0ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3085.708150][ T7452] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3085.716104][ T7452] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3085.724174][ T7452] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 [ 3085.732215][ T7453] CPU: 1 PID: 7453 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3085.740884][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3085.750999][ T7453] Call Trace: [ 3085.754307][ T7453] dump_stack_lvl+0xb7/0x103 [ 3085.759152][ T7453] dump_stack+0x11/0x1a [ 3085.763301][ T7453] should_fail+0x23c/0x250 [ 3085.767733][ T7453] should_fail_usercopy+0x16/0x20 [ 3085.772805][ T7453] _copy_to_user+0x1c/0x90 [ 3085.777220][ T7453] simple_read_from_buffer+0xab/0x120 [ 3085.782635][ T7453] proc_fail_nth_read+0xf6/0x140 [ 3085.787578][ T7453] ? rw_verify_area+0x136/0x250 [ 3085.792426][ T7453] ? proc_fault_inject_write+0x200/0x200 [ 3085.798070][ T7453] vfs_read+0x154/0x5d0 [ 3085.802226][ T7453] ? __fget_light+0x21b/0x260 [ 3085.806906][ T7453] ? __cond_resched+0x11/0x40 [ 3085.811578][ T7453] ksys_read+0xce/0x180 [ 3085.815777][ T7453] __x64_sys_read+0x3e/0x50 [ 3085.820274][ T7453] do_syscall_64+0x3d/0x90 [ 3085.824680][ T7453] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3085.830571][ T7453] RIP: 0033:0x41937c [ 3085.834455][ T7453] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 00:03:53 executing program 4 (fault-call:8 fault-nth:7): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:53 executing program 1: r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:03:53 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3085.854082][ T7453] RSP: 002b:00007f801f5a5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3085.862569][ T7453] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000041937c [ 3085.870557][ T7453] RDX: 000000000000000f RSI: 00007f801f5a51e0 RDI: 0000000000000007 [ 3085.878523][ T7453] RBP: 00007f801f5a51d0 R08: 0000000000000000 R09: 0000000010000000 [ 3085.886489][ T7453] R10: 0000000000008011 R11: 0000000000000246 R12: 0000000000000002 [ 3085.894627][ T7453] R13: 00007ffdf2842a6f R14: 00007f801f5a5300 R15: 0000000000022000 [ 3085.917952][ T7469] FAULT_INJECTION: forcing a failure. [ 3085.917952][ T7469] name failslab, interval 1, probability 0, space 0, times 0 [ 3085.930577][ T7469] CPU: 1 PID: 7469 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3085.939245][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3085.949321][ T7469] Call Trace: [ 3085.952590][ T7469] dump_stack_lvl+0xb7/0x103 [ 3085.957181][ T7469] dump_stack+0x11/0x1a [ 3085.961332][ T7469] should_fail+0x23c/0x250 [ 3085.965747][ T7469] ? anon_vma_clone+0x8d/0x380 [ 3085.970536][ T7469] __should_failslab+0x81/0x90 [ 3085.975288][ T7469] should_failslab+0x5/0x20 [ 3085.979818][ T7469] kmem_cache_alloc+0x46/0x2e0 [ 3085.984583][ T7469] anon_vma_clone+0x8d/0x380 [ 3085.989194][ T7469] __split_vma+0x134/0x320 [ 3085.993620][ T7469] ? vmacache_find+0x2df/0x320 [ 3085.998380][ T7469] __do_munmap+0x27c/0x1330 [ 3086.002938][ T7469] ? __xas_nomem+0xfc/0x270 [ 3086.007433][ T7469] mmap_region+0x5aa/0x1400 [ 3086.011935][ T7469] do_mmap+0x73f/0xc40 [ 3086.015994][ T7469] vm_mmap_pgoff+0xf9/0x1d0 [ 3086.020493][ T7469] ksys_mmap_pgoff+0x2a8/0x380 [ 3086.025245][ T7469] do_syscall_64+0x3d/0x90 [ 3086.029657][ T7469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3086.035547][ T7469] RIP: 0033:0x466642 [ 3086.039433][ T7469] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3086.059035][ T7469] RSP: 002b:00007fef55c3f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 00:03:53 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:53 executing program 1: r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) io_uring_setup(0x25f3, &(0x7f0000000180)={0x0, 0x6e7a, 0x2, 0x2, 0x313, 0x0, r0}) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x41b, &(0x7f0000000200), &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x8000) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000001580)) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r3, &(0x7f0000000080)={0x80002014}, r0}, 0x4) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000400)=""/187) syz_io_uring_setup(0x62fe, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:03:53 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x540000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3086.067454][ T7469] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3086.075440][ T7469] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 000000002085b000 [ 3086.083424][ T7469] RBP: 000000002085b000 R08: 0000000000000008 R09: 0000000000000000 [ 3086.091384][ T7469] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200002c0 [ 3086.099364][ T7469] R13: 0000000020000000 R14: 0000000020000280 R15: 000000002085b000 [ 3086.146556][ T7479] FAULT_INJECTION: forcing a failure. [ 3086.146556][ T7479] name failslab, interval 1, probability 0, space 0, times 0 [ 3086.159297][ T7479] CPU: 1 PID: 7479 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3086.167990][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3086.178052][ T7479] Call Trace: [ 3086.181321][ T7479] dump_stack_lvl+0xb7/0x103 [ 3086.185904][ T7479] dump_stack+0x11/0x1a [ 3086.190053][ T7479] should_fail+0x23c/0x250 [ 3086.194472][ T7479] __should_failslab+0x81/0x90 [ 3086.199294][ T7479] ? io_uring_create+0x1466/0x1940 [ 3086.204405][ T7479] should_failslab+0x5/0x20 [ 3086.208911][ T7479] kmem_cache_alloc_trace+0x49/0x310 [ 3086.214290][ T7479] ? alloc_pages+0x2e8/0x340 [ 3086.218874][ T7479] io_uring_create+0x1466/0x1940 [ 3086.223804][ T7479] ? vfs_write+0x50c/0x770 [ 3086.228256][ T7479] __x64_sys_io_uring_setup+0xe1/0x120 [ 3086.233717][ T7479] do_syscall_64+0x3d/0x90 [ 3086.238177][ T7479] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:03:53 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:53 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3086.244159][ T7479] RIP: 0033:0x4665f9 [ 3086.248049][ T7479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3086.267652][ T7479] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3086.276075][ T7479] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3086.284034][ T7479] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e 00:03:53 executing program 1: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x176}, &(0x7f000058f000/0x4000)=nil, &(0x7f000085e000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000003c0)) io_uring_setup(0x644f, &(0x7f0000000080)={0x0, 0x9381, 0x20, 0x1, 0x363}) [ 3086.292051][ T7479] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3086.300077][ T7479] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3086.308037][ T7479] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:03:53 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:53 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:53 executing program 2 (fault-call:4 fault-nth:24): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:53 executing program 4 (fault-call:8 fault-nth:8): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:53 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x600000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:53 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:53 executing program 1: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000080)) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3086.489590][ T7508] FAULT_INJECTION: forcing a failure. [ 3086.489590][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 3086.502356][ T7508] CPU: 0 PID: 7508 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3086.511142][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3086.512678][ T7510] FAULT_INJECTION: forcing a failure. [ 3086.512678][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 3086.521211][ T7508] Call Trace: [ 3086.521221][ T7508] dump_stack_lvl+0xb7/0x103 [ 3086.541611][ T7508] dump_stack+0x11/0x1a [ 3086.545763][ T7508] should_fail+0x23c/0x250 [ 3086.550222][ T7508] ? anon_vma_clone+0x8d/0x380 [ 3086.554977][ T7508] __should_failslab+0x81/0x90 [ 3086.559720][ T7508] should_failslab+0x5/0x20 [ 3086.564561][ T7508] kmem_cache_alloc+0x46/0x2e0 [ 3086.569391][ T7508] anon_vma_clone+0x8d/0x380 [ 3086.574093][ T7508] __split_vma+0x134/0x320 [ 3086.578490][ T7508] ? vmacache_find+0x2df/0x320 [ 3086.583248][ T7508] __do_munmap+0x2ee/0x1330 [ 3086.587922][ T7508] ? save_fpregs_to_fpstate+0xd8/0x110 [ 3086.593373][ T7508] mmap_region+0x5aa/0x1400 [ 3086.597877][ T7508] do_mmap+0x73f/0xc40 [ 3086.601934][ T7508] vm_mmap_pgoff+0xf9/0x1d0 [ 3086.606422][ T7508] ksys_mmap_pgoff+0x2a8/0x380 [ 3086.611170][ T7508] do_syscall_64+0x3d/0x90 [ 3086.615572][ T7508] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3086.621550][ T7508] RIP: 0033:0x466642 [ 3086.625468][ T7508] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3086.645058][ T7508] RSP: 002b:00007fef55c3f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3086.653450][ T7508] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3086.661415][ T7508] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 000000002085b000 [ 3086.669375][ T7508] RBP: 000000002085b000 R08: 0000000000000008 R09: 0000000000000000 [ 3086.677420][ T7508] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200002c0 [ 3086.685391][ T7508] R13: 0000000020000000 R14: 0000000020000280 R15: 000000002085b000 [ 3086.693352][ T7510] CPU: 1 PID: 7510 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3086.702316][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3086.712362][ T7510] Call Trace: [ 3086.715631][ T7510] dump_stack_lvl+0xb7/0x103 [ 3086.720220][ T7510] dump_stack+0x11/0x1a [ 3086.724471][ T7510] should_fail+0x23c/0x250 [ 3086.728916][ T7510] __should_failslab+0x81/0x90 [ 3086.733672][ T7510] ? io_uring_create+0x1466/0x1940 [ 3086.738775][ T7510] should_failslab+0x5/0x20 [ 3086.743271][ T7510] kmem_cache_alloc_trace+0x49/0x310 [ 3086.748554][ T7510] ? alloc_pages+0x2e8/0x340 [ 3086.753236][ T7510] io_uring_create+0x1466/0x1940 [ 3086.758167][ T7510] ? vfs_write+0x50c/0x770 [ 3086.762616][ T7510] __x64_sys_io_uring_setup+0xe1/0x120 [ 3086.768086][ T7510] do_syscall_64+0x3d/0x90 [ 3086.772499][ T7510] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3086.778389][ T7510] RIP: 0033:0x4665f9 00:03:54 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3086.782264][ T7510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3086.801884][ T7510] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3086.810331][ T7510] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3086.818294][ T7510] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3086.826255][ T7510] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 00:03:54 executing program 2 (fault-call:4 fault-nth:25): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:54 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:54 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x800000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:54 executing program 1: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x6da7, &(0x7f0000000180)={0x0, 0xe4f6, 0x10, 0x3, 0x113, 0x0, r0}, &(0x7f000023d000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x6ba22896eb8f2faa, &(0x7f00000000c0)={0x100000, 0x0, 0x1a0000, {r2}}, 0x20) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:03:54 executing program 4 (fault-call:8 fault-nth:9): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3086.834217][ T7510] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3086.842264][ T7510] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 [ 3086.919143][ T7525] FAULT_INJECTION: forcing a failure. [ 3086.919143][ T7525] name failslab, interval 1, probability 0, space 0, times 0 [ 3086.931818][ T7525] CPU: 1 PID: 7525 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3086.940617][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3086.950718][ T7525] Call Trace: [ 3086.954003][ T7525] dump_stack_lvl+0xb7/0x103 [ 3086.958667][ T7525] dump_stack+0x11/0x1a [ 3086.962824][ T7525] should_fail+0x23c/0x250 [ 3086.967271][ T7525] ? vm_area_dup+0x44/0x120 [ 3086.971769][ T7525] __should_failslab+0x81/0x90 [ 3086.976706][ T7525] should_failslab+0x5/0x20 [ 3086.981204][ T7525] kmem_cache_alloc+0x46/0x2e0 [ 3086.985971][ T7525] ? pagerange_is_ram_callback+0xb6/0xd0 [ 3086.991612][ T7525] vm_area_dup+0x44/0x120 [ 3086.995959][ T7525] ? pgprot_writethrough+0x20/0x20 [ 3086.999193][ T7535] FAULT_INJECTION: forcing a failure. [ 3086.999193][ T7535] name failslab, interval 1, probability 0, space 0, times 0 [ 3087.001158][ T7525] ? perf_event_mmap+0x14c/0xce0 [ 3087.001180][ T7525] ? pfn_modify_allowed+0xa2/0x1c0 [ 3087.023750][ T7525] ? remap_pfn_range_notrack+0x71c/0x770 [ 3087.029368][ T7525] ? vma_interval_tree_augment_rotate+0xe9/0x100 [ 3087.035742][ T7525] ? anon_vma_interval_tree_iter_next+0x2a0/0x2a0 [ 3087.042141][ T7525] __split_vma+0x82/0x320 [ 3087.046453][ T7525] ? vmacache_find+0x313/0x320 [ 3087.051204][ T7525] __do_munmap+0x2ee/0x1330 [ 3087.055804][ T7525] ? up_write+0x25/0xc0 [ 3087.059955][ T7525] ? vma_link+0x188/0x1a0 [ 3087.064266][ T7525] mmap_region+0x5aa/0x1400 [ 3087.068751][ T7525] do_mmap+0x73f/0xc40 [ 3087.072819][ T7525] vm_mmap_pgoff+0xf9/0x1d0 [ 3087.077393][ T7525] ksys_mmap_pgoff+0x2a8/0x380 [ 3087.082139][ T7525] do_syscall_64+0x3d/0x90 [ 3087.086540][ T7525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3087.092423][ T7525] RIP: 0033:0x466642 [ 3087.096297][ T7525] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3087.115884][ T7525] RSP: 002b:00007fef55c3f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3087.124273][ T7525] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3087.132224][ T7525] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020000000 [ 3087.140179][ T7525] RBP: 0000000020000000 R08: 0000000000000008 R09: 0000000010000000 [ 3087.148135][ T7525] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200002c0 [ 3087.156092][ T7525] R13: 0000000020000000 R14: 0000000020000280 R15: 000000002085b000 [ 3087.164094][ T7535] CPU: 0 PID: 7535 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3087.172766][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3087.182805][ T7535] Call Trace: [ 3087.186072][ T7535] dump_stack_lvl+0xb7/0x103 [ 3087.190655][ T7535] dump_stack+0x11/0x1a [ 3087.194806][ T7535] should_fail+0x23c/0x250 [ 3087.199282][ T7535] ? kzalloc+0x20/0x20 [ 3087.203347][ T7535] __should_failslab+0x81/0x90 [ 3087.208108][ T7535] ? percpu_ref_init+0x96/0x250 [ 3087.212952][ T7535] should_failslab+0x5/0x20 [ 3087.217506][ T7535] kmem_cache_alloc_trace+0x49/0x310 [ 3087.222877][ T7535] ? kzalloc+0x20/0x20 [ 3087.226998][ T7535] percpu_ref_init+0x96/0x250 [ 3087.231668][ T7535] io_uring_create+0x1488/0x1940 [ 3087.236605][ T7535] ? vfs_write+0x50c/0x770 [ 3087.241017][ T7535] __x64_sys_io_uring_setup+0xe1/0x120 [ 3087.246473][ T7535] do_syscall_64+0x3d/0x90 [ 3087.250941][ T7535] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3087.256926][ T7535] RIP: 0033:0x4665f9 00:03:54 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:54 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x80ffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:54 executing program 2 (fault-call:4 fault-nth:26): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3087.260806][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3087.280407][ T7535] RSP: 002b:00007f6b22097108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3087.288815][ T7535] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3087.296838][ T7535] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3087.304844][ T7535] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3087.312824][ T7535] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 00:03:54 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3087.320835][ T7535] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 [ 3087.356927][ T7542] FAULT_INJECTION: forcing a failure. [ 3087.356927][ T7542] name failslab, interval 1, probability 0, space 0, times 0 00:03:54 executing program 1: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x5) [ 3087.369590][ T7542] CPU: 0 PID: 7542 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3087.378304][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3087.388386][ T7542] Call Trace: [ 3087.391700][ T7542] dump_stack_lvl+0xb7/0x103 [ 3087.396284][ T7542] dump_stack+0x11/0x1a [ 3087.400453][ T7542] should_fail+0x23c/0x250 [ 3087.404967][ T7542] ? anon_vma_clone+0x8d/0x380 [ 3087.409732][ T7542] __should_failslab+0x81/0x90 [ 3087.414491][ T7542] should_failslab+0x5/0x20 [ 3087.418986][ T7542] kmem_cache_alloc+0x46/0x2e0 [ 3087.423771][ T7542] anon_vma_clone+0x8d/0x380 [ 3087.428432][ T7542] __split_vma+0x134/0x320 [ 3087.432853][ T7542] ? vmacache_find+0x2df/0x320 [ 3087.437639][ T7542] __do_munmap+0x2ee/0x1330 [ 3087.442133][ T7542] ? __xas_nomem+0xfc/0x270 [ 3087.446705][ T7542] mmap_region+0x5aa/0x1400 [ 3087.451265][ T7542] do_mmap+0x73f/0xc40 [ 3087.455341][ T7542] vm_mmap_pgoff+0xf9/0x1d0 [ 3087.459865][ T7542] ksys_mmap_pgoff+0x2a8/0x380 [ 3087.464637][ T7542] do_syscall_64+0x3d/0x90 [ 3087.469106][ T7542] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3087.475054][ T7542] RIP: 0033:0x466642 [ 3087.478934][ T7542] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3087.498530][ T7542] RSP: 002b:00007fef55c3f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3087.507058][ T7542] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 00:03:54 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:54 executing program 1: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000edb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:03:54 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3087.515163][ T7542] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 000000002085b000 [ 3087.523125][ T7542] RBP: 000000002085b000 R08: 0000000000000008 R09: 0000000000000000 [ 3087.531178][ T7542] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200002c0 [ 3087.539138][ T7542] R13: 0000000020000000 R14: 0000000020000280 R15: 000000002085b000 00:03:55 executing program 4 (fault-call:8 fault-nth:10): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:55 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x90ed20}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:55 executing program 2 (fault-call:4 fault-nth:27): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3087.682183][ T7562] FAULT_INJECTION: forcing a failure. [ 3087.682183][ T7562] name failslab, interval 1, probability 0, space 0, times 0 [ 3087.694875][ T7562] CPU: 0 PID: 7562 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3087.703542][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3087.708029][ T7567] FAULT_INJECTION: forcing a failure. [ 3087.708029][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 3087.713617][ T7562] Call Trace: [ 3087.713626][ T7562] dump_stack_lvl+0xb7/0x103 [ 3087.713648][ T7562] dump_stack+0x11/0x1a [ 3087.738149][ T7562] should_fail+0x23c/0x250 [ 3087.742558][ T7562] ? sock_alloc_inode+0x23/0x90 [ 3087.747470][ T7562] __should_failslab+0x81/0x90 [ 3087.752217][ T7562] ? sockfs_init_fs_context+0x70/0x70 [ 3087.757575][ T7562] should_failslab+0x5/0x20 [ 3087.762089][ T7562] kmem_cache_alloc+0x46/0x2e0 [ 3087.766840][ T7562] ? selinux_socket_create+0x7c/0x170 [ 3087.772200][ T7562] ? sockfs_init_fs_context+0x70/0x70 [ 3087.777611][ T7562] sock_alloc_inode+0x23/0x90 [ 3087.782334][ T7562] ? sockfs_init_fs_context+0x70/0x70 [ 3087.787708][ T7562] new_inode_pseudo+0x38/0x1c0 [ 3087.792458][ T7562] __sock_create+0x122/0x4e0 [ 3087.797031][ T7562] ? should_fail+0xd6/0x250 [ 3087.801589][ T7562] sock_create_kern+0x34/0x40 [ 3087.806251][ T7562] io_uring_create+0x1653/0x1940 [ 3087.811173][ T7562] ? vfs_write+0x50c/0x770 [ 3087.815608][ T7562] __x64_sys_io_uring_setup+0xe1/0x120 [ 3087.821050][ T7562] do_syscall_64+0x3d/0x90 [ 3087.825521][ T7562] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3087.831399][ T7562] RIP: 0033:0x4665f9 [ 3087.835271][ T7562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3087.854926][ T7562] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3087.863327][ T7562] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3087.871280][ T7562] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3087.879235][ T7562] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3087.887191][ T7562] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3087.895145][ T7562] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 [ 3087.903101][ T7567] CPU: 1 PID: 7567 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3087.903167][ T7562] socket: no more sockets [ 3087.911770][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3087.926231][ T7567] Call Trace: [ 3087.929503][ T7567] dump_stack_lvl+0xb7/0x103 [ 3087.934168][ T7567] dump_stack+0x11/0x1a [ 3087.938399][ T7567] should_fail+0x23c/0x250 [ 3087.942806][ T7567] ? vm_area_alloc+0x28/0xa0 [ 3087.947384][ T7567] __should_failslab+0x81/0x90 [ 3087.952158][ T7567] should_failslab+0x5/0x20 [ 3087.956699][ T7567] kmem_cache_alloc+0x46/0x2e0 [ 3087.961457][ T7567] vm_area_alloc+0x28/0xa0 [ 3087.965958][ T7567] mmap_region+0x741/0x1400 [ 3087.970457][ T7567] do_mmap+0x73f/0xc40 [ 3087.974597][ T7567] vm_mmap_pgoff+0xf9/0x1d0 [ 3087.979143][ T7567] ksys_mmap_pgoff+0x2a8/0x380 [ 3087.983915][ T7567] do_syscall_64+0x3d/0x90 [ 3087.988326][ T7567] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3087.994217][ T7567] RIP: 0033:0x466642 [ 3087.998187][ T7567] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3088.017781][ T7567] RSP: 002b:00007fef55c3f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 00:03:55 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:55 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:55 executing program 4 (fault-call:8 fault-nth:11): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3088.026274][ T7567] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3088.034328][ T7567] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020000000 [ 3088.042293][ T7567] RBP: 0000000020000000 R08: 0000000000000008 R09: 0000000010000000 [ 3088.050259][ T7567] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200002c0 [ 3088.058223][ T7567] R13: 0000000020000000 R14: 0000000020000280 R15: 000000002085b000 00:03:55 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x42}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:55 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:55 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x970000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:55 executing program 1: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x0, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3088.192959][ T7582] FAULT_INJECTION: forcing a failure. [ 3088.192959][ T7582] name failslab, interval 1, probability 0, space 0, times 0 [ 3088.205627][ T7582] CPU: 0 PID: 7582 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3088.214330][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3088.224375][ T7582] Call Trace: [ 3088.227644][ T7582] dump_stack_lvl+0xb7/0x103 [ 3088.232303][ T7582] dump_stack+0x11/0x1a [ 3088.236453][ T7582] should_fail+0x23c/0x250 00:03:55 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:55 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:03:55 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x60}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3088.241010][ T7582] ? security_inode_alloc+0x30/0x180 [ 3088.246435][ T7582] __should_failslab+0x81/0x90 [ 3088.251195][ T7582] should_failslab+0x5/0x20 [ 3088.255695][ T7582] kmem_cache_alloc+0x46/0x2e0 [ 3088.260524][ T7582] security_inode_alloc+0x30/0x180 [ 3088.265630][ T7582] inode_init_always+0x20b/0x420 [ 3088.270562][ T7582] ? sockfs_init_fs_context+0x70/0x70 [ 3088.275948][ T7582] new_inode_pseudo+0x73/0x1c0 [ 3088.280714][ T7582] __sock_create+0x122/0x4e0 [ 3088.285315][ T7582] ? should_fail+0xd6/0x250 00:03:55 executing program 2 (fault-call:4 fault-nth:28): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3088.289818][ T7582] sock_create_kern+0x34/0x40 [ 3088.294493][ T7582] io_uring_create+0x1653/0x1940 [ 3088.299472][ T7582] ? vfs_write+0x50c/0x770 [ 3088.303884][ T7582] __x64_sys_io_uring_setup+0xe1/0x120 [ 3088.309343][ T7582] do_syscall_64+0x3d/0x90 [ 3088.313751][ T7582] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3088.319648][ T7582] RIP: 0033:0x4665f9 [ 3088.323534][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3088.343130][ T7582] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3088.343506][ T7598] FAULT_INJECTION: forcing a failure. [ 3088.343506][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 3088.351529][ T7582] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3088.351545][ T7582] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3088.351556][ T7582] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3088.351568][ T7582] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3088.395994][ T7582] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 [ 3088.403954][ T7598] CPU: 1 PID: 7598 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3088.404049][ T7582] socket: no more sockets [ 3088.412641][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3088.412653][ T7598] Call Trace: [ 3088.412661][ T7598] dump_stack_lvl+0xb7/0x103 [ 3088.434844][ T7598] dump_stack+0x11/0x1a [ 3088.439033][ T7598] should_fail+0x23c/0x250 [ 3088.443457][ T7598] ? vm_area_alloc+0x28/0xa0 [ 3088.448040][ T7598] __should_failslab+0x81/0x90 [ 3088.452793][ T7598] should_failslab+0x5/0x20 [ 3088.457288][ T7598] kmem_cache_alloc+0x46/0x2e0 [ 3088.462050][ T7598] vm_area_alloc+0x28/0xa0 [ 3088.466457][ T7598] mmap_region+0x741/0x1400 [ 3088.470997][ T7598] do_mmap+0x73f/0xc40 [ 3088.475070][ T7598] vm_mmap_pgoff+0xf9/0x1d0 [ 3088.479652][ T7598] ksys_mmap_pgoff+0x2a8/0x380 [ 3088.484408][ T7598] do_syscall_64+0x3d/0x90 [ 3088.488863][ T7598] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3088.494870][ T7598] RIP: 0033:0x466642 [ 3088.498832][ T7598] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3088.518481][ T7598] RSP: 002b:00007fef55c3f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3088.526884][ T7598] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3088.534843][ T7598] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 000000002085b000 00:03:55 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xb0841d}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3088.542802][ T7598] RBP: 000000002085b000 R08: 0000000000000008 R09: 0000000000000000 [ 3088.550762][ T7598] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200002c0 [ 3088.558726][ T7598] R13: 0000000020000000 R14: 0000000020000280 R15: 000000002085b000 [ 3088.568234][ T7606] FAULT_INJECTION: forcing a failure. [ 3088.568234][ T7606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3088.581326][ T7606] CPU: 1 PID: 7606 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3088.589989][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3088.600109][ T7606] Call Trace: [ 3088.603380][ T7606] dump_stack_lvl+0xb7/0x103 [ 3088.608038][ T7606] dump_stack+0x11/0x1a [ 3088.612184][ T7606] should_fail+0x23c/0x250 [ 3088.616637][ T7606] should_fail_usercopy+0x16/0x20 [ 3088.621708][ T7606] _copy_to_user+0x1c/0x90 [ 3088.626140][ T7606] simple_read_from_buffer+0xab/0x120 [ 3088.631505][ T7606] proc_fail_nth_read+0xf6/0x140 [ 3088.636441][ T7606] ? rw_verify_area+0x136/0x250 [ 3088.641350][ T7606] ? proc_fault_inject_write+0x200/0x200 [ 3088.646974][ T7606] vfs_read+0x154/0x5d0 [ 3088.651149][ T7606] ? __fget_light+0x21b/0x260 [ 3088.655819][ T7606] ? __cond_resched+0x11/0x40 [ 3088.660488][ T7606] ksys_read+0xce/0x180 [ 3088.664645][ T7606] __x64_sys_read+0x3e/0x50 [ 3088.669218][ T7606] do_syscall_64+0x3d/0x90 [ 3088.673635][ T7606] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3088.679515][ T7606] RIP: 0033:0x41937c [ 3088.683397][ T7606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3088.702985][ T7606] RSP: 002b:00007fdaa1e84170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3088.711433][ T7606] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 3088.719390][ T7606] RDX: 000000000000000f RSI: 00007fdaa1e841e0 RDI: 0000000000000003 [ 3088.727343][ T7606] RBP: 00007fdaa1e841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3088.735434][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:03:56 executing program 4 (fault-call:8 fault-nth:12): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3088.743391][ T7606] R13: 00007ffe84fbea7f R14: 00007fdaa1e84300 R15: 0000000000022000 00:03:56 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) [ 3088.840575][ T7614] FAULT_INJECTION: forcing a failure. [ 3088.840575][ T7614] name failslab, interval 1, probability 0, space 0, times 0 [ 3088.853242][ T7614] CPU: 1 PID: 7614 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3088.861971][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3088.872012][ T7614] Call Trace: [ 3088.875287][ T7614] dump_stack_lvl+0xb7/0x103 [ 3088.879886][ T7614] dump_stack+0x11/0x1a [ 3088.884033][ T7614] should_fail+0x23c/0x250 00:03:56 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x66}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:56 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xc04a01}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:56 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x70}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3088.888451][ T7614] ? sk_prot_alloc+0x41/0x190 [ 3088.893130][ T7614] __should_failslab+0x81/0x90 [ 3088.897949][ T7614] should_failslab+0x5/0x20 [ 3088.902524][ T7614] kmem_cache_alloc+0x46/0x2e0 [ 3088.907284][ T7614] sk_prot_alloc+0x41/0x190 [ 3088.911776][ T7614] sk_alloc+0x2e/0x220 [ 3088.915835][ T7614] unix_create1+0x74/0x3c0 [ 3088.920277][ T7614] unix_create+0xdc/0x100 [ 3088.924599][ T7614] __sock_create+0x2c7/0x4e0 [ 3088.929183][ T7614] sock_create_kern+0x34/0x40 [ 3088.933861][ T7614] io_uring_create+0x1653/0x1940 [ 3088.938797][ T7614] ? vfs_write+0x50c/0x770 [ 3088.943243][ T7614] __x64_sys_io_uring_setup+0xe1/0x120 [ 3088.948699][ T7614] do_syscall_64+0x3d/0x90 [ 3088.953137][ T7614] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3088.959125][ T7614] RIP: 0033:0x4665f9 [ 3088.963016][ T7614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3088.982614][ T7614] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:03:56 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x9e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) 00:03:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000080)) [ 3088.991016][ T7614] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3088.998978][ T7614] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3089.006950][ T7614] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3089.014921][ T7614] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3089.022883][ T7614] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:03:56 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:56 executing program 2 (fault-call:4 fault-nth:29): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:56 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xdd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000080)) 00:03:56 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:56 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xc04f00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:56 executing program 4 (fault-call:8 fault-nth:13): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3089.218229][ T7656] FAULT_INJECTION: forcing a failure. [ 3089.218229][ T7656] name failslab, interval 1, probability 0, space 0, times 0 [ 3089.227126][ T7653] FAULT_INJECTION: forcing a failure. [ 3089.227126][ T7653] name failslab, interval 1, probability 0, space 0, times 0 [ 3089.230859][ T7656] CPU: 1 PID: 7656 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3089.252112][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3089.262147][ T7656] Call Trace: [ 3089.265405][ T7656] dump_stack_lvl+0xb7/0x103 [ 3089.269978][ T7656] dump_stack+0x11/0x1a [ 3089.274112][ T7656] should_fail+0x23c/0x250 [ 3089.278517][ T7656] ? vm_area_alloc+0x28/0xa0 [ 3089.283087][ T7656] __should_failslab+0x81/0x90 [ 3089.287830][ T7656] should_failslab+0x5/0x20 [ 3089.292316][ T7656] kmem_cache_alloc+0x46/0x2e0 [ 3089.297066][ T7656] vm_area_alloc+0x28/0xa0 [ 3089.301471][ T7656] mmap_region+0x741/0x1400 [ 3089.305963][ T7656] do_mmap+0x73f/0xc40 [ 3089.310047][ T7656] vm_mmap_pgoff+0xf9/0x1d0 [ 3089.314532][ T7656] ksys_mmap_pgoff+0x2a8/0x380 [ 3089.319319][ T7656] do_syscall_64+0x3d/0x90 [ 3089.323774][ T7656] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3089.329690][ T7656] RIP: 0033:0x466642 [ 3089.333642][ T7656] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3089.353226][ T7656] RSP: 002b:00007fef55c3f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3089.361617][ T7656] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3089.369568][ T7656] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020000000 [ 3089.377681][ T7656] RBP: 0000000020000000 R08: 0000000000000008 R09: 0000000010000000 [ 3089.385632][ T7656] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200002c0 [ 3089.393581][ T7656] R13: 0000000020000000 R14: 0000000020000280 R15: 000000002085b000 [ 3089.401622][ T7653] CPU: 0 PID: 7653 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3089.410305][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3089.420356][ T7653] Call Trace: [ 3089.423624][ T7653] dump_stack_lvl+0xb7/0x103 [ 3089.428266][ T7653] dump_stack+0x11/0x1a [ 3089.432423][ T7653] should_fail+0x23c/0x250 [ 3089.436985][ T7653] __should_failslab+0x81/0x90 [ 3089.441736][ T7653] ? selinux_sk_alloc_security+0x61/0x120 [ 3089.447456][ T7653] should_failslab+0x5/0x20 [ 3089.451945][ T7653] kmem_cache_alloc_trace+0x49/0x310 [ 3089.457339][ T7653] ? should_fail+0xd6/0x250 [ 3089.461870][ T7653] selinux_sk_alloc_security+0x61/0x120 [ 3089.467450][ T7653] security_sk_alloc+0x45/0x90 [ 3089.472268][ T7653] sk_prot_alloc+0xd2/0x190 [ 3089.477556][ T7653] sk_alloc+0x2e/0x220 [ 3089.481689][ T7653] unix_create1+0x74/0x3c0 [ 3089.486247][ T7653] unix_create+0xdc/0x100 [ 3089.490572][ T7653] __sock_create+0x2c7/0x4e0 [ 3089.495194][ T7653] sock_create_kern+0x34/0x40 [ 3089.499869][ T7653] io_uring_create+0x1653/0x1940 [ 3089.504884][ T7653] ? vfs_write+0x50c/0x770 [ 3089.509296][ T7653] __x64_sys_io_uring_setup+0xe1/0x120 [ 3089.514837][ T7653] do_syscall_64+0x3d/0x90 00:03:56 executing program 2 (fault-call:4 fault-nth:30): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000080)) 00:03:56 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3089.519251][ T7653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3089.525184][ T7653] RIP: 0033:0x4665f9 [ 3089.529072][ T7653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3089.548668][ T7653] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3089.557075][ T7653] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 00:03:56 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xde}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000080)) [ 3089.565047][ T7653] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3089.573037][ T7653] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3089.580999][ T7653] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3089.588955][ T7653] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 [ 3089.658375][ T7673] FAULT_INJECTION: forcing a failure. [ 3089.658375][ T7673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3089.671481][ T7673] CPU: 1 PID: 7673 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3089.680145][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3089.690190][ T7673] Call Trace: [ 3089.693459][ T7673] dump_stack_lvl+0xb7/0x103 [ 3089.698046][ T7673] dump_stack+0x11/0x1a [ 3089.702251][ T7673] should_fail+0x23c/0x250 [ 3089.706672][ T7673] should_fail_usercopy+0x16/0x20 [ 3089.711890][ T7673] _copy_from_user+0x1c/0xd0 [ 3089.716483][ T7673] kstrtouint_from_user+0x6f/0x130 [ 3089.721620][ T7673] ? _copy_to_user+0x77/0x90 [ 3089.726243][ T7673] ? fsnotify_perm+0x59/0x2e0 [ 3089.730933][ T7673] proc_fail_nth_write+0x38/0x140 [ 3089.735944][ T7673] ? proc_fail_nth_read+0x140/0x140 [ 3089.741126][ T7673] vfs_write+0x1f3/0x770 [ 3089.745361][ T7673] ? __fget_light+0x21b/0x260 [ 3089.750018][ T7673] ? __cond_resched+0x11/0x40 [ 3089.754673][ T7673] ksys_write+0xce/0x180 [ 3089.758959][ T7673] __x64_sys_write+0x3e/0x50 [ 3089.763543][ T7673] do_syscall_64+0x3d/0x90 [ 3089.767955][ T7673] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3089.773852][ T7673] RIP: 0033:0x4192df [ 3089.777739][ T7673] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 3089.797438][ T7673] RSP: 002b:00007fef55c3f170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 00:03:57 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x120}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:57 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xc0ffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:57 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:57 executing program 4 (fault-call:8 fault-nth:14): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000080)) 00:03:57 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3089.805832][ T7673] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004192df [ 3089.813799][ T7673] RDX: 0000000000000001 RSI: 00007fef55c3f1e0 RDI: 0000000000000007 [ 3089.821778][ T7673] RBP: 00007fef55c3f1d0 R08: 0000000000000000 R09: 0000000010000000 [ 3089.829738][ T7673] R10: 0000000000008011 R11: 0000000000000293 R12: 0000000000000002 [ 3089.837702][ T7673] R13: 00007fffed6fe8ef R14: 00007fef55c3f300 R15: 0000000000022000 00:03:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000080)) 00:03:57 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x204}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:57 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xf04a00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:57 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:57 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3090.012808][ T7702] FAULT_INJECTION: forcing a failure. [ 3090.012808][ T7702] name failslab, interval 1, probability 0, space 0, times 0 [ 3090.025585][ T7702] CPU: 0 PID: 7702 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3090.034340][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3090.044384][ T7702] Call Trace: [ 3090.047650][ T7702] dump_stack_lvl+0xb7/0x103 [ 3090.052314][ T7702] dump_stack+0x11/0x1a [ 3090.056473][ T7702] should_fail+0x23c/0x250 [ 3090.060893][ T7702] ? __d_alloc+0x36/0x370 [ 3090.065213][ T7702] __should_failslab+0x81/0x90 [ 3090.069964][ T7702] should_failslab+0x5/0x20 [ 3090.074465][ T7702] kmem_cache_alloc+0x46/0x2e0 [ 3090.079233][ T7702] __d_alloc+0x36/0x370 [ 3090.083395][ T7702] d_alloc_pseudo+0x1a/0x50 [ 3090.087957][ T7702] alloc_file_pseudo+0x63/0x130 [ 3090.092814][ T7702] anon_inode_getfile+0x9f/0x120 [ 3090.097814][ T7702] io_uring_create+0x16a8/0x1940 [ 3090.102820][ T7702] ? vfs_write+0x50c/0x770 [ 3090.107263][ T7702] __x64_sys_io_uring_setup+0xe1/0x120 00:03:57 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000080)) 00:03:57 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x1000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3090.112748][ T7702] do_syscall_64+0x3d/0x90 [ 3090.117158][ T7702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3090.123047][ T7702] RIP: 0033:0x4665f9 [ 3090.126931][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3090.146581][ T7702] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3090.154990][ T7702] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 00:03:57 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x402}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3090.163052][ T7702] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3090.171061][ T7702] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3090.179138][ T7702] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3090.187126][ T7702] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:03:57 executing program 4 (fault-call:8 fault-nth:15): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000080)) 00:03:57 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x14ac000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:57 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x2}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:57 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:57 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x406}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3090.339059][ T7733] FAULT_INJECTION: forcing a failure. [ 3090.339059][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 3090.351712][ T7733] CPU: 1 PID: 7733 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3090.360387][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3090.370428][ T7733] Call Trace: [ 3090.373698][ T7733] dump_stack_lvl+0xb7/0x103 [ 3090.378286][ T7733] dump_stack+0x11/0x1a [ 3090.382453][ T7733] should_fail+0x23c/0x250 [ 3090.386914][ T7733] ? __alloc_file+0x2e/0x1a0 [ 3090.391506][ T7733] __should_failslab+0x81/0x90 [ 3090.396262][ T7733] should_failslab+0x5/0x20 [ 3090.400766][ T7733] kmem_cache_alloc+0x46/0x2e0 [ 3090.405530][ T7733] __alloc_file+0x2e/0x1a0 [ 3090.409948][ T7733] alloc_empty_file+0xcd/0x1c0 [ 3090.414751][ T7733] alloc_file+0x3a/0x280 [ 3090.418986][ T7733] alloc_file_pseudo+0xe2/0x130 [ 3090.423888][ T7733] anon_inode_getfile+0x9f/0x120 [ 3090.428875][ T7733] io_uring_create+0x16a8/0x1940 [ 3090.433810][ T7733] ? vfs_write+0x50c/0x770 00:03:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) 00:03:57 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x4}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:57 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3090.438219][ T7733] __x64_sys_io_uring_setup+0xe1/0x120 [ 3090.443750][ T7733] do_syscall_64+0x3d/0x90 [ 3090.448182][ T7733] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3090.454069][ T7733] RIP: 0033:0x4665f9 [ 3090.457951][ T7733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3090.477717][ T7733] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:03:57 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x604}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:57 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3090.486122][ T7733] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3090.494088][ T7733] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3090.502181][ T7733] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3090.510140][ T7733] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3090.518100][ T7733] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:03:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000080)) 00:03:58 executing program 4 (fault-call:8 fault-nth:16): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:58 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x2000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:58 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x7}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:58 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, 0x0, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)) [ 3090.675469][ T7760] FAULT_INJECTION: forcing a failure. [ 3090.675469][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 3090.688157][ T7760] CPU: 1 PID: 7760 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3090.696927][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3090.706981][ T7760] Call Trace: [ 3090.710276][ T7760] dump_stack_lvl+0xb7/0x103 [ 3090.714864][ T7760] dump_stack+0x11/0x1a [ 3090.719015][ T7760] should_fail+0x23c/0x250 [ 3090.723430][ T7760] ? security_file_alloc+0x30/0x190 [ 3090.728680][ T7760] __should_failslab+0x81/0x90 [ 3090.733464][ T7760] should_failslab+0x5/0x20 [ 3090.737970][ T7760] kmem_cache_alloc+0x46/0x2e0 [ 3090.742773][ T7760] security_file_alloc+0x30/0x190 [ 3090.747799][ T7760] __alloc_file+0x83/0x1a0 [ 3090.752209][ T7760] alloc_empty_file+0xcd/0x1c0 [ 3090.757045][ T7760] alloc_file+0x3a/0x280 [ 3090.761287][ T7760] alloc_file_pseudo+0xe2/0x130 [ 3090.766138][ T7760] anon_inode_getfile+0x9f/0x120 [ 3090.771089][ T7760] io_uring_create+0x16a8/0x1940 00:03:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000080)) [ 3090.776056][ T7760] ? vfs_write+0x50c/0x770 [ 3090.780470][ T7760] __x64_sys_io_uring_setup+0xe1/0x120 [ 3090.785928][ T7760] do_syscall_64+0x3d/0x90 [ 3090.790381][ T7760] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3090.796277][ T7760] RIP: 0033:0x4665f9 [ 3090.800226][ T7760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:03:58 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000080)) 00:03:58 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x2040000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3090.819830][ T7760] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3090.828230][ T7760] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3090.836195][ T7760] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3090.844157][ T7760] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3090.852123][ T7760] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3090.860093][ T7760] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:03:58 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x8}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:58 executing program 4 (fault-call:8 fault-nth:17): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000080)) 00:03:58 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3090.985931][ T7785] FAULT_INJECTION: forcing a failure. [ 3090.985931][ T7785] name failslab, interval 1, probability 0, space 0, times 0 [ 3090.998581][ T7785] CPU: 0 PID: 7785 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3091.007295][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3091.017339][ T7785] Call Trace: [ 3091.020709][ T7785] dump_stack_lvl+0xb7/0x103 [ 3091.025293][ T7785] dump_stack+0x11/0x1a [ 3091.029437][ T7785] should_fail+0x23c/0x250 [ 3091.033906][ T7785] __should_failslab+0x81/0x90 [ 3091.038717][ T7785] ? io_uring_add_tctx_node+0xdc/0x200 [ 3091.044186][ T7785] should_failslab+0x5/0x20 [ 3091.048686][ T7785] kmem_cache_alloc_trace+0x49/0x310 [ 3091.053982][ T7785] ? xa_load+0x249/0x260 [ 3091.058258][ T7785] io_uring_add_tctx_node+0xdc/0x200 [ 3091.063637][ T7785] io_uring_create+0x17a0/0x1940 [ 3091.068612][ T7785] ? vfs_write+0x50c/0x770 [ 3091.073025][ T7785] __x64_sys_io_uring_setup+0xe1/0x120 [ 3091.078486][ T7785] do_syscall_64+0x3d/0x90 [ 3091.082964][ T7785] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3091.088855][ T7785] RIP: 0033:0x4665f9 [ 3091.092739][ T7785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3091.112348][ T7785] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3091.120792][ T7785] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3091.128871][ T7785] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e 00:03:58 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x10}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:58 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x2000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3091.136827][ T7785] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3091.144878][ T7785] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3091.152859][ T7785] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:03:58 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:58 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x4000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f0000000080)) 00:03:58 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x2001}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:58 executing program 4 (fault-call:8 fault-nth:18): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f0000000080)) 00:03:58 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x42}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:58 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:58 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x6000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3091.360854][ T7816] FAULT_INJECTION: forcing a failure. [ 3091.360854][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 3091.373578][ T7816] CPU: 0 PID: 7816 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3091.382247][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3091.392293][ T7816] Call Trace: [ 3091.395566][ T7816] dump_stack_lvl+0xb7/0x103 [ 3091.400152][ T7816] dump_stack+0x11/0x1a [ 3091.404303][ T7816] should_fail+0x23c/0x250 00:03:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f0000000080)) 00:03:58 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x4000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3091.408716][ T7816] ? xas_create+0x96b/0xb30 [ 3091.413210][ T7816] __should_failslab+0x81/0x90 [ 3091.417968][ T7816] should_failslab+0x5/0x20 [ 3091.422485][ T7816] kmem_cache_alloc+0x46/0x2e0 [ 3091.427250][ T7816] ? should_fail+0xd6/0x250 [ 3091.431830][ T7816] xas_create+0x96b/0xb30 [ 3091.436159][ T7816] xas_store+0x70/0xca0 [ 3091.440308][ T7816] ? selinux_file_alloc_security+0x9c/0xb0 [ 3091.446154][ T7816] ? security_file_alloc+0x12e/0x190 [ 3091.451508][ T7816] ? percpu_counter_add_batch+0x69/0xd0 [ 3091.457063][ T7816] __xa_store+0xcb/0x320 [ 3091.461318][ T7816] xa_store+0x30/0x70 [ 3091.465355][ T7816] io_uring_add_tctx_node+0x111/0x200 [ 3091.470723][ T7816] io_uring_create+0x17a0/0x1940 [ 3091.475655][ T7816] ? vfs_write+0x50c/0x770 [ 3091.480063][ T7816] __x64_sys_io_uring_setup+0xe1/0x120 [ 3091.485514][ T7816] do_syscall_64+0x3d/0x90 [ 3091.489925][ T7816] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3091.495915][ T7816] RIP: 0033:0x4665f9 00:03:58 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, 0x0, &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3091.499791][ T7816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3091.519388][ T7816] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3091.527797][ T7816] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3091.535768][ T7816] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3091.543735][ T7816] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3091.551781][ T7816] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 [ 3091.559816][ T7816] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:03:59 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x4200}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:59 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x6040000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000000080)) 00:03:59 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x60}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:59 executing program 4 (fault-call:8 fault-nth:19): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:59 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, 0x0, &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000080)) 00:03:59 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x6000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:59 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x7000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3091.766091][ T7852] FAULT_INJECTION: forcing a failure. [ 3091.766091][ T7852] name failslab, interval 1, probability 0, space 0, times 0 [ 3091.778810][ T7852] CPU: 0 PID: 7852 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3091.787475][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3091.797562][ T7852] Call Trace: [ 3091.800844][ T7852] dump_stack_lvl+0xb7/0x103 [ 3091.805427][ T7852] dump_stack+0x11/0x1a [ 3091.809640][ T7852] should_fail+0x23c/0x250 [ 3091.814051][ T7852] ? xas_create+0x96b/0xb30 [ 3091.818548][ T7852] __should_failslab+0x81/0x90 [ 3091.823327][ T7852] should_failslab+0x5/0x20 [ 3091.827818][ T7852] kmem_cache_alloc+0x46/0x2e0 [ 3091.832630][ T7852] ? should_fail+0xd6/0x250 [ 3091.837132][ T7852] xas_create+0x96b/0xb30 [ 3091.841451][ T7852] xas_store+0x70/0xca0 [ 3091.845599][ T7852] ? selinux_file_alloc_security+0x9c/0xb0 [ 3091.851435][ T7852] ? security_file_alloc+0x12e/0x190 [ 3091.856814][ T7852] ? percpu_counter_add_batch+0x69/0xd0 [ 3091.862373][ T7852] __xa_store+0xcb/0x320 00:03:59 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x6600}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3091.866607][ T7852] xa_store+0x30/0x70 [ 3091.870577][ T7852] io_uring_add_tctx_node+0x111/0x200 [ 3091.875949][ T7852] io_uring_create+0x17a0/0x1940 [ 3091.880881][ T7852] ? vfs_write+0x50c/0x770 [ 3091.885293][ T7852] __x64_sys_io_uring_setup+0xe1/0x120 [ 3091.890794][ T7852] do_syscall_64+0x3d/0x90 [ 3091.895269][ T7852] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3091.901159][ T7852] RIP: 0033:0x4665f9 00:03:59 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xb2}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:59 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, 0x0, &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3091.905156][ T7852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3091.924781][ T7852] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3091.933183][ T7852] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3091.941144][ T7852] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3091.949122][ T7852] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3091.957081][ T7852] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 00:03:59 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x8000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000080)) [ 3091.965042][ T7852] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:03:59 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x7000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 00:03:59 executing program 4 (fault-call:8 fault-nth:20): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:59 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x10000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:59 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:03:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000080)) 00:03:59 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x122}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:59 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x9e00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:59 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x126}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3092.239316][ T7899] FAULT_INJECTION: forcing a failure. [ 3092.239316][ T7899] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.252007][ T7899] CPU: 0 PID: 7899 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3092.260676][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3092.270720][ T7899] Call Trace: [ 3092.273986][ T7899] dump_stack_lvl+0xb7/0x103 [ 3092.278569][ T7899] dump_stack+0x11/0x1a [ 3092.282719][ T7899] should_fail+0x23c/0x250 00:03:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1c, 0x0, &(0x7f0000000080)) 00:03:59 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x1d84b000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3092.287179][ T7899] ? xas_create+0x96b/0xb30 [ 3092.291687][ T7899] __should_failslab+0x81/0x90 [ 3092.296455][ T7899] should_failslab+0x5/0x20 [ 3092.300949][ T7899] kmem_cache_alloc+0x46/0x2e0 [ 3092.305709][ T7899] ? xas_create+0x96b/0xb30 [ 3092.310256][ T7899] xas_create+0x96b/0xb30 [ 3092.314607][ T7899] xas_store+0x70/0xca0 [ 3092.318778][ T7899] ? selinux_file_alloc_security+0x9c/0xb0 [ 3092.324580][ T7899] ? security_file_alloc+0x12e/0x190 [ 3092.329861][ T7899] ? percpu_counter_add_batch+0x69/0xd0 [ 3092.335442][ T7899] __xa_store+0xcb/0x320 00:03:59 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x204}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3092.339680][ T7899] xa_store+0x30/0x70 [ 3092.343649][ T7899] io_uring_add_tctx_node+0x111/0x200 [ 3092.349012][ T7899] io_uring_create+0x17a0/0x1940 [ 3092.353970][ T7899] ? vfs_write+0x50c/0x770 [ 3092.358385][ T7899] __x64_sys_io_uring_setup+0xe1/0x120 [ 3092.363979][ T7899] do_syscall_64+0x3d/0x90 [ 3092.368389][ T7899] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3092.374271][ T7899] RIP: 0033:0x4665f9 00:03:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1d, 0x0, &(0x7f0000000080)) [ 3092.378266][ T7899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.397867][ T7899] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3092.406319][ T7899] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3092.414292][ T7899] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3092.422253][ T7899] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3092.430226][ T7899] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 00:03:59 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3092.438255][ T7899] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:03:59 executing program 4 (fault-call:8 fault-nth:21): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:59 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x20000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:03:59 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xdd00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:03:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000080)) 00:03:59 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x2dc}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:03:59 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3092.615789][ T7935] FAULT_INJECTION: forcing a failure. [ 3092.615789][ T7935] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.628866][ T7935] CPU: 1 PID: 7935 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3092.637562][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3092.647671][ T7935] Call Trace: [ 3092.650950][ T7935] dump_stack_lvl+0xb7/0x103 [ 3092.655531][ T7935] dump_stack+0x11/0x1a [ 3092.659685][ T7935] should_fail+0x23c/0x250 [ 3092.664173][ T7935] ? xas_create+0x96b/0xb30 [ 3092.668737][ T7935] __should_failslab+0x81/0x90 [ 3092.673519][ T7935] should_failslab+0x5/0x20 [ 3092.678012][ T7935] kmem_cache_alloc+0x46/0x2e0 [ 3092.682767][ T7935] ? xas_create+0x96b/0xb30 [ 3092.687332][ T7935] xas_create+0x96b/0xb30 [ 3092.691655][ T7935] xas_store+0x70/0xca0 [ 3092.695804][ T7935] ? selinux_file_alloc_security+0x9c/0xb0 [ 3092.701641][ T7935] ? security_file_alloc+0x12e/0x190 [ 3092.706976][ T7935] ? percpu_counter_add_batch+0x69/0xd0 [ 3092.712542][ T7935] __xa_store+0xcb/0x320 [ 3092.716786][ T7935] xa_store+0x30/0x70 [ 3092.720773][ T7935] io_uring_add_tctx_node+0x111/0x200 [ 3092.726488][ T7935] io_uring_create+0x17a0/0x1940 [ 3092.731439][ T7935] ? vfs_write+0x50c/0x770 [ 3092.735845][ T7935] __x64_sys_io_uring_setup+0xe1/0x120 [ 3092.741299][ T7935] do_syscall_64+0x3d/0x90 [ 3092.745760][ T7935] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3092.751648][ T7935] RIP: 0033:0x4665f9 00:04:00 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, 0x0, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:00 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x320}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:00 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x20ed9000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)) 00:04:00 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xde00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3092.755533][ T7935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.775154][ T7935] RSP: 002b:00007f6b220b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3092.783630][ T7935] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3092.791592][ T7935] RDX: 000000002085f000 RSI: 0000000020000440 RDI: 0000000000004f9e [ 3092.799591][ T7935] RBP: 0000000020000440 R08: 0000000020000240 R09: 0000000020000240 [ 3092.807586][ T7935] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000240 00:04:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000080)) [ 3092.815573][ T7935] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:04:00 executing program 4 (fault-call:8 fault-nth:22): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:00 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x40000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:00 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x40000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:00 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x402}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x23, 0x0, &(0x7f0000000080)) 00:04:00 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, 0x0, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3092.963636][ T7964] FAULT_INJECTION: forcing a failure. [ 3092.963636][ T7964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3092.976960][ T7964] CPU: 1 PID: 7964 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3092.985625][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3092.995671][ T7964] Call Trace: [ 3092.999000][ T7964] dump_stack_lvl+0xb7/0x103 [ 3093.003588][ T7964] dump_stack+0x11/0x1a [ 3093.007737][ T7964] should_fail+0x23c/0x250 [ 3093.012213][ T7964] __alloc_pages+0x102/0x320 [ 3093.016805][ T7964] alloc_pages+0x2e8/0x340 [ 3093.021245][ T7964] pte_alloc_one+0x29/0xb0 [ 3093.025663][ T7964] __pte_alloc+0x2f/0x210 [ 3093.030008][ T7964] remap_pfn_range_notrack+0x5b7/0x770 [ 3093.035888][ T7964] remap_pfn_range+0x87/0xe0 [ 3093.040477][ T7964] io_uring_mmap+0x232/0x260 [ 3093.045100][ T7964] mmap_region+0xbcb/0x1400 [ 3093.049663][ T7964] do_mmap+0x73f/0xc40 [ 3093.053725][ T7964] vm_mmap_pgoff+0xf9/0x1d0 [ 3093.058225][ T7964] ksys_mmap_pgoff+0x2a8/0x380 [ 3093.062994][ T7964] do_syscall_64+0x3d/0x90 [ 3093.067407][ T7964] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3093.073472][ T7964] RIP: 0033:0x466642 [ 3093.077495][ T7964] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3093.097098][ T7964] RSP: 002b:00007f6b220b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3093.105504][ T7964] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 00:04:00 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x406}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f0000000080)) 00:04:00 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x80000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:00 executing program 4 (fault-call:8 fault-nth:23): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3093.113475][ T7964] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3093.121491][ T7964] RBP: 0000000020ffc000 R08: 000000000000000b R09: 0000000000000000 [ 3093.129457][ T7964] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3093.137421][ T7964] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:04:00 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x42000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:00 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, 0x0, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:00 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x174201}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:00 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x604}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3093.297940][ T7989] FAULT_INJECTION: forcing a failure. [ 3093.297940][ T7989] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.310656][ T7989] CPU: 0 PID: 7989 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3093.319336][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3093.329541][ T7989] Call Trace: [ 3093.332810][ T7989] dump_stack_lvl+0xb7/0x103 [ 3093.337401][ T7989] dump_stack+0x11/0x1a [ 3093.341580][ T7989] should_fail+0x23c/0x250 [ 3093.346072][ T7989] ? vm_area_alloc+0x28/0xa0 [ 3093.350650][ T7989] __should_failslab+0x81/0x90 [ 3093.355404][ T7989] should_failslab+0x5/0x20 [ 3093.359902][ T7989] kmem_cache_alloc+0x46/0x2e0 [ 3093.364664][ T7989] vm_area_alloc+0x28/0xa0 [ 3093.369071][ T7989] mmap_region+0x741/0x1400 [ 3093.373564][ T7989] do_mmap+0x73f/0xc40 [ 3093.377647][ T7989] vm_mmap_pgoff+0xf9/0x1d0 [ 3093.382151][ T7989] ksys_mmap_pgoff+0x2a8/0x380 [ 3093.386908][ T7989] do_syscall_64+0x3d/0x90 [ 3093.391385][ T7989] ? irqentry_exit+0xe/0x30 [ 3093.395884][ T7989] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3093.401767][ T7989] RIP: 0033:0x466642 [ 3093.405652][ T7989] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3093.425486][ T7989] RSP: 002b:00007f6b220b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3093.433897][ T7989] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 00:04:00 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x700}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:00 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x7f000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:00 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x200000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x25, 0x0, &(0x7f0000000080)) 00:04:00 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3093.441885][ T7989] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000 [ 3093.449851][ T7989] RBP: 0000000020ffc000 R08: 000000000000000b R09: 0000000000000000 [ 3093.457842][ T7989] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3093.465805][ T7989] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:04:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:00 executing program 4 (fault-call:8 fault-nth:24): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:00 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:01 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x2000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:01 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xac000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:01 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x400000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)=0x4) 00:04:01 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3093.658370][ T8024] FAULT_INJECTION: forcing a failure. [ 3093.658370][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.671019][ T8024] CPU: 1 PID: 8024 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3093.679725][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3093.689992][ T8024] Call Trace: [ 3093.693266][ T8024] dump_stack_lvl+0xb7/0x103 [ 3093.697854][ T8024] dump_stack+0x11/0x1a [ 3093.702083][ T8024] should_fail+0x23c/0x250 00:04:01 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)=0x10) [ 3093.706536][ T8024] ? vm_area_dup+0x44/0x120 [ 3093.711030][ T8024] __should_failslab+0x81/0x90 [ 3093.715818][ T8024] should_failslab+0x5/0x20 [ 3093.720314][ T8024] kmem_cache_alloc+0x46/0x2e0 [ 3093.725088][ T8024] vm_area_dup+0x44/0x120 [ 3093.729408][ T8024] __split_vma+0x82/0x320 [ 3093.733814][ T8024] ? vmacache_find+0x313/0x320 [ 3093.738642][ T8024] __do_munmap+0x2ee/0x1330 [ 3093.743203][ T8024] ? up_write+0x25/0xc0 [ 3093.747368][ T8024] ? vma_link+0x188/0x1a0 [ 3093.751714][ T8024] mmap_region+0x5aa/0x1400 00:04:01 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x2003}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3093.756234][ T8024] do_mmap+0x73f/0xc40 [ 3093.760290][ T8024] vm_mmap_pgoff+0xf9/0x1d0 [ 3093.764782][ T8024] ksys_mmap_pgoff+0x2a8/0x380 [ 3093.769539][ T8024] do_syscall_64+0x3d/0x90 [ 3093.774012][ T8024] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3093.779956][ T8024] RIP: 0033:0x466642 [ 3093.783833][ T8024] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 00:04:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)=0x4000000) [ 3093.803428][ T8024] RSP: 002b:00007f6b220b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3093.811892][ T8024] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3093.819856][ T8024] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 000000002085f000 [ 3093.827817][ T8024] RBP: 000000002085f000 R08: 000000000000000b R09: 0000000010000000 [ 3093.835776][ T8024] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3093.843739][ T8024] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:04:01 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:01 executing program 4 (fault-call:8 fault-nth:25): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)=0x10000000) 00:04:01 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x2201}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:01 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xd2000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:01 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:01 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x600000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3093.971566][ T8060] FAULT_INJECTION: forcing a failure. [ 3093.971566][ T8060] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.984255][ T8060] CPU: 1 PID: 8060 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3093.992923][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3094.002966][ T8060] Call Trace: [ 3094.006240][ T8060] dump_stack_lvl+0xb7/0x103 [ 3094.010823][ T8060] dump_stack+0x11/0x1a [ 3094.014975][ T8060] should_fail+0x23c/0x250 00:04:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000080)) 00:04:01 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3094.019452][ T8060] ? vm_area_dup+0x44/0x120 [ 3094.023942][ T8060] __should_failslab+0x81/0x90 [ 3094.028698][ T8060] should_failslab+0x5/0x20 [ 3094.033195][ T8060] kmem_cache_alloc+0x46/0x2e0 [ 3094.037953][ T8060] vm_area_dup+0x44/0x120 [ 3094.042272][ T8060] __split_vma+0x82/0x320 [ 3094.046589][ T8060] ? vmacache_find+0x313/0x320 [ 3094.051386][ T8060] __do_munmap+0x2ee/0x1330 [ 3094.055880][ T8060] ? up_write+0x25/0xc0 [ 3094.060031][ T8060] ? vma_link+0x188/0x1a0 [ 3094.064362][ T8060] mmap_region+0x5aa/0x1400 [ 3094.068883][ T8060] do_mmap+0x73f/0xc40 [ 3094.072944][ T8060] vm_mmap_pgoff+0xf9/0x1d0 [ 3094.077439][ T8060] ksys_mmap_pgoff+0x2a8/0x380 [ 3094.082199][ T8060] do_syscall_64+0x3d/0x90 [ 3094.086763][ T8060] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3094.092665][ T8060] RIP: 0033:0x466642 [ 3094.096667][ T8060] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 00:04:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000180)=0xff, 0x4) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x41b, &(0x7f0000000200), &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x8000) syz_io_uring_setup(0x1db6, &(0x7f0000000000)={0x0, 0xd40a, 0x10, 0x0, 0xae}, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000fc3000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2000, @fd_index=0x9, 0x10000, 0x0, 0x0, 0x1, 0x0, {0x1}}, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0x3b, 0x0, 0xee00}, {0x7, 0x1, 0x9e2, 0x5, 0x6, 0x7, 0x1}, {0x4, 0x7738, 0x3f, 0x5}, 0x2, 0x6e6bb5, 0x0, 0x1, 0x3, 0x1}, {{@in=@local, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x4, 0x3, 0x0, 0x7, 0x542f, 0x35f}}, 0xe8) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:01 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3094.116266][ T8060] RSP: 002b:00007f6b220b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3094.124765][ T8060] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3094.133169][ T8060] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 000000002085f000 [ 3094.141150][ T8060] RBP: 000000002085f000 R08: 000000000000000b R09: 0000000010000000 [ 3094.149119][ T8060] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3094.157081][ T8060] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:04:01 executing program 4 (fault-call:8 fault-nth:26): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:01 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xfeffffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:01 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) [ 3094.274499][ T8085] FAULT_INJECTION: forcing a failure. [ 3094.274499][ T8085] name failslab, interval 1, probability 0, space 0, times 0 [ 3094.287117][ T8085] CPU: 0 PID: 8085 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3094.295819][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3094.305867][ T8085] Call Trace: [ 3094.309151][ T8085] dump_stack_lvl+0xb7/0x103 [ 3094.313827][ T8085] dump_stack+0x11/0x1a [ 3094.317982][ T8085] should_fail+0x23c/0x250 [ 3094.322453][ T8085] ? vm_area_dup+0x44/0x120 [ 3094.326954][ T8085] __should_failslab+0x81/0x90 [ 3094.331709][ T8085] should_failslab+0x5/0x20 [ 3094.336278][ T8085] kmem_cache_alloc+0x46/0x2e0 [ 3094.341044][ T8085] vm_area_dup+0x44/0x120 [ 3094.345476][ T8085] __split_vma+0x82/0x320 [ 3094.349817][ T8085] ? vmacache_find+0x313/0x320 [ 3094.354595][ T8085] __do_munmap+0x2ee/0x1330 [ 3094.359089][ T8085] ? up_write+0x25/0xc0 [ 3094.363231][ T8085] ? vma_link+0x188/0x1a0 [ 3094.367556][ T8085] mmap_region+0x5aa/0x1400 [ 3094.372060][ T8085] do_mmap+0x73f/0xc40 [ 3094.376181][ T8085] vm_mmap_pgoff+0xf9/0x1d0 [ 3094.380683][ T8085] ksys_mmap_pgoff+0x2a8/0x380 [ 3094.385457][ T8085] do_syscall_64+0x3d/0x90 [ 3094.389879][ T8085] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3094.395775][ T8085] RIP: 0033:0x466642 [ 3094.399665][ T8085] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 00:04:01 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x70a21d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:01 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x2601}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000080)) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:04:01 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:01 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xff600000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3094.419258][ T8085] RSP: 002b:00007f6b220b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3094.427683][ T8085] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3094.435649][ T8085] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 000000002085f000 [ 3094.443608][ T8085] RBP: 000000002085f000 R08: 000000000000000b R09: 0000000010000000 [ 3094.451572][ T8085] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3094.459535][ T8085] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:04:01 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x800000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:01 executing program 4 (fault-call:8 fault-nth:27): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:01 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:01 executing program 1: request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='(![\x00', 0xfffffffffffffff9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = semget(0x3, 0x3, 0x202) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x6, 0x1000}, {0x3, 0x200, 0x1400}, {0x2, 0x4, 0x800}, {0x4, 0x67c, 0x1000}, {0x4, 0x606}, {0x2, 0x30f, 0x1000}], 0x6, &(0x7f00000000c0)={r2, r3+10000000}) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:02 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x4000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3094.659729][ T8116] FAULT_INJECTION: forcing a failure. [ 3094.659729][ T8116] name failslab, interval 1, probability 0, space 0, times 0 [ 3094.672495][ T8116] CPU: 0 PID: 8116 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3094.681172][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3094.691218][ T8116] Call Trace: [ 3094.694489][ T8116] dump_stack_lvl+0xb7/0x103 [ 3094.699071][ T8116] dump_stack+0x11/0x1a [ 3094.703219][ T8116] should_fail+0x23c/0x250 00:04:02 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x80ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000000c0)={{0x0, 0x6, 0x4, 0x8, 0x7, 0x1000, 0x36, 0xfff, 0x78a7, 0x6, 0xbd, 0x4b, 0x100, 0x3, 0x151}}) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:02 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xffff8000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3094.707661][ T8116] ? vm_area_alloc+0x28/0xa0 [ 3094.712240][ T8116] __should_failslab+0x81/0x90 [ 3094.716992][ T8116] should_failslab+0x5/0x20 [ 3094.721484][ T8116] kmem_cache_alloc+0x46/0x2e0 [ 3094.726248][ T8116] vm_area_alloc+0x28/0xa0 [ 3094.730666][ T8116] mmap_region+0x741/0x1400 [ 3094.735191][ T8116] do_mmap+0x73f/0xc40 [ 3094.739256][ T8116] vm_mmap_pgoff+0xf9/0x1d0 [ 3094.743840][ T8116] ksys_mmap_pgoff+0x2a8/0x380 [ 3094.748607][ T8116] do_syscall_64+0x3d/0x90 [ 3094.753024][ T8116] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3094.758918][ T8116] RIP: 0033:0x466642 [ 3094.762803][ T8116] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3094.782576][ T8116] RSP: 002b:00007f6b220b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3094.791005][ T8116] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3094.798970][ T8116] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 000000002085f000 [ 3094.806932][ T8116] RBP: 000000002085f000 R08: 000000000000000b R09: 0000000010000000 [ 3094.814992][ T8116] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3094.822959][ T8116] R13: 000000002085f000 R14: 0000000020000200 R15: 0000000020ffc000 00:04:02 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xb0ed20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x4200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:02 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xffffc000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:02 executing program 4 (fault-call:8 fault-nth:28): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xc0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:02 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x6000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:02 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:02 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xc0ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:02 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:02 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:02 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xb200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:02 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x1000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0xffffffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) r1 = socket(0x26, 0x2, 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x4b94916a) 00:04:02 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:02 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xdc02}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:02 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x1421700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:02 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:02 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:02 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x40000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:03 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:03 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:03 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x2000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1ff) 00:04:03 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x80000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:03 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x2040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1ff) 00:04:03 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:03 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x4000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x1ff) 00:04:03 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x100020}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:03 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xa}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x6}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:03 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x6040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200), 0x1ff) 00:04:03 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x101200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:03 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x7}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:03 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200), 0x1ff) 00:04:03 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x10261e}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:03 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x7000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200), 0x1ff) 00:04:03 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x121000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:03 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x8}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:03 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x8000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x42}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x200000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:03 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x0) 00:04:03 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x10000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:03 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x10}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:04 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x0) 00:04:04 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x5d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:04 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x400000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:04 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x1da27000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:04 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x0) 00:04:04 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x42}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:04 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x60}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000180)=0xff, 0x4) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x41b, &(0x7f0000000200), &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x8000) syz_io_uring_setup(0x1db6, &(0x7f0000000000)={0x0, 0xd40a, 0x10, 0x0, 0xae}, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000fc3000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2000, @fd_index=0x9, 0x10000, 0x0, 0x0, 0x1, 0x0, {0x1}}, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0x3b, 0x0, 0xee00}, {0x7, 0x1, 0x9e2, 0x5, 0x6, 0x7, 0x1}, {0x4, 0x7738, 0x3f, 0x5}, 0x2, 0x6e6bb5, 0x0, 0x1, 0x3, 0x1}, {{@in=@local, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x4, 0x3, 0x0, 0x7, 0x542f, 0x35f}}, 0xe8) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:04 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x20000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:04 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x600000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:04 executing program 5 (fault-call:7 fault-nth:0): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:04 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x60}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:04 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x90}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3097.005391][ T8371] FAULT_INJECTION: forcing a failure. [ 3097.005391][ T8371] name failslab, interval 1, probability 0, space 0, times 0 [ 3097.018026][ T8371] CPU: 1 PID: 8371 Comm: syz-executor.5 Not tainted 5.14.0-rc7-syzkaller #0 [ 3097.026697][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3097.036781][ T8371] Call Trace: [ 3097.040050][ T8371] dump_stack_lvl+0xb7/0x103 [ 3097.044642][ T8371] dump_stack+0x11/0x1a [ 3097.048825][ T8371] should_fail+0x23c/0x250 [ 3097.053249][ T8371] ? prepare_creds+0x2a/0x430 [ 3097.057916][ T8371] __should_failslab+0x81/0x90 [ 3097.062713][ T8371] should_failslab+0x5/0x20 [ 3097.067231][ T8371] kmem_cache_alloc+0x46/0x2e0 [ 3097.072035][ T8371] ? key_put+0x78/0xa0 [ 3097.076101][ T8371] prepare_creds+0x2a/0x430 [ 3097.080621][ T8371] join_session_keyring+0x15/0x290 [ 3097.085735][ T8371] lookup_user_key+0x373/0xd40 [ 3097.090502][ T8371] ? search_process_keyrings_rcu+0x190/0x190 [ 3097.096473][ T8371] keyctl_keyring_move+0x95/0x100 [ 3097.101541][ T8371] __se_sys_keyctl+0x223/0x9a0 [ 3097.106369][ T8371] ? vfs_write+0x50c/0x770 [ 3097.110769][ T8371] ? __fget_light+0x21b/0x260 [ 3097.115426][ T8371] ? __cond_resched+0x11/0x40 [ 3097.120081][ T8371] ? fput+0x2d/0x130 [ 3097.123957][ T8371] ? ksys_write+0x157/0x180 [ 3097.128526][ T8371] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3097.134596][ T8371] __x64_sys_keyctl+0x63/0x70 [ 3097.139259][ T8371] do_syscall_64+0x3d/0x90 [ 3097.143672][ T8371] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3097.149562][ T8371] RIP: 0033:0x4665f9 [ 3097.153434][ T8371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3097.173085][ T8371] RSP: 002b:00007f4c33290188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 3097.181475][ T8371] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3097.189423][ T8371] RDX: fffffffffffffffc RSI: 0000000017901c93 RDI: 000000000000001e [ 3097.197374][ T8371] RBP: 00007f4c332901d0 R08: 0000000000000000 R09: 0000000000000000 00:04:04 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x20010000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:04 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x800000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3097.205324][ T8371] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000001 [ 3097.213279][ T8371] R13: 00007ffff478860f R14: 00007f4c33290300 R15: 0000000000022000 00:04:04 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xac}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:04 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x120}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:04 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x20edb000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:04 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xd2}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:04 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x80ffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:04 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x20ffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:04 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x204}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:05 executing program 5 (fault-call:7 fault-nth:1): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:05 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x40000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:05 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x204}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:05 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xc0ffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:05 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x35c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3097.616515][ T8413] FAULT_INJECTION: forcing a failure. [ 3097.616515][ T8413] name failslab, interval 1, probability 0, space 0, times 0 [ 3097.629322][ T8413] CPU: 0 PID: 8413 Comm: syz-executor.5 Not tainted 5.14.0-rc7-syzkaller #0 [ 3097.637988][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3097.648104][ T8413] Call Trace: [ 3097.651375][ T8413] dump_stack_lvl+0xb7/0x103 [ 3097.655966][ T8413] dump_stack+0x11/0x1a [ 3097.660142][ T8413] should_fail+0x23c/0x250 [ 3097.664563][ T8413] ? kzalloc+0x1d/0x30 [ 3097.668625][ T8413] __should_failslab+0x81/0x90 [ 3097.673386][ T8413] should_failslab+0x5/0x20 [ 3097.677885][ T8413] __kmalloc+0x66/0x340 [ 3097.682044][ T8413] ? should_fail+0xd6/0x250 [ 3097.686548][ T8413] kzalloc+0x1d/0x30 [ 3097.690437][ T8413] security_prepare_creds+0x44/0x1a0 [ 3097.695722][ T8413] prepare_creds+0x309/0x430 [ 3097.700307][ T8413] join_session_keyring+0x15/0x290 [ 3097.705421][ T8413] lookup_user_key+0x373/0xd40 [ 3097.710235][ T8413] ? search_process_keyrings_rcu+0x190/0x190 [ 3097.716237][ T8413] keyctl_keyring_move+0x95/0x100 [ 3097.721260][ T8413] __se_sys_keyctl+0x223/0x9a0 [ 3097.726028][ T8413] ? vfs_write+0x50c/0x770 [ 3097.730442][ T8413] ? __fget_light+0x21b/0x260 [ 3097.735108][ T8413] ? __cond_resched+0x11/0x40 [ 3097.739870][ T8413] ? fput+0x2d/0x130 [ 3097.743848][ T8413] ? ksys_write+0x157/0x180 [ 3097.748438][ T8413] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3097.754503][ T8413] __x64_sys_keyctl+0x63/0x70 [ 3097.759291][ T8413] do_syscall_64+0x3d/0x90 [ 3097.763707][ T8413] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3097.769718][ T8413] RIP: 0033:0x4665f9 [ 3097.773603][ T8413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3097.793204][ T8413] RSP: 002b:00007f4c33290188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 3097.801705][ T8413] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 00:04:05 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x402}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3097.809702][ T8413] RDX: fffffffffffffffc RSI: 0000000017c4f866 RDI: 000000000000001e [ 3097.817847][ T8413] RBP: 00007f4c332901d0 R08: 0000000000000000 R09: 0000000000000000 [ 3097.825889][ T8413] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000001 [ 3097.833854][ T8413] R13: 00007ffff478860f R14: 00007f4c33290300 R15: 0000000000022000 00:04:05 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xe08520}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:05 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x35e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:05 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x406}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:05 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x42000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:05 executing program 5 (fault-call:7 fault-nth:2): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:05 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x600}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3098.060291][ T8449] FAULT_INJECTION: forcing a failure. [ 3098.060291][ T8449] name failslab, interval 1, probability 0, space 0, times 0 [ 3098.073416][ T8449] CPU: 0 PID: 8449 Comm: syz-executor.5 Not tainted 5.14.0-rc7-syzkaller #0 [ 3098.082100][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3098.092140][ T8449] Call Trace: [ 3098.095494][ T8449] dump_stack_lvl+0xb7/0x103 [ 3098.100086][ T8449] dump_stack+0x11/0x1a [ 3098.104305][ T8449] should_fail+0x23c/0x250 [ 3098.108747][ T8449] ? key_alloc+0x2aa/0xbe0 [ 3098.113156][ T8449] __should_failslab+0x81/0x90 [ 3098.117907][ T8449] should_failslab+0x5/0x20 [ 3098.122399][ T8449] kmem_cache_alloc+0x46/0x2e0 [ 3098.127250][ T8449] key_alloc+0x2aa/0xbe0 [ 3098.131491][ T8449] keyring_alloc+0x40/0xa0 [ 3098.135897][ T8449] join_session_keyring+0xe1/0x290 [ 3098.141026][ T8449] lookup_user_key+0x373/0xd40 [ 3098.145783][ T8449] ? search_process_keyrings_rcu+0x190/0x190 [ 3098.151836][ T8449] keyctl_keyring_move+0x95/0x100 [ 3098.156856][ T8449] __se_sys_keyctl+0x223/0x9a0 [ 3098.161619][ T8449] ? vfs_write+0x50c/0x770 [ 3098.166038][ T8449] ? __fget_light+0x21b/0x260 [ 3098.170703][ T8449] ? __cond_resched+0x11/0x40 [ 3098.175453][ T8449] ? fput+0x2d/0x130 [ 3098.179399][ T8449] ? ksys_write+0x157/0x180 [ 3098.183915][ T8449] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3098.190022][ T8449] __x64_sys_keyctl+0x63/0x70 [ 3098.194727][ T8449] do_syscall_64+0x3d/0x90 [ 3098.199172][ T8449] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3098.205069][ T8449] RIP: 0033:0x4665f9 00:04:05 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x1000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:05 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x3ac}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3098.209002][ T8449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3098.228689][ T8449] RSP: 002b:00007f4c33290188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 3098.237170][ T8449] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3098.245132][ T8449] RDX: fffffffffffffffc RSI: 00000000110761ab RDI: 000000000000001e [ 3098.253138][ T8449] RBP: 00007f4c332901d0 R08: 0000000000000000 R09: 0000000000000000 00:04:05 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x66000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3098.261094][ T8449] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000001 [ 3098.269074][ T8449] R13: 00007ffff478860f R14: 00007f4c33290300 R15: 0000000000022000 00:04:05 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x402}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:05 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x70000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:05 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x604}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:05 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x9e000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:05 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x2000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:05 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x406}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:05 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xdd000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:05 executing program 5 (fault-call:7 fault-nth:3): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:05 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x700}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3098.610531][ T8496] FAULT_INJECTION: forcing a failure. [ 3098.610531][ T8496] name failslab, interval 1, probability 0, space 0, times 0 [ 3098.623242][ T8496] CPU: 1 PID: 8496 Comm: syz-executor.5 Not tainted 5.14.0-rc7-syzkaller #0 [ 3098.632166][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3098.642202][ T8496] Call Trace: [ 3098.645468][ T8496] dump_stack_lvl+0xb7/0x103 [ 3098.650148][ T8496] dump_stack+0x11/0x1a [ 3098.654296][ T8496] should_fail+0x23c/0x250 [ 3098.658708][ T8496] ? key_alloc+0x2e2/0xbe0 [ 3098.663119][ T8496] __should_failslab+0x81/0x90 [ 3098.667885][ T8496] should_failslab+0x5/0x20 [ 3098.672810][ T8496] __kmalloc_track_caller+0x64/0x340 [ 3098.678255][ T8496] kmemdup+0x21/0x50 [ 3098.682140][ T8496] key_alloc+0x2e2/0xbe0 [ 3098.686380][ T8496] keyring_alloc+0x40/0xa0 [ 3098.690796][ T8496] join_session_keyring+0xe1/0x290 [ 3098.695914][ T8496] lookup_user_key+0x373/0xd40 [ 3098.700679][ T8496] ? search_process_keyrings_rcu+0x190/0x190 [ 3098.706660][ T8496] keyctl_keyring_move+0x95/0x100 [ 3098.711683][ T8496] __se_sys_keyctl+0x223/0x9a0 [ 3098.716451][ T8496] ? vfs_write+0x50c/0x770 [ 3098.720990][ T8496] ? __fget_light+0x21b/0x260 [ 3098.725656][ T8496] ? __cond_resched+0x11/0x40 [ 3098.730396][ T8496] ? fput+0x2d/0x130 [ 3098.734287][ T8496] ? ksys_write+0x157/0x180 [ 3098.738857][ T8496] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3098.745095][ T8496] __x64_sys_keyctl+0x63/0x70 [ 3098.749778][ T8496] do_syscall_64+0x3d/0x90 [ 3098.754255][ T8496] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:04:06 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xde000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:06 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x604}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:06 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x2040000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3098.760192][ T8496] RIP: 0033:0x4665f9 [ 3098.764089][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3098.783691][ T8496] RSP: 002b:00007f4c33290188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 3098.792102][ T8496] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3098.800071][ T8496] RDX: fffffffffffffffc RSI: 00000000210d8c29 RDI: 000000000000001e 00:04:06 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x2000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3098.808032][ T8496] RBP: 00007f4c332901d0 R08: 0000000000000000 R09: 0000000000000000 [ 3098.815992][ T8496] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000001 [ 3098.823955][ T8496] R13: 00007ffff478860f R14: 00007f4c33290300 R15: 0000000000022000 00:04:06 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x4000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:06 executing program 5 (fault-call:7 fault-nth:4): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:06 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x4000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:06 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xfeffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:06 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3099.032059][ T8528] FAULT_INJECTION: forcing a failure. [ 3099.032059][ T8528] name failslab, interval 1, probability 0, space 0, times 0 [ 3099.044725][ T8528] CPU: 1 PID: 8528 Comm: syz-executor.5 Not tainted 5.14.0-rc7-syzkaller #0 [ 3099.053489][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3099.063554][ T8528] Call Trace: [ 3099.066823][ T8528] dump_stack_lvl+0xb7/0x103 [ 3099.071408][ T8528] dump_stack+0x11/0x1a [ 3099.075551][ T8528] should_fail+0x23c/0x250 [ 3099.079967][ T8528] __should_failslab+0x81/0x90 [ 3099.084725][ T8528] ? selinux_key_alloc+0x35/0xd0 [ 3099.089739][ T8528] should_failslab+0x5/0x20 [ 3099.094233][ T8528] kmem_cache_alloc_trace+0x49/0x310 [ 3099.099509][ T8528] selinux_key_alloc+0x35/0xd0 [ 3099.104266][ T8528] security_key_alloc+0x45/0x90 [ 3099.109105][ T8528] key_alloc+0x694/0xbe0 [ 3099.113330][ T8528] keyring_alloc+0x40/0xa0 [ 3099.117728][ T8528] join_session_keyring+0xe1/0x290 [ 3099.122858][ T8528] lookup_user_key+0x373/0xd40 [ 3099.127608][ T8528] ? search_process_keyrings_rcu+0x190/0x190 [ 3099.133657][ T8528] keyctl_keyring_move+0x95/0x100 [ 3099.138752][ T8528] __se_sys_keyctl+0x223/0x9a0 [ 3099.143535][ T8528] ? vfs_write+0x50c/0x770 [ 3099.147932][ T8528] ? __fget_light+0x21b/0x260 [ 3099.152589][ T8528] ? __cond_resched+0x11/0x40 [ 3099.157253][ T8528] ? fput+0x2d/0x130 [ 3099.161636][ T8528] ? ksys_write+0x157/0x180 [ 3099.166131][ T8528] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3099.172179][ T8528] __x64_sys_keyctl+0x63/0x70 [ 3099.176848][ T8528] do_syscall_64+0x3d/0x90 [ 3099.181246][ T8528] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3099.187188][ T8528] RIP: 0033:0x4665f9 [ 3099.191155][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3099.210743][ T8528] RSP: 002b:00007f4c33290188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 3099.219134][ T8528] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 00:04:06 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x6040000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:06 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xffff8000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3099.227083][ T8528] RDX: fffffffffffffffc RSI: 00000000332e296d RDI: 000000000000001e [ 3099.235034][ T8528] RBP: 00007f4c332901d0 R08: 0000000000000000 R09: 0000000000000000 [ 3099.242984][ T8528] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000001 [ 3099.250933][ T8528] R13: 00007ffff478860f R14: 00007f4c33290300 R15: 0000000000022000 00:04:06 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x4200}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:06 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xa00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:06 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xffffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:06 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x7000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:06 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x5400}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:06 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x2000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:06 executing program 5 (fault-call:7 fault-nth:5): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:06 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x6000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:06 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0xfffffffe}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:06 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x8000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:06 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x2001}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3099.651719][ T8586] FAULT_INJECTION: forcing a failure. [ 3099.651719][ T8586] name failslab, interval 1, probability 0, space 0, times 0 [ 3099.664376][ T8586] CPU: 0 PID: 8586 Comm: syz-executor.5 Not tainted 5.14.0-rc7-syzkaller #0 [ 3099.673090][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3099.683138][ T8586] Call Trace: [ 3099.686409][ T8586] dump_stack_lvl+0xb7/0x103 [ 3099.691081][ T8586] dump_stack+0x11/0x1a [ 3099.695230][ T8586] should_fail+0x23c/0x250 [ 3099.699769][ T8586] __should_failslab+0x81/0x90 [ 3099.704528][ T8586] ? assoc_array_delete+0x52/0xbe0 [ 3099.709733][ T8586] should_failslab+0x5/0x20 [ 3099.714371][ T8586] kmem_cache_alloc_trace+0x49/0x310 [ 3099.719706][ T8586] ? avc_has_perm+0xc8/0x150 [ 3099.724287][ T8586] assoc_array_delete+0x52/0xbe0 [ 3099.729310][ T8586] ? __down_write_common+0x42/0x810 [ 3099.734495][ T8586] ? selinux_key_permission+0xf2/0x120 [ 3099.739955][ T8586] ? security_key_permission+0x7e/0x90 [ 3099.746368][ T8586] ? key_task_permission+0x248/0x270 00:04:07 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x10000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:07 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x1e261000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:07 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x2a1e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3099.751696][ T8586] key_move+0x121/0x5b0 [ 3099.755853][ T8586] ? search_process_keyrings_rcu+0x190/0x190 [ 3099.762251][ T8586] keyctl_keyring_move+0xd2/0x100 [ 3099.767465][ T8586] __se_sys_keyctl+0x223/0x9a0 [ 3099.772261][ T8586] ? vfs_write+0x50c/0x770 [ 3099.776692][ T8586] ? finish_task_switch+0xce/0x290 [ 3099.781830][ T8586] ? __fget_light+0x21b/0x260 [ 3099.786512][ T8586] ? __cond_resched+0x11/0x40 [ 3099.791183][ T8586] ? fput+0x2d/0x130 [ 3099.795124][ T8586] ? ksys_write+0x157/0x180 00:04:07 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x60ff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3099.799656][ T8586] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3099.805753][ T8586] __x64_sys_keyctl+0x63/0x70 [ 3099.810509][ T8586] do_syscall_64+0x3d/0x90 [ 3099.814922][ T8586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3099.820835][ T8586] RIP: 0033:0x4665f9 [ 3099.824716][ T8586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3099.844381][ T8586] RSP: 002b:00007f4c33290188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 00:04:07 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3099.852781][ T8586] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3099.860760][ T8586] RDX: fffffffffffffffc RSI: 0000000032006f6a RDI: 000000000000001e [ 3099.868726][ T8586] RBP: 00007f4c332901d0 R08: 0000000000000000 R09: 0000000000000000 [ 3099.876719][ T8586] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000001 [ 3099.884684][ T8586] R13: 00007ffff478860f R14: 00007f4c33290300 R15: 0000000000022000 00:04:07 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x4000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:07 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x20000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:07 executing program 5 (fault-call:7 fault-nth:6): syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:07 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x7f00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:07 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:07 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x20001000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:07 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x4200}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3100.130604][ T8626] FAULT_INJECTION: forcing a failure. [ 3100.130604][ T8626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3100.143714][ T8626] CPU: 0 PID: 8626 Comm: syz-executor.5 Not tainted 5.14.0-rc7-syzkaller #0 [ 3100.152392][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3100.162435][ T8626] Call Trace: [ 3100.165710][ T8626] dump_stack_lvl+0xb7/0x103 [ 3100.170302][ T8626] dump_stack+0x11/0x1a [ 3100.174455][ T8626] should_fail+0x23c/0x250 [ 3100.178934][ T8626] should_fail_usercopy+0x16/0x20 [ 3100.183957][ T8626] _copy_to_user+0x1c/0x90 [ 3100.188375][ T8626] simple_read_from_buffer+0xab/0x120 [ 3100.193743][ T8626] proc_fail_nth_read+0xf6/0x140 [ 3100.198685][ T8626] ? rw_verify_area+0x136/0x250 [ 3100.203538][ T8626] ? proc_fault_inject_write+0x200/0x200 [ 3100.209201][ T8626] vfs_read+0x154/0x5d0 [ 3100.213362][ T8626] ? __fget_light+0x21b/0x260 [ 3100.218028][ T8626] ? __cond_resched+0x11/0x40 [ 3100.222694][ T8626] ksys_read+0xce/0x180 [ 3100.226842][ T8626] __x64_sys_read+0x3e/0x50 [ 3100.231438][ T8626] do_syscall_64+0x3d/0x90 [ 3100.235875][ T8626] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3100.241769][ T8626] RIP: 0033:0x41937c [ 3100.245664][ T8626] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3100.265274][ T8626] RSP: 002b:00007f4c33290170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3100.273682][ T8626] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 3100.281649][ T8626] RDX: 000000000000000f RSI: 00007f4c332901e0 RDI: 0000000000000004 [ 3100.289616][ T8626] RBP: 00007f4c332901d0 R08: 0000000000000000 R09: 0000000000000000 [ 3100.297584][ T8626] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000001 [ 3100.305546][ T8626] R13: 00007ffff478860f R14: 00007f4c33290300 R15: 0000000000022000 00:04:07 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x20030000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:07 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:07 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x5c03}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:07 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:07 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x9700}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:07 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x2, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:07 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x5d00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:07 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x3, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:07 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xac00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:08 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x2085e000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:08 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x5e03}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x4, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:08 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x22010000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:08 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xd200}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:08 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x6000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x5, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:08 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x26010000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:08 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x40000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:08 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x8620}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x6, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:08 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x40000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:08 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x80000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:08 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x9000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x42000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:08 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x7, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:08 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x101200}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:08 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x60}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xac03}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x8, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:08 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xb2000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:08 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x104000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:08 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x66}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xdc020000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:08 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x40000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:08 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x9, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:08 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x121000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:09 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x70}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xfeffffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:09 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0xa, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:09 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x80000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x200000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:09 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x9e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xffff8000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:09 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0xb, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:09 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x174201}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0xc, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:09 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x400000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:09 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xdd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xffffc000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:09 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x400000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0xd, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:09 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xde}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x401000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:09 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0xfffffffe}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:09 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0xe, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:09 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x600000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x4af000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:09 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0xf, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:09 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:09 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x120}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x800000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x4fc000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:09 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x204}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:09 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x10, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:09 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:10 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x80ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x540000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:10 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x11, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:10 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x402}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x600000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:10 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x4}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:10 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x800000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:10 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xc0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x12, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:10 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x406}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x7}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:10 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x80ffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:10 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xc0ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x13, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:10 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x604}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x8}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:10 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x90ed20}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:10 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x14, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:10 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xd0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:10 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x970000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:10 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x15, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:10 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x1000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x2000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x42}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:10 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xb0841d}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:10 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x18, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:10 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x2001}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x1421700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:10 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x60}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:10 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xc04a01}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:11 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x19, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:11 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x4000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xb2}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:11 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x2000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xc04f00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:11 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x4200}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1a, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:11 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x122}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:11 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x6000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x2040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xc0ffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:11 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1b, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:11 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x6600}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x126}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:11 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1c, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:11 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x4000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xf04a00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:11 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x7000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x204}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:11 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1d, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:11 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x1000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:11 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x2dc}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:11 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x9e00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x6040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x14ac000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:11 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x320}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:11 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xdd00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x2) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:11 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x7000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x2000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:11 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xde00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:11 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x402}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:11 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x2040000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:11 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x3) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:12 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x40000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x406}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:12 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x4000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:12 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x8000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x80000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:12 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x604}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:12 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x6000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:12 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x174201}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:12 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xa000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x700}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:12 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x6040000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:12 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x200000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x2000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:12 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x6) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:12 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x10000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x7000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:12 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x400000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x7) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:12 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x2003}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:12 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x8000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:12 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x1e2a0000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:12 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x600000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x2201}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:12 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:12 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x70a21d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x20000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:12 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xa) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:12 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x2601}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:12 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x10000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:13 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x20010000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x800000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xb) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:13 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x4000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:13 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x1d84b000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:13 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x20860000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x80ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x4200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:13 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x20000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:13 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xc) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:13 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xb0ed20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x6000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:13 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x20ffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:13 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xc0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x20ed9000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:13 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xb200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:13 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x20ffd000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xc0ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x40000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:13 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xe) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:13 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xdc02}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:13 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x10) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:13 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x40000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x40000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:13 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x42000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:13 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x42000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x7f000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:13 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x80000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:13 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x1421700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:13 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x11) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:13 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xac000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:13 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x2000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x100020}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:14 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x2040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x5c030000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x12) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:14 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xd2000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:14 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x4000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x48) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:14 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x101200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:14 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xfeffffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:14 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x5d000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x6040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:14 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x10261e}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:14 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xff600000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:14 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x7000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x5e030000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x68) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:14 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x121000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:14 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xffff8000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:14 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x8000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x6c) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:14 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x200000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:14 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x90000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xffffc000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:14 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x10000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x74) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:14 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x400000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:14 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xac030000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x1da27000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:14 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xfffffffe}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:14 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x7a) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:15 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x600000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:15 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xfeffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x300) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:15 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x20000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0xffffffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:15 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x20010000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xffff8000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x500) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:15 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:15 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x800000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:15 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x600) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:15 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:15 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x20edb000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xffffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x80ffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:15 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x700) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:15 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x20ffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xc0ffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:15 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:15 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0xfffffffe}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x900) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:15 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x40000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:15 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xe08520}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:15 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xa00) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:15 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x42000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:15 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x1000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:15 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x66000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:15 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xb00) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:16 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:16 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x2000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:16 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:16 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x70000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xc00) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:16 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x42}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:16 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x2040000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:16 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x9e000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd00) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:16 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x4000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:16 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xdd000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xe00) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:16 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x60}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:16 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x6040000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:16 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xde000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1100) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:16 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xfeffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x7000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:16 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xac}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:16 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xa}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1200) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:16 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xffff8000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x8000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:16 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xd2}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:16 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x10000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:16 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:16 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4800) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:16 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xffffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0xfffffffe}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x204}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:17 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x1e261000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:17 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c00) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:17 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x402}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:17 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x20000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:17 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x5d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x6800) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:17 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x406}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:17 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x20001000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:17 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x600}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:17 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x60}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x6c00) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:17 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x20030000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:17 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x90}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x604}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:17 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x7400) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:17 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x2085e000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:17 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x120}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x7a00) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:17 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:17 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x22010000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:17 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfeffff) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:17 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:17 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:17 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x204}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x26010000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:18 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:18 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:18 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x60}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x35c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x40000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:18 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x2000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:18 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4200}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:18 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x66}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x3000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:18 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x42000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:18 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5400}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:18 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x70}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x35e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xb2000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:18 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:18 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x9e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x3ac}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:18 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xdc020000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:18 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:18 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x60ff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:18 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xfeffffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:18 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x6000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:18 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x402}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xde}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xffff8000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:18 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7f00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:18 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x406}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:18 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x7000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:18 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x120}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xffffc000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:19 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x9700}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:19 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x604}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:19 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x204}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0xfffffffe}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:19 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xac00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:19 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:19 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:19 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x402}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xd200}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:19 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xa000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:19 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xa00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:19 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x406}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xb000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:19 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:19 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x40000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:19 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x2000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x604}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xc000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:19 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:19 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:19 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x2001}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:19 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:19 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x101200}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:19 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x10}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:19 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x2a1e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x21, 0x3, 0x80000000) recvfrom$inet6(r1, &(0x7f0000000040)=""/34, 0x22, 0x100, &(0x7f0000000080)={0xa, 0x4e23, 0x101, @empty, 0x4}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000200)=[{}, {}], 0x2, 0x7f, &(0x7f0000000240)={[0xffff]}, 0x8) r3 = socket$inet6(0xa, 0x80000, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0x0, &(0x7f0000000780)) getsockopt$inet6_tcp_int(r2, 0x6, 0x1f, 0x0, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x19, 0x0, &(0x7f0000000780)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067380)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000067580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000067780)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000068780)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "8c03448afeb8f8"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000069780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000069980)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {0x0, r10}], 0xcd, "2ab6ae49575e41"}) getsockopt$inet6_tcp_int(r5, 0x6, 0x19, 0x0, &(0x7f0000000780)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x2010, 0xffffffffffffffff, 0x10000000) 00:04:20 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x104000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:20 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xe000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:20 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x4000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:20 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x121000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:20 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2001}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:20 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x42}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:20 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x4200}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:20 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x10000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:20 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x200000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:20 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:20 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x60}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:20 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x11000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:20 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x5c03}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:20 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x40, 0x10, 0xbe000000, 0x9, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x59}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5ec03f4729d4ff90}, 0x8040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r3 = fork() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0xc885) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:20 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4200}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:20 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x401000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:20 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x12000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:20 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xb2}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:20 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x5d00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:20 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4af000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000080)) 00:04:20 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:20 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x48000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:20 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x122}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:20 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:20 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6600}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:20 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x5e03}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0x4) eventfd2(0xd0, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000240)={@private2, r2}, 0x14) 00:04:20 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4fc000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:20 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x126}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:20 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x68000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:20 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x6000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x6c000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:21 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x204}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={0x0}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "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"}) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:21 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x9e00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x540000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:21 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x8620}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x74000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:21 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdd00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2dc}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:21 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x3ff, 0x4e21, 0xffe1, 0x2, 0x20, 0xb0, 0x4, r1, 0xffffffffffffffff}, {0x7, 0x80000000, 0xc5d2, 0x3ff, 0x100, 0x0, 0xe6e, 0x7}, {0xf8, 0x10001, 0x8, 0x8f0f}, 0x3ac8, 0x6e6bbb, 0x0, 0x1, 0x3, 0x1}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x0, 0x3, 0x2, 0x20, 0x0, 0x4, 0x7}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:21 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x600000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:21 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x9000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x4, 0x800, 0xde70) getsockopt$inet6_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:04:21 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x320}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:21 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x7a000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:21 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xde00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x800000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000780)) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000080)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000000c0)=@routing={0x8, 0xa, 0x1, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x1c}, @local, @mcast1]}, 0x58) r2 = semget(0x0, 0x3, 0x39d610e4da40fe3c) semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000140)=""/123) 00:04:21 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xac03}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x402}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:21 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfeffffff) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:21 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x40000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) getpgrp(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="00df70d344891367a9ceabdb020f7c94489ce018827e8457c1b8b833dfbff48a79a2a4889daa8eb826fcd56126b65faa8bc9eb43a7691e4c15315b42e331d94a0097741a2b739e6aee9995a7da5ed0125a4186bbd9419d594d659d23d2c8d832f87764d51fb900000000005c4c09101b2868a21409bf7c2bee512f1a75cc5e78bec5772589caff76f776e71e56ff38930fd20efdb0c4717b96368352194d9caa689055e8f1f73b2cd61bb6e06d05d76ac3df1c9e8fd4a5eefbe5fc012eb210a40dbbbe41a9c00bace64acc3e6c714b497a79cf85e79b68dd3c2682852ce8e5e6d61ce39261e337fb50814bde31683b91b05a4ab81b06e8e16f", @ANYRES32=0x0, @ANYBLOB="000800800000000700000020443200500066000007049078ac1414bbac1e0001441c5503ac14143c0000ed57e0000002fffffffbe00000010000000901071f38ac14140dffffffffac1414bb000000007f000001ac1414bb64010102"]}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r1}, 0x14) 00:04:21 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x80ffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:21 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x406}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:21 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffe00) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:21 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x40000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000080)) 00:04:21 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffe) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000780)) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 00:04:21 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x604}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:21 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x90ed20}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:21 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x80000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:21 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfeffff00000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:22 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x174201}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x970000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:22 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x700}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:22 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x174201}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x100000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:22 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xb0841d}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:22 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x200000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:22 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x400000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xc04a01}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:22 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x200000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:22 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000007c0)={0x0, 0x0, "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", "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"}) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000780)) r3 = socket$inet6(0xa, 0x6, 0x80000001) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x18}, 0x5, 0x100, 0x3, 0x400, 0xd6, 0x4000110}) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:22 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2003}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:22 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x300000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:22 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x600000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000000)) 00:04:22 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xc04f00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:22 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x600000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2201}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:22 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x400000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000780)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xff, @mcast2, 0x80000001}, 0x1c) 00:04:22 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x800000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2601}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:22 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4) 00:04:22 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x70a21d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x500000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:22 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x80ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf04a00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:22 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:22 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000080)) 00:04:22 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x600000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:23 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:23 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:23 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xc0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x80ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc}]}, 0x48}}, 0x20000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1f, 0x0, &(0x7f0000000080)) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000001580)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)={0x14}) 00:04:23 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:23 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x14ac000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:23 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x700000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:23 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xb0ed20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xc0ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x800000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:23 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xb200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x180}, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:23 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xc0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:23 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x900000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:23 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xd0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xdc02}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:23 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={0x0}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "5896c8eac47f4bb620836ebef77641cf92999174346dc2d26bccbbe8368120cf82e5d23090258136be98c460a1558a59f17e6db8d8e4ea4b3c46aae0fd6a218fae57e3ecd72163e5fe469fbb8a027727de8f75f21ffebefe8918b5d0abaff2b1112fb5f8467e7174e291f56280cc6797feb09d1641c58983537a0eafaba8ae231ef78094651aa404253a5b5d3747d5705223ac010303e02c2e6919c28416004a34e742f5ab2272e4f2b65dad33dc5dc6302031d5c48bb45e8e93b5c07e33499c5118d0b84cc58feaef242cb3f90d985886dd03fd905262f673f436a4b1411ef9b6f751705391ba464bd97f568fc2f7273281c0c67ea27255e14ab40d95c61ec7", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000010c0)={{r1, 0x4, 0x0, 0x5, 0x0, 0x4, 0x2, 0xfff, 0x80000001, 0x8, 0x0, 0x1, 0x0, 0x8, 0x1000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:23 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2040000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:23 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xa00000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:23 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:23 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:23 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x80000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:23 executing program 1: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={0x0}}, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="080079f7040833f954a42d9f01007063690011000200303030303a307760c49d", @ANYRES32, @ANYBLOB="08000100706369001fe32cf911000200303030303a30303a31302e300000004e961c3a0065259f3e66575671e42003", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB="ea1d9d687e073a3470a8c6061720287137c9f9cd283c5f13c5a7b394ff7298c4d4085e920bb07ae4a890"], 0xf8}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001, 0xef, 0x4, 0x800, 0x100000000, 0x2000002}) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, r1, 0xf233}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0xff, &(0x7f0000000380)={[0x2800]}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1f, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x544d, &(0x7f00000001c0)={0x0, 0x7612, 0x1, 0x0, 0x24b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000480)) syz_io_uring_submit(r4, 0x0, &(0x7f00000004c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x17dc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000a}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="ff00fe3f09e46f7a59feffffffffffffe2b44dcde275ff0b00cb59cac51d867772f74e99547536d8fff208b9c20eeb2e266b458a3b45687ce1bdd43b7f629c0860c1206b14291171f11cdb930fabc80beabc16f3955da189cf445619eb1c145c8a802607ba0f88d1f9679d9392689bdf1724da08a8ee4cf4ad31e9469e342c9f0cceb401b3e905aa675feb1eb43c7867d3b08bc23edeb5fdd95c7653f6020d3368d1b3d16313d1453ee29e9c96fcb255b08586d09348a9971855fc93e45b2941e238300b074f8dfe6ddf97b72730c62087", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf25313a1d89d7fd71dc0800004008060200f80000000800020071f34f830533f425e5900a3d754f88260700000024000180060005004e210000060005004e20000008000700", @ANYRES32=r5, @ANYBLOB="05000200f900000008000300050000002c0001800800060005000000060005004e220000060001000200000008000300e00000010500020000000000080003000500000008000300040000000c0001800500020081000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 00:04:23 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xb00000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:23 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x1421700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:23 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100020}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:23 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1421700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:23 executing program 1: getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1f, 0x0, &(0x7f0000000080)) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='--0\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) 00:04:23 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xc00000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:24 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x2000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6040000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 00:04:24 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x101200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:24 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd00000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:24 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x2040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:24 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x10261e}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:24 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xe00000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:24 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x4000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:24 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1000000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:24 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x121000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:24 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x6040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:24 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1100000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:24 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x200000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:24 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x7000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1d84b000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:24 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1200000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:24 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x8000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4800000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:24 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x400000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:24 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xa000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:24 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:24 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c00000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:24 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x600000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:25 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x10000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x6800000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:25 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20ed9000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:25 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x800000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:25 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1da27000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x1e2a0000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x80ffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:25 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x6c00000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:25 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:25 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x20000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x7400000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:25 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:25 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x42000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:25 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20010000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x20010000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x7a00000000000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:25 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xe08520}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:25 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7f000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:25 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x20860000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20edb000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfeffffff00000000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:25 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:25 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xac000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:25 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20ffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x20ffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:25 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={@local, @mcast1, @local, 0x1, 0x8b, 0xe5d, 0x400, 0x7fee, 0x2000100}) r3 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:25 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xd2000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:25 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:26 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x20ffd000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 5: r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000015c0)) r3 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x6) 00:04:26 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2040000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:26 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:26 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x40000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x42000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x6, 0x3, &(0x7f0000000280)={{{@in6=@private1, @in6=@private2}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, 0xe8) r1 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000015c0)) r4 = socket$inet(0x2, 0x4, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r4, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:26 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:26 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xff600000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:26 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x42000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x66000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6040000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:26 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xffff8000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:26 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x5c030000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x70000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 5: syz_io_uring_setup(0x43e12, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:26 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:26 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x5d000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x9e000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xffffc000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:26 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:26 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x5e030000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:26 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdd000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:26 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x8000) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x41b, &(0x7f0000000200), &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x8000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r7, &(0x7f0000000280)={0x88000, 0x0, 0x11}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x9) 00:04:26 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x10000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:26 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x90000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:27 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xde000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = add_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="2fb8b9e3b715149c07e09b4487b7655041a3e9f3a24a97d987ff33feddb58b6a0101b61e8968bf17fd13f70838294694ddb88992d69721ad8f4d3f2958ea502bca3dc3d62952307a793e6b20ac1a9ec95760c057aae82bb7c1dae20a0c706f2307182eb909b5c3f2145b8730efa3cb347dc5564140ca31c06b570d00ceae9609282020b2fe16ffb6262fb858f751d83b978b34e8bad9d3429cf1c8804891e3edf96e54cf94e8dcabef4999d014749084973e0d", 0xb3, r0) request_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='\x81-\x00', r2) r3 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x4075e4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x333}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:27 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1e261000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:27 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xac030000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:27 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) ioprio_set$uid(0x0, 0xee01, 0x4000) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:27 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:27 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffff8000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xfeffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:27 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)={0x0}) socket$inet(0x2, 0x4, 0xfffffffe) r3 = io_uring_setup(0x1076, &(0x7f0000000280)={0x0, 0xaae8, 0x2, 0x2, 0x171}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x1, r3, 0x3, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) keyctl$setperm(0x5, 0x0, 0x4100000) 00:04:27 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x20001000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:27 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, 0x0, 0x0) keyctl$link(0x8, r0, r2) r3 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100)={0x0, 0x2}, &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r4 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001580)) io_uring_setup(0x4803, &(0x7f0000000280)={0x0, 0x5fd9, 0x0, 0x1, 0x1d1, 0x0, r4}) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:27 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:27 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xffff8000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x20030000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:27 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:27 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='-,.\x00', 0xfffffffffffffffa) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2000ceb, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x2}, &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:27 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2085e000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:27 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xffffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:27 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "c403c8168f188308c34cd9866b27c79562f9d7ae951485aafd47aac8ad2f1d966b42af19b440f56030d9aecadc658e5f3bbddb1723ab367994870cde73d03abe", 0x1a}, 0x48, r0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:27 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:27 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0xfffffffe}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:27 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x22010000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:28 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) keyctl$link(0x8, r0, r0) timerfd_create(0x3, 0x800) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:28 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:28 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x26010000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:28 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440), &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x42}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:28 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:28 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x42000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:28 executing program 5: syz_io_uring_setup(0x6699, &(0x7f0000000000)={0x0, 0xb016, 0x8, 0x0, 0x800000}, &(0x7f000085e000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000015c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000004c0)={r3, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x80000}, &(0x7f0000000000/0x7000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r4 = syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x23, 0xc3, 0x1f, 0x5}, {0x4, 0x56, 0x69, 0x1}, {0x7, 0x81, 0x80, 0x8}, {0x1800, 0x2, 0x5, 0xffffffff}, {0x8, 0x0, 0x8, 0x7fff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0}) r7 = io_uring_setup(0x35ca, &(0x7f00000003c0)={0x0, 0xe8b4, 0x20, 0x0, 0x28e, 0x0, r4}) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000380)={r6, 0x1, 0x5}) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:28 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x60}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:28 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xb2000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:28 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) request_key(&(0x7f0000000340)='syzkaller\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='syz', r0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) add_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)="0e144a9e8ca0091ce9d80d861e427708446b18bcc92df1a1d6515133c5aafb38320827cc2ab8", 0x26, r0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:28 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xac}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:28 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xdc020000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:28 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ad1093b00252e2301c9f7e6c0c034fc341de40a53f1eea2d9b33a84d86cf8906856b9a5567f81fda85f3722cadf93a8798bea951324c298eb9baa6578d026e2", 0x2a}, 0x48, 0xfffffffffffffffb) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$search(0xa, r0, &(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x2}, r4) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) keyctl$set_timeout(0xf, r0, 0x100000001) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:28 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xd2}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:28 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:28 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x60}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:28 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x204}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:28 executing program 5: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000015c0)) r2 = socket$inet(0x2, 0x4, 0xfffffffe) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "d2c9e0ec459535fd55098ce9cf6e1f58a38c45bd9f1626950ba24dab5a077576c3035f32968c797ce89d06110876b42eeacce83d73b54f013a3e756ed39822b2", 0x24}, 0x48, r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x0, 0x80000}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r3 = syz_io_uring_setup(0x4889, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r6 = io_uring_setup(0x3f, &(0x7f0000000400)={0x0, 0xc8af, 0x2, 0x2, 0x277, 0x0, r3}) syz_io_uring_setup(0x7286, &(0x7f0000000480)={0x0, 0xda63, 0x10, 0x0, 0x361, 0x0, r6}, &(0x7f000023c000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x1ff) 00:04:28 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff8000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:29 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x66}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:29 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xa}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffc000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:29 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x70}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x406}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:29 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:29 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x9e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x42}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x600}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:29 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xdd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200), &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:29 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x604}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:29 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:29 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xde}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x60}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x700}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:29 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x120}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:29 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x90}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:29 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:29 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x204}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:30 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:30 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x120}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:30 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:30 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x204}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4200}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:30 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x406}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x35c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x604}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5400}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:30 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x42}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:30 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x60}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:30 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:30 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x35e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xb2}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:30 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x60ff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:30 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2001}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3ac}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x122}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:30 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7f00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:30 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x402}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:30 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x126}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:30 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9700}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:30 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4200}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x204}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:31 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xac00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:31 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x406}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2dc}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:31 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x604}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xd200}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:31 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6600}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x320}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:31 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x40000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:31 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:31 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:31 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x9e00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xa00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x406}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:31 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x101200}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:31 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xdd00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x104000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:31 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x604}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:31 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xde00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:31 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2001}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x700}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:32 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x121000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:32 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2a1e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x40000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:32 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2003}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:32 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x174201}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:32 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2201}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:32 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2601}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:32 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4200}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:32 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:32 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5c03}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x401000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:32 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:32 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x600000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4af000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:32 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5d00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:32 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:32 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x70a21d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:33 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4fc000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:33 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5e03}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:33 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x800000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:33 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xb200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3125.729813][T12455] ================================================================== [ 3125.737919][T12455] BUG: KCSAN: data-race in compact_zone / compact_zone [ 3125.744770][T12455] [ 3125.747081][T12455] write to 0xffff88823fffad90 of 8 bytes by task 12447 on cpu 0: [ 3125.754874][T12455] compact_zone+0x1446/0x1ce0 [ 3125.759544][T12455] try_to_compact_pages+0x317/0x840 [ 3125.764735][T12455] __alloc_pages_direct_compact+0x61/0x330 [ 3125.770555][T12455] __alloc_pages_slowpath+0x29a/0xb90 [ 3125.775926][T12455] __alloc_pages+0x25b/0x320 [ 3125.780509][T12455] alloc_pages+0x2e8/0x340 [ 3125.784918][T12455] __get_free_pages+0x8/0x30 [ 3125.789498][T12455] io_uring_create+0x904/0x1940 [ 3125.794347][T12455] __x64_sys_io_uring_setup+0xe1/0x120 [ 3125.799791][T12455] do_syscall_64+0x3d/0x90 [ 3125.804197][T12455] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3125.810090][T12455] [ 3125.812402][T12455] read to 0xffff88823fffad90 of 8 bytes by task 12455 on cpu 1: [ 3125.820016][T12455] compact_zone+0x1422/0x1ce0 [ 3125.824692][T12455] try_to_compact_pages+0x317/0x840 [ 3125.829887][T12455] __alloc_pages_direct_compact+0x61/0x330 [ 3125.835691][T12455] __alloc_pages_slowpath+0x29a/0xb90 [ 3125.841055][T12455] __alloc_pages+0x25b/0x320 [ 3125.845634][T12455] alloc_pages+0x2e8/0x340 [ 3125.850040][T12455] __get_free_pages+0x8/0x30 [ 3125.854619][T12455] io_uring_create+0x904/0x1940 [ 3125.859465][T12455] __x64_sys_io_uring_setup+0xe1/0x120 [ 3125.864915][T12455] do_syscall_64+0x3d/0x90 [ 3125.869325][T12455] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3125.875215][T12455] [ 3125.877522][T12455] value changed: 0x000000000022ba00 -> 0x000000000023c800 [ 3125.884609][T12455] [ 3125.886920][T12455] Reported by Kernel Concurrency Sanitizer on: [ 3125.893059][T12455] CPU: 1 PID: 12455 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3125.901810][T12455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3125.911853][T12455] ================================================================== 00:04:33 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xdc02}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:33 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x540000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:33 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:33 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x80ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:33 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x40000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:33 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x600000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:33 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xb0ed20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:33 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x800000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:33 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8620}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:33 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x80000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:34 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xc0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:34 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x80ffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:34 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x9000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:34 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x100020}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:34 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3126.926954][T12561] ================================================================== [ 3126.935064][T12561] BUG: KCSAN: data-race in compact_zone / compact_zone [ 3126.941913][T12561] [ 3126.944226][T12561] write to 0xffff88823fffad90 of 8 bytes by task 12578 on cpu 1: [ 3126.951926][T12561] compact_zone+0x1446/0x1ce0 [ 3126.956601][T12561] try_to_compact_pages+0x317/0x840 [ 3126.961793][T12561] __alloc_pages_direct_compact+0x61/0x330 [ 3126.967686][T12561] __alloc_pages_slowpath+0x5d4/0xb90 00:04:34 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x101200}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3126.973055][T12561] __alloc_pages+0x25b/0x320 [ 3126.977641][T12561] alloc_pages+0x2e8/0x340 [ 3126.982050][T12561] __get_free_pages+0x8/0x30 [ 3126.986635][T12561] io_uring_create+0x904/0x1940 [ 3126.991488][T12561] __x64_sys_io_uring_setup+0xe1/0x120 [ 3126.996941][T12561] do_syscall_64+0x3d/0x90 [ 3127.001369][T12561] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3127.007261][T12561] [ 3127.009575][T12561] read to 0xffff88823fffad90 of 8 bytes by task 12561 on cpu 0: [ 3127.017193][T12561] compact_zone+0x512/0x1ce0 [ 3127.021794][T12561] try_to_compact_pages+0x317/0x840 [ 3127.026993][T12561] __alloc_pages_direct_compact+0x61/0x330 [ 3127.032800][T12561] __alloc_pages_slowpath+0x29a/0xb90 [ 3127.038166][T12561] __alloc_pages+0x25b/0x320 [ 3127.042748][T12561] alloc_pages+0x2e8/0x340 [ 3127.047161][T12561] __get_free_pages+0x8/0x30 [ 3127.051744][T12561] io_uring_create+0x9f7/0x1940 [ 3127.056593][T12561] __x64_sys_io_uring_setup+0xe1/0x120 [ 3127.062041][T12561] do_syscall_64+0x3d/0x90 [ 3127.066450][T12561] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3127.072343][T12561] 00:04:34 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x90ed20}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) [ 3127.074653][T12561] value changed: 0x000000000012f600 -> 0x0000000000133400 [ 3127.081745][T12561] [ 3127.084055][T12561] Reported by Kernel Concurrency Sanitizer on: [ 3127.090195][T12561] CPU: 0 PID: 12561 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3127.098947][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3127.109003][T12561] ================================================================== 00:04:34 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:34 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x10261e}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:34 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x970000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:34 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1421700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:34 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x121000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:35 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xb0841d}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:35 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:35 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xac03}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:35 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:35 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xc04a01}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:35 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:35 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:35 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xc04f00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:35 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:35 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x40000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:35 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x600000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:35 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:35 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:35 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x800000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:35 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:35 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:36 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xf04a00}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:36 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:36 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x80ffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:36 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x174201}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:36 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3129.329376][T12704] ================================================================== [ 3129.337479][T12704] BUG: KCSAN: data-race in compact_zone / compact_zone [ 3129.344342][T12704] [ 3129.346656][T12704] write to 0xffff88823fffad90 of 8 bytes by task 12707 on cpu 0: [ 3129.354354][T12704] compact_zone+0x1446/0x1ce0 [ 3129.359050][T12704] try_to_compact_pages+0x317/0x840 [ 3129.364241][T12704] __alloc_pages_direct_compact+0x61/0x330 [ 3129.370051][T12704] __alloc_pages_slowpath+0x5d4/0xb90 [ 3129.375414][T12704] __alloc_pages+0x25b/0x320 [ 3129.379995][T12704] alloc_pages+0x2e8/0x340 [ 3129.384407][T12704] __get_free_pages+0x8/0x30 [ 3129.388987][T12704] io_uring_create+0x904/0x1940 [ 3129.393834][T12704] __x64_sys_io_uring_setup+0xe1/0x120 [ 3129.399279][T12704] do_syscall_64+0x3d/0x90 [ 3129.403687][T12704] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3129.409576][T12704] [ 3129.411886][T12704] read to 0xffff88823fffad90 of 8 bytes by task 12704 on cpu 1: [ 3129.419497][T12704] compact_zone+0x1422/0x1ce0 [ 3129.424163][T12704] try_to_compact_pages+0x317/0x840 [ 3129.429351][T12704] __alloc_pages_direct_compact+0x61/0x330 [ 3129.435146][T12704] __alloc_pages_slowpath+0x5d4/0xb90 [ 3129.440505][T12704] __alloc_pages+0x25b/0x320 [ 3129.445078][T12704] alloc_pages+0x2e8/0x340 [ 3129.449477][T12704] __get_free_pages+0x8/0x30 [ 3129.454051][T12704] io_uring_create+0x904/0x1940 [ 3129.458890][T12704] __x64_sys_io_uring_setup+0xe1/0x120 [ 3129.464333][T12704] do_syscall_64+0x3d/0x90 [ 3129.468744][T12704] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3129.474621][T12704] [ 3129.476922][T12704] value changed: 0x00000000001fba00 -> 0x000000000020e200 [ 3129.484007][T12704] [ 3129.486305][T12704] Reported by Kernel Concurrency Sanitizer on: [ 3129.492428][T12704] CPU: 1 PID: 12704 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3129.501169][T12704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3129.511216][T12704] ================================================================== 00:04:36 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:37 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:37 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1da27000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:37 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:37 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x600000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:37 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x14ac000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:37 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:37 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xe08520}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:37 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x800000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:38 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x20010000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:38 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:38 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:38 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x80ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:38 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x20edb000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:38 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xc0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:38 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:38 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x20ffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:38 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2040000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:38 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:38 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:38 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2040000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:38 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xd0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:39 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:39 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:39 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x42000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:39 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6040000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:39 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1421700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:39 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:39 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x66000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:39 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 3132.424873][T12823] ================================================================== [ 3132.432989][T12823] BUG: KCSAN: data-race in compact_zone / compact_zone [ 3132.439830][T12823] [ 3132.442137][T12823] write to 0xffff88823fffad90 of 8 bytes by task 12827 on cpu 0: [ 3132.449827][T12823] compact_zone+0x1446/0x1ce0 [ 3132.454488][T12823] try_to_compact_pages+0x317/0x840 [ 3132.459667][T12823] __alloc_pages_direct_compact+0x61/0x330 [ 3132.465454][T12823] __alloc_pages_slowpath+0x29a/0xb90 [ 3132.470811][T12823] __alloc_pages+0x25b/0x320 [ 3132.475382][T12823] alloc_pages+0x2e8/0x340 [ 3132.479794][T12823] __get_free_pages+0x8/0x30 [ 3132.484365][T12823] io_uring_create+0x904/0x1940 [ 3132.489199][T12823] __x64_sys_io_uring_setup+0xe1/0x120 [ 3132.494640][T12823] do_syscall_64+0x3d/0x90 [ 3132.499051][T12823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3132.504928][T12823] [ 3132.507228][T12823] read to 0xffff88823fffad90 of 8 bytes by task 12823 on cpu 1: [ 3132.514833][T12823] compact_zone+0x1422/0x1ce0 [ 3132.519503][T12823] try_to_compact_pages+0x317/0x840 [ 3132.524686][T12823] __alloc_pages_direct_compact+0x61/0x330 [ 3132.530478][T12823] __alloc_pages_slowpath+0x5d4/0xb90 [ 3132.535831][T12823] __alloc_pages+0x25b/0x320 [ 3132.540400][T12823] alloc_pages+0x2e8/0x340 [ 3132.544796][T12823] __get_free_pages+0x8/0x30 [ 3132.549364][T12823] io_uring_create+0x904/0x1940 [ 3132.554207][T12823] __x64_sys_io_uring_setup+0xe1/0x120 [ 3132.559661][T12823] do_syscall_64+0x3d/0x90 [ 3132.564068][T12823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3132.570220][T12823] [ 3132.572538][T12823] value changed: 0x00000000001fc200 -> 0x0000000000201400 [ 3132.579618][T12823] [ 3132.581922][T12823] Reported by Kernel Concurrency Sanitizer on: [ 3132.588045][T12823] CPU: 1 PID: 12823 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3132.596784][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3132.606818][T12823] ================================================================== 00:04:40 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:40 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x70000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:40 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:40 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:40 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:40 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x9e000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:40 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6040000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:40 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:40 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:40 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xdd000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:40 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:40 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1e261000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:41 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:41 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xde000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:41 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:41 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:41 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:41 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20001000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:41 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:41 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:41 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffff8000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:41 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:42 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20030000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:42 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xa000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:42 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:42 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:42 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2085e000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:42 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1d84b000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:42 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x22010000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:42 executing program 3: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:42 executing program 4: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5669, &(0x7f00000005c0)={0x0, 0xdda2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c55, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000852000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x32d9, &(0x7f0000000180), &(0x7f000085e000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x4f9e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1e2a0000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000085f000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 3135.426409][T12954] ================================================================== [ 3135.434510][T12954] BUG: KCSAN: data-race in compact_zone / compact_zone [ 3135.441351][T12954] [ 3135.443662][T12954] write to 0xffff88823fffad90 of 8 bytes by task 12953 on cpu 0: [ 3135.451575][T12954] compact_zone+0x1446/0x1ce0 [ 3135.456238][T12954] try_to_compact_pages+0x317/0x840 [ 3135.461418][T12954] __alloc_pages_direct_compact+0x61/0x330 [ 3135.467209][T12954] __alloc_pages_slowpath+0x29a/0xb90 [ 3135.472562][T12954] __alloc_pages+0x25b/0x320 [ 3135.477131][T12954] alloc_pages+0x2e8/0x340 [ 3135.481534][T12954] __get_free_pages+0x8/0x30 [ 3135.486105][T12954] io_uring_create+0x904/0x1940 [ 3135.490949][T12954] __x64_sys_io_uring_setup+0xe1/0x120 [ 3135.496391][T12954] do_syscall_64+0x3d/0x90 [ 3135.500788][T12954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3135.506664][T12954] [ 3135.508970][T12954] read to 0xffff88823fffad90 of 8 bytes by task 12954 on cpu 1: [ 3135.516576][T12954] compact_zone+0x1422/0x1ce0 [ 3135.521235][T12954] try_to_compact_pages+0x317/0x840 [ 3135.526414][T12954] __alloc_pages_direct_compact+0x61/0x330 [ 3135.532204][T12954] __alloc_pages_slowpath+0x29a/0xb90 [ 3135.537556][T12954] __alloc_pages+0x25b/0x320 [ 3135.542127][T12954] alloc_pages+0x2e8/0x340 [ 3135.546531][T12954] __get_free_pages+0x8/0x30 [ 3135.551101][T12954] io_uring_create+0x904/0x1940 [ 3135.555937][T12954] __x64_sys_io_uring_setup+0xe1/0x120 [ 3135.561377][T12954] do_syscall_64+0x3d/0x90 [ 3135.565774][T12954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3135.571647][T12954] [ 3135.573948][T12954] value changed: 0x000000000018e600 -> 0x0000000000192800 [ 3135.581031][T12954] [ 3135.583333][T12954] Reported by Kernel Concurrency Sanitizer on: [ 3135.589456][T12954] CPU: 1 PID: 12954 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3135.598196][T12954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3135.608231][T12954] ================================================================== 00:04:43 executing program 2: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75e4, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x607f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x26010000}, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:04:43 executing program 0: syz_io_uring_setup(0x6696, &(0x7f0000000000), &(0x7f000023b000/0x3000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() syz_io_uring_setup(0x63a2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) 00:04:43 executing program 3: r0 = io_uring_setup(0xd8d, &(0x7f0000000080)={0x0, 0xc6eb, 0x20, 0x1, 0x1ec}) syz_io_uring_setup(0xe696, &(0x7f0000000000)={0x0, 0x200, 0x8, 0x2, 0x0, 0x0, r0}, &(0x7f000058f000/0x2000)=nil, &(0x7f0000a02000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xceb, &(0x7f0000000100), &(0x7f000085d000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4886, &(0x7f0000000000), &(0x7f0000a02000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x63a2, &(0x7f0000000300), &(0x7f0000ed9000/0x3000)=nil, &(0x7f000058e000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fa2, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eda000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240))