2062.072769][T13845] ? memset+0x1f/0x40 [ 2062.076744][T13845] ? __kernel_write+0x340/0x340 [ 2062.081586][T13845] _do_fork+0x196/0x920 [ 2062.085752][T13845] ? __fsnotify_parent+0x310/0x310 [ 2062.090852][T13845] ? dup_mm+0x300/0x300 [ 2062.095000][T13845] ? __sb_end_write+0xa4/0xf0 [ 2062.099669][T13845] __x64_sys_clone+0x25e/0x2c0 [ 2062.104428][T13845] ? __ia32_sys_vfork+0x110/0x110 [ 2062.109449][T13845] do_syscall_64+0xcb/0x150 [ 2062.113948][T13845] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2062.119828][T13845] RIP: 0033:0x45d5b9 [ 2062.123710][T13845] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2062.143325][T13845] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2062.151768][T13845] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2062.159734][T13845] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2062.167703][T13845] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2062.175667][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002e [ 2062.183637][T13845] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c36efff, 0x11, r2, 0x0) 06:58:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce7bfff, 0x11, r2, 0x0) 06:58:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6c000000, 0x11, r2, 0x8000) 06:58:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce7cfff, 0x11, r2, 0x0) 06:58:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c36ffff, 0x11, r2, 0x0) [ 2062.296433][T13876] x86/PAT: syz-executor.3:13876 map pfn RAM range req write-combining for [mem 0x174308000-0x174308fff], got write-back [ 2062.328376][T13876] x86/PAT: syz-executor.3:13876 map pfn RAM range req write-combining for [mem 0x153408000-0x153408fff], got write-back 06:58:12 executing program 4 (fault-call:0 fault-nth:47): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce7dfff, 0x11, r2, 0x0) 06:58:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x74000000, 0x11, r2, 0x8000) 06:58:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c370fff, 0x11, r2, 0x0) 06:58:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c371fff, 0x11, r2, 0x0) 06:58:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce7efff, 0x11, r2, 0x0) [ 2062.670524][T13894] x86/PAT: syz-executor.3:13894 map pfn RAM range req write-combining for [mem 0x14d308000-0x14d308fff], got write-back [ 2062.683597][T13893] FAULT_INJECTION: forcing a failure. [ 2062.683597][T13893] name failslab, interval 1, probability 0, space 0, times 0 06:58:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7a000000, 0x11, r2, 0x8000) 06:58:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c372fff, 0x11, r2, 0x0) [ 2062.775121][T13893] CPU: 1 PID: 13893 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2062.785292][T13893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2062.789711][T13913] x86/PAT: syz-executor.3:13913 map pfn RAM range req write-combining for [mem 0x17f108000-0x17f108fff], got write-back [ 2062.795336][T13893] Call Trace: [ 2062.795356][T13893] dump_stack+0x14a/0x1ce [ 2062.795367][T13893] ? devkmsg_release+0x11c/0x11c [ 2062.795378][T13893] ? copy_page_range+0x1656/0x1710 [ 2062.795395][T13893] ? show_regs_print_info+0x12/0x12 [ 2062.830674][T13893] ? _raw_spin_lock_irqsave+0xfc/0x1e0 [ 2062.836131][T13893] should_fail+0x6fb/0x860 [ 2062.840557][T13893] ? setup_fault_attr+0x3d0/0x3d0 [ 2062.845574][T13893] ? dup_mmap+0x4cf/0xc00 [ 2062.849895][T13893] should_failslab+0x5/0x20 [ 2062.854390][T13893] kmem_cache_alloc+0x36/0x260 [ 2062.859150][T13893] dup_mmap+0x4cf/0xc00 [ 2062.863301][T13893] ? __delayed_free_task+0x20/0x20 [ 2062.868401][T13893] ? mm_init+0x5c6/0x720 [ 2062.872630][T13893] dup_mm+0x98/0x300 [ 2062.876521][T13893] copy_process+0x2052/0x5110 [ 2062.881195][T13893] ? fork_idle+0x290/0x290 [ 2062.885598][T13893] ? memset+0x1f/0x40 [ 2062.889572][T13893] ? __kernel_write+0x340/0x340 [ 2062.894412][T13893] _do_fork+0x196/0x920 [ 2062.898562][T13893] ? __fsnotify_parent+0x310/0x310 [ 2062.903662][T13893] ? dup_mm+0x300/0x300 [ 2062.907807][T13893] ? __sb_end_write+0xa4/0xf0 [ 2062.912475][T13893] __x64_sys_clone+0x25e/0x2c0 [ 2062.917238][T13893] ? __ia32_sys_vfork+0x110/0x110 [ 2062.922249][T13893] do_syscall_64+0xcb/0x150 [ 2062.926744][T13893] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2062.932623][T13893] RIP: 0033:0x45d5b9 [ 2062.936513][T13893] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2062.956109][T13893] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2062.965470][T13893] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:58:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xffff8000, 0x11, r2, 0x8000) 06:58:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce7ffff, 0x11, r2, 0x0) [ 2062.973444][T13893] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2062.981440][T13893] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2062.989405][T13893] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002f [ 2062.997393][T13893] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c373fff, 0x11, r2, 0x0) 06:58:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce80fff, 0x11, r2, 0x0) 06:58:12 executing program 4 (fault-call:0 fault-nth:48): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2063.039016][T13920] x86/PAT: syz-executor.3:13920 map pfn RAM range req write-combining for [mem 0x163d08000-0x163d08fff], got write-back 06:58:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xffffc000, 0x11, r2, 0x8000) 06:58:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce81fff, 0x11, r2, 0x0) 06:58:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c374fff, 0x11, r2, 0x0) 06:58:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce82fff, 0x11, r2, 0x0) [ 2063.128643][T13933] FAULT_INJECTION: forcing a failure. [ 2063.128643][T13933] name failslab, interval 1, probability 0, space 0, times 0 [ 2063.152195][T13937] x86/PAT: syz-executor.3:13937 map pfn RAM range req write-combining for [mem 0x17f308000-0x17f308fff], got write-back 06:58:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c375fff, 0x11, r2, 0x0) 06:58:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x170408fff, 0x11, r2, 0x8000) 06:58:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce83fff, 0x11, r2, 0x0) [ 2063.242280][T13953] x86/PAT: syz-executor.3:13953 map pfn RAM range req write-combining for [mem 0x16f108000-0x16f108fff], got write-back [ 2063.268056][T13933] CPU: 1 PID: 13933 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2063.278245][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2063.288296][T13933] Call Trace: [ 2063.291587][T13933] dump_stack+0x14a/0x1ce [ 2063.295912][T13933] ? devkmsg_release+0x11c/0x11c [ 2063.300856][T13933] ? copy_page_range+0x1656/0x1710 [ 2063.305966][T13933] ? show_regs_print_info+0x12/0x12 [ 2063.311160][T13933] should_fail+0x6fb/0x860 [ 2063.315570][T13933] ? setup_fault_attr+0x3d0/0x3d0 [ 2063.320593][T13933] ? dup_mmap+0x4cf/0xc00 [ 2063.324920][T13933] should_failslab+0x5/0x20 [ 2063.329451][T13933] kmem_cache_alloc+0x36/0x260 [ 2063.334216][T13933] ? vma_gap_callbacks_rotate+0x1d5/0x210 [ 2063.339932][T13933] dup_mmap+0x4cf/0xc00 [ 2063.344090][T13933] ? __delayed_free_task+0x20/0x20 [ 2063.349195][T13933] ? mm_init+0x5c6/0x720 [ 2063.353430][T13933] dup_mm+0x98/0x300 [ 2063.357328][T13933] copy_process+0x2052/0x5110 [ 2063.362012][T13933] ? fork_idle+0x290/0x290 [ 2063.366436][T13933] ? memset+0x1f/0x40 [ 2063.370420][T13933] ? __kernel_write+0x340/0x340 [ 2063.375274][T13933] _do_fork+0x196/0x920 [ 2063.379436][T13933] ? __fsnotify_parent+0x310/0x310 [ 2063.384547][T13933] ? dup_mm+0x300/0x300 [ 2063.388705][T13933] ? __sb_end_write+0xa4/0xf0 [ 2063.393378][T13933] __x64_sys_clone+0x25e/0x2c0 [ 2063.398171][T13933] ? __ia32_sys_vfork+0x110/0x110 [ 2063.403194][T13933] do_syscall_64+0xcb/0x150 [ 2063.407695][T13933] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2063.413615][T13933] RIP: 0033:0x45d5b9 [ 2063.417507][T13933] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:58:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c376fff, 0x11, r2, 0x0) 06:58:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1b0bf1f000, 0x11, r2, 0x8000) 06:58:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce84fff, 0x11, r2, 0x0) [ 2063.437110][T13933] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2063.445524][T13933] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2063.453669][T13933] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2063.461670][T13933] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2063.469640][T13933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000030 [ 2063.477613][T13933] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c377fff, 0x11, r2, 0x0) 06:58:13 executing program 4 (fault-call:0 fault-nth:49): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce85fff, 0x11, r2, 0x0) 06:58:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c378fff, 0x11, r2, 0x0) 06:58:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x400000000000, 0x11, r2, 0x8000) [ 2063.560228][T13972] x86/PAT: syz-executor.3:13972 map pfn RAM range req write-combining for [mem 0x16ec08000-0x16ec08fff], got write-back [ 2063.592433][T13975] FAULT_INJECTION: forcing a failure. [ 2063.592433][T13975] name failslab, interval 1, probability 0, space 0, times 0 06:58:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce86fff, 0x11, r2, 0x0) [ 2063.643555][T13984] x86/PAT: syz-executor.3:13984 map pfn RAM range req write-combining for [mem 0x14e708000-0x14e708fff], got write-back [ 2063.702746][T13975] CPU: 0 PID: 13975 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2063.712921][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2063.722972][T13975] Call Trace: [ 2063.726262][T13975] dump_stack+0x14a/0x1ce [ 2063.730581][T13975] ? devkmsg_release+0x11c/0x11c [ 2063.735508][T13975] ? copy_page_range+0x1656/0x1710 [ 2063.740611][T13975] ? show_regs_print_info+0x12/0x12 [ 2063.745805][T13975] should_fail+0x6fb/0x860 [ 2063.750212][T13975] ? setup_fault_attr+0x3d0/0x3d0 [ 2063.755231][T13975] ? dup_mmap+0x4cf/0xc00 [ 2063.759550][T13975] should_failslab+0x5/0x20 [ 2063.764046][T13975] kmem_cache_alloc+0x36/0x260 [ 2063.768795][T13975] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2063.774501][T13975] dup_mmap+0x4cf/0xc00 [ 2063.778658][T13975] ? __delayed_free_task+0x20/0x20 [ 2063.783762][T13975] ? mm_init+0x5c6/0x720 [ 2063.787988][T13975] dup_mm+0x98/0x300 [ 2063.791866][T13975] copy_process+0x2052/0x5110 [ 2063.796547][T13975] ? fork_idle+0x290/0x290 [ 2063.800950][T13975] ? memset+0x1f/0x40 [ 2063.804947][T13975] ? __kernel_write+0x340/0x340 [ 2063.809788][T13975] _do_fork+0x196/0x920 [ 2063.813929][T13975] ? __fsnotify_parent+0x310/0x310 [ 2063.819048][T13975] ? dup_mm+0x300/0x300 [ 2063.823195][T13975] ? __sb_end_write+0xa4/0xf0 [ 2063.827863][T13975] __x64_sys_clone+0x25e/0x2c0 [ 2063.832618][T13975] ? __ia32_sys_vfork+0x110/0x110 [ 2063.837641][T13975] ? __fpregs_load_activate+0x2d3/0x390 [ 2063.843177][T13975] do_syscall_64+0xcb/0x150 [ 2063.847671][T13975] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2063.853563][T13975] RIP: 0033:0x45d5b9 [ 2063.857445][T13975] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2063.877042][T13975] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2063.885458][T13975] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2063.893417][T13975] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2063.901392][T13975] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2063.909354][T13975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000031 [ 2063.917333][T13975] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000000000000, 0x11, r2, 0x8000) 06:58:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c379fff, 0x11, r2, 0x0) 06:58:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce87fff, 0x11, r2, 0x0) [ 2064.027166][T13998] x86/PAT: syz-executor.3:13998 map pfn RAM range req write-combining for [mem 0x17cb08000-0x17cb08fff], got write-back 06:58:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c37afff, 0x11, r2, 0x0) 06:58:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8000000000000, 0x11, r2, 0x8000) [ 2064.072343][T13998] x86/PAT: syz-executor.3:13998 map pfn RAM range req write-combining for [mem 0x147508000-0x147508fff], got write-back 06:58:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c37bfff, 0x11, r2, 0x0) [ 2064.148703][T14010] x86/PAT: syz-executor.3:14010 map pfn RAM range req write-combining for [mem 0x147b08000-0x147b08fff], got write-back 06:58:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x10000000000000, 0x11, r2, 0x8000) [ 2064.257765][T14019] x86/PAT: syz-executor.3:14019 map pfn RAM range req write-combining for [mem 0x153408000-0x153408fff], got write-back [ 2064.287885][T14019] x86/PAT: syz-executor.3:14019 map pfn RAM range req write-combining for [mem 0x147908000-0x147908fff], got write-back 06:58:14 executing program 4 (fault-call:0 fault-nth:50): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c37cfff, 0x11, r2, 0x0) 06:58:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x60000000000000, 0x11, r2, 0x8000) 06:58:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce88fff, 0x11, r2, 0x0) 06:58:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce89fff, 0x11, r2, 0x0) 06:58:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x80000000000000, 0x11, r2, 0x8000) [ 2064.854633][T14030] x86/PAT: syz-executor.3:14030 map pfn RAM range req write-combining for [mem 0x15fe08000-0x15fe08fff], got write-back [ 2064.867013][T14032] FAULT_INJECTION: forcing a failure. [ 2064.867013][T14032] name failslab, interval 1, probability 0, space 0, times 0 06:58:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c37dfff, 0x11, r2, 0x0) 06:58:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce8afff, 0x11, r2, 0x0) 06:58:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c37efff, 0x11, r2, 0x0) [ 2064.944287][T14044] x86/PAT: syz-executor.3:14044 map pfn RAM range req write-combining for [mem 0x14af08000-0x14af08fff], got write-back [ 2064.999152][T14044] x86/PAT: syz-executor.3:14044 map pfn RAM range req write-combining for [mem 0x15e508000-0x15e508fff], got write-back [ 2065.016192][T14032] CPU: 0 PID: 14032 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2065.026371][T14032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2065.036423][T14032] Call Trace: [ 2065.039716][T14032] dump_stack+0x14a/0x1ce [ 2065.044044][T14032] ? devkmsg_release+0x11c/0x11c 06:58:14 executing program 5: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = dup2(r0, r0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @multicast1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0xff, 0x7, 0x0, 0x21, @ipv4={[], [], @rand_addr=0x64010101}, @empty, 0x40, 0x7, 0x5, 0x38}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000280)={0x4a4, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x60a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x515d}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r5}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x9, 0x40, 0x5, 0xfff}, {0xb, 0x2, 0x5e, 0x401}]}}}]}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0xc001}, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2065.048980][T14032] ? copy_page_range+0x1656/0x1710 [ 2065.054099][T14032] ? show_regs_print_info+0x12/0x12 [ 2065.059297][T14032] should_fail+0x6fb/0x860 [ 2065.063715][T14032] ? setup_fault_attr+0x3d0/0x3d0 [ 2065.068740][T14032] ? dup_mmap+0x4cf/0xc00 [ 2065.073064][T14032] should_failslab+0x5/0x20 [ 2065.077564][T14032] kmem_cache_alloc+0x36/0x260 [ 2065.082325][T14032] dup_mmap+0x4cf/0xc00 [ 2065.086478][T14032] ? __delayed_free_task+0x20/0x20 [ 2065.091585][T14032] ? mm_init+0x5c6/0x720 [ 2065.095820][T14032] dup_mm+0x98/0x300 06:58:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000240)={0x0, 0x8, 0x1ff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2065.099711][T14032] copy_process+0x2052/0x5110 [ 2065.104387][T14032] ? fork_idle+0x290/0x290 [ 2065.108795][T14032] ? memset+0x1f/0x40 [ 2065.112775][T14032] ? __kernel_write+0x340/0x340 [ 2065.117783][T14032] _do_fork+0x196/0x920 [ 2065.121943][T14032] ? __fsnotify_parent+0x310/0x310 [ 2065.127062][T14032] ? dup_mm+0x300/0x300 [ 2065.131239][T14032] ? __sb_end_write+0xa4/0xf0 [ 2065.135923][T14032] __x64_sys_clone+0x25e/0x2c0 [ 2065.140680][T14032] ? __ia32_sys_vfork+0x110/0x110 [ 2065.145707][T14032] do_syscall_64+0xcb/0x150 [ 2065.150207][T14032] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2065.156090][T14032] RIP: 0033:0x45d5b9 [ 2065.159970][T14032] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2065.179920][T14032] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2065.188321][T14032] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:58:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c37ffff, 0x11, r2, 0x0) [ 2065.196295][T14032] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2065.204253][T14032] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2065.212218][T14032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 2065.220180][T14032] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:14 executing program 4 (fault-call:0 fault-nth:51): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce8bfff, 0x11, r2, 0x0) 06:58:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x80ffff00000000, 0x11, r2, 0x8000) 06:58:14 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000000)={0x18, 0x9, 0x1f}) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x26d82, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000180)) io_getevents(r0, 0x6, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r1, 0xe809, 0xa0f}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000200)=0xffffffc1) r3 = memfd_create(&(0x7f0000000300), 0x0) write(r3, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) fcntl$getflags(r3, 0x1) 06:58:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c380fff, 0x11, r2, 0x0) 06:58:14 executing program 0: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000019440)='/proc/self/net/pfkey\x00', 0x300, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000019540)={&(0x7f0000019480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000019500)={&(0x7f00000194c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4440) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa0924080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x1c}}, 0x40041) r5 = dup(r1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000500000002e009a000000000024000000000000b748a7ac9b78e3a300"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc0ffff00000000, 0x11, r2, 0x8000) 06:58:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c381fff, 0x11, r2, 0x0) [ 2065.325720][T14074] x86/PAT: syz-executor.3:14074 map pfn RAM range req write-combining for [mem 0x169908000-0x169908fff], got write-back [ 2065.337191][T14084] FAULT_INJECTION: forcing a failure. [ 2065.337191][T14084] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.363830][T14084] CPU: 1 PID: 14084 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2065.374008][T14084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2065.384095][T14084] Call Trace: [ 2065.387400][T14084] dump_stack+0x14a/0x1ce [ 2065.391770][T14084] ? devkmsg_release+0x11c/0x11c [ 2065.396758][T14084] ? copy_page_range+0x1656/0x1710 [ 2065.401887][T14084] ? show_regs_print_info+0x12/0x12 [ 2065.407103][T14084] should_fail+0x6fb/0x860 [ 2065.411528][T14084] ? setup_fault_attr+0x3d0/0x3d0 [ 2065.416550][T14084] ? dup_mmap+0x4cf/0xc00 [ 2065.420895][T14084] should_failslab+0x5/0x20 [ 2065.425394][T14084] kmem_cache_alloc+0x36/0x260 [ 2065.430188][T14084] dup_mmap+0x4cf/0xc00 [ 2065.434427][T14084] ? __delayed_free_task+0x20/0x20 [ 2065.439533][T14084] ? mm_init+0x5c6/0x720 [ 2065.443772][T14084] dup_mm+0x98/0x300 [ 2065.447666][T14084] copy_process+0x2052/0x5110 [ 2065.452356][T14084] ? fork_idle+0x290/0x290 [ 2065.456761][T14084] ? memset+0x1f/0x40 [ 2065.460737][T14084] ? __kernel_write+0x340/0x340 [ 2065.465585][T14084] _do_fork+0x196/0x920 [ 2065.469735][T14084] ? __fsnotify_parent+0x310/0x310 [ 2065.474841][T14084] ? dup_mm+0x300/0x300 [ 2065.479007][T14084] ? __sb_end_write+0xa4/0xf0 [ 2065.483678][T14084] __x64_sys_clone+0x25e/0x2c0 [ 2065.488438][T14084] ? __ia32_sys_vfork+0x110/0x110 [ 2065.493457][T14084] do_syscall_64+0xcb/0x150 [ 2065.497955][T14084] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2065.503945][T14084] RIP: 0033:0x45d5b9 06:58:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce8cfff, 0x11, r2, 0x0) 06:58:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) keyctl$session_to_parent(0x12) [ 2065.507832][T14084] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2065.527428][T14084] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2065.535829][T14084] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2065.543794][T14084] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2065.551773][T14084] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2065.559734][T14084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000033 [ 2065.567696][T14084] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce8dfff, 0x11, r2, 0x0) 06:58:15 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 06:58:15 executing program 4 (fault-call:0 fault-nth:52): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c382fff, 0x11, r2, 0x0) 06:58:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce8efff, 0x11, r2, 0x0) 06:58:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c383fff, 0x11, r2, 0x0) [ 2065.611295][T14099] x86/PAT: syz-executor.3:14099 map pfn RAM range req write-combining for [mem 0x161908000-0x161908fff], got write-back [ 2065.642687][T14099] x86/PAT: syz-executor.3:14099 map pfn RAM range req write-combining for [mem 0x16e908000-0x16e908fff], got write-back 06:58:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce8ffff, 0x11, r2, 0x0) 06:58:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xf0f10b1b000000, 0x11, r2, 0x8000) 06:58:15 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r0) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r1) ioctl$CHAR_RAW_DISCARD(r0, 0x1277, &(0x7f0000000000)=0x3ff) 06:58:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c384fff, 0x11, r2, 0x0) [ 2065.706228][T14116] FAULT_INJECTION: forcing a failure. [ 2065.706228][T14116] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.741843][T14127] x86/PAT: syz-executor.3:14127 map pfn RAM range req write-combining for [mem 0x16a008000-0x16a008fff], got write-back 06:58:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce90fff, 0x11, r2, 0x0) [ 2065.766032][T14116] CPU: 0 PID: 14116 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2065.776205][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2065.786255][T14116] Call Trace: [ 2065.789548][T14116] dump_stack+0x14a/0x1ce [ 2065.793884][T14116] ? devkmsg_release+0x11c/0x11c [ 2065.798848][T14116] ? show_regs_print_info+0x12/0x12 [ 2065.804041][T14116] ? dup_mm+0x98/0x300 [ 2065.808102][T14116] ? _do_fork+0x196/0x920 [ 2065.812442][T14116] ? __x64_sys_clone+0x25e/0x2c0 [ 2065.817395][T14116] ? do_syscall_64+0xcb/0x150 [ 2065.822066][T14116] should_fail+0x6fb/0x860 [ 2065.826475][T14116] ? setup_fault_attr+0x3d0/0x3d0 [ 2065.831513][T14116] ? anon_vma_clone+0xa1/0x4b0 [ 2065.836282][T14116] should_failslab+0x5/0x20 [ 2065.840778][T14116] kmem_cache_alloc+0x36/0x260 [ 2065.845553][T14116] anon_vma_clone+0xa1/0x4b0 [ 2065.850134][T14116] anon_vma_fork+0x8c/0x4f0 [ 2065.854646][T14116] ? dup_mmap+0x4cf/0xc00 [ 2065.858961][T14116] ? dup_mmap+0x4f8/0xc00 [ 2065.863287][T14116] dup_mmap+0x5a2/0xc00 [ 2065.867457][T14116] ? __delayed_free_task+0x20/0x20 [ 2065.872556][T14116] ? mm_init+0x5c6/0x720 [ 2065.876788][T14116] dup_mm+0x98/0x300 [ 2065.880693][T14116] copy_process+0x2052/0x5110 [ 2065.885370][T14116] ? fork_idle+0x290/0x290 [ 2065.889771][T14116] ? memset+0x1f/0x40 [ 2065.893751][T14116] ? __kernel_write+0x340/0x340 [ 2065.898617][T14116] _do_fork+0x196/0x920 [ 2065.902772][T14116] ? __fsnotify_parent+0x310/0x310 [ 2065.907879][T14116] ? dup_mm+0x300/0x300 [ 2065.912023][T14116] ? __sb_end_write+0xa4/0xf0 [ 2065.916690][T14116] __x64_sys_clone+0x25e/0x2c0 [ 2065.921453][T14116] ? __ia32_sys_vfork+0x110/0x110 [ 2065.926472][T14116] do_syscall_64+0xcb/0x150 [ 2065.930989][T14116] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2065.936874][T14116] RIP: 0033:0x45d5b9 [ 2065.940775][T14116] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:58:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000500000002e00000000000000ffff00009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = dup(r2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r1, r3, 0x13}, 0x10) 06:58:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x100000000000000, 0x11, r2, 0x8000) 06:58:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c385fff, 0x11, r2, 0x0) [ 2065.960367][T14116] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2065.968780][T14116] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2065.976740][T14116] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2065.984700][T14116] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2065.992790][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000034 [ 2066.000748][T14116] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:15 executing program 4 (fault-call:0 fault-nth:53): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:15 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) 06:58:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce91fff, 0x11, r2, 0x0) 06:58:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0xffffffff, 0x3f, 0x6, 0x10001, 0x3, 0x40}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x6, 0x6, 0x7}}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r3) r4 = getgid() syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4]) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x18, 0x33a, &(0x7f0000000240)=ANY=[@ANYRES64], &(0x7f0000000140)='GPL\x00', 0x4, 0x91, &(0x7f0000000180)=""/145, 0x0, 0x4, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$KDADDIO(r1, 0x4b34, 0x3ff) [ 2066.060412][T14147] x86/PAT: syz-executor.3:14147 map pfn RAM range req write-combining for [mem 0x171d08000-0x171d08fff], got write-back 06:58:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c386fff, 0x11, r2, 0x0) 06:58:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce92fff, 0x11, r2, 0x0) 06:58:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x200000000000000, 0x11, r2, 0x8000) 06:58:15 executing program 5: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fddbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000c008f0069ee8a1f000000000c0090000900000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x300000000000000, 0x11, r2, 0x8000) [ 2066.147669][T14170] FAULT_INJECTION: forcing a failure. [ 2066.147669][T14170] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.167089][T14174] x86/PAT: syz-executor.3:14174 map pfn RAM range req write-combining for [mem 0x156508000-0x156508fff], got write-back 06:58:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c387fff, 0x11, r2, 0x0) 06:58:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce93fff, 0x11, r2, 0x0) [ 2066.207320][T14187] x86/PAT: syz-executor.3:14187 map pfn RAM range req write-combining for [mem 0x170008000-0x170008fff], got write-back [ 2066.233518][T14170] CPU: 1 PID: 14170 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2066.243695][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2066.253752][T14170] Call Trace: [ 2066.257040][T14170] dump_stack+0x14a/0x1ce [ 2066.262235][T14170] ? devkmsg_release+0x11c/0x11c [ 2066.267172][T14170] ? show_regs_print_info+0x12/0x12 [ 2066.272351][T14170] should_fail+0x6fb/0x860 [ 2066.276746][T14170] ? setup_fault_attr+0x3d0/0x3d0 [ 2066.281757][T14170] ? anon_vma_fork+0x1c9/0x4f0 [ 2066.286503][T14170] should_failslab+0x5/0x20 [ 2066.290993][T14170] kmem_cache_alloc+0x36/0x260 [ 2066.295739][T14170] anon_vma_fork+0x1c9/0x4f0 [ 2066.300310][T14170] dup_mmap+0x5a2/0xc00 [ 2066.304632][T14170] ? __delayed_free_task+0x20/0x20 [ 2066.309742][T14170] ? mm_init+0x5c6/0x720 [ 2066.313975][T14170] dup_mm+0x98/0x300 [ 2066.317851][T14170] copy_process+0x2052/0x5110 [ 2066.322525][T14170] ? fork_idle+0x290/0x290 [ 2066.326934][T14170] ? memset+0x1f/0x40 [ 2066.330904][T14170] ? __kernel_write+0x340/0x340 [ 2066.335741][T14170] _do_fork+0x196/0x920 [ 2066.339883][T14170] ? __fsnotify_parent+0x310/0x310 [ 2066.344986][T14170] ? dup_mm+0x300/0x300 [ 2066.349127][T14170] ? __sb_end_write+0xa4/0xf0 [ 2066.353799][T14170] __x64_sys_clone+0x25e/0x2c0 [ 2066.358548][T14170] ? __ia32_sys_vfork+0x110/0x110 [ 2066.363587][T14170] do_syscall_64+0xcb/0x150 [ 2066.368093][T14170] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2066.373974][T14170] RIP: 0033:0x45d5b9 [ 2066.377855][T14170] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2066.397450][T14170] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2066.405851][T14170] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2066.413812][T14170] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2066.421784][T14170] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2066.429766][T14170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000035 [ 2066.437754][T14170] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:16 executing program 4 (fault-call:0 fault-nth:54): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x400000000000000, 0x11, r2, 0x8000) 06:58:16 executing program 5: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r2 = dup(r1) r3 = signalfd(r1, &(0x7f0000000140)={[0x5]}, 0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000195c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf2502000000050006000200000014000100fc0100000000000000000000000000000500050005000000aa51e4621e770f57c3b6b1a7b998f11e528ee7e4eae1f7b37370e66e9aa81e3668a744a14f6fbdaaf75009d4566243767fb5873751e983ea4312e2f945e1fcb35be0097e03313833acad225824e139ce3fecaea28e5e2d641160ebf6350988c258c10c23b1f7e64f572cf05b8ad8332669fb4e7d1258e9e89cf1a98f03ccfd662114c239d0ab168a36c7426a697999c70da7bde953ad032a86300e604726d7032eda12af5dafcb9347de5735751526f40d3fd3afe5"], 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4005) 06:58:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c388fff, 0x11, r2, 0x0) 06:58:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce94fff, 0x11, r2, 0x0) 06:58:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c389fff, 0x11, r2, 0x0) 06:58:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x98, &(0x7f0000000180)=""/152, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x500000000000000, 0x11, r2, 0x8000) 06:58:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce95fff, 0x11, r2, 0x0) 06:58:16 executing program 5: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0x3a, 0x75, 0x1, {0x2f, "d5df20d3fddacd7d6006b8b79860f8792379b9d8aadda0dc542a9bb66a931b01e76d9d664bcea4f347a751c70a357c"}}, 0x3a) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x24) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)=r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2066.551765][T14212] x86/PAT: syz-executor.3:14212 map pfn RAM range req write-combining for [mem 0x16ca08000-0x16ca08fff], got write-back [ 2066.565774][T14221] FAULT_INJECTION: forcing a failure. [ 2066.565774][T14221] name failslab, interval 1, probability 0, space 0, times 0 06:58:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce96fff, 0x11, r2, 0x0) [ 2066.625514][T14237] x86/PAT: syz-executor.3:14237 map pfn RAM range req write-combining for [mem 0x156708000-0x156708fff], got write-back [ 2066.637918][T14221] CPU: 0 PID: 14221 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2066.648165][T14221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2066.658219][T14221] Call Trace: [ 2066.661535][T14221] dump_stack+0x14a/0x1ce [ 2066.665868][T14221] ? devkmsg_release+0x11c/0x11c [ 2066.670901][T14221] ? show_regs_print_info+0x12/0x12 [ 2066.676107][T14221] should_fail+0x6fb/0x860 [ 2066.680536][T14221] ? setup_fault_attr+0x3d0/0x3d0 [ 2066.685555][T14221] ? anon_vma_fork+0x1c9/0x4f0 [ 2066.690303][T14221] should_failslab+0x5/0x20 [ 2066.694814][T14221] kmem_cache_alloc+0x36/0x260 [ 2066.699569][T14221] anon_vma_fork+0x1c9/0x4f0 [ 2066.704157][T14221] dup_mmap+0x5a2/0xc00 [ 2066.708303][T14221] ? __delayed_free_task+0x20/0x20 [ 2066.713416][T14221] ? mm_init+0x5c6/0x720 [ 2066.717644][T14221] dup_mm+0x98/0x300 [ 2066.721529][T14221] copy_process+0x2052/0x5110 [ 2066.726193][T14221] ? fork_idle+0x290/0x290 [ 2066.730594][T14221] ? memset+0x1f/0x40 [ 2066.734567][T14221] ? __kernel_write+0x340/0x340 [ 2066.739406][T14221] _do_fork+0x196/0x920 [ 2066.743549][T14221] ? __fsnotify_parent+0x310/0x310 [ 2066.748645][T14221] ? dup_mm+0x300/0x300 [ 2066.752790][T14221] ? __sb_end_write+0xa4/0xf0 [ 2066.757480][T14221] __x64_sys_clone+0x25e/0x2c0 [ 2066.762253][T14221] ? __ia32_sys_vfork+0x110/0x110 [ 2066.767265][T14221] do_syscall_64+0xcb/0x150 [ 2066.771773][T14221] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2066.777655][T14221] RIP: 0033:0x45d5b9 [ 2066.781538][T14221] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2066.801129][T14221] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2066.809528][T14221] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2066.817486][T14221] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2066.825467][T14221] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2066.833437][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 2066.841406][T14221] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:16 executing program 4 (fault-call:0 fault-nth:55): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c38afff, 0x11, r2, 0x0) 06:58:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIOCLEX(r1, 0x5451) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000500000002e000000000000002400"/32], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:16 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) r1 = getgid() r2 = syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1]) r3 = getgid() syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r3]) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES64=r3, @ANYRES32=r2], 0x178}, 0x1, 0x0, 0x0, 0x4040811}, 0x4000) 06:58:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x600000000000000, 0x11, r2, 0x8000) 06:58:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce97fff, 0x11, r2, 0x0) 06:58:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x700000000000000, 0x11, r2, 0x8000) 06:58:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce98fff, 0x11, r2, 0x0) [ 2066.924983][T14256] x86/PAT: syz-executor.3:14256 map pfn RAM range req write-combining for [mem 0x17ca08000-0x17ca08fff], got write-back 06:58:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c38bfff, 0x11, r2, 0x0) 06:58:16 executing program 5: r0 = memfd_create(&(0x7f0000000300), 0x0) write(r0, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0xffffffffffffff80, 0xce8, 0x3, 0x6, 0x4, [{0x7fffffff, 0x8, 0x5, [], 0x805}, {0xc903, 0x3, 0x8e4, [], 0x281}, {0x81, 0x1ff, 0x80000000, [], 0x4}, {0x1f, 0xfffffffffffffffd, 0x2, [], 0x1000}]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000040), 0x4) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce99fff, 0x11, r2, 0x0) [ 2066.976175][T14274] x86/PAT: syz-executor.3:14274 map pfn RAM range req write-combining for [mem 0x164808000-0x164808fff], got write-back [ 2067.006930][T14283] FAULT_INJECTION: forcing a failure. [ 2067.006930][T14283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2067.098659][T14283] CPU: 1 PID: 14283 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2067.108914][T14283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2067.118974][T14283] Call Trace: [ 2067.122283][T14283] dump_stack+0x14a/0x1ce [ 2067.126628][T14283] ? devkmsg_release+0x11c/0x11c [ 2067.131572][T14283] ? show_regs_print_info+0x12/0x12 [ 2067.136775][T14283] should_fail+0x6fb/0x860 [ 2067.141174][T14283] ? setup_fault_attr+0x3d0/0x3d0 [ 2067.146178][T14283] ? __kasan_kmalloc+0x189/0x1c0 [ 2067.151100][T14283] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2067.156466][T14283] ? dup_mmap+0x5a2/0xc00 [ 2067.160777][T14283] ? dup_mm+0x98/0x300 [ 2067.164848][T14283] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2067.170387][T14283] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2067.176439][T14283] get_zeroed_page+0x15/0x40 [ 2067.181016][T14283] __pud_alloc+0x33/0x180 [ 2067.185346][T14283] copy_page_range+0x160b/0x1710 [ 2067.190264][T14283] ? up_read+0x10/0x10 [ 2067.194327][T14283] ? print_bad_pte+0x650/0x650 [ 2067.199068][T14283] ? memset+0x1f/0x40 [ 2067.203026][T14283] ? init_admin_reserve+0xc0/0xc0 [ 2067.208029][T14283] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2067.213727][T14283] dup_mmap+0x870/0xc00 [ 2067.217881][T14283] ? __delayed_free_task+0x20/0x20 [ 2067.222986][T14283] ? mm_init+0x5c6/0x720 [ 2067.227208][T14283] dup_mm+0x98/0x300 [ 2067.231082][T14283] copy_process+0x2052/0x5110 [ 2067.235756][T14283] ? fork_idle+0x290/0x290 [ 2067.240158][T14283] ? memset+0x1f/0x40 [ 2067.244118][T14283] ? __kernel_write+0x340/0x340 [ 2067.248944][T14283] _do_fork+0x196/0x920 [ 2067.253079][T14283] ? __fsnotify_parent+0x310/0x310 [ 2067.258173][T14283] ? dup_mm+0x300/0x300 [ 2067.262323][T14283] ? __sb_end_write+0xa4/0xf0 [ 2067.266979][T14283] __x64_sys_clone+0x25e/0x2c0 [ 2067.271744][T14283] ? __ia32_sys_vfork+0x110/0x110 [ 2067.276756][T14283] do_syscall_64+0xcb/0x150 [ 2067.281242][T14283] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2067.287115][T14283] RIP: 0033:0x45d5b9 [ 2067.290986][T14283] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2067.310579][T14283] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2067.319009][T14283] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2067.326989][T14283] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2067.334947][T14283] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:58:16 executing program 4 (fault-call:0 fault-nth:56): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x800000000000000, 0x11, r2, 0x8000) 06:58:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c38cfff, 0x11, r2, 0x0) 06:58:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000dc"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce9afff, 0x11, r2, 0x0) 06:58:16 executing program 5: setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r1, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r2], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2b, 0x3f, 0xad, 0x9, 0x10, @mcast2, @private0={0xfc, 0x0, [], 0x1}, 0x700, 0x20, 0x64fd, 0x4}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010000507000200000000000000d05b33ab0967000000", @ANYRES32=r8, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r9, @ANYBLOB="140b010000000000001300000000ffffe0000001"], 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@local, @multicast2, 0x0}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x26c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9ad5fb0be8fff582}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8000}, 0x48095) [ 2067.342898][T14283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000037 [ 2067.350847][T14283] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce9bfff, 0x11, r2, 0x0) 06:58:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c38dfff, 0x11, r2, 0x0) [ 2067.402571][T14305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2067.413280][T14306] x86/PAT: syz-executor.3:14306 map pfn RAM range req write-combining for [mem 0x159408000-0x159408fff], got write-back [ 2067.419926][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 06:58:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce9cfff, 0x11, r2, 0x0) 06:58:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x900000000000000, 0x11, r2, 0x8000) 06:58:17 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x13, 0x6, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8040) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:17 executing program 0: r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r2, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x422}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r2, 0x401, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x401}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r3) r6 = dup(r4) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x2, @mcast1, 0x6}, {0xa, 0x4e22, 0x2, @private0, 0x6}, 0xe2d1, [0x7, 0x0, 0x8, 0x8, 0xffffffff, 0x2, 0x6, 0x7]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000003c0)={0x2, 0x1, {0x54, 0xfff, 0x5, {0x401, 0x3ff}, {0x3, 0xfb03}, @ramp={0xd2de, 0x918, {0x6, 0xfff7, 0x7fff, 0x6}}}, {0x55, 0x0, 0x200, {0x5, 0x400}, {0x101, 0x8}, @const={0x5, {0x7ff, 0x729, 0x2, 0x3}}}}) r7 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xf9, 0x4802) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x5, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7f}, @call={0x85, 0x0, 0x0, 0x13}, @ldst={0x2, 0x2, 0x0, 0xa, 0x4, 0x6, 0x4}, @generic={0x3, 0x8, 0x3, 0xdc9, 0x20}], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) [ 2067.468023][T14320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2067.478139][T14321] FAULT_INJECTION: forcing a failure. [ 2067.478139][T14321] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2067.545202][T14321] CPU: 1 PID: 14321 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2067.555374][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2067.565449][T14321] Call Trace: [ 2067.568744][T14321] dump_stack+0x14a/0x1ce [ 2067.573068][T14321] ? devkmsg_release+0x11c/0x11c [ 2067.578005][T14321] ? show_regs_print_info+0x12/0x12 [ 2067.583227][T14321] ? kasan_alloc_pages+0x4a/0x60 [ 2067.588235][T14321] should_fail+0x6fb/0x860 [ 2067.592651][T14321] ? setup_fault_attr+0x3d0/0x3d0 [ 2067.597672][T14321] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2067.603033][T14321] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2067.608574][T14321] ? _raw_spin_trylock_bh+0x190/0x190 [ 2067.613927][T14321] __pmd_alloc+0x3a/0x1f0 [ 2067.618237][T14321] copy_page_range+0x1568/0x1710 [ 2067.623155][T14321] ? up_read+0x10/0x10 [ 2067.627200][T14321] ? print_bad_pte+0x650/0x650 [ 2067.631956][T14321] ? memset+0x1f/0x40 [ 2067.635917][T14321] ? init_admin_reserve+0xc0/0xc0 [ 2067.640919][T14321] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2067.646627][T14321] dup_mmap+0x870/0xc00 [ 2067.650767][T14321] ? __delayed_free_task+0x20/0x20 [ 2067.655858][T14321] ? mm_init+0x5c6/0x720 [ 2067.660080][T14321] dup_mm+0x98/0x300 [ 2067.663959][T14321] copy_process+0x2052/0x5110 [ 2067.668619][T14321] ? fork_idle+0x290/0x290 [ 2067.673030][T14321] ? memset+0x1f/0x40 [ 2067.676999][T14321] ? __kernel_write+0x340/0x340 [ 2067.681841][T14321] _do_fork+0x196/0x920 [ 2067.685981][T14321] ? __fsnotify_parent+0x310/0x310 [ 2067.691071][T14321] ? dup_mm+0x300/0x300 [ 2067.695207][T14321] ? __sb_end_write+0xa4/0xf0 [ 2067.699878][T14321] __x64_sys_clone+0x25e/0x2c0 [ 2067.704624][T14321] ? __ia32_sys_vfork+0x110/0x110 [ 2067.709633][T14321] do_syscall_64+0xcb/0x150 [ 2067.714127][T14321] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2067.720009][T14321] RIP: 0033:0x45d5b9 [ 2067.723893][T14321] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2067.743478][T14321] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2067.751873][T14321] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2067.759827][T14321] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2067.767803][T14321] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2067.775764][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000038 [ 2067.783720][T14321] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:17 executing program 4 (fault-call:0 fault-nth:57): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c38efff, 0x11, r2, 0x0) 06:58:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce9dfff, 0x11, r2, 0x0) 06:58:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce9efff, 0x11, r2, 0x0) 06:58:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24, 0x0, 0x0, 0x88}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa00000000000000, 0x11, r2, 0x8000) [ 2067.792030][T14335] x86/PAT: syz-executor.3:14335 map pfn RAM range req write-combining for [mem 0x160908000-0x160908fff], got write-back [ 2067.812256][T14335] x86/PAT: syz-executor.3:14335 map pfn RAM range req write-combining for [mem 0x155f08000-0x155f08fff], got write-back 06:58:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ce9ffff, 0x11, r2, 0x0) 06:58:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c38ffff, 0x11, r2, 0x0) 06:58:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850400000000ae0469dbb6e29800002e000000000000002495"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00'}) 06:58:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xb00000000000000, 0x11, r2, 0x8000) [ 2067.885381][T14362] x86/PAT: syz-executor.3:14362 map pfn RAM range req write-combining for [mem 0x17c508000-0x17c508fff], got write-back [ 2067.897884][T14364] FAULT_INJECTION: forcing a failure. [ 2067.897884][T14364] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.941618][T28064] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2067.965298][T14364] CPU: 1 PID: 14364 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2067.975476][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2067.985518][T14364] Call Trace: [ 2067.988800][T14364] dump_stack+0x14a/0x1ce [ 2067.993117][T14364] ? devkmsg_release+0x11c/0x11c [ 2067.998043][T14364] ? copy_page_range+0x16b2/0x1710 [ 2068.003140][T14364] ? show_regs_print_info+0x12/0x12 [ 2068.008339][T14364] should_fail+0x6fb/0x860 [ 2068.012743][T14364] ? setup_fault_attr+0x3d0/0x3d0 [ 2068.017752][T14364] ? dup_mmap+0x4cf/0xc00 [ 2068.022064][T14364] should_failslab+0x5/0x20 [ 2068.026551][T14364] kmem_cache_alloc+0x36/0x260 [ 2068.031323][T14364] dup_mmap+0x4cf/0xc00 [ 2068.035739][T14364] ? __delayed_free_task+0x20/0x20 [ 2068.040841][T14364] ? mm_init+0x5c6/0x720 [ 2068.045071][T14364] dup_mm+0x98/0x300 [ 2068.048957][T14364] copy_process+0x2052/0x5110 [ 2068.053623][T14364] ? fork_idle+0x290/0x290 [ 2068.058028][T14364] ? memset+0x1f/0x40 [ 2068.061998][T14364] ? __kernel_write+0x340/0x340 [ 2068.066832][T14364] _do_fork+0x196/0x920 [ 2068.070972][T14364] ? __fsnotify_parent+0x310/0x310 [ 2068.076066][T14364] ? dup_mm+0x300/0x300 [ 2068.080202][T14364] ? __sb_end_write+0xa4/0xf0 [ 2068.084861][T14364] __x64_sys_clone+0x25e/0x2c0 [ 2068.089609][T14364] ? __ia32_sys_vfork+0x110/0x110 [ 2068.094624][T14364] do_syscall_64+0xcb/0x150 [ 2068.099115][T14364] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2068.104991][T14364] RIP: 0033:0x45d5b9 [ 2068.108874][T14364] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2068.128478][T14364] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2068.136872][T14364] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2068.144825][T14364] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2068.152777][T14364] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2068.163874][T14364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000039 [ 2068.171835][T14364] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c [ 2068.190910][T14380] x86/PAT: syz-executor.3:14380 map pfn RAM range req write-combining for [mem 0x17f208000-0x17f208fff], got write-back [ 2068.216102][T14380] x86/PAT: syz-executor.3:14380 map pfn RAM range req write-combining for [mem 0x15f808000-0x15f808fff], got write-back [ 2068.531683][T28064] usb 6-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 2068.540745][T28064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.549749][T28064] usb 6-1: config 0 descriptor?? [ 2069.031657][T28064] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2069.041610][T28064] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 06:58:20 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r0, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r1], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a00001bf3ac8d2a51717802ffc11124000bbe3534f60e5f6307340ae5ad0a7668f3c195f0fa655acafda177fbf62528cd4890ff40259c42fa7f1a672b1fc1", @ANYRES32=r1, @ANYBLOB="1400010000000000000000000000ffffe0000001"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x254, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3a000000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4417}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x65}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x400, 0x2, 0x2, 0x1f}, {0x1, 0x30, 0x3, 0x7fffffff}, {0x1, 0xea, 0x1, 0x7fffffff}, {0x9, 0x9, 0x4, 0x10000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x4048000}, 0x20040000) 06:58:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea0fff, 0x11, r2, 0x0) 06:58:20 executing program 4 (fault-call:0 fault-nth:58): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c390fff, 0x11, r2, 0x0) 06:58:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r2) lsetxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x2) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000002c0)) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000040)=""/174, 0xae, 0x2000, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000500000002e0000010000000024000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc00000000000000, 0x11, r2, 0x8000) [ 2070.874547][T14338] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 06:58:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xd00000000000000, 0x11, r2, 0x8000) 06:58:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c391fff, 0x11, r2, 0x0) 06:58:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea1fff, 0x11, r2, 0x0) [ 2070.915218][T14403] x86/PAT: syz-executor.3:14403 map pfn RAM range req write-combining for [mem 0x163108000-0x163108fff], got write-back [ 2070.933439][T14408] FAULT_INJECTION: forcing a failure. [ 2070.933439][T14408] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.985820][T14422] x86/PAT: syz-executor.3:14422 map pfn RAM range req write-combining for [mem 0x159108000-0x159108fff], got write-back [ 2070.987824][T14408] CPU: 0 PID: 14408 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2071.008483][T14408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2071.019155][T14408] Call Trace: [ 2071.022452][T14408] dump_stack+0x14a/0x1ce [ 2071.026771][T14408] ? devkmsg_release+0x11c/0x11c [ 2071.031745][T14408] ? copy_page_range+0x16b2/0x1710 [ 2071.036849][T14408] ? show_regs_print_info+0x12/0x12 [ 2071.042037][T14408] should_fail+0x6fb/0x860 [ 2071.046445][T14408] ? setup_fault_attr+0x3d0/0x3d0 [ 2071.051465][T14408] ? dup_mmap+0x4cf/0xc00 [ 2071.055793][T14408] should_failslab+0x5/0x20 [ 2071.060289][T14408] kmem_cache_alloc+0x36/0x260 [ 2071.065051][T14408] dup_mmap+0x4cf/0xc00 [ 2071.069217][T14408] ? __delayed_free_task+0x20/0x20 [ 2071.074324][T14408] ? mm_init+0x5c6/0x720 [ 2071.078557][T14408] dup_mm+0x98/0x300 [ 2071.082442][T14408] copy_process+0x2052/0x5110 [ 2071.087112][T14408] ? fork_idle+0x290/0x290 [ 2071.091526][T14408] ? memset+0x1f/0x40 [ 2071.095523][T14408] ? __kernel_write+0x340/0x340 [ 2071.100363][T14408] _do_fork+0x196/0x920 [ 2071.104518][T14408] ? __fsnotify_parent+0x310/0x310 [ 2071.109620][T14408] ? dup_mm+0x300/0x300 [ 2071.113771][T14408] ? __sb_end_write+0xa4/0xf0 [ 2071.118456][T14408] __x64_sys_clone+0x25e/0x2c0 [ 2071.123214][T14408] ? __ia32_sys_vfork+0x110/0x110 [ 2071.128237][T14408] do_syscall_64+0xcb/0x150 [ 2071.132737][T14408] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2071.138618][T14408] RIP: 0033:0x45d5b9 [ 2071.142523][T14408] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2071.162122][T14408] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2071.170538][T14408] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2071.178497][T14408] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 06:58:20 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xfffffffa, 0x4) 06:58:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = memfd_create(&(0x7f0000000300), 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x402083, 0x0) write$P9_ROPEN(r1, &(0x7f00000002c0)={0x18, 0x71, 0x2, {{0x8, 0x0, 0x2}, 0x4}}, 0x18) write(r0, &(0x7f00000001c0)="6963e64243ea486da3a74e09000000000000005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet6(0xa, 0xa, 0x800) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000240)=0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000500000002e00000000ccece71c2dbcb49a0000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000040)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c392fff, 0x11, r2, 0x0) 06:58:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe00000000000000, 0x11, r2, 0x8000) [ 2071.186461][T14408] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2071.194427][T14408] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003a [ 2071.202391][T14408] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea2fff, 0x11, r2, 0x0) [ 2071.258693][T14438] x86/PAT: syz-executor.3:14438 map pfn RAM range req write-combining for [mem 0x160c08000-0x160c08fff], got write-back 06:58:20 executing program 4 (fault-call:0 fault-nth:59): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c393fff, 0x11, r2, 0x0) 06:58:20 executing program 5: clone(0xc80f1280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)="7fe0437033997c72a935cb0e5844bf4cfbe6e953ba2669769647d3bc6af7db061796f02f2a7bb8494604e080d8a95461d1dcb80e52f1a0acb27dbee747109be123a072d5f349b04bb84051aca744a21e2c69883484e6fa262bfb244a7cf0fa1a10b1e167525c9d8d13ad522346ca3af74f4bf7e8b72a49badf9e2415431cb5c7f4bcb4300309ea3a70d2245c7d81a2cb206340354d2b670d9fc30f1c223d63c25044058b7021d5e8abfab9023411d40675b71abeac8c90ac447c9e", 0xbb}, {&(0x7f0000000300)="9857d9c49c51ee08c54cd734e85e48fe61baca63412f37b9465e18f17a47890fa7c20c11bfb8cb18af28635fa333ddadc6e9e5f25f94381a23d4ebbccf06305e6bd15480493c2c4c2a5d5f06ce60b2e950a133f8238bfbf5bfa5627b77a7f61024d91b354dceb49754544c7dda0f9c728b0b6720512d78498ecb1165b7e89d2113d687eff2e798a759dbf88f907331722f1fd1d6f413ffa1a8fa8a4b435520913b9d1bdfe88010d44bea4ebf842877e21e940a14ae1bc6c990590dd8c82fbe28bdffe04b8de291e3d2dc3a1cdebc6c6f01d6cbfd6ed166819382a0f176308ace427f96cb", 0xe4}, {&(0x7f0000000400)="7ee8cf3c9ed7cb2fdba578f7bc4de1676a521cebe0692c10288b464b9a65645a7b5d37303ff483aef9a92acb2a8d224812b9da43061ce971736ba4a4ba30a3766d5e8e8a2a7099cc5fec5f13416afe8dd2b374031fcb96e1e4a3da5d6cfe6027f47998ed2b56e04c51daed20d8c0098ec98641d0a8105d975fcc86211dd3825ac01b44e0716f9f4c7ba9e548e46604bb1427420ee2b69c5923e51e82dc", 0x9d}, {&(0x7f00000004c0)="d3f6f1bbd213e15767844d2d187c10c2e7c5770c17848563612eaf00144727ad7c14513056599c99dfde36830533a2a7794ae232227cef1f52e8362afb43d8967f13d75dee59a1d912898fdc985ae0d33290845af90426cd085124773ed3611a17cc4bc3f29d1e752ced6fe81f00876298a413cb61e854bc29f5b52ad8239f3d04f766c93d04b0f74a20db9143831c8fa4363dd65555389f63", 0x99}, {&(0x7f0000000580)="805b902c324d29ac6763996b133e8b07e4ef7ecfdd7bfd51994792d72f223da318cddb2063ba5e6ebd2100a8b6ea1891772baaecb7a1bd158b057dc5e4a8b4b1bc2aae1153165d75b807595cf81a97e9624c0b3ca01e34365ab8f9aef33eb6f6079c311d6a3d8ba1b1159449200dcb10e271dd38bda8e1ad8bd94340c339d9cd7654a95ded45247eda78366fb40261a8239f421c6c2276cda8fd50acbeb9fa6cd1d3e73afccd975f0c321961ab5e50567c28bc22254b243c14d6f7c3ece9117ece7ff2872d0d8814ea6c3599fc2722fb6b51d203c31257960647bdb0b0c9084fd09f105bae82", 0xe6}], 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea3fff, 0x11, r2, 0x0) 06:58:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000000000000000, 0x11, r2, 0x8000) 06:58:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c391fff, 0x11, r2, 0x0) 06:58:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea4fff, 0x11, r2, 0x0) 06:58:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c394fff, 0x11, r2, 0x0) 06:58:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea3fff, 0x11, r2, 0x0) 06:58:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1100000000000000, 0x11, r2, 0x8000) 06:58:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c395fff, 0x11, r2, 0x0) [ 2071.349805][T14460] x86/PAT: syz-executor.3:14460 map pfn RAM range req write-combining for [mem 0x176208000-0x176208fff], got write-back [ 2071.379565][T14466] FAULT_INJECTION: forcing a failure. [ 2071.379565][T14466] name failslab, interval 1, probability 0, space 0, times 0 [ 2071.440278][T14479] x86/PAT: syz-executor.3:14479 map pfn RAM range req write-combining for [mem 0x171808000-0x171808fff], got write-back [ 2071.453456][T14466] CPU: 1 PID: 14466 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2071.463637][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2071.473691][T14466] Call Trace: [ 2071.476995][T14466] dump_stack+0x14a/0x1ce [ 2071.481327][T14466] ? devkmsg_release+0x11c/0x11c [ 2071.486250][T14466] ? show_regs_print_info+0x12/0x12 [ 2071.491437][T14466] should_fail+0x6fb/0x860 [ 2071.495849][T14466] ? setup_fault_attr+0x3d0/0x3d0 [ 2071.500862][T14466] ? anon_vma_fork+0xed/0x4f0 [ 2071.505540][T14466] should_failslab+0x5/0x20 [ 2071.510032][T14466] kmem_cache_alloc+0x36/0x260 [ 2071.514799][T14466] anon_vma_fork+0xed/0x4f0 [ 2071.519288][T14466] ? dup_mmap+0x4cf/0xc00 [ 2071.523595][T14466] ? dup_mmap+0x4f8/0xc00 [ 2071.527909][T14466] dup_mmap+0x5a2/0xc00 [ 2071.532054][T14466] ? __delayed_free_task+0x20/0x20 [ 2071.537170][T14466] ? mm_init+0x5c6/0x720 [ 2071.541394][T14466] dup_mm+0x98/0x300 [ 2071.545272][T14466] copy_process+0x2052/0x5110 [ 2071.549939][T14466] ? fork_idle+0x290/0x290 [ 2071.554341][T14466] ? memset+0x1f/0x40 [ 2071.558309][T14466] ? __kernel_write+0x340/0x340 [ 2071.563139][T14466] _do_fork+0x196/0x920 [ 2071.567277][T14466] ? __fsnotify_parent+0x310/0x310 [ 2071.572392][T14466] ? dup_mm+0x300/0x300 [ 2071.576535][T14466] ? __sb_end_write+0xa4/0xf0 [ 2071.581197][T14466] __x64_sys_clone+0x25e/0x2c0 [ 2071.586390][T14466] ? __ia32_sys_vfork+0x110/0x110 [ 2071.591404][T14466] do_syscall_64+0xcb/0x150 [ 2071.595902][T14466] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2071.601778][T14466] RIP: 0033:0x45d5b9 [ 2071.605658][T14466] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2071.625702][T14466] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 06:58:21 executing program 4 (fault-call:0 fault-nth:60): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa00000000000000, 0x11, r2, 0x8000) 06:58:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea5fff, 0x11, r2, 0x0) 06:58:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1200000000000000, 0x11, r2, 0x8000) 06:58:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c396fff, 0x11, r2, 0x0) 06:58:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fsmount(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000050fd00002e00000000000000240000000000000095000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x7, r3, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2071.634119][T14466] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2071.642092][T14466] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2071.650049][T14466] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2071.658007][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003b [ 2071.665983][T14466] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(0xffffffffffffffff, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea6fff, 0x11, r2, 0x0) [ 2071.742867][T14497] x86/PAT: syz-executor.5:14497 map pfn RAM range req write-combining for [mem 0x170b08000-0x170b08fff], got write-back [ 2071.743155][T14499] x86/PAT: syz-executor.3:14499 map pfn RAM range req write-combining for [mem 0x152708000-0x152708fff], got write-back [ 2071.760573][T14502] FAULT_INJECTION: forcing a failure. [ 2071.760573][T14502] name failslab, interval 1, probability 0, space 0, times 0 [ 2071.796292][T14502] CPU: 1 PID: 14502 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2071.806481][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2071.816532][T14502] Call Trace: [ 2071.819811][T14502] dump_stack+0x14a/0x1ce [ 2071.824484][T14502] ? devkmsg_release+0x11c/0x11c [ 2071.829420][T14502] ? show_regs_print_info+0x12/0x12 [ 2071.834608][T14502] should_fail+0x6fb/0x860 [ 2071.839016][T14502] ? setup_fault_attr+0x3d0/0x3d0 [ 2071.844038][T14502] ? anon_vma_fork+0x1c9/0x4f0 [ 2071.848796][T14502] should_failslab+0x5/0x20 [ 2071.853289][T14502] kmem_cache_alloc+0x36/0x260 [ 2071.858061][T14502] anon_vma_fork+0x1c9/0x4f0 [ 2071.862642][T14502] dup_mmap+0x5a2/0xc00 [ 2071.866790][T14502] ? __delayed_free_task+0x20/0x20 [ 2071.871889][T14502] ? mm_init+0x5c6/0x720 [ 2071.876133][T14502] dup_mm+0x98/0x300 [ 2071.880017][T14502] copy_process+0x2052/0x5110 [ 2071.884697][T14502] ? fork_idle+0x290/0x290 [ 2071.889098][T14502] ? memset+0x1f/0x40 [ 2071.893065][T14502] ? __kernel_write+0x340/0x340 [ 2071.897900][T14502] _do_fork+0x196/0x920 [ 2071.902049][T14502] ? __fsnotify_parent+0x310/0x310 [ 2071.907164][T14502] ? dup_mm+0x300/0x300 [ 2071.911306][T14502] ? __sb_end_write+0xa4/0xf0 [ 2071.915972][T14502] __x64_sys_clone+0x25e/0x2c0 [ 2071.920727][T14502] ? __ia32_sys_vfork+0x110/0x110 [ 2071.925750][T14502] do_syscall_64+0xcb/0x150 [ 2071.930240][T14502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2071.936119][T14502] RIP: 0033:0x45d5b9 [ 2071.940030][T14502] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2071.959619][T14502] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2071.968019][T14502] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2071.976013][T14502] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2071.983996][T14502] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 06:58:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6000000, 0x11, r2, 0x8000) 06:58:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c397fff, 0x11, r2, 0x0) [ 2071.991965][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003c [ 2071.999935][T14502] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000000000000000, 0x11, r2, 0x8000) 06:58:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c398fff, 0x11, r2, 0x0) [ 2072.042387][T14515] x86/PAT: syz-executor.5:14515 map pfn RAM range req write-combining for [mem 0x151d08000-0x151d08fff], got write-back [ 2072.081162][T14520] x86/PAT: syz-executor.3:14520 map pfn RAM range req write-combining for [mem 0x16a808000-0x16a808fff], got write-back 06:58:21 executing program 4 (fault-call:0 fault-nth:61): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x80000, 0x11, r2, 0x8000) 06:58:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea7fff, 0x11, r2, 0x0) 06:58:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) keyctl$get_keyring_id(0x0, 0x0, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@generic={0x8, 0x8, 0x0, 0xd96, 0x6f}]}, &(0x7f00000006c0)='GPL\x00', 0x8, 0xb6, &(0x7f0000000700)=""/182, 0x41100, 0xa, [], 0x0, 0x16, r1, 0x8, &(0x7f00000007c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xd, 0x5, 0x9}, 0x10, 0xffffffffffffffff, r1}, 0x78) r5 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r6 = dup(r5) readlinkat(r6, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) sendmsg$unix(r2, &(0x7f0000000900)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000000c0)="d0df41aa", 0x4}, {&(0x7f0000000240)="78edfb6a370f4298d2b255950d046b25941bb059b18d80e373e42e15cd8f380f963c3a237f7ca6fa0338b002e83c474acc56a401ded2d68ffc613edb7915a98c3c47c9e02dfb9ac18f191706f64ff62e5e48391629fadf42da4ca519a09870cf96c7ac27364393ff4e171443adf0a3e19d8fe64d0d8273468aa690b4164f40a9b21f11e8fb0eb289697ca5bbf3973346d56244269881fff94790e6da695ddbdfcaf9c5b1ca6db66cd9de0b78dfb9410c1a551d7bf45892c426a1cb7919847e22a06432d3f21d9037393dd948e34388e17d490f8e7936136b295b86c4285342ad17360cf5f43acf0ba50df5dac1c72b0d8c0a53a5a341", 0xf6}, {&(0x7f0000000340)="f3988042a639cbb57cd8f76bc53d268dbf2e4dffcc6df0ad63058de262b92f4f73706a211281300a3dd06215db3b92368941a4ced4e99508b0d32486cb87e29a216ce65da036f53e0a0d9a097b04f3fa39ede08d8eaaf3ac4a12dac29ed8d27f38fbc591d09237f19721068d7da33c2f1f7123f418cfdf849829554bd686b06b718ee1ebaa404fa05689531fe16aad43573defc14868a154106f686524cad4afb4", 0xa1}, {&(0x7f0000000400)="ca8ff632be73c2f5187386265419fac5d69274dcf11bc11d1c40ba2feb35a17e2777f1bde45d6d4c9368ee72a8949ecaa3e3b4fd5e65fcade608f905974317db51066096c74935ad9f4c13cdaacce0793a15ea4e51c3a64946fce1cb5afb10fd58b593bb1ee0aab004cf958e4fab34aaa81da8485e96d2e865f983990c656e25e9fe9724a99ab884bee8df783e466d742fc5f79f19b1afa1f54efc5d64e3a536704db55ca56f243e8c8f007dc9cacb8d51269091915d04fc0fa608c4d97a974dd58523e0a8b44ae90537aa85d4cd08c9", 0xd0}, {&(0x7f0000000500)="52a1f1d2940d6016215d353fb32c28651bbebca8d1f1d089e81c73761e32f50ca644586725f571", 0x27}, {&(0x7f0000000540)="33b6056ad5a5e91ef19c63ffe659edc6bb9731c6f9ed3e6bd59cbdd45a4ed3cb6eb99335a6293b88195104b01b8fd2442ee39222091480a3316bf0bfdaf394025dabee0a4c96d40f47610a5f6f7276aa5237af0e97dbc2daeee2b7ac9893a3b384363d5519dfe314038e1400b2d6c0d6d2dbc93f65d0e8d89ad40242c8f53659c9", 0x81}], 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="0000ff7c"], 0x20, 0x40010}, 0x44846) 06:58:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2500000000000000, 0x11, r2, 0x8000) 06:58:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c399fff, 0x11, r2, 0x0) 06:58:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c39afff, 0x11, r2, 0x0) 06:58:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea8fff, 0x11, r2, 0x0) 06:58:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2072.155387][T14534] x86/PAT: syz-executor.5:14534 map pfn RAM range req write-combining for [mem 0x16df08000-0x16df08fff], got write-back [ 2072.164975][T14537] x86/PAT: syz-executor.3:14537 map pfn RAM range req write-combining for [mem 0x16a908000-0x16a908fff], got write-back 06:58:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c341fff, 0x11, r2, 0x0) 06:58:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cea9fff, 0x11, r2, 0x0) 06:58:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c39bfff, 0x11, r2, 0x0) [ 2072.241906][T14550] FAULT_INJECTION: forcing a failure. [ 2072.241906][T14550] name failslab, interval 1, probability 0, space 0, times 0 [ 2072.298324][T14550] CPU: 0 PID: 14550 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2072.308506][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2072.318578][T14550] Call Trace: [ 2072.321885][T14550] dump_stack+0x14a/0x1ce [ 2072.326230][T14550] ? devkmsg_release+0x11c/0x11c [ 2072.331189][T14550] ? copy_page_range+0x16b2/0x1710 [ 2072.336302][T14550] ? show_regs_print_info+0x12/0x12 [ 2072.341493][T14550] should_fail+0x6fb/0x860 [ 2072.345907][T14550] ? setup_fault_attr+0x3d0/0x3d0 [ 2072.350932][T14550] ? dup_mmap+0x4cf/0xc00 [ 2072.355255][T14550] should_failslab+0x5/0x20 [ 2072.359754][T14550] kmem_cache_alloc+0x36/0x260 [ 2072.364521][T14550] ? vma_gap_callbacks_rotate+0x1d5/0x210 [ 2072.370235][T14550] dup_mmap+0x4cf/0xc00 [ 2072.374390][T14550] ? __delayed_free_task+0x20/0x20 [ 2072.379493][T14550] ? mm_init+0x5c6/0x720 [ 2072.383754][T14550] dup_mm+0x98/0x300 [ 2072.387664][T14550] copy_process+0x2052/0x5110 [ 2072.392339][T14550] ? fork_idle+0x290/0x290 [ 2072.396743][T14550] ? memset+0x1f/0x40 [ 2072.400722][T14550] ? __kernel_write+0x340/0x340 [ 2072.405751][T14550] _do_fork+0x196/0x920 [ 2072.409902][T14550] ? __fsnotify_parent+0x310/0x310 [ 2072.415007][T14550] ? dup_mm+0x300/0x300 [ 2072.419165][T14550] ? __sb_end_write+0xa4/0xf0 [ 2072.423839][T14550] __x64_sys_clone+0x25e/0x2c0 [ 2072.428600][T14550] ? __ia32_sys_vfork+0x110/0x110 [ 2072.433644][T14550] do_syscall_64+0xcb/0x150 [ 2072.438159][T14550] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2072.444747][T14550] RIP: 0033:0x45d5b9 [ 2072.448639][T14550] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2072.468235][T14550] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2072.476652][T14550] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2072.484615][T14550] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 06:58:22 executing program 4 (fault-call:0 fault-nth:62): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe00, 0x11, r2, 0x8000) 06:58:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000000000000000, 0x11, r2, 0x8000) 06:58:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_adjtime(0x6, &(0x7f0000000240)={0x1ff, 0x2, 0x80, 0x80000001, 0x800, 0x1, 0x80000000, 0xa83, 0x1ff, 0x6, 0x81c, 0x8765, 0x10001, 0x10000, 0x2, 0x1, 0x25, 0x10001, 0x57df547e, 0x80000000, 0x6, 0x0, 0x800, 0x10000, 0x1ff, 0x4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x2, 'vcan0\x00', {0x6}, 0x81}) r3 = dup2(r2, r2) accept4$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x1800) 06:58:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceaafff, 0x11, r2, 0x0) 06:58:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c39cfff, 0x11, r2, 0x0) [ 2072.492581][T14550] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2072.500544][T14550] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003d [ 2072.508506][T14550] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceabfff, 0x11, r2, 0x0) [ 2072.567754][T14573] x86/PAT: syz-executor.3:14573 map pfn RAM range req write-combining for [mem 0x164908000-0x164908fff], got write-back [ 2072.574570][T14576] x86/PAT: syz-executor.5:14576 map pfn RAM range req write-combining for [mem 0x14ec08000-0x14ec08fff], got write-back [ 2072.609842][T14580] FAULT_INJECTION: forcing a failure. 06:58:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4800000000000000, 0x11, r2, 0x8000) 06:58:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c39dfff, 0x11, r2, 0x0) [ 2072.609842][T14580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2072.629561][T14580] CPU: 1 PID: 14580 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2072.639771][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2072.649914][T14580] Call Trace: [ 2072.653245][T14580] dump_stack+0x14a/0x1ce [ 2072.657577][T14580] ? devkmsg_release+0x11c/0x11c [ 2072.662516][T14580] ? show_regs_print_info+0x12/0x12 [ 2072.667711][T14580] ? stack_trace_save+0x1f0/0x1f0 [ 2072.672732][T14580] ? __kernel_text_address+0x93/0x110 [ 2072.678156][T14580] ? unwind_get_return_address+0x48/0x90 [ 2072.683795][T14580] should_fail+0x6fb/0x860 [ 2072.688203][T14580] ? setup_fault_attr+0x3d0/0x3d0 [ 2072.693246][T14580] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2072.698611][T14580] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2072.704141][T14580] ? __kasan_kmalloc+0x12c/0x1c0 [ 2072.709093][T14580] ? kmem_cache_alloc+0x1d5/0x260 [ 2072.714110][T14580] ? _raw_spin_lock+0xa1/0x170 [ 2072.719823][T14580] ? trace_event_raw_event_rss_stat+0x120/0x120 [ 2072.726083][T14580] pte_alloc_one+0x1b/0xb0 [ 2072.730492][T14580] __pte_alloc+0x1d/0x1d0 [ 2072.734832][T14580] copy_page_range+0x1452/0x1710 [ 2072.739779][T14580] ? print_bad_pte+0x650/0x650 [ 2072.744533][T14580] ? init_admin_reserve+0xc0/0xc0 [ 2072.749580][T14580] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2072.755329][T14580] dup_mmap+0x870/0xc00 [ 2072.759473][T14580] ? __delayed_free_task+0x20/0x20 [ 2072.764592][T14580] ? mm_init+0x5c6/0x720 [ 2072.768826][T14580] dup_mm+0x98/0x300 [ 2072.772724][T14580] copy_process+0x2052/0x5110 [ 2072.777397][T14580] ? fork_idle+0x290/0x290 [ 2072.781799][T14580] ? memset+0x1f/0x40 [ 2072.785775][T14580] ? __kernel_write+0x340/0x340 [ 2072.790619][T14580] _do_fork+0x196/0x920 [ 2072.794771][T14580] ? __fsnotify_parent+0x310/0x310 [ 2072.799873][T14580] ? dup_mm+0x300/0x300 [ 2072.804019][T14580] ? __sb_end_write+0xa4/0xf0 [ 2072.808691][T14580] __x64_sys_clone+0x25e/0x2c0 [ 2072.813448][T14580] ? __ia32_sys_vfork+0x110/0x110 [ 2072.818461][T14580] do_syscall_64+0xcb/0x150 [ 2072.822972][T14580] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2072.828871][T14580] RIP: 0033:0x45d5b9 [ 2072.832768][T14580] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2072.852376][T14580] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2072.860806][T14580] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 06:58:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1e}, 0x64) [ 2072.868771][T14580] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2072.876754][T14580] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2072.884718][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003e [ 2072.892686][T14580] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceacfff, 0x11, r2, 0x0) 06:58:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2}, 0x50) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, r2, {{0x6, 0xd8, 0x2}}}, 0x28) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/320], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2072.929463][T14592] x86/PAT: syz-executor.3:14592 map pfn RAM range req write-combining for [mem 0x14e308000-0x14e308fff], got write-back 06:58:22 executing program 4 (fault-call:0 fault-nth:63): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c39efff, 0x11, r2, 0x0) 06:58:22 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:58:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceadfff, 0x11, r2, 0x0) 06:58:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4c00000000000000, 0x11, r2, 0x8000) 06:58:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/connector\x00') sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x9, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x24000001) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000500000002e000000000000002400000000000000950000000000110005184f44b92069bf1912cfbdb9fee1511ead68f2b027d8e8a64050f6502e7dd7cf707bd6035deb835fe2b4bcc214b38429a507de7b9296725fc60377f323ca1d65ef9261573b6ee86599d71ee918df1d2513823875b5a58d47d5acf2e15d492017748a97bb863580497b7e7b00f0d612d2c9d3fba6bf68214c5c1d61c9de86"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceaefff, 0x11, r2, 0x0) 06:58:22 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xe1, 0x0, 0xa0, "9b1b9aafc3cd61d9b3f22ea3f14de818", "e82fc72ab3c5f18b97d1a8326b5d84dd1ce9a4d859c10f25dde709c52c4c2c2ba3240f3cac67170027de96e07fceb227e9470b688824c9d54a4f2041646d18ff7ff3b87ed11d8f0a398a2478410053def97d676292665576bf49b637fbcea61e621381fa18cd58f102fc25df31d8f3a6d55bfed7164048fdc4577fbeb619f7a54b4a251946435b18eacbeb090ee7a98c8ed9567b436963ccdcf1ca2969760452efd8cf9b2d42e0d25993476bf574f8817c3048248071fd417d926f7b7397843e170ad5071808d529397bbf99"}, 0xe1, 0x2) r1 = dup3(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x5, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x51, 0x2e}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4ebca47d, 0x0, 0x0, 0x0, 0x879}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x92, &(0x7f0000000180)=""/146, 0x0, 0x0, [], 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xee7, 0x1, 0x3, 0x0, 0x39be, 0x3}}, 0x50) [ 2073.036553][T14614] x86/PAT: syz-executor.3:14614 map pfn RAM range req write-combining for [mem 0x14a508000-0x14a508fff], got write-back [ 2073.039337][T14616] FAULT_INJECTION: forcing a failure. [ 2073.039337][T14616] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.085229][T14616] CPU: 0 PID: 14616 Comm: syz-executor.5 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2073.086764][T14622] FAULT_INJECTION: forcing a failure. [ 2073.086764][T14622] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.095398][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2073.095402][T14616] Call Trace: [ 2073.095423][T14616] dump_stack+0x14a/0x1ce [ 2073.095432][T14616] ? devkmsg_release+0x11c/0x11c [ 2073.095439][T14616] ? show_regs_print_info+0x12/0x12 [ 2073.095447][T14616] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2073.095455][T14616] should_fail+0x6fb/0x860 [ 2073.095462][T14616] ? setup_fault_attr+0x3d0/0x3d0 [ 2073.095470][T14616] ? __down_read+0xf1/0x210 [ 2073.095488][T14616] ? stack_trace_save+0x1f0/0x1f0 [ 2073.160808][T14616] ? ion_buffer_alloc+0x151/0x640 [ 2073.165829][T14616] should_failslab+0x5/0x20 [ 2073.170332][T14616] kmem_cache_alloc_trace+0x39/0x280 [ 2073.175617][T14616] ? arch_stack_walk+0xd8/0x120 [ 2073.180481][T14616] ion_buffer_alloc+0x151/0x640 [ 2073.192885][T14616] ion_dmabuf_alloc+0xcb/0x230 [ 2073.197645][T14616] ? track_buffer_created+0x1c0/0x1c0 [ 2073.203011][T14616] ? check_stack_object+0x5a/0x90 [ 2073.208046][T14616] ion_ioctl+0x2e8/0x9c0 [ 2073.212285][T14616] ? get_pid_task+0x86/0x90 [ 2073.216771][T14616] ? proc_fail_nth_write+0x18f/0x250 [ 2073.222046][T14616] ? debug_shrink_set+0x1b0/0x1b0 [ 2073.227062][T14616] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2073.232245][T14616] ? memset+0x1f/0x40 [ 2073.236229][T14616] ? fsnotify+0x13a0/0x1460 [ 2073.240725][T14616] ? debug_shrink_set+0x1b0/0x1b0 [ 2073.245744][T14616] do_vfs_ioctl+0x770/0x1750 [ 2073.250322][T14616] ? selinux_file_ioctl+0x73b/0x990 [ 2073.255504][T14616] ? ioctl_preallocate+0x250/0x250 [ 2073.260608][T14616] ? __fget+0x37c/0x3c0 [ 2073.264757][T14616] ? vfs_write+0x427/0x4f0 [ 2073.269162][T14616] ? fget_many+0x20/0x20 [ 2073.273390][T14616] ? ksys_write+0x25d/0x2c0 [ 2073.277886][T14616] ? file_open_root+0x450/0x450 [ 2073.282737][T14616] ? security_file_ioctl+0xad/0xc0 [ 2073.287849][T14616] __x64_sys_ioctl+0xd4/0x110 [ 2073.292525][T14616] do_syscall_64+0xcb/0x150 [ 2073.297027][T14616] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2073.302916][T14616] RIP: 0033:0x45d5b9 [ 2073.306796][T14616] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2073.326763][T14616] RSP: 002b:00007f39898d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:58:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c39ffff, 0x11, r2, 0x0) 06:58:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6000000000000000, 0x11, r2, 0x8000) [ 2073.335168][T14616] RAX: ffffffffffffffda RBX: 00000000000100c0 RCX: 000000000045d5b9 [ 2073.343134][T14616] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2073.351097][T14616] RBP: 00007f39898d0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2073.359060][T14616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2073.367043][T14616] R13: 00007ffd3b2d521f R14: 00007f39898d19c0 R15: 000000000118cf4c [ 2073.375028][T14622] CPU: 1 PID: 14622 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2073.385179][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2073.395230][T14622] Call Trace: [ 2073.398528][T14622] dump_stack+0x14a/0x1ce [ 2073.402888][T14622] ? devkmsg_release+0x11c/0x11c [ 2073.407832][T14622] ? show_regs_print_info+0x12/0x12 [ 2073.413049][T14622] should_fail+0x6fb/0x860 [ 2073.417500][T14622] ? setup_fault_attr+0x3d0/0x3d0 [ 2073.422532][T14622] ? dup_mmap+0x4cf/0xc00 [ 2073.426879][T14622] should_failslab+0x5/0x20 [ 2073.431371][T14622] kmem_cache_alloc+0x36/0x260 [ 2073.436130][T14622] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2073.441926][T14622] dup_mmap+0x4cf/0xc00 [ 2073.446106][T14622] ? __delayed_free_task+0x20/0x20 [ 2073.451204][T14622] ? mm_init+0x5c6/0x720 [ 2073.455455][T14622] dup_mm+0x98/0x300 [ 2073.459341][T14622] copy_process+0x2052/0x5110 [ 2073.464018][T14622] ? fork_idle+0x290/0x290 [ 2073.468426][T14622] ? memset+0x1f/0x40 [ 2073.472425][T14622] ? __kernel_write+0x340/0x340 [ 2073.477280][T14622] _do_fork+0x196/0x920 [ 2073.481443][T14622] ? __fsnotify_parent+0x310/0x310 [ 2073.486549][T14622] ? dup_mm+0x300/0x300 [ 2073.490714][T14622] ? __sb_end_write+0xa4/0xf0 [ 2073.495384][T14622] __x64_sys_clone+0x25e/0x2c0 [ 2073.500141][T14622] ? __ia32_sys_vfork+0x110/0x110 [ 2073.505157][T14622] do_syscall_64+0xcb/0x150 [ 2073.509647][T14622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2073.515526][T14622] RIP: 0033:0x45d5b9 [ 2073.519406][T14622] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:58:23 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) [ 2073.538997][T14622] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2073.547404][T14622] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2073.555380][T14622] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2073.563344][T14622] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2073.571303][T14622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 2073.579266][T14622] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:23 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceaffff, 0x11, r2, 0x0) [ 2073.641136][T14633] x86/PAT: syz-executor.3:14633 map pfn RAM range req write-combining for [mem 0x152d08000-0x152d08fff], got write-back [ 2073.657554][T14638] FAULT_INJECTION: forcing a failure. [ 2073.657554][T14638] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.689081][T14638] CPU: 0 PID: 14638 Comm: syz-executor.5 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2073.699254][T14638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2073.709738][T14638] Call Trace: [ 2073.713026][T14638] dump_stack+0x14a/0x1ce [ 2073.717339][T14638] ? devkmsg_release+0x11c/0x11c [ 2073.722257][T14638] ? __kasan_kmalloc+0x189/0x1c0 [ 2073.727195][T14638] ? show_regs_print_info+0x12/0x12 [ 2073.732379][T14638] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2073.737825][T14638] ? ion_buffer_alloc+0x151/0x640 [ 2073.742835][T14638] ? ion_dmabuf_alloc+0xcb/0x230 [ 2073.747772][T14638] ? do_vfs_ioctl+0x770/0x1750 [ 2073.752526][T14638] ? __x64_sys_ioctl+0xd4/0x110 [ 2073.757376][T14638] ? do_syscall_64+0xcb/0x150 [ 2073.762056][T14638] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2073.768125][T14638] should_fail+0x6fb/0x860 [ 2073.772542][T14638] ? setup_fault_attr+0x3d0/0x3d0 [ 2073.777554][T14638] ? mutex_lock+0xa6/0x110 [ 2073.781960][T14638] ? mutex_trylock+0xb0/0xb0 [ 2073.786542][T14638] ? ion_system_heap_allocate+0x584/0xbf0 [ 2073.792268][T14638] should_failslab+0x5/0x20 [ 2073.796759][T14638] kmem_cache_alloc_trace+0x39/0x280 [ 2073.802035][T14638] ? ion_page_pool_alloc+0x2c1/0x490 [ 2073.807305][T14638] ion_system_heap_allocate+0x584/0xbf0 [ 2073.812856][T14638] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2073.818823][T14638] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2073.824267][T14638] ion_buffer_alloc+0x21f/0x640 [ 2073.829120][T14638] ion_dmabuf_alloc+0xcb/0x230 [ 2073.833886][T14638] ? track_buffer_created+0x1c0/0x1c0 [ 2073.839242][T14638] ? check_stack_object+0x5a/0x90 [ 2073.844252][T14638] ion_ioctl+0x2e8/0x9c0 [ 2073.848499][T14638] ? get_pid_task+0x86/0x90 [ 2073.852994][T14638] ? proc_fail_nth_write+0x18f/0x250 [ 2073.858263][T14638] ? debug_shrink_set+0x1b0/0x1b0 [ 2073.863290][T14638] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2073.868493][T14638] ? memset+0x1f/0x40 [ 2073.872463][T14638] ? fsnotify+0x13a0/0x1460 [ 2073.876952][T14638] ? debug_shrink_set+0x1b0/0x1b0 [ 2073.881980][T14638] do_vfs_ioctl+0x770/0x1750 [ 2073.886575][T14638] ? selinux_file_ioctl+0x73b/0x990 [ 2073.891770][T14638] ? ioctl_preallocate+0x250/0x250 [ 2073.896868][T14638] ? __fget+0x37c/0x3c0 [ 2073.902247][T14638] ? vfs_write+0x427/0x4f0 [ 2073.906664][T14638] ? fget_many+0x20/0x20 [ 2073.910891][T14638] ? ksys_write+0x25d/0x2c0 [ 2073.915381][T14638] ? file_open_root+0x450/0x450 [ 2073.920224][T14638] ? security_file_ioctl+0xad/0xc0 [ 2073.925324][T14638] __x64_sys_ioctl+0xd4/0x110 [ 2073.930003][T14638] do_syscall_64+0xcb/0x150 [ 2073.934506][T14638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2073.940395][T14638] RIP: 0033:0x45d5b9 [ 2073.944274][T14638] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2073.963863][T14638] RSP: 002b:00007f39898d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2073.972262][T14638] RAX: ffffffffffffffda RBX: 00000000000100c0 RCX: 000000000045d5b9 [ 2073.980224][T14638] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 06:58:23 executing program 4 (fault-call:0 fault-nth:64): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x9, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xb4, 0x10, 0x0}, 0x78) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @multicast1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000038c0)=ANY=[@ANYBLOB="502a09f019801406fd10e369771f22e05febe288c0ba0a846775235b59080c1c2bd8a8852c570be1db18a025bf3cf640fb4e70e0fcdb7b24f280b49e39a872184158009a5618723ede8e466c5bd342f7cc9b77433dda475b397a69b770ad2dfc0f057a12416840aedc4576611649e5524273fec15f248e8c9f464ad9e960dde1d34b8ff341f17f4650f09f3ed298b2a27052243255c72f6707cad801030ed41f5839851e93106d7f4d2504c7e9a4903159b471502406476161bff0f599d7b00a859cc035a0b7934edb8543e55b87cd1e439fb1e0cbd83779034b0ad0d0c202e50dd51131e29a1ffc1f", @ANYRES16, @ANYBLOB="14000200200100"/20], 0x2c}, 0x1, 0x0, 0x0, 0x400c090}, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000003b80)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="58020000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fbdbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="fc00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004004000000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000c0ab875d707e9ff5e6050003000b000000080004000600000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="f00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ab00000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x258}, 0x1, 0x0, 0x0, 0x44881}, 0x0) readlink(&(0x7f00000037c0)='./file0\x00', &(0x7f0000003800)=""/120, 0x78) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmmsg$sock(r0, &(0x7f00000036c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="1f", 0x1}, {&(0x7f0000000240)="b35b8eef605aad424532946461effe1e6cf9509ea12070824567f3e2ca756f912ed1b6c8ede23896c340f93f2c6bf3bde359a28cb989d89360ee6461c2285725fcbec33b4a91396e7cb6e529f057dca032d6c3715da851bcf901a631a198fcf045f2ada64de013fff0994c256c48a1a567da64c2a1a297d40149f4a5f064cdbe537e6526450c5ad27d7a0340d57b583237304731714929c449fcfbf0088c041175d6e341e137fdf9fb728f3d8627377eddbcc18821d409e0a16848070836890c53db37020c8cf58ba54d9f907bb480f303696db00954", 0xd6}, {&(0x7f0000000340)="bf4774d6db1b002314dfd6c861dfb98cf111c8445fa34feffe21d7f0944724276ba86be45d41bc92597dbe4daa94fd404e48de3140fea4f24d0a51bcc133603473d586b14a0879eb542818c954e5620ddd389b1535d2f36e4abb5aa147a348bba027030458b71fe9877db2c965f0f09488ccfa4141f7094ce605cfa4d3b50244c606056b54c4f59fb2ca7bef2ec6", 0x8e}], 0x3, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xe5f}}, @txtime={{0x18, 0x1, 0x3d, 0xe5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0xc0}}, {{&(0x7f0000000500)=@pppoe={0x18, 0x0, {0x4, @multicast, 'veth0_to_hsr\x00'}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)="73ae9e04af3abd24a160c6d8635a67f09d3bd1cd949124", 0x17}, {&(0x7f00000005c0)="b2fbfc9072feab828ed00c80278cfdf3cc22e00f0bee4c04321a7343b7215ce5eac83a070db119de95e3dfc070a8e2125eba9822a5443d93c6fb180c5c39f8e801c8eab3a4d9d27bb5510fc13118c18e59c73733986e0707dca7a0441be95a3f45d30d270f9792f405b51a150fae9c166e38218db02d313e8e9c800138da0366bec31616705a38cf74663f10b33959e56ac689ec704a18aa64dad5652a5116fb35d92b67f4697330eef0516b9b60b00b48bb16563f1974c72185075ef741760aa96fef0f6e4f25faa16656a76f954dd1de29650842dc47397f296324f537cbc959b46bc2dadb2cc7269b", 0xea}, {&(0x7f00000006c0)="9c75878783656a7ff608b8a04babfd1bd02491fa13fe", 0x16}, {&(0x7f0000000700)="950516358f3633bb23", 0x9}, {&(0x7f0000000740)="a0ecf440bcfe00f3f7528d815f7b6ed062b58a64208334794ce58ce1e6a6e2e5b8439312c28fb57925c0f76ea1de85eef81e49ddc21a4f878439e1661a9a514acff3ea2ee52657ed541c4e27a366dcf857b2e818620a704957a9992baae9ff8d47e4032b98b508e58be377ee6828087f0165ed547d203cb074709680fe2bd1672ffb73b217ca29f1248cbb47379933b3a5bb2d6fef0bf86e2c92275db14b6f0a5fddb1fce35e", 0xa6}, {&(0x7f0000000800)="1bc081c2bee881562b", 0x9}], 0x6, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x78}}, {{&(0x7f0000000940)=@ll={0x11, 0x1, r4, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000001f00)=[{&(0x7f00000009c0)="b5139dd86917238aa6bd36815cb9179d94046c48cf77b1fe357ad5f55ca5d3faaae5961cbe80051786e574118789d0721cedccaf44b871768aded2ef0db5a448bdfe1742f0a4047aa30ede081f4f5b58978ec0e88de60f2c2554604afd8aa40354fe3106ba9df43e97e906cfb13f5a990df9657a026305e757746ba4bb45", 0x7e}, {&(0x7f0000000a40)="6ff32a73c78ccad6654211f14459c758cc307a2596d38b7409284fc9fc2c1ffd23eb01e63e2a80e38d3a3b040a4826a70dc523131af432bac98a8a5faf8f5ff0a5955029ce57f579760227ae4c9576b174007d350c7d2c2ad79de2cb2dd2db0d937b16dae516452d55246e7fffdf8da761eba147c43c", 0x76}, {&(0x7f0000000ac0)="00c8e3a1ba0ff721e95e50dcc7a91de0c5f195bd1751837a12149e5bd49c5c183ddb79c1e4219edd00da2ecab513668e748bb553a6b4077cb88638e53cbdcff25f5688263bf158e3d5d5ef162d7e0e7eb4d52d3e2510c4fcf2", 0x59}, {&(0x7f0000000b40)="beaa9030579b0f3e610c8aeb2826b042b3cfd120137ee6e9718527bfea653319914422a674db265c3b2d0dd229bf3e92384e88bd8e39c76abb35b760c824aa27739136098b4b4b024c1a967659612bbf3f3cf2d8abfbf2c8475fa97051bdaf372a7b9f6635508a9037e15f679ce516905e7e4b68c53957bd1f75e63aba76c6aa49198de61cb510a29855d97285ad6700015ae26c91f22ddd39b182b9e28f356da5ca89e0b8c3cfcba58d16e1d15bff4f819e83a3a3106ad8bf0be0bde4942a5a0ff4618e616ddcd60a3ad0f6db689a840d", 0xd1}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="1ba019a7b5f9423674b168cfe5e1ff81babd2bee8c36698ee942c2f8d482d4138641f5505e8d13452f1baa795d5662d7c95b0a042f3dc954f8295e2d1ecd647f814d62934e9e7e7c3368b6d8ffc4cfda7040d53f95020b82abd7aa9f72e8813e612cd806c9b18f53642390657137ab3295", 0x71}, {&(0x7f0000001cc0)="f51588597226a6774384c3ade5d6c368a2d4da5b54aafe02b6de3ea7e83b722e1a2bca29e2b9311afad349dcb56c4fcdec7583c2fc03b0fd8374d2d3bd3233b8917fa75cb98e62c01f0cdc32c5f4c614c39acc78ebe86474db46c8338e017787ddbf9dcbcb4cf17a8784cd3905330bb85b61692dfdb69d4385c4a8ab1e82b340ddfd442e75fc7046fabde644d12813baf965f14ee7697e3ebc7ed16d611707a4db3423b157a712bf1046eba6d0b214958b28af2e1ed2ab8156b3da742b2bc405f7e0e635460d945a44bf0e4ec9cfaa752e6a86f4dde4a6077e43cf58a47217d3ea25222cdec459d5582b9421c3279c2285", 0xf1}, {&(0x7f0000001dc0)="8123b72389afc29c6bf1ded0b87557ea774e60b0b5116b84", 0x18}, {&(0x7f0000001e00)="34bbe6785e4415c901de9eb5d3a8caf7d971c8dabda8107d541d3e48f41c41fd4e398d7203ed19396d0b3fd50ff2ff9d463ef08ee847b4cacf9657f58cdd5a1083da5c3f1806530617c399103babc60458ef7499451591de9f054c38515720726b0e58821fd0b5b9108951e2fbe544a11d52ea665c17e2fa8dd5059f893e06f10f90ada1d66fd18c22775917e3cd06ad5921266d66109ab0a3f0d0d7e83b74ce163902fda25dfa3cecd1b270ce677901200973cacd47b19a7469c24d7253ca86d31fcca385db5f960452d1bf256a6831bb0a569004aece6c8f628fb4ebf9be1acdcc2d5b97", 0xe5}], 0x9, &(0x7f0000001fc0)=[@mark={{0x14, 0x1, 0x24, 0x58d8}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x4bec4dc1}}, @timestamping={{0x14}}], 0x60}}, {{&(0x7f0000002040)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, &(0x7f0000003600)=[{&(0x7f00000020c0)="3a7187a242e7cf421e37210a5d4577ef450d255ee97c18ed19b835f2819351450f1eda97b8ab568d7d363bcb0566f8cd44f30cd8193b0742898bdbb54c059862b5b23fadca4a9c8747f6126e2ea72cc9cfeef01394947d43f4218cc94e8d96d88165d902cfb3e3d22d986835118d92d5ac6360c7e07d02a7d85cbb71bf828f380a5a64d1", 0x84}, {&(0x7f0000002180)="548cddd8931a71f4ed9f584f740f8beab90366eab2fcabd6d7cec8ee4f74c4709eeb760273315d8273a1c884e5f41f", 0x2f}, {&(0x7f00000021c0)="6bf4070a63d163fa19824ba590c23915914d7d222b21fca4786d2c0c290d34fd15020162f501f0deb33ef106a484a2fe7d01f385a151081c437506c4723f80d2ed75a265391d440002949a7c0c7d1566b2048ad4e180f87918552daac12b9e9bc3a938dd486a9a1c23d27e3441", 0x6d}, {&(0x7f0000002240)="dde0d21406290a5d914192ba415a18", 0xf}, {&(0x7f0000002280)="1a9cbedc4fb8bc416c88cf4d72c6dd39c1e907ec11c1f9c708afa8e9515befc009489f70078678fe", 0x28}, {&(0x7f00000022c0)="d3c63811628a18881b09db6f7e126fdbf2b9e22098057c4f7e21bef4172a9676d4f833b6b7ccf59adecf5011ad6ae95544409038a3dceb0ae58e33b4e92d1415d8220b5a865d1d0b0459f69e7da75ffe155399d0baa3908447e9d0b8aa7e73c924d89bac72e6169b11723969ea0e6e1de9d91ce297fad644528e63b5131dd0fdf9e51d388ad0189bf8fe923cad7bddd756f57166f603138e151cd664f50f7a2e358cf225b8fb768505c0cadc612a9ecede", 0xb1}, {&(0x7f0000002380)="1a3646de3811fd27e6c2bd0d50df899481c406aa75c631fa6a65bdea9854fceeccf7fb6df54eadb8d45d1d609f1d6208486a57fa8a98d6bdde0a2a8fe736a7a63cecd65c8c2682499c0af07eeb07897cfa1d4fc08fb515abd6e7ea809eec7f6d03e41d6acd2a27b60737bdc6686ff01deb9e6c741dc314cacc31669db85e830f6b03d18efd94828fbf77b585dc8c36a2a6d28318d3b57c23c87dc29258cd439724d4ebb4e486becfa14d5b43d143eb0206cc312259f44c307f8afb7571fd35571e3168a5d31ccc9d3b7cba9d7176b6f5", 0xd0}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000003480)="065cba474417fb39df42f7f7c08eebdb1816fb51a14b68d4cbe1792e7506f869a54d8e4970ad6874d5f42028649f5ff47e44b0c797158f7c91d9988ed67d68389086ebb91a2a125ccaf68239913e1729b5ddaf89ad03de2e30b17e6cb94a4ca4aa0c2b84cff7", 0x66}, {&(0x7f0000003500)="378f0abd4b22e1e1103bd8bd5324adffa8d5f7ae53d427fe41b1a1f3d2e27fd1b819466a4f34ce58655f166143b3e5c7a339c85a74deda5be1981437149ae1fc0d121464bb6c510c1dbf6a0d868a36e80cfe825045903ab1c9bb96731779a6ae6d83ef1e0d359e20fa3a6cf285068526a568666757b5cb6db7d9b30dcfd45f47e8614d72490fc727613bf52e4a32c65809bcb5592b4756b7423db9f682935a036fb70b5dea82821565dd3a1127941014b29878da4354a467efed5654a627575d317d802af6262e20d356f2dc9dcf0d06ffbc28b017e1e7b042", 0xd9}], 0xa}}], 0x4, 0x4000) 06:58:23 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceb0fff, 0x11, r2, 0x0) 06:58:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3a0fff, 0x11, r2, 0x0) 06:58:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6800000000000000, 0x11, r2, 0x8000) [ 2073.988183][T14638] RBP: 00007f39898d0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2073.996157][T14638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2074.004116][T14638] R13: 00007ffd3b2d521f R14: 00007f39898d19c0 R15: 000000000118cf4c 06:58:23 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceb1fff, 0x11, r2, 0x0) 06:58:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3a1fff, 0x11, r2, 0x0) [ 2074.045024][T14651] x86/PAT: syz-executor.3:14651 map pfn RAM range req write-combining for [mem 0x14a708000-0x14a708fff], got write-back [ 2074.069956][T14654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14654 comm=syz-executor.0 06:58:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6c00000000000000, 0x11, r2, 0x8000) [ 2074.092665][T14660] FAULT_INJECTION: forcing a failure. [ 2074.092665][T14660] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2074.119980][T14654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14654 comm=syz-executor.0 06:58:23 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceb2fff, 0x11, r2, 0x0) 06:58:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3a2fff, 0x11, r2, 0x0) [ 2074.146032][T14671] x86/PAT: syz-executor.3:14671 map pfn RAM range req write-combining for [mem 0x14c908000-0x14c908fff], got write-back [ 2074.227162][T14660] CPU: 0 PID: 14660 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2074.237372][T14660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2074.247436][T14660] Call Trace: [ 2074.250743][T14660] dump_stack+0x14a/0x1ce [ 2074.255081][T14660] ? devkmsg_release+0x11c/0x11c [ 2074.260057][T14660] ? show_regs_print_info+0x12/0x12 [ 2074.265265][T14660] ? stack_trace_save+0x1f0/0x1f0 [ 2074.270299][T14660] ? __kernel_text_address+0x93/0x110 [ 2074.275681][T14660] ? unwind_get_return_address+0x48/0x90 [ 2074.281368][T14660] should_fail+0x6fb/0x860 [ 2074.285796][T14660] ? setup_fault_attr+0x3d0/0x3d0 [ 2074.290826][T14660] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2074.296209][T14660] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2074.301756][T14660] ? __kasan_kmalloc+0x12c/0x1c0 [ 2074.306699][T14660] ? kmem_cache_alloc+0x1d5/0x260 [ 2074.311767][T14660] ? _raw_spin_lock+0xa1/0x170 [ 2074.316546][T14660] ? trace_event_raw_event_rss_stat+0x120/0x120 [ 2074.322802][T14660] pte_alloc_one+0x1b/0xb0 [ 2074.327235][T14660] __pte_alloc+0x1d/0x1d0 [ 2074.331580][T14660] copy_page_range+0x1452/0x1710 [ 2074.336562][T14660] ? print_bad_pte+0x650/0x650 [ 2074.341364][T14660] ? init_admin_reserve+0xc0/0xc0 [ 2074.346429][T14660] dup_mmap+0x870/0xc00 [ 2074.350626][T14660] ? __delayed_free_task+0x20/0x20 [ 2074.355750][T14660] ? mm_init+0x5c6/0x720 [ 2074.359994][T14660] dup_mm+0x98/0x300 [ 2074.363894][T14660] copy_process+0x2052/0x5110 [ 2074.368585][T14660] ? fork_idle+0x290/0x290 [ 2074.373008][T14660] ? memset+0x1f/0x40 [ 2074.376994][T14660] ? __kernel_write+0x340/0x340 [ 2074.381846][T14660] _do_fork+0x196/0x920 [ 2074.386022][T14660] ? __fsnotify_parent+0x310/0x310 [ 2074.391640][T14660] ? dup_mm+0x300/0x300 [ 2074.395781][T14660] ? __sb_end_write+0xa4/0xf0 [ 2074.400459][T14660] __x64_sys_clone+0x25e/0x2c0 [ 2074.405221][T14660] ? __ia32_sys_vfork+0x110/0x110 [ 2074.410259][T14660] do_syscall_64+0xcb/0x150 [ 2074.414752][T14660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2074.427320][T14660] RIP: 0033:0x45d5b9 [ 2074.431216][T14660] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2074.450896][T14660] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2074.459308][T14660] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2074.467281][T14660] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 06:58:24 executing program 5 (fault-call:1 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:58:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7400000000000000, 0x11, r2, 0x8000) [ 2074.475260][T14660] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2074.483246][T14660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000040 [ 2074.491204][T14660] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c [ 2074.531130][T14685] FAULT_INJECTION: forcing a failure. [ 2074.531130][T14685] name failslab, interval 1, probability 0, space 0, times 0 [ 2074.542273][T14686] x86/PAT: syz-executor.3:14686 map pfn RAM range req write-combining for [mem 0x163a08000-0x163a08fff], got write-back [ 2074.545112][T14685] CPU: 0 PID: 14685 Comm: syz-executor.5 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2074.566449][T14685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2074.576501][T14685] Call Trace: [ 2074.579816][T14685] dump_stack+0x14a/0x1ce [ 2074.584166][T14685] ? devkmsg_release+0x11c/0x11c [ 2074.589111][T14685] ? show_regs_print_info+0x12/0x12 [ 2074.594325][T14685] should_fail+0x6fb/0x860 [ 2074.598728][T14685] ? setup_fault_attr+0x3d0/0x3d0 [ 2074.603751][T14685] ? sg_alloc_table+0x108/0x630 [ 2074.608936][T14685] should_failslab+0x5/0x20 [ 2074.613426][T14685] __kmalloc+0x5f/0x2d0 [ 2074.617568][T14685] sg_alloc_table+0x108/0x630 [ 2074.622231][T14685] ion_system_heap_allocate+0x5ab/0xbf0 [ 2074.627787][T14685] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2074.633756][T14685] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2074.639197][T14685] ? arch_stack_walk+0xd8/0x120 [ 2074.644061][T14685] ion_buffer_alloc+0x21f/0x640 [ 2074.648929][T14685] ion_dmabuf_alloc+0xcb/0x230 [ 2074.653679][T14685] ? track_buffer_created+0x1c0/0x1c0 [ 2074.659039][T14685] ? check_stack_object+0x5a/0x90 [ 2074.664051][T14685] ion_ioctl+0x2e8/0x9c0 [ 2074.668301][T14685] ? get_pid_task+0x86/0x90 [ 2074.673239][T14685] ? proc_fail_nth_write+0x18f/0x250 [ 2074.678524][T14685] ? debug_shrink_set+0x1b0/0x1b0 [ 2074.683563][T14685] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2074.688762][T14685] ? memset+0x1f/0x40 [ 2074.692729][T14685] ? fsnotify+0x13a0/0x1460 [ 2074.697752][T14685] ? debug_shrink_set+0x1b0/0x1b0 [ 2074.702778][T14685] do_vfs_ioctl+0x770/0x1750 [ 2074.707375][T14685] ? selinux_file_ioctl+0x73b/0x990 [ 2074.712564][T14685] ? ioctl_preallocate+0x250/0x250 [ 2074.717659][T14685] ? __fget+0x37c/0x3c0 [ 2074.722319][T14685] ? vfs_write+0x427/0x4f0 [ 2074.726722][T14685] ? fget_many+0x20/0x20 [ 2074.730960][T14685] ? ksys_write+0x25d/0x2c0 [ 2074.735447][T14685] ? file_open_root+0x450/0x450 [ 2074.740294][T14685] ? security_file_ioctl+0xad/0xc0 [ 2074.745425][T14685] __x64_sys_ioctl+0xd4/0x110 [ 2074.750095][T14685] do_syscall_64+0xcb/0x150 [ 2074.754592][T14685] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2074.760475][T14685] RIP: 0033:0x45d5b9 06:58:24 executing program 4 (fault-call:0 fault-nth:65): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3a3fff, 0x11, r2, 0x0) 06:58:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) dup(r2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000600)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000300), 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x100, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000400)={0x1, 0x3, 0x1000, 0xeb, &(0x7f0000000240)="0cc4ed1c5432b9e142d36b718e9ef9d5691cb1761381e194cd918002637e3c1c0ea398eb5d244edec82bd66a73e00cd2d601c2a6cddcc66ce3a5659c2a241437e0b1ff04ff37acd9bfcf0cc06918a334545a9e7c1399cd61abf169bde2e5cf1f3a53827ccc82295d2f74d9fc17260abe531904abfc087b841d883322f212e26c0038d702636dc0afda3245840e99d94a35b325fb511fd4fe45fecfe3b91cd2f82268715b1bd842cef12ee37894e7066c3762dc1a631d7f151e78832d866227ad60e1db438a7362ae3dcd2bc5237bf964eaefe4da3d17f8a11a81b001f1bc2a073f445756f08eedb0d29bb6", 0x97, 0x0, &(0x7f0000000340)="de2c1c3d491ecb3b53f4c564cb843531e67631edc4990e51eedd15fa7027af94beba651e9f4335f16c3f10cd44d4266b0b34ea330bcc69124fd34ce5f2df0ea5eda9d74b279f27a6b6c86aa153ddb4a19740cee55d210e96f8f053bad7ee01a1433ece6b1f61b82e57714ac3aca89a40fc18560251a7a54f5c1aca4ee14cffa63d493127bf8a1f59943a218a2fe4392d782c7b9d545a02"}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000150a01020000000000000000030000000900020073797a300000000008000340000000020c00064004000000000001040c00064000000000000000030900020073797a30000000000c0006400000000000000002"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x404089d) write(r3, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000001, 0x40010, 0xffffffffffffffff, 0xf8445000) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000000c0)={0x0, 0xae}) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014ec200100000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400010000000000000000000000ffffe0000001"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000201400210100000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400020020a7dee21a60bc5f1f00000000000000"], 0x2c}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000680)={@dev={0xac, 0x14, 0x14, 0x14}, @multicast1}, 0xc) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000005c0)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1004, 0xb3, &(0x7f00000006c0)=""/179, 0xe0600, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) 06:58:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceb3fff, 0x11, r2, 0x0) [ 2074.764358][T14685] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2074.783949][T14685] RSP: 002b:00007f39898d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2074.792353][T14685] RAX: ffffffffffffffda RBX: 00000000000100c0 RCX: 000000000045d5b9 [ 2074.800314][T14685] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2074.808274][T14685] RBP: 00007f39898d0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2074.816232][T14685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2074.824211][T14685] R13: 00007ffd3b2d521f R14: 00007f39898d19c0 R15: 000000000118cf4c 06:58:24 executing program 5 (fault-call:1 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:58:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7a00000000000000, 0x11, r2, 0x8000) 06:58:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xff8f407001000000, 0x11, r2, 0x8000) 06:58:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceb4fff, 0x11, r2, 0x0) 06:58:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3a4fff, 0x11, r2, 0x0) [ 2074.889837][T14696] x86/PAT: syz-executor.3:14696 map pfn RAM range req write-combining for [mem 0x148908000-0x148908fff], got write-back [ 2074.896247][T14701] FAULT_INJECTION: forcing a failure. [ 2074.896247][T14701] name failslab, interval 1, probability 0, space 0, times 0 [ 2074.915825][T14703] FAULT_INJECTION: forcing a failure. [ 2074.915825][T14703] name failslab, interval 1, probability 0, space 0, times 0 [ 2074.938691][T14708] x86/PAT: syz-executor.3:14708 map pfn RAM range req write-combining for [mem 0x147508000-0x147508fff], got write-back [ 2074.950201][T14703] CPU: 0 PID: 14703 Comm: syz-executor.5 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2074.963012][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2074.973093][T14703] Call Trace: [ 2074.976386][T14703] dump_stack+0x14a/0x1ce [ 2074.980716][T14703] ? devkmsg_release+0x11c/0x11c [ 2074.985652][T14703] ? show_regs_print_info+0x12/0x12 [ 2074.991799][T14703] ? memset+0x1f/0x40 [ 2074.995777][T14703] ? sg_alloc_table+0x313/0x630 [ 2075.000621][T14703] ? sg_next+0x8b/0xa0 [ 2075.004695][T14703] should_fail+0x6fb/0x860 [ 2075.009115][T14703] ? setup_fault_attr+0x3d0/0x3d0 [ 2075.014142][T14703] ? __up_read+0x6f/0x1b0 [ 2075.018468][T14703] ? _raw_spin_lock+0xa1/0x170 [ 2075.023232][T14703] ? kzalloc+0x1b/0x30 [ 2075.027299][T14703] should_failslab+0x5/0x20 [ 2075.031803][T14703] __kmalloc+0x5f/0x2d0 [ 2075.035962][T14703] kzalloc+0x1b/0x30 [ 2075.039860][T14703] dma_buf_export+0x166/0x7b0 [ 2075.040647][T14726] x86/PAT: syz-executor.3:14726 map pfn RAM range req write-combining for [mem 0x148508000-0x148508fff], got write-back [ 2075.044538][T14703] ion_dmabuf_alloc+0x199/0x230 [ 2075.044549][T14703] ? track_buffer_created+0x1c0/0x1c0 [ 2075.044560][T14703] ? check_stack_object+0x5a/0x90 [ 2075.044570][T14703] ion_ioctl+0x2e8/0x9c0 [ 2075.044586][T14703] ? get_pid_task+0x86/0x90 [ 2075.044605][T14703] ? proc_fail_nth_write+0x18f/0x250 [ 2075.086341][T14703] ? debug_shrink_set+0x1b0/0x1b0 [ 2075.091376][T14703] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2075.096587][T14703] ? memset+0x1f/0x40 [ 2075.100555][T14703] ? fsnotify+0x13a0/0x1460 [ 2075.105050][T14703] ? debug_shrink_set+0x1b0/0x1b0 [ 2075.110077][T14703] do_vfs_ioctl+0x770/0x1750 [ 2075.114671][T14703] ? selinux_file_ioctl+0x73b/0x990 [ 2075.119977][T14703] ? ioctl_preallocate+0x250/0x250 [ 2075.125079][T14703] ? __fget+0x37c/0x3c0 [ 2075.129225][T14703] ? vfs_write+0x427/0x4f0 [ 2075.133626][T14703] ? fget_many+0x20/0x20 [ 2075.137852][T14703] ? ksys_write+0x25d/0x2c0 [ 2075.142352][T14703] ? file_open_root+0x450/0x450 [ 2075.147196][T14703] ? security_file_ioctl+0xad/0xc0 [ 2075.152320][T14703] __x64_sys_ioctl+0xd4/0x110 [ 2075.156982][T14703] do_syscall_64+0xcb/0x150 [ 2075.161489][T14703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2075.167365][T14703] RIP: 0033:0x45d5b9 [ 2075.171273][T14703] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:58:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000500000002e00000000000000691eb858dd2400b6ce49a3cf5faf600100acafdcb2e60000950000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3a5fff, 0x11, r2, 0x0) 06:58:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xffffffff00000000, 0x11, r2, 0x8000) [ 2075.191233][T14703] RSP: 002b:00007f39898d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2075.199658][T14703] RAX: ffffffffffffffda RBX: 00000000000100c0 RCX: 000000000045d5b9 [ 2075.207642][T14703] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2075.215605][T14703] RBP: 00007f39898d0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2075.223565][T14703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2075.231532][T14703] R13: 00007ffd3b2d521f R14: 00007f39898d19c0 R15: 000000000118cf4c [ 2075.261677][T28064] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 2075.273312][T14701] CPU: 0 PID: 14701 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2075.277940][T28064] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffff92 [ 2075.283474][T14701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2075.283477][T14701] Call Trace: [ 2075.283497][T14701] dump_stack+0x14a/0x1ce [ 2075.283505][T14701] ? devkmsg_release+0x11c/0x11c [ 2075.283514][T14701] ? copy_page_range+0x16b2/0x1710 [ 2075.283522][T14701] ? show_regs_print_info+0x12/0x12 [ 2075.283531][T14701] should_fail+0x6fb/0x860 [ 2075.283546][T14701] ? setup_fault_attr+0x3d0/0x3d0 [ 2075.298597][T28064] asix: probe of 6-1:0.0 failed with error -110 [ 2075.303789][T14701] ? dup_mmap+0x4cf/0xc00 [ 2075.303798][T14701] should_failslab+0x5/0x20 [ 2075.303808][T14701] kmem_cache_alloc+0x36/0x260 [ 2075.303820][T14701] dup_mmap+0x4cf/0xc00 [ 2075.303830][T14701] ? __delayed_free_task+0x20/0x20 [ 2075.303843][T14701] ? mm_init+0x5c6/0x720 [ 2075.369977][T14701] dup_mm+0x98/0x300 [ 2075.373859][T14701] copy_process+0x2052/0x5110 [ 2075.378532][T14701] ? fork_idle+0x290/0x290 [ 2075.382928][T14701] ? memset+0x1f/0x40 [ 2075.386916][T14701] ? __kernel_write+0x340/0x340 [ 2075.391761][T14701] _do_fork+0x196/0x920 [ 2075.395902][T14701] ? __fsnotify_parent+0x310/0x310 [ 2075.401690][T14701] ? dup_mm+0x300/0x300 [ 2075.405848][T14701] ? __sb_end_write+0xa4/0xf0 [ 2075.410527][T14701] __x64_sys_clone+0x25e/0x2c0 [ 2075.415278][T14701] ? __ia32_sys_vfork+0x110/0x110 [ 2075.420294][T14701] do_syscall_64+0xcb/0x150 [ 2075.424804][T14701] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2075.430683][T14701] RIP: 0033:0x45d5b9 [ 2075.434566][T14701] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2075.454156][T14701] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 06:58:25 executing program 4 (fault-call:0 fault-nth:66): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="85000000500000070000000000000000240000000000000018000000020000000000000007000000950000000000000026bff7e9f8f5f04017e99d3461b6b5de4cc9bcaa93de2ac80b41724749514ddeed2cc0d483bf3c231fddb35cb0b214effd86331ccf4c088a8bde61da09bce8226063ba835a2b963c67c1ac6567241b1bf018baf7b2b7801ed9996760e6548ec20e85250592f351fb77517c6de8c66de25dcb97ea10826ae24aad5c13df3660bf788f201924c37d354733e27fa0529b00"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e21, 0x6, 0x4e23, 0xff7d, 0xf23bd1d0ec0386d4, 0x80, 0x0, 0x2f, 0x0, r3}, {0xf8, 0xe398, 0x401, 0x1000, 0x0, 0x3, 0xa64, 0x5}, {0x3, 0x7fffffff, 0x66, 0x8000}, 0xcf49, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4d3, 0xff}, 0x2, @in=@empty, 0x0, 0x1, 0x3, 0x7, 0x9, 0xfff}}, 0xe8) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8880) setsockopt$inet6_buf(r1, 0x29, 0xd3, &(0x7f0000000000)="d001583f3f141f4eca55e931bcbf4e6c1e821154d7d6bc4bbbab8313ef6984a7035cf535abd880679e39bfbcb5", 0x2d) 06:58:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3a6fff, 0x11, r2, 0x0) 06:58:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8002) 06:58:25 executing program 5 (fault-call:1 fault-nth:4): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:58:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceb5fff, 0x11, r2, 0x0) [ 2075.462561][T14701] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2075.470537][T14701] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2075.478519][T14701] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2075.486483][T14701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000041 [ 2075.494460][T14701] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3a7fff, 0x11, r2, 0x0) [ 2075.553452][T14739] FAULT_INJECTION: forcing a failure. [ 2075.553452][T14739] name failslab, interval 1, probability 0, space 0, times 0 [ 2075.584632][T14739] CPU: 1 PID: 14739 Comm: syz-executor.5 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2075.594803][T14739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2075.600774][T14749] FAULT_INJECTION: forcing a failure. [ 2075.600774][T14749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2075.604853][T14739] Call Trace: [ 2075.604873][T14739] dump_stack+0x14a/0x1ce [ 2075.604883][T14739] ? devkmsg_release+0x11c/0x11c [ 2075.604893][T14739] ? show_regs_print_info+0x12/0x12 [ 2075.604910][T14739] should_fail+0x6fb/0x860 [ 2075.640455][T14739] ? setup_fault_attr+0x3d0/0x3d0 [ 2075.645821][T14739] ? new_inode_pseudo+0x131/0x240 [ 2075.650831][T14739] should_failslab+0x5/0x20 [ 2075.655321][T14739] kmem_cache_alloc+0x36/0x260 [ 2075.660071][T14739] new_inode_pseudo+0x131/0x240 [ 2075.665084][T14739] alloc_anon_inode+0x1a/0x2e0 [ 2075.669833][T14739] dma_buf_export+0x433/0x7b0 [ 2075.674500][T14739] ion_dmabuf_alloc+0x199/0x230 [ 2075.679348][T14739] ? track_buffer_created+0x1c0/0x1c0 [ 2075.684722][T14739] ? check_stack_object+0x5a/0x90 [ 2075.689738][T14739] ion_ioctl+0x2e8/0x9c0 [ 2075.693993][T14739] ? get_pid_task+0x86/0x90 [ 2075.698487][T14739] ? proc_fail_nth_write+0x18f/0x250 [ 2075.703771][T14739] ? debug_shrink_set+0x1b0/0x1b0 [ 2075.708783][T14739] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2075.713973][T14739] ? memset+0x1f/0x40 [ 2075.717942][T14739] ? fsnotify+0x13a0/0x1460 [ 2075.722461][T14739] ? debug_shrink_set+0x1b0/0x1b0 [ 2075.727480][T14739] do_vfs_ioctl+0x770/0x1750 [ 2075.732071][T14739] ? selinux_file_ioctl+0x73b/0x990 [ 2075.737262][T14739] ? ioctl_preallocate+0x250/0x250 [ 2075.742364][T14739] ? __fget+0x37c/0x3c0 [ 2075.746519][T14739] ? vfs_write+0x427/0x4f0 [ 2075.750926][T14739] ? fget_many+0x20/0x20 [ 2075.755161][T14739] ? ksys_write+0x25d/0x2c0 [ 2075.759651][T14739] ? security_file_ioctl+0xad/0xc0 [ 2075.764759][T14739] __x64_sys_ioctl+0xd4/0x110 [ 2075.769426][T14739] do_syscall_64+0xcb/0x150 [ 2075.773943][T14739] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2075.779828][T14739] RIP: 0033:0x45d5b9 [ 2075.783710][T14739] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2075.803326][T14739] RSP: 002b:00007f39898d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2075.811741][T14739] RAX: ffffffffffffffda RBX: 00000000000100c0 RCX: 000000000045d5b9 [ 2075.819704][T14739] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2075.827684][T14739] RBP: 00007f39898d0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2075.835647][T14739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2075.843609][T14739] R13: 00007ffd3b2d521f R14: 00007f39898d19c0 R15: 000000000118cf4c [ 2075.853252][T14749] CPU: 0 PID: 14749 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2075.863405][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2075.873459][T14749] Call Trace: [ 2075.876792][T14749] dump_stack+0x14a/0x1ce [ 2075.881147][T14749] ? devkmsg_release+0x11c/0x11c [ 2075.886089][T14749] ? show_regs_print_info+0x12/0x12 [ 2075.891310][T14749] ? stack_trace_save+0x1f0/0x1f0 [ 2075.896338][T14749] ? __kernel_text_address+0x93/0x110 [ 2075.901708][T14749] ? unwind_get_return_address+0x48/0x90 [ 2075.907331][T14749] should_fail+0x6fb/0x860 [ 2075.911763][T14749] ? setup_fault_attr+0x3d0/0x3d0 [ 2075.916779][T14749] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2075.922846][T14749] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2075.929346][T14749] ? __kasan_kmalloc+0x12c/0x1c0 [ 2075.934294][T14749] ? kmem_cache_alloc+0x1d5/0x260 [ 2075.939318][T14749] ? _raw_spin_lock+0xa1/0x170 [ 2075.944075][T14749] ? trace_event_raw_event_rss_stat+0x120/0x120 [ 2075.950302][T14749] pte_alloc_one+0x1b/0xb0 [ 2075.954708][T14749] __pte_alloc+0x1d/0x1d0 [ 2075.959039][T14749] copy_page_range+0x1452/0x1710 [ 2075.963990][T14749] ? print_bad_pte+0x650/0x650 [ 2075.968758][T14749] ? init_admin_reserve+0xc0/0xc0 [ 2075.973769][T14749] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2075.979472][T14749] dup_mmap+0x870/0xc00 [ 2075.983629][T14749] ? __delayed_free_task+0x20/0x20 [ 2075.988725][T14749] ? mm_init+0x5c6/0x720 [ 2075.992961][T14749] dup_mm+0x98/0x300 [ 2075.996835][T14749] copy_process+0x2052/0x5110 [ 2076.001492][T14749] ? fork_idle+0x290/0x290 [ 2076.005890][T14749] ? memset+0x1f/0x40 [ 2076.009851][T14749] ? __kernel_write+0x340/0x340 [ 2076.014680][T14749] _do_fork+0x196/0x920 [ 2076.018837][T14749] ? __fsnotify_parent+0x310/0x310 [ 2076.023944][T14749] ? dup_mm+0x300/0x300 [ 2076.028081][T14749] ? __sb_end_write+0xa4/0xf0 [ 2076.032740][T14749] __x64_sys_clone+0x25e/0x2c0 [ 2076.037487][T14749] ? __ia32_sys_vfork+0x110/0x110 [ 2076.042496][T14749] do_syscall_64+0xcb/0x150 [ 2076.046994][T14749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2076.052867][T14749] RIP: 0033:0x45d5b9 [ 2076.056739][T14749] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2076.076340][T14749] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2076.084751][T14749] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2076.092707][T14749] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 06:58:25 executing program 5 (fault-call:1 fault-nth:5): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:58:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3a8fff, 0x11, r2, 0x0) 06:58:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8003) 06:58:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceb6fff, 0x11, r2, 0x0) 06:58:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x9f2, 0x0, 0x1, 0xe8c6, 0x0, 0x8, 0x200}, 0x1c) sched_getparam(r2, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2076.100658][T14749] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2076.108612][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000042 [ 2076.116566][T14749] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c [ 2076.179006][T14764] FAULT_INJECTION: forcing a failure. [ 2076.179006][T14764] name failslab, interval 1, probability 0, space 0, times 0 [ 2076.222931][T14764] CPU: 1 PID: 14764 Comm: syz-executor.5 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2076.233125][T14764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2076.243719][T14764] Call Trace: [ 2076.247014][T14764] dump_stack+0x14a/0x1ce [ 2076.251367][T14764] ? devkmsg_release+0x11c/0x11c [ 2076.256303][T14764] ? show_regs_print_info+0x12/0x12 [ 2076.261503][T14764] should_fail+0x6fb/0x860 [ 2076.265902][T14764] ? setup_fault_attr+0x3d0/0x3d0 [ 2076.270913][T14764] ? security_inode_alloc+0x32/0x1f0 [ 2076.276183][T14764] should_failslab+0x5/0x20 [ 2076.281032][T14764] kmem_cache_alloc+0x36/0x260 [ 2076.286511][T14764] ? from_kuid_munged+0x3b0/0x3b0 [ 2076.291522][T14764] security_inode_alloc+0x32/0x1f0 [ 2076.296619][T14764] inode_init_always+0x37c/0x800 [ 2076.301540][T14764] new_inode_pseudo+0x7b/0x240 [ 2076.306300][T14764] alloc_anon_inode+0x1a/0x2e0 [ 2076.311058][T14764] dma_buf_export+0x433/0x7b0 [ 2076.315727][T14764] ion_dmabuf_alloc+0x199/0x230 [ 2076.320564][T14764] ? track_buffer_created+0x1c0/0x1c0 [ 2076.325923][T14764] ? check_stack_object+0x5a/0x90 [ 2076.330941][T14764] ion_ioctl+0x2e8/0x9c0 [ 2076.335170][T14764] ? get_pid_task+0x86/0x90 [ 2076.339651][T14764] ? proc_fail_nth_write+0x18f/0x250 [ 2076.344938][T14764] ? debug_shrink_set+0x1b0/0x1b0 [ 2076.349944][T14764] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2076.355131][T14764] ? memset+0x1f/0x40 [ 2076.359098][T14764] ? fsnotify+0x13a0/0x1460 [ 2076.363612][T14764] ? debug_shrink_set+0x1b0/0x1b0 [ 2076.368628][T14764] do_vfs_ioctl+0x770/0x1750 [ 2076.373209][T14764] ? selinux_file_ioctl+0x73b/0x990 [ 2076.378393][T14764] ? ioctl_preallocate+0x250/0x250 [ 2076.383486][T14764] ? __fget+0x37c/0x3c0 [ 2076.387625][T14764] ? vfs_write+0x427/0x4f0 [ 2076.392026][T14764] ? fget_many+0x20/0x20 [ 2076.396249][T14764] ? ksys_write+0x25d/0x2c0 [ 2076.400738][T14764] ? file_open_root+0x450/0x450 [ 2076.405586][T14764] ? security_file_ioctl+0xad/0xc0 [ 2076.411221][T14764] __x64_sys_ioctl+0xd4/0x110 [ 2076.415908][T14764] do_syscall_64+0xcb/0x150 [ 2076.420405][T14764] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2076.427074][T14764] RIP: 0033:0x45d5b9 [ 2076.430960][T14764] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2076.450566][T14764] RSP: 002b:00007f39898d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2076.458967][T14764] RAX: ffffffffffffffda RBX: 00000000000100c0 RCX: 000000000045d5b9 06:58:26 executing program 4 (fault-call:0 fault-nth:67): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8004) 06:58:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000192c0)={&(0x7f0000019240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000019280)={&(0x7f0000000280)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c054}, 0x0) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002abd7000fbdbdf254b0000000400ff00080001000000000014002d805ec6451197b71b450500000011000000080000000714050ade659af203f5a95c123d6690ee11296eb236edf69712d5071ce7b4cffdad511376c6f3919ab6895cfcba4da2ad42cf7187ffb23fbe9ce4cf7f2b100e478d"], 0x34}, 0x1, 0x0, 0x0, 0xa0}, 0x0) write$selinux_attr(r3, &(0x7f0000000340)='system_u:object_r:lastlog_t:s0\x00', 0x1f) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'ipvlan1\x00', {0x2, 0x4e22, @local}}) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000001c0)={0x8, 0x570c, 0x1}) r4 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r5 = dup(r4) readlinkat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0xa6, &(0x7f0000000040)=""/166, 0x0, 0x0, [], 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:58:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceb7fff, 0x11, r2, 0x0) 06:58:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3a9fff, 0x11, r2, 0x0) 06:58:26 executing program 5 (fault-call:1 fault-nth:6): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) [ 2076.466947][T14764] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2076.474910][T14764] RBP: 00007f39898d0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2076.482884][T14764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2076.490858][T14764] R13: 00007ffd3b2d521f R14: 00007f39898d19c0 R15: 000000000118cf4c 06:58:26 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3aafff, 0x11, r2, 0x0) 06:58:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8005) 06:58:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceb8fff, 0x11, r2, 0x0) [ 2076.544402][T14777] FAULT_INJECTION: forcing a failure. [ 2076.544402][T14777] name failslab, interval 1, probability 0, space 0, times 0 [ 2076.587882][T14787] FAULT_INJECTION: forcing a failure. [ 2076.587882][T14787] name failslab, interval 1, probability 0, space 0, times 0 [ 2076.613064][T14777] CPU: 0 PID: 14777 Comm: syz-executor.5 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2076.623232][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2076.633978][T14777] Call Trace: [ 2076.637302][T14777] dump_stack+0x14a/0x1ce [ 2076.641643][T14777] ? devkmsg_release+0x11c/0x11c [ 2076.646590][T14777] ? do_syscall_64+0xcb/0x150 [ 2076.651283][T14777] ? show_regs_print_info+0x12/0x12 [ 2076.656528][T14777] should_fail+0x6fb/0x860 [ 2076.660948][T14777] ? setup_fault_attr+0x3d0/0x3d0 [ 2076.666415][T14777] ? __d_alloc+0x2a/0x6b0 [ 2076.670727][T14777] should_failslab+0x5/0x20 [ 2076.675214][T14777] kmem_cache_alloc+0x36/0x260 [ 2076.679965][T14777] __d_alloc+0x2a/0x6b0 [ 2076.684123][T14777] d_alloc_pseudo+0x19/0x70 [ 2076.688612][T14777] alloc_file_pseudo+0x15b/0x340 [ 2076.693547][T14777] ? alloc_empty_file_noaccount+0x70/0x70 [ 2076.699257][T14777] ? alloc_anon_inode+0x213/0x2e0 [ 2076.704296][T14777] ? memcpy+0x38/0x50 [ 2076.708263][T14777] ? alloc_anon_inode+0x213/0x2e0 [ 2076.713284][T14777] dma_buf_export+0x4e0/0x7b0 [ 2076.717944][T14777] ion_dmabuf_alloc+0x199/0x230 [ 2076.722792][T14777] ? track_buffer_created+0x1c0/0x1c0 [ 2076.728149][T14777] ? check_stack_object+0x5a/0x90 [ 2076.733155][T14777] ion_ioctl+0x2e8/0x9c0 [ 2076.737378][T14777] ? get_pid_task+0x86/0x90 [ 2076.741864][T14777] ? proc_fail_nth_write+0x18f/0x250 [ 2076.747148][T14777] ? debug_shrink_set+0x1b0/0x1b0 [ 2076.752153][T14777] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2076.757360][T14777] ? memset+0x1f/0x40 [ 2076.761335][T14777] ? fsnotify+0x13a0/0x1460 [ 2076.765847][T14777] ? debug_shrink_set+0x1b0/0x1b0 [ 2076.770863][T14777] do_vfs_ioctl+0x770/0x1750 [ 2076.775437][T14777] ? selinux_file_ioctl+0x73b/0x990 [ 2076.780616][T14777] ? ioctl_preallocate+0x250/0x250 [ 2076.785708][T14777] ? __fget+0x37c/0x3c0 [ 2076.789844][T14777] ? vfs_write+0x427/0x4f0 [ 2076.794246][T14777] ? fget_many+0x20/0x20 [ 2076.798492][T14777] ? ksys_write+0x25d/0x2c0 [ 2076.802986][T14777] ? file_open_root+0x450/0x450 [ 2076.807831][T14777] ? security_file_ioctl+0xad/0xc0 [ 2076.812922][T14777] __x64_sys_ioctl+0xd4/0x110 [ 2076.817578][T14777] do_syscall_64+0xcb/0x150 [ 2076.822065][T14777] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2076.827953][T14777] RIP: 0033:0x45d5b9 [ 2076.831914][T14777] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2076.851500][T14777] RSP: 002b:00007f39898d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2076.859897][T14777] RAX: ffffffffffffffda RBX: 00000000000100c0 RCX: 000000000045d5b9 [ 2076.867851][T14777] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2076.875804][T14777] RBP: 00007f39898d0ca0 R08: 0000000000000000 R09: 0000000000000000 06:58:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40, 0x0) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) r4 = openat$cgroup_ro(r3, &(0x7f0000019280)='cgroup.stat\x00', 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000019380)={&(0x7f00000192c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000019340)={&(0x7f0000019300)={0x34, 0x7, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20a}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x91) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8d3) ioctl$CHAR_RAW_SECDISCARD(r1, 0x127d, &(0x7f0000000000)) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000019240)={'bond_slave_0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000500000002e0000000022fb247419ecf9000024230000000002009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8006) [ 2076.884710][T14777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2076.892677][T14777] R13: 00007ffd3b2d521f R14: 00007f39898d19c0 R15: 000000000118cf4c [ 2076.942240][T14787] CPU: 0 PID: 14787 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2076.952442][T14787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2076.962486][T14787] Call Trace: [ 2076.965799][T14787] dump_stack+0x14a/0x1ce [ 2076.970121][T14787] ? devkmsg_release+0x11c/0x11c [ 2076.975041][T14787] ? copy_page_range+0x16b2/0x1710 [ 2076.980152][T14787] ? show_regs_print_info+0x12/0x12 [ 2076.985344][T14787] should_fail+0x6fb/0x860 [ 2076.989741][T14787] ? setup_fault_attr+0x3d0/0x3d0 [ 2076.994762][T14787] ? dup_mmap+0x4cf/0xc00 [ 2076.999088][T14787] should_failslab+0x5/0x20 [ 2077.003589][T14787] kmem_cache_alloc+0x36/0x260 [ 2077.008345][T14787] ? vma_gap_callbacks_rotate+0x203/0x210 [ 2077.014061][T14787] dup_mmap+0x4cf/0xc00 [ 2077.018215][T14787] ? __delayed_free_task+0x20/0x20 [ 2077.023304][T14787] ? mm_init+0x5c6/0x720 [ 2077.027541][T14787] dup_mm+0x98/0x300 [ 2077.031429][T14787] copy_process+0x2052/0x5110 [ 2077.036104][T14787] ? fork_idle+0x290/0x290 [ 2077.040509][T14787] ? memset+0x1f/0x40 [ 2077.044485][T14787] ? __kernel_write+0x340/0x340 [ 2077.049315][T14787] _do_fork+0x196/0x920 [ 2077.053451][T14787] ? __fsnotify_parent+0x310/0x310 [ 2077.058556][T14787] ? dup_mm+0x300/0x300 [ 2077.062690][T14787] ? __sb_end_write+0xa4/0xf0 [ 2077.067348][T14787] __x64_sys_clone+0x25e/0x2c0 [ 2077.072097][T14787] ? __ia32_sys_vfork+0x110/0x110 [ 2077.078084][T14787] do_syscall_64+0xcb/0x150 [ 2077.083198][T14787] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2077.089072][T14787] RIP: 0033:0x45d5b9 [ 2077.092954][T14787] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2077.112645][T14787] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2077.121039][T14787] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2077.129011][T14787] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 06:58:26 executing program 4 (fault-call:0 fault-nth:68): clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17ceb9fff, 0x11, r2, 0x0) 06:58:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8007) 06:58:26 executing program 5 (fault-call:1 fault-nth:7): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7}) 06:58:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3abfff, 0x11, r2, 0x0) 06:58:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) r2 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r3 = dup(r2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/102355, 0x18fd3) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000380)=""/12, &(0x7f00000003c0)=0xc) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000240)={'nat\x00', 0xce, "bd33808a0005f7fce736bb8f8f0698f154764b220d27acbd101e131fd0fcdc3a4a64f289dacbd2e9b96b5129cbad0d9135487644ba58ff6824219cdbdb96b204bc3e9c127c1e0b7934df9cd9f08229c060ce1e577e75103a6eb7d0b16f2cc3ab5d489a5fe6ef53fc43852e49d70c8cbe2046c09fb30022e4ea5cb1650dbc0741b49e45bbb3c790401e66c8247b2f1fd492d50ea1b36edb070cb23e92eb152edaa986d907ab1f0e9d3730d589c2cc35e8be3b37bdb2ed5d0461a05109047c4f7fb1a6877d4d84a97d840479a38b47"}, &(0x7f0000000340)=0xf2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000140)='GPL\x00', 0x4, 0xa0, &(0x7f0000000040)=""/160, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2077.136964][T14787] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2077.144934][T14787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000043 [ 2077.152904][T14787] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c 06:58:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8008) 06:58:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2e}, [@call={0x24}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 06:58:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3acfff, 0x11, r2, 0x0) 06:58:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cebafff, 0x11, r2, 0x0) [ 2077.228856][T14822] FAULT_INJECTION: forcing a failure. [ 2077.228856][T14822] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.286869][T14822] CPU: 0 PID: 14822 Comm: syz-executor.5 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2077.297052][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2077.307112][T14822] Call Trace: [ 2077.310398][T14822] dump_stack+0x14a/0x1ce [ 2077.314721][T14822] ? devkmsg_release+0x11c/0x11c [ 2077.319643][T14822] ? show_regs_print_info+0x12/0x12 [ 2077.324837][T14822] should_fail+0x6fb/0x860 [ 2077.329239][T14822] ? setup_fault_attr+0x3d0/0x3d0 [ 2077.334244][T14822] ? __alloc_file+0x26/0x390 [ 2077.339344][T14822] should_failslab+0x5/0x20 [ 2077.343831][T14822] kmem_cache_alloc+0x36/0x260 [ 2077.348582][T14822] ? _raw_spin_trylock_bh+0x190/0x190 [ 2077.353948][T14822] __alloc_file+0x26/0x390 [ 2077.358365][T14822] ? alloc_empty_file+0x49/0x1b0 [ 2077.363303][T14822] alloc_empty_file+0xa9/0x1b0 [ 2077.368057][T14822] alloc_file+0x58/0x4b0 [ 2077.372316][T14822] alloc_file_pseudo+0x28c/0x340 [ 2077.377251][T14822] ? alloc_empty_file_noaccount+0x70/0x70 [ 2077.382958][T14822] ? alloc_anon_inode+0x213/0x2e0 [ 2077.387968][T14822] ? memcpy+0x38/0x50 [ 2077.391927][T14822] ? alloc_anon_inode+0x213/0x2e0 [ 2077.396953][T14822] dma_buf_export+0x4e0/0x7b0 [ 2077.401612][T14822] ion_dmabuf_alloc+0x199/0x230 [ 2077.406474][T14822] ? track_buffer_created+0x1c0/0x1c0 [ 2077.411846][T14822] ? check_stack_object+0x5a/0x90 [ 2077.416870][T14822] ion_ioctl+0x2e8/0x9c0 [ 2077.421108][T14822] ? get_pid_task+0x86/0x90 [ 2077.425609][T14822] ? proc_fail_nth_write+0x18f/0x250 [ 2077.431759][T14822] ? debug_shrink_set+0x1b0/0x1b0 [ 2077.436774][T14822] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2077.441960][T14822] ? memset+0x1f/0x40 [ 2077.445923][T14822] ? fsnotify+0x13a0/0x1460 [ 2077.452845][T14822] ? debug_shrink_set+0x1b0/0x1b0 [ 2077.457855][T14822] do_vfs_ioctl+0x770/0x1750 [ 2077.462518][T14822] ? selinux_file_ioctl+0x73b/0x990 [ 2077.467715][T14822] ? ioctl_preallocate+0x250/0x250 [ 2077.472824][T14822] ? __fget+0x37c/0x3c0 [ 2077.476961][T14822] ? vfs_write+0x427/0x4f0 [ 2077.481367][T14822] ? fget_many+0x20/0x20 [ 2077.485616][T14822] ? ksys_write+0x25d/0x2c0 [ 2077.490107][T14822] ? security_file_ioctl+0xad/0xc0 [ 2077.495222][T14822] __x64_sys_ioctl+0xd4/0x110 [ 2077.499895][T14822] do_syscall_64+0xcb/0x150 [ 2077.504378][T14822] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2077.510250][T14822] RIP: 0033:0x45d5b9 [ 2077.514135][T14822] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:58:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8009) 06:58:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3adfff, 0x11, r2, 0x0) [ 2077.533725][T14822] RSP: 002b:00007f39898d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2077.542140][T14822] RAX: ffffffffffffffda RBX: 00000000000100c0 RCX: 000000000045d5b9 [ 2077.550111][T14822] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2077.558070][T14822] RBP: 00007f39898d0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2077.566047][T14822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2077.574008][T14822] R13: 00007ffd3b2d521f R14: 00007f39898d19c0 R15: 000000000118cf4c [ 2077.617261][T14834] FAULT_INJECTION: forcing a failure. [ 2077.617261][T14834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2077.630770][T14822] kasan: CONFIG_KASAN_INLINE enabled [ 2077.641014][T14822] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2077.650143][T14822] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2077.657085][T14822] CPU: 1 PID: 14822 Comm: syz-executor.5 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2077.659153][T14834] CPU: 0 PID: 14834 Comm: syz-executor.4 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 2077.667230][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2077.677373][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2077.687435][T14822] RIP: 0010:dma_buf_release+0x44/0x2f0 [ 2077.697472][T14834] Call Trace: [ 2077.703563][T14822] Code: fe 48 83 c3 78 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb e9 07 ff 4c 8b 23 49 8d 5c 24 48 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 34 02 00 00 8b 1b 31 ff 89 de e8 e5 b4 d9 [ 2077.703573][T14822] RSP: 0018:ffff88814928f7e0 EFLAGS: 00010206 [ 2077.706857][T14834] dump_stack+0x14a/0x1ce [ 2077.726871][T14822] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000040000 [ 2077.732929][T14834] ? devkmsg_release+0x11c/0x11c [ 2077.737844][T14822] RDX: ffffc900064db000 RSI: 0000000000034bfa RDI: 0000000000034bfb [ 2077.745809][T14834] ? show_regs_print_info+0x12/0x12 [ 2077.750708][T14822] RBP: dffffc0000000000 R08: ffffffff817b59df R09: 0000000000000003 [ 2077.759370][T14834] ? stack_trace_save+0x1f0/0x1f0 [ 2077.764533][T14822] R10: ffffed1029251ee5 R11: 0000000000000004 R12: 0000000000000000 [ 2077.772511][T14834] ? __kernel_text_address+0x93/0x110 [ 2077.780204][T14822] R13: dffffc0000000000 R14: 1ffff1103a7c9800 R15: 1ffff1103a7c9812 [ 2077.788182][T14834] ? unwind_get_return_address+0x48/0x90 [ 2077.793520][T14822] FS: 00007f39898d1700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 2077.801473][T14834] should_fail+0x6fb/0x860 [ 2077.807078][T14822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2077.816003][T14834] ? setup_fault_attr+0x3d0/0x3d0 [ 2077.820385][T14822] CR2: 00007fb5de175db8 CR3: 00000001d0cc0005 CR4: 00000000001606e0 [ 2077.826967][T14834] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2077.831970][T14822] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2077.839944][T14834] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2077.845380][T14822] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2077.853381][T14834] ? __kasan_kmalloc+0x12c/0x1c0 [ 2077.859000][T14822] Call Trace: [ 2077.866962][T14834] ? kmem_cache_alloc+0x1d5/0x260 [ 2077.871886][T14822] ? dma_buf_fs_init_context+0x60/0x60 [ 2077.875180][T14834] ? _raw_spin_lock+0xa1/0x170 [ 2077.880188][T14822] __dentry_kill+0x41b/0x5a0 [ 2077.885622][T14834] ? trace_event_raw_event_rss_stat+0x120/0x120 [ 2077.890352][T14822] dput+0x2e1/0x5e0 [ 2077.894911][T14834] pte_alloc_one+0x1b/0xb0 [ 2077.901739][T14822] path_put+0x35/0x60 [ 2077.905518][T14834] __pte_alloc+0x1d/0x1d0 [ 2077.909904][T14822] alloc_file_pseudo+0x2ac/0x340 [ 2077.913857][T14834] copy_page_range+0x1452/0x1710 [ 2077.918181][T14822] ? alloc_empty_file_noaccount+0x70/0x70 [ 2077.923106][T14834] ? print_bad_pte+0x650/0x650 [ 2077.928015][T14822] ? alloc_anon_inode+0x213/0x2e0 [ 2077.933705][T14834] ? init_admin_reserve+0xc0/0xc0 [ 2077.938440][T14822] ? memcpy+0x38/0x50 [ 2077.943441][T14834] ? vma_gap_callbacks_rotate+0x1d5/0x210 [ 2077.948459][T14822] ? alloc_anon_inode+0x213/0x2e0 [ 2077.952431][T14834] dup_mmap+0x870/0xc00 [ 2077.958135][T14822] dma_buf_export+0x4e0/0x7b0 [ 2077.963132][T14834] ? __delayed_free_task+0x20/0x20 [ 2077.967284][T14822] ion_dmabuf_alloc+0x199/0x230 [ 2077.971948][T14834] ? mm_init+0x5c6/0x720 [ 2077.977050][T14822] ? track_buffer_created+0x1c0/0x1c0 [ 2077.981896][T14834] dup_mm+0x98/0x300 [ 2077.986114][T14822] ? check_stack_object+0x5a/0x90 [ 2077.991473][T14834] copy_process+0x2052/0x5110 [ 2077.995363][T14822] ion_ioctl+0x2e8/0x9c0 [ 2078.000361][T14834] ? fork_idle+0x290/0x290 [ 2078.005008][T14822] ? get_pid_task+0x86/0x90 [ 2078.009223][T14834] ? memset+0x1f/0x40 [ 2078.013617][T14822] ? proc_fail_nth_write+0x18f/0x250 [ 2078.018092][T14834] ? __kernel_write+0x340/0x340 [ 2078.022047][T14822] ? debug_shrink_set+0x1b0/0x1b0 [ 2078.027302][T14834] _do_fork+0x196/0x920 [ 2078.032143][T14822] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2078.037139][T14834] ? __fsnotify_parent+0x310/0x310 [ 2078.041274][T14822] ? memset+0x1f/0x40 [ 2078.046470][T14834] ? dup_mm+0x300/0x300 [ 2078.051559][T14822] ? fsnotify+0x13a0/0x1460 [ 2078.055514][T14834] ? __sb_end_write+0xa4/0xf0 [ 2078.059655][T14822] ? debug_shrink_set+0x1b0/0x1b0 [ 2078.064128][T14834] __x64_sys_clone+0x25e/0x2c0 [ 2078.068787][T14822] do_vfs_ioctl+0x770/0x1750 [ 2078.073817][T14834] ? __ia32_sys_vfork+0x110/0x110 [ 2078.078572][T14822] ? selinux_file_ioctl+0x73b/0x990 [ 2078.083130][T14834] do_syscall_64+0xcb/0x150 [ 2078.089021][T14822] ? ioctl_preallocate+0x250/0x250 [ 2078.094197][T14834] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2078.099194][T14822] ? __fget+0x37c/0x3c0 [ 2078.104272][T14834] RIP: 0033:0x45d5b9 [ 2078.110145][T14822] ? vfs_write+0x427/0x4f0 [ 2078.114267][T14834] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2078.118154][T14822] ? fget_many+0x20/0x20 [ 2078.122534][T14834] RSP: 002b:00007fa38eb42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2078.142164][T14822] ? ksys_write+0x25d/0x2c0 [ 2078.146381][T14834] RAX: ffffffffffffffda RBX: 0000000000001f40 RCX: 000000000045d5b9 [ 2078.154778][T14822] ? security_file_ioctl+0xad/0xc0 [ 2078.159245][T14834] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2078.168785][T14822] __x64_sys_ioctl+0xd4/0x110 [ 2078.173862][T14834] RBP: 00007fa38eb42ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 2078.181830][T14822] do_syscall_64+0xcb/0x150 [ 2078.186484][T14834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000044 [ 2078.194464][T14822] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2078.198934][T14834] R13: 00007fffa67b049f R14: 00007fa38eb439c0 R15: 000000000118cf4c [ 2078.214645][T14822] RIP: 0033:0x45d5b9 [ 2078.233024][T14822] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2078.256991][T14822] RSP: 002b:00007f39898d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2078.265410][T14822] RAX: ffffffffffffffda RBX: 00000000000100c0 RCX: 000000000045d5b9 [ 2078.273386][T14822] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2078.281359][T14822] RBP: 00007f39898d0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2078.289346][T14822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2078.297335][T14822] R13: 00007ffd3b2d521f R14: 00007f39898d19c0 R15: 000000000118cf4c [ 2078.305303][T14822] Modules linked in: [ 2078.315018][T14822] ---[ end trace 0f36c8f406e217b5 ]--- 06:58:27 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x800a) 06:58:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17c3aefff, 0x11, r2, 0x0) 06:58:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400004, 0x17cebbfff, 0x11, r2, 0x0) [ 2078.334336][T14822] RIP: 0010:dma_buf_release+0x44/0x2f0 [ 2078.348298][T14822] Code: fe 48 83 c3 78 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb e9 07 ff 4c 8b 23 49 8d 5c 24 48 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 34 02 00 00 8b 1b 31 ff 89 de e8 e5 b4 d9 [ 2078.389638][T14822] RSP: 0018:ffff88814928f7e0 EFLAGS: 00010206 [ 2078.400965][T14822] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000040000 [ 2078.409623][T14822] RDX: ffffc900064db000 RSI: 0000000000034bfa RDI: 0000000000034bfb [ 2078.418324][T14822] RBP: dffffc0000000000 R08: ffffffff817b59df R09: 0000000000000003 [ 2078.427060][T14822] R10: ffffed1029251ee5 R11: 0000000000000004 R12: 0000000000000000 [ 2078.435637][T14822] R13: dffffc0000000000 R14: 1ffff1103a7c9800 R15: 1ffff1103a7c9812 [ 2078.444035][T14822] FS: 00007f39898d1700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 2078.454246][T14822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2078.460867][T14822] CR2: 00007f0c2f0b8000 CR3: 00000001d0cc0001 CR4: 00000000001606f0 [ 2078.469353][T14822] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2078.477714][T14822] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2078.486003][T14822] Kernel panic - not syncing: Fatal exception [ 2078.492428][T14822] Kernel Offset: disabled [ 2078.496744][T14822] Rebooting in 86400 seconds..