f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff16) 07:22:34 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x29, 0x0, 0x0, 0x0, 0xe) 07:22:34 executing program 2: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, 0x0, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:34 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000040)=0x3, 0x101) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r5, &(0x7f0000000180)='./bus/file0\x00', 0x250000, 0x80) 07:22:34 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r5, 0x200, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xef}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x40) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0}, 0x4044011) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[], 0x1000000c8) preadv(r2, &(0x7f0000001140)=[{&(0x7f0000000040)=""/215, 0xd7}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2, 0x9, 0x4) 07:22:34 executing program 2: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:34 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a, 0x0, 0x0, 0x0, 0xe) 07:22:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) clone(0x5cd2000, &(0x7f0000000040)="238f521dfc82ff2611c9a1dd985a41fa5c9b07ad2fb6a466a6d1a6aeb8ab4d4b83825d1bc00917a25e14880878004c2a8dfcd867af056ad0c8007647ea2c8ccdc9dae96d23dd4f57471a1c41fea2df68ad025b1704ab1a6f462b26a582ac95804d419bfe5d6f06de51b21f431943c955cd0c01ab5376feb48547979971a5d347dac1241df367774235f9e38df1ded5bd2674c756aa873346e3c6fc1f76b9bb1ac1ecab86336fd2a1b03de4c25cdb51fd3467ddd8cd90b416", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="4f85cb354c33cbce51636ab20e0b4b674dee86ded1dacf6642b1b0fa0ce06b0c53e9571755a44e56dc721b2a1c15db9226d49ba4f24bf6f28d117431be6eb131f3be7f92d7987971b47f1f33564c9337f7454e22dbd1dda36779929e51c6ce987d3f02d688725282579641cd17d06337d1205566bd509a392adaf33b7a99417cc3ac1e293236") 07:22:34 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b, 0x0, 0x0, 0x0, 0xe) 07:22:34 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2c, 0x0, 0x0, 0x0, 0xe) 07:22:35 executing program 2: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:35 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2d, 0x0, 0x0, 0x0, 0xe) 07:22:35 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0)) r2 = eventfd2(0x0, 0x0) mmap(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x2000000, 0x30, r2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000100)={0x7fffffff, 0x1}) 07:22:35 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff17) 07:22:35 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) fallocate(r1, 0x24, 0x4, 0xfffffffffffff01e) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:35 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000040)=0x3, 0x101) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r5, &(0x7f0000000180)='./bus/file0\x00', 0x250000, 0x80) 07:22:35 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2e, 0x0, 0x0, 0x0, 0xe) 07:22:35 executing program 2: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:35 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2f, 0x0, 0x0, 0x0, 0xe) 07:22:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x101082, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x30000033fe0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x30000033fe0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r10 = socket(0x25, 0x6, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)=[{&(0x7f00000000c0)={0x18, 0x32, 0x400, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x70, 0x0, 0x0, @uid}]}, 0x18}], 0x1, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r2, r3, r0, r4, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r6, r0, r8, r0]}}, @rights={{0x1c, 0x1, 0x1, [r9, r0, r10]}}], 0x138, 0x40}, 0x4) 07:22:35 executing program 2: syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:35 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x30, 0x0, 0x0, 0x0, 0xe) 07:22:35 executing program 2: syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:35 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x31, 0x0, 0x0, 0x0, 0xe) 07:22:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/133, 0x85}, {&(0x7f0000000140)=""/239, 0xef}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000280)=""/17, 0x11}], 0x4, 0x9, 0x2) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) fdatasync(r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:36 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff18) 07:22:36 executing program 2: syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:36 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000040)=0x3, 0x101) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r5, &(0x7f0000000180)='./bus/file0\x00', 0x250000, 0x80) 07:22:36 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x32, 0x0, 0x0, 0x0, 0xe) 07:22:36 executing program 1: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0x3, 0x655}, {0x4, 0x6}, 0xfffffffb}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x92) 07:22:36 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x40) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_setup(0x5, &(0x7f0000000080)=0x0) r5 = accept4$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000180)=0x6e, 0x800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) io_submit(r4, 0x2, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000440)="d684cbcd799ac69c8b0c277734bc17037568ef6df835d112c54ea0d861d6458df4d280f3a84174cb44656f16799f36f1c45db3e7ac8ca347a71425a3d4849738922ca05685963b1813561c0a49c2f041caaa7c275122c1798274363f966548694166020f3e5af02d50b5b14649cf721d8deefc087ee2f5bf78928067d6321209be35b4ef", 0x84, 0x3ff, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x2, r5, &(0x7f0000000580)="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", 0xfb, 0x7ff, 0x0, 0x2, r6}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000002e80), 0x8000, 0x28000) r10 = epoll_create1(0x80000) io_submit(r3, 0xa, &(0x7f0000002fc0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xbf2, r5, &(0x7f0000000780)="5a90d4220cd78f57c9fa1d0ddc3a1f35661351d65112d575cee95ffffda31107eb32b7548588f9e8bb21ca3987510bd114117b15e2993e61d4a985cde5410cd9c2d4fa975b14737322c766f5d39b8166b21823362e7b6e8d0ad5df5a45028d67d64fd1a32618a8f15607aae7a88b037287892745e06a9261a4062e7d4f0df718278357389080e916f82a53c32f57e7e00841b84ca3f552b23657db57ab61efcbd37106d872a4948493c2b723a29fad74c1d41b547da5a9d1932ea6acd92ab4a74184b98316", 0xc5, 0x1, 0x0, 0x3, r8}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000880)="4f48e2652f00ac3f5ba92275a3d7cc5a697fa411cbd3d335a8f0d2a1b9dac74827a7221c35a9ba65aa6d2919ea8374daffa340e0a2347028e76bd3794242850a02df2e944c9961396fe9683d8c61295ce5f55b0cccb23cff5c8445aa6434d383e5407aa3e7ec79fc100ea0db95dab8912b5eefeef10417c00ce3ee49198aba95428dbc2bc1", 0x85, 0xfffffffffffffe93, 0x0, 0xea6e49f688b509da, r7}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x3, 0xff, 0xffffffffffffffff, &(0x7f00000009c0)="c5c323431e77ac3274006362696086343e0d730e550261e8fb2e53afa15256dc7f1dd6722f260dd28e629b9a353b115e23f3bf956dd9600d869f7f184f787aabea808f400b908f8c23e07b1281c436434ae88e2fc63fd27dfbcf6c8fa949b7f7a449da2b6d9c6572df0826769f0b9a19a1f4f7c6db0520d700f471cb15c8dd696b216cdc2627760c050ee105fa23e4610ea00795c17890e2740c0c15e7ac84541d9c44", 0xa3, 0x2}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000ac0)="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", 0x1000, 0x0, 0x0, 0x2}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000001b40)="e1a2293aaf86e884126198ab67a7669a83d609bced5018a1786ba7f9fbf84beb1df84ce5b56ee14eedc815648788a67fbf9edbbd4025adbf295189c9846cbab9f6390da3384ccef30b62e9f13bc266dd40e0095c1e51e07a18db6ffcfa191a8f5bfa2c51ce00b643f843268e93cf804e44d09994286107f2762201fa8cc0c90c8cd3e7107fde652359fd58c7a660fd154ed43b7109390ef1002daea2df17980dc5cfe51689c0e19667893b7ab33bde08bc7de25eea70ff7bd2a3edd41aeb421e497a1fe9f62b", 0xc6, 0x64, 0x0, 0x2, r8}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000001c80)="e4d2e3e9539fb1a095e179091599702c8d96eeb5d6aebdafdeda02c0cef7a529f279a179abdd63649101bc24b88dc603498e53d06555bec5abe7bf25c22ce2f68e785a216ead5008003b6fadeb77e27af9335af22ea0611db38e4d98e5533c32206bda10d8fab562c6a8d8d2fa07f7404a6b52549412fe3b12666ca259873af66fb7647093529bf640fc4c4b829266f4a6e2aeaaf8197513cfe9183d05cd40305aecdf3982b2d5c44d49fb1a821c336a73b3726446e381f3721c8b38f825e6d858d2e4404baacb33e1891f7251a9198125eb88bd13f6942b5736f0d24101862d18187e596159fdc6f0f9760a7327fa37b4a5a34a7fb2df30eeb0ec9829a5c2919176f342b0de2d98b070c6e60d30bc2443f6a1bf644ad81e5e21da8f550d0491d01dbba5b84521b1bc4c99ac50c743299aea41df13dc39efbb8ace7e8672c92938f1c2db4d6dcaf4c4570e071c5582c18b435235c6520388345d8640893ce6b2cf9d829982a9d3adbfb032121a4f9a025aa6a547d7b99cdf9d752fc0570d688febb212b8ee18e807f700b68543d1f2e2f06bafb05bb04be8dcf66a2d99705a7b582d6a552ab7b850d10f0fc5fc2f1ecafadf5899f278ece3678596ca0d8d7e1c5caf76d94187c48b50916e6bb3110155d452ebffd0a6a5f884af89d6b54aec3f10b9bb080b58c72ebf8098f8c5b8238728a4d94765ee2ce5d76fd8db2dcd2552ff5a06a160ce871aa1f7e9fa8a29d37133718d8b4f75ad13ae3a31a87c74baf89ef6327fc721c8bb7c4992da0a28b1f265eb08fdc401bf419bb277372667f94e19a95bb6666bb91f5e265c70dcddb3ec061b54de0717e664845c9aa63e50f467946e2da5d478f2996aad679cd9fa697449bd5359483f59b187c171000abf798c7bfb1f51253a1d2ee1599ae74d1e11b11d3e83780eaddd94eeb62578b126c7815b4b8c1e5eacb94b234ba356a57cea54afb31f99f68bd56bdf1fa7f51939613f35d5f03194a8dbb28c3f5891d104cdc987af030bec3fc2d6f1bc33c7f3ee08710c39c37e516b9de5f4d0fa0c681b3e9321bf63b322816b9618d8bd9dc505e87e7407de5bfa3ab2792fd28a5af86038980572bf4d84e2c2fa372d30e22071012c4318b1d8361ba88f9cceac825295f6e0e427b446765c4c20f26c1bd3db9055c90be3446a56c2c8b03a12bceb5e209faef4bdf4db69469ca7cf4bbf85169e6f4563fa5d04bc35af97d44b42a7d7fb74375d352e91f0ad9651ba453cbcaade8b399104630c9e6af115fe216ec1c84ee81377bcdb332d5e2ad9b9afd8205a164749a3e01ad1e6d8a2a1ebfdbe41cd33e753c5ad8053706135eda9aa8b2d938c2ebaf2314da242c939951c1132c144b43bbbe5da1cc8ea30887928bb00af9f3994b97c9a68f223d547bad6a8417798e6d1f8dcbce91e2f9d537adb5ffe947dc39697c08b148d6adbd13da5279dbacce3cfe35dcca1d1d4e61e1affc59d97e7777c94477c4b01d4496e128ba598e3f322c6d67f2e17817fdb132d3e26a461cd3fd506999f30c09e3d8a0ca08a65e08cff187e6de42ba95983a7a02012eeeab883729e09fa5e55a9f1613e9fb9464aafea10a3b6f185ad7a6a485ed105f3be1c91f3132e8fb5f5b2b868139a4c1f46e55bd1f1249a01270e5eac8cc875589429c29c02bdd273429fe77d89001520b4fe0e034d65f7be21e8cd3c27fe86a3fc91c29a7bc2f25354cc63fb9f9b10466527fc007878458a96e19b7ac0568d123c80bd41b7b7052b4102085f69d2c2a34dcdb0ebb2f8ff1376a000693570fc21f39d60672c4369da47cae8e877c57fb5a4106818454bdf250a194046b15c4d1cb7f32e2305b84efd357aaf98aa5a57576e9cb54104444b87374096205fcebf6c8cd2fb93d30f42ad69ed1cc108fe39330d7d0bd2f6c5fd5252410ad4a2e45e282be6747d8c854c4025e40bfdd673aa6de74af01c7810c847e3376beb986bd09b67bbb11653bb68cabcc922f9e42c7e8846541271d73ae2d52c52ffd85b80b620fbd73a24dcd4680458e9d60ee69f8561b7b5c87091c0b2addd883b8f4dd5bf9b37536d536748c3fc7a5697641172402d7bf706faf8b1f084430163b4b5e4d7cdf044b335927cdb512901d3b178e1c54edb8a69d1b874933859a02de11819aae2fe6414f98e9212d0fa4f42a255332f3dee2785b32ddac3bd4ba900d6922151ad48313f220a77988168d452d562c28e0e616b2fe908e0d516e8660229c0665a07f6a8316fbe9fac3eaa0c8750f60810370572a3f37090f961dd0641979d67fdcdb0d013a29282da8abd2e12477aca8218f50fb658db59271d140b0226fc9c1042555ec78563f45cc91c2ca57d763d04b48f8982879682d3ea4998dc50370bd0df558529190b766aa2746add0c79e6e597acfaefb992c100125ddb91772ef98d6f193a2867798c1e0757ceea792e071b0a4a2163110958ce7076e49ff6361666ff490deb1a288867e637fc6a764f02041eb24c15a45a2c7e035f87ad6079ee3a5a779d276c8e8ae7d6d7411db7e22e395fe10c68625e865034b9c78c6aa0dcd62ccfb1c201751f2d1889aea59f71a268b7d54532b79a4f022f63034f132cf0d4cb8f1face6a10d0b1719f0c66cfb830aa8d5a694e367beb223deab76bdc1f32904d465dacf37da6b412cc6efb95c1d1da1dd18e959ed72a7e5a4fe74c3a4c7e63a0c2332bb102a575c97c4a4ad8154f37fde0aa0cbc9af7b940ab34c054c36a990868b1d5596d82f3cd8665ae54e713edd5c60571fdf08c9bde37e3e7ff1d70e107e21787c3ede0125f669d868ead86674ba0957a07842d3013fc2b982e5fea282c5fb38b6cd72228a3a99dd8422b49fac535c7fc2540b5e933836d5c5f60622fff6ed70f279c231d6ed369694fffe50f20f400eb82c4038c55f13d06b8ca2c970b24f5fcfaa2282ca8b512c9ddce1095223d6abbab265a37119ec635a84496f59fb887ac43476a12b3037b5c8f4f13eaf56f9f0655a344665b746d2de85a666080de9a02375798fad73214eccf0f031182b5a1807a9fa97b6eb2c9c81dbaecb66d21c3bf3d186f40fbaf6d3d78632d648a63b0c3a9be5403fc399ed6514dc5ce92810795e6b75ed26a19204430d5d6dae03297f8ee690390d431afdf84d4b3eeeae7003eaa2b99387ebf6c6b94a73f00320347954d565fb1630f990d504fa1abbd3828eba95d40bf02ee54030bfe9b2320c4782ce38a05c6c2316e9158ff394f4317c758a39bfaed2fd15424eabdc9dcffae5a603b379d58fb27fadc58d8d6e692d37a788444a488f93498dfe72a7ac1392166069277892f9af2a4763b442e0535f0ff0d443194cda6d8462b25c896721a5112dd4f1b27901b3de972eb72f4bb64d7d657ff0420b1ea6d5fdb50cbf054714754cffaac6ae4874ff8befa8c71c01c9ed5b8e27d712216490cb0e244365a0ab04d4d543d3b658130909ffc75bfd66675221ae48a7fd59308906e9e81e853190bcf4e01c1d99ccd1184fc53637624214ddf8b66851d166d332d35a166aed1c0797caf15c4a9f388560ba6a8031aefc2652ef8a7e2cc293dad5a7122af879f9c6734d576a116916a37aea8d66687a39bd2a9d19a768dd34d27dfc3786cdd0f155889c5593037d92513c953326baed1bf07262e5e1b59eccf98be7989df302287384d81fca184c87524dcb72fd152a710ecacc2edb4a03cc928daf6a1853ee33b0ded245e0a1ac8411424959b87f885d0e1503a697228967384972962d07215bf65c3691c028076a3176408a57d62fb8967344f7212c913a99a19c68d0b21940d775a80df4cb482c0ec8ea5057939c612926c9084ce5fee78fc9d1fef1060a535f58b87be38f0cb4a003688b8f4e26921b30e06a5aabca0ced20e440b6684f8d9c2ce5a2b10007bc9270b4ae08e1d1c038438a9b785159592e5838409c57795438338d8a70be6c862dc83abbee86e2a10a40d2b9cd57370aa8a7bef8ebd4177d623cb883a9e076214ed0764983c5bc7f6259733e0e278a688817f5e0a717bd0d506ac6384bddcbcfc58960ec92b8afd5aa013e6ef4d6097a6c937d8a5bb04737b9909905ce37b626e37ba23e5dad4820b026690b058e74aa9a5491f535564e8343b519b71f6db13be6e60eff249b704e929ee47bdc09b89bb3be75b33103e9c2cef7dd6c70b4254065e00550aab1067950c84aeb2740a6b5b0707a47d9bfb5417256fababbc6e6b1c526f7882e3cbd58d1c5d8a8bdeeadb38a9eb8754a95963a08672f8a3009f33f0b790f8d07d369197bf8bb0c79c3216c4d5e7ed8f26d827cc40c19ce6e2ea96d623858009b9abde1a659e2d6326d189c0f33b123d973b7725efe20eed767230922f76df42f4d172b5b5bf221d47b474953212a8cb470e1c4162d4bcf88ae5f10c9438176115514e45f3ff444640d70a6a46d9b8be40cb27549f859a97f5decacf45720e4f3d5e9056156aa406eac6c89a4e0b3290c2d9e9ea94d7bfc0f8220c5e73088b8af22723ef5a69afa6cbe39aac6cd7eacf326c4e3d26bbeaf9428900ae87e3072c85c75f78c9a25b8b77381b8cd144a1da499e4b657220e2a8dd4c4b7f8faca33c6621dc45775fc92dc442d1efb37bd258f4f97b4b4085798d0c558de29ca280f4b7a4d2cae4d5f51b7c1438de1a8e1df3f2114408e2406afd7c2f02f3437aed66c8fcfaba28e1565b36d15383634374906a6ee1d395fd5c5653f22b8a077be40710006d3a33f687b9aa27411290738235c7fdbb45840fea321dc38d9ba07d0336d86301907a1c8c321e2078e6901831ecd8aa94c18edca6403d1949e6edf288a11c7adbdb51bb12701b7689553b2500bb90a534b4119d95420e4cdba5a1b2936eec8ad01f81c8c8a2499eaa9dddc1030cf6d2fc2a8bcdee5d8388efe3427ba1065a3fb6fe511d9b2869da3fd9d66088c2310932e8825a0f4f06e9a65337052a8caedba95ddc12e13b8027f5f0c8aefff8a14e56079702d1cff8e8013040a37e1c1009e2a52988333a189600b9d9f7e5a13343c1b248cb9cf05dd02a86ee6f98c90459a6409d8102def7e78a0a0af7f879521d141019d48d02b991fdb5f2ebc6586c4fec0e3120793b313f2ac5758ed09d5083b0e3bd3c999858ee1808b38943ff7c69856ac134c78674249853739e0c3a1f002f526207037f2ca506ac7c1011fb98b6c50a5fac4fcd21b6ea4d11f0202fec9390cbbd60a898e25c08b8dc1a78059d036aea7343aaecf682e21dc85a7dea7cf8dc42e43ec143883aab4ec5e532185e3528f029d0143f349de336cd0b39e1c181945683eba5810734a9755be4afc620c15f48433650ea15cf73f45e69a5ed6698b63e258be3d95d9c8668f94429f22fc53da07146b99db383947e183b72b0786e471961148185c3293488acd1146b6892cc9b6494471438695d0bdb9039d2675fcf28617029e01b435709a6ae345eab2e528b7fe2f251458b81b131c544cb51d78b3c83aaad8580cf11c777f6838842234e95c9a24815bc81bc3286d18d3610b06267bb2c2243a58727ebce60f4c52709ba5833b8523a40803879eff0a08c6a7a9a6b07bbf293bf4d40e1c90607403059ddd4b2452a42b0336ea92c5e404ff34848feea5d75c8b0741e829adb81564d7e99565f7060df7401213b5707d20ac2f2f6a7dcc02041487e74c12945bc566cad5ce601a66bb1079089e4aa6c90406b558560e5e8786f26e17525a6f1d8827836a847f6ee3e2d78083a5439fc4110c51befc97e5f943d169376e6e9b931dce03f5c9836fc4ceb5", 0x1000, 0x8, 0x0, 0x2, r7}, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x1, 0xffc1, 0xffffffffffffffff, &(0x7f0000002d00)="8fbbf5d97c6cc03e5875166a2a5e5d7189a921f9a819fb70", 0x18, 0x1, 0x0, 0x2}, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000002d80)="14d8b015bdd7320d83c2232604dbca988b30a23b1d3f9ed48c78210970590567cd10b5d52ef8d848aadad4b79036ac1880d56441c9d420822bb86c159759", 0x3e, 0x0, 0x0, 0x3, r0}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000002e00)="f55ee1c19a9828ed8db09ca33f213ab035e7485d083ec8d441ff9785eefa8fbc426c3e3ce85565de91d71e31afdb6e37371744ed3271f2c09568e7a2d63d298c6aaeaa1a73057ef668ed", 0x4a, 0x80, 0x0, 0x3, r9}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x3, 0x3, r10, &(0x7f0000003040)="dff6800aa81aae457830c76390677f2f4a18abcf411d58b1287072d596189f4dd0ab2f3bfa66e7d1bf06e3656058971053495e3056c2caa10d514c3bf9d300dccf49d9dfbf56de56be3051236b05c8f4904748cc899a5f2c7d22b5f80fcef817bb965a43f7265758cc52a562a5985d3009b9a08f18", 0x75, 0x10001, 0x0, 0x3}]) sendfile(r0, r8, &(0x7f0000000040)=0x7, 0x8080ffffff12) 07:22:36 executing program 2: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xe) 07:22:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x68) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/167, 0xa7}], 0x2, 0x9, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:36 executing program 2: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xe) 07:22:36 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x33, 0x0, 0x0, 0x0, 0xe) 07:22:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x7, 0x7e6, 0x2, 0x6, 0xe7, 0x4}, {0x3, 0xfffffffd, 0x6, 0x5, 0x1, 0xff}], ['\x00', '\x00', '\x00']}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:36 executing program 2: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xe) 07:22:37 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff19) 07:22:37 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x34, 0x0, 0x0, 0x0, 0xe) 07:22:37 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x40) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_setup(0x5, &(0x7f0000000080)=0x0) r5 = accept4$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000180)=0x6e, 0x800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) io_submit(r4, 0x2, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000440)="d684cbcd799ac69c8b0c277734bc17037568ef6df835d112c54ea0d861d6458df4d280f3a84174cb44656f16799f36f1c45db3e7ac8ca347a71425a3d4849738922ca05685963b1813561c0a49c2f041caaa7c275122c1798274363f966548694166020f3e5af02d50b5b14649cf721d8deefc087ee2f5bf78928067d6321209be35b4ef", 0x84, 0x3ff, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x2, r5, &(0x7f0000000580)="d331383a4009a6f702ee96d2ff105e19629bb04f1c3caf633e74ec526a8f8f5ffb5afd0bd47c9f317e1fd027d90ec4a0787e4e1f2fb63a555847d47a452a3373db2ab3fe77c52328fac01045e248d27805d948a8aa07f95952df133ab8c0759689b63703940317fc52bff3bb1904a8836a2cd165eaecbcb08349d011bc3685d64f9692b886c33406900d7695a1e930546f2c58291a49bb7db8ec753bdb093350138dcb67c7cb4a43a92cf25c90ede19fba7ab0563260c13a866c7e934cd4b033ae89a7cb824de21ee72116e0b22534cc9fdb83cb4399602c92a8ce70bb79a42b3b0025cbb4b2c01ae9ce29e1a442c9173afb517cecfb3f60e515e7", 0xfb, 0x7ff, 0x0, 0x2, r6}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000002e80), 0x8000, 0x28000) r10 = epoll_create1(0x80000) io_submit(r3, 0xa, &(0x7f0000002fc0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xbf2, r5, &(0x7f0000000780)="5a90d4220cd78f57c9fa1d0ddc3a1f35661351d65112d575cee95ffffda31107eb32b7548588f9e8bb21ca3987510bd114117b15e2993e61d4a985cde5410cd9c2d4fa975b14737322c766f5d39b8166b21823362e7b6e8d0ad5df5a45028d67d64fd1a32618a8f15607aae7a88b037287892745e06a9261a4062e7d4f0df718278357389080e916f82a53c32f57e7e00841b84ca3f552b23657db57ab61efcbd37106d872a4948493c2b723a29fad74c1d41b547da5a9d1932ea6acd92ab4a74184b98316", 0xc5, 0x1, 0x0, 0x3, r8}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000880)="4f48e2652f00ac3f5ba92275a3d7cc5a697fa411cbd3d335a8f0d2a1b9dac74827a7221c35a9ba65aa6d2919ea8374daffa340e0a2347028e76bd3794242850a02df2e944c9961396fe9683d8c61295ce5f55b0cccb23cff5c8445aa6434d383e5407aa3e7ec79fc100ea0db95dab8912b5eefeef10417c00ce3ee49198aba95428dbc2bc1", 0x85, 0xfffffffffffffe93, 0x0, 0xea6e49f688b509da, r7}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x3, 0xff, 0xffffffffffffffff, &(0x7f00000009c0)="c5c323431e77ac3274006362696086343e0d730e550261e8fb2e53afa15256dc7f1dd6722f260dd28e629b9a353b115e23f3bf956dd9600d869f7f184f787aabea808f400b908f8c23e07b1281c436434ae88e2fc63fd27dfbcf6c8fa949b7f7a449da2b6d9c6572df0826769f0b9a19a1f4f7c6db0520d700f471cb15c8dd696b216cdc2627760c050ee105fa23e4610ea00795c17890e2740c0c15e7ac84541d9c44", 0xa3, 0x2}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000ac0)="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", 0x1000, 0x0, 0x0, 0x2}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000001b40)="e1a2293aaf86e884126198ab67a7669a83d609bced5018a1786ba7f9fbf84beb1df84ce5b56ee14eedc815648788a67fbf9edbbd4025adbf295189c9846cbab9f6390da3384ccef30b62e9f13bc266dd40e0095c1e51e07a18db6ffcfa191a8f5bfa2c51ce00b643f843268e93cf804e44d09994286107f2762201fa8cc0c90c8cd3e7107fde652359fd58c7a660fd154ed43b7109390ef1002daea2df17980dc5cfe51689c0e19667893b7ab33bde08bc7de25eea70ff7bd2a3edd41aeb421e497a1fe9f62b", 0xc6, 0x64, 0x0, 0x2, r8}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000001c80)="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", 0x1000, 0x8, 0x0, 0x2, r7}, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x1, 0xffc1, 0xffffffffffffffff, &(0x7f0000002d00)="8fbbf5d97c6cc03e5875166a2a5e5d7189a921f9a819fb70", 0x18, 0x1, 0x0, 0x2}, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000002d80)="14d8b015bdd7320d83c2232604dbca988b30a23b1d3f9ed48c78210970590567cd10b5d52ef8d848aadad4b79036ac1880d56441c9d420822bb86c159759", 0x3e, 0x0, 0x0, 0x3, r0}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000002e00)="f55ee1c19a9828ed8db09ca33f213ab035e7485d083ec8d441ff9785eefa8fbc426c3e3ce85565de91d71e31afdb6e37371744ed3271f2c09568e7a2d63d298c6aaeaa1a73057ef668ed", 0x4a, 0x80, 0x0, 0x3, r9}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x3, 0x3, r10, &(0x7f0000003040)="dff6800aa81aae457830c76390677f2f4a18abcf411d58b1287072d596189f4dd0ab2f3bfa66e7d1bf06e3656058971053495e3056c2caa10d514c3bf9d300dccf49d9dfbf56de56be3051236b05c8f4904748cc899a5f2c7d22b5f80fcef817bb965a43f7265758cc52a562a5985d3009b9a08f18", 0x75, 0x10001, 0x0, 0x3}]) sendfile(r0, r8, &(0x7f0000000040)=0x7, 0x8080ffffff12) 07:22:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:37 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff17) 07:22:37 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[], 0x1000000c8) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x12a, 0x7, 0x0, 0x0, r0}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:37 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x35, 0x0, 0x0, 0x0, 0xe) 07:22:37 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x36, 0x0, 0x0, 0x0, 0xe) 07:22:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="953d1ab50ddc193be6cc6b17960afa0ed3d2e5fcac8a213257656a336db1e41e1590895d02d4b2aa44e749dd239f46378da3b4b95f9d333e98503ae403a27bf5bedf165c9681f092627dde9a63083fa7b1d185f18cfe0f4d422a8791b70e9433b7c8cad4efc8e11c75cfef59d09dd941f6f728b2fb211d5054cea9e3d087c3c769c161f4465091384226cd25f5134e7635f70224dab2e367eabd5f0d7bdf315ba9cbba42e5b298e6322be07c4e212804da5127124b5c6177911ce3234fa11a56572a73f5727c0727e8e4aeda", 0xcc, 0x2}, {&(0x7f00000001c0)="6d0492a9ed4617187d90f73820f05d5f4d0098b44adf7ee97ad4", 0x1a, 0x2}], 0x8c0833, &(0x7f0000000240)={[{@dots}], [{@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '{,\xcb'}}, {@dont_hash}]}) fallocate(r1, 0x34, 0x1, 0x4) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x1, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24040000}, 0x48000) 07:22:37 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x37, 0x0, 0x0, 0x0, 0xe) 07:22:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffb, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="1c795f2060f49e6ceea065b33116c8a0c0738b4bb6733419a02561b7bddb2df4cc157bb21ae745472db20d677bcb561d8caf7e563d1f6b3f774e693ed67391685a0aa1baadf61430f36efde271bb47b035071d8ba78e0bcb522566527580326aa97cf0254871c7d24a69647d6e29d9a37d644300fafa215a067d79f8bd78e810b964262bab317d96447bcb0a045659d34772a1607df1fdc1c592c5040fb892e088181ded6422cc075085d42af2d94bd4e3a3cce573da479ea644113fbcd600708dc944ba91e8c41bcb2bf55191", 0xcd, 0x80000001}, {&(0x7f00000001c0)="0cd6910859ad4b9e8b99b2b6c284c951fd6caea98f9af117cb9ac25eb066a729c876707b75eeb1a42f670b95214c0b9d7c10859ea60b957029def8a30b172ef4285534b875557c12", 0x48, 0xa5c}, {&(0x7f0000000240)="11c8d75cd9db2c82c376f94b39deafaf098ea754b70d0399435ad473698c96a136797243f1b9db7c25ba18", 0x2b, 0x6}], 0x0, &(0x7f0000000300)={[{@shortname_mixed}, {@uni_xlateno}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}], [{@subj_type={'subj_type', 0x3d, '&('}}]}) openat(r1, &(0x7f0000000380)='./file0\x00', 0x80000, 0xe5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[], 0x1000000c8) getpeername(r2, &(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000440)=0x80) 07:22:37 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x38, 0x0, 0x0, 0x0, 0xe) 07:22:38 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff1a) 07:22:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x102) getsockname$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000018c0)={0x77359400}, 0x1, 0x0, 0x1}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001880)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x5, 0x3, &(0x7f0000000880)="1fb3abd31d067c55042ea5aa2c7062b6731e32e708eea153cc41de36ad12c1acf1fb768c46fa1c71da47014fecd4081368bb850cb3a5342b7a2c8ab9d3c2736e3b42403e4499823d2f8ccfc8ecff58c1b93c9a1a14070655def1c7ad9303e7f5ce8968638fb11049f5ba0abd78f2cde12d0893e48beecd940b8dd1258da481d2c398eba72656bebb877fa953a9e535040f8a98db9c4aeae7b60c8c8bc2b6c355166069be735d902300cd9aa6744a615fc68cb77185ce1aeeb66424dbde913f9d273b6ea712489f07ab2a2bdaa9e51af13f7ce8b6d95f4b18a2ef8eed68ff70cd9eeef5328066456e1e133e32c7a6fa423bde78e30be34617cce290be2f1ed62b9ff51157e3ec7c55e5697895c7d8658c0d616fadb5bab993cc1cb287be3ddc66764309a5732befdfac4ec1d4542a80bff31cdcfccc47ada3d1a9151e0d3abc0f374a3a8e1e415e16891ed00ca2f263faedd66ed8f59d82865230b4694f5120ba9ce37a9d634c5df6409c65a1e0e9f354cedfc0a7f0fd12d7955c684ee6a9c1909fdeb4abd8c3205afcc806902d6d760468f56585490bf2437d55e00c281be5f9fdf54b4df9047d6448cdcb4d55a62c8412de2e04b13d9441f8c02c89f01cc57c53dec4f22e719b30b821015b5e9779371002a141c96bd2f4765a7e89786328561ab5f34baf880b56929b99aa8ed499bca8882b354d2fb538babff4f13761b464f02551ec344554331e0243dc4b1b6f40fdb46b52de7d09b1066d66c419d0f901028fecc1c96454c02a4ba81e95a79bbcd9eeb8e84489306ad0042af940a2ee679fca5c5517caed5b629ffe58bec2af0dcda1738e77c78fbad93487f42fee8783ae99aa8bde72f387b5f8dbe1dab20894d9cfcb828c05a029371fd213b4a196e450456c06a10c6fec1f97ac5522efbc294b25eb67510def9b878781d953a0dbb246a833aa1ecb4922d04d1ecd0c80dc9f3598105f55ff595c55107a5f513c9bfb0d7a41beb5c28689fc027ea47bbefef385e6c34fe0fc06a7be8a468f00df693dd0fca9c89887265a741fae276fad6737e1b3908f969a70c1621f275c615229af1c12479e92de52b6055466683b98c07bf0a797d7bb4e330b9743de226e8bb9977b6b5b7e9a7e85b5db31480fa933c1387eeb46c521157cf6afb938101d05743aabcf21384f89f84f7d0f37f2a03ae42a4618ae68385ee1b93df25e2e7795ed4e03dff9567bf31d752351ca4fcc957a95e51d4760459805c0a3677f9a1fb6197fd8e2753eae7be44d78f9f4273d34618a012c41394e4eb0409635b5b990dffef47486b409a9af2379b9579324ccb79bc989b4802948a1529c5285b76e1e2d3b7983b03674acb2f69af8bab25b4944916adace2131bbc8991ce56551654d3d4e9dd139929c130056036fc51b74fc77e3d1323581f3d48bcba4af552bd64354a7652d2c008a9413feb98f2e6d7c028ed63b8d4a17f9db261f4a7631dd57850115135ab49ac549577fec2c999f3cbae8c2ca991dad24e96c73fb105abbc072d189dcee7137f64e2c6c0f924864c7e4b6c21dc3d6046e6804c2b20e72006e53559fd4509805e2ad8d9100bc81cfaa49e6d5ea026e31d7d484a523e38a16e320c6967d24d1de10c49a58300c4b851441bb73f36d91cbbac7dee5b552a2f334ca2c9c01555e8159033ba912e0958d747b40edcc95e7142bd1396afcad414cc312543a496233405f9c3b2807942e66912027c214484e32c2794cdc2db9cbce66fcdf29e1af47d4c33e2ab5b8b391ba74550a679ac2bca1e3a9029cde8af19e6e14d72a2a7a66dfa0be1dae9bf2ce2238571ff4ddfd3e8c5689ed6f53c90a8ebeb99e89e4b6ce09cdbb62af1c4df5d6591584f49afa1d047ac250ff3e7673289f1c232593c643e646ac10c7e71abe822a6eda096b8f7f01cd90bfeecf2eb9a4c5190e66de300a75974dbabac70675db3c0713d08f7ce770c131e09829439ba43e35037d51565eedcb56593a80552b9abf16e2ff14696b970026409108e9445ca31ab6f51fc28eca1a43bf2d63c48995936fae57e21903c6b9b7e5f5e7043fc30409698ef0ab8e3e901eeeae8e4e779018588de91f66a99386f7a1fccb6e14c886483aa69af7be8de03e5e9a5427adf30b9a5d6a2a0df1802312ee6b4cee694a4b5354ffdb2077c54a93cd7b55361e166b26afa1b3defa8f274110ba0120a93c41659299778d33b339098088670e7b65d7024a0863b2d7ffc495547e95819e5a24966421c6d48cba177b19546f0391e7241700f557c84836bbd277b5763c4695c57f163f3798900995e18e787efe9b35a653ef49f329470351be6c0530f9e4cc613e1c262a4316adba19b1ccc5c2e2d75e26f7cd176f0483d738c9554adb10ec0d91a0beed86a061e52c925023504d0b405adcd4b9f5c7fd321e06713cd5c5f7e8e90e83a77b1fe6734649e5b169d4e90debdf54915fdc661214c3119118645ab1dfef0a0ef145ba582050d20817f3290a41bc2d142cc27854bf2313ecf71ae2bd38375ebf888e4a835ebc004be17bdec68b412094c235a29683fec9299682e229bf60f903e71e592b6369184f2f873b5d6827a7e2c6c0f62c86e5ae4133dce161b72c2bb7aa879b3def4a0d32273c12af2ffefee4827570641a17f7df60a200fcfc412a6fbda8e8f5d88013a7445f7fece573f33d7624e7938351e242888c59ee44dcd4ffc13214beb46e895326d03ee2e533b7204847916f0a18ef4338eb82f4814c8a945a554a30e7ffb070095d3a5be79b0b4e6d876ef1a41b627edcf513254ec0bb04c36b5f4aedd9ce78b1b002fffcb99e008febe01854df72294c0d121e106930aaf04da8bc6b4f4466bdb3247193de0473798845e199b158bc4c739643c037dbf0a3f6ddbb14ed87d7758cae526c901a78c34e48026954a3058aa580e82f1932cc2300c6c085328c18a0269b3ab6a9805fad7ba451cd5f358663f70e83970fc29ea053a1348a203ad5ef26e87cbf215639a82babad2c5a97fb9b728766032ed91f5b48c00431966c2efd770d27ac9df5086a4dd02a069381345081a0e47f7eea8171295ef0130bb9f1bded645c384d4087d7c1f7aa1332030af180f4d44607f98bad025f0c895e87f3d5201099f477a453dd91101ca89c76edb79f22b97127d3a3df771c4f801d996019119c671498b3e44cc7bc1db7f30ac75c7e11401c23e3e1173da5fac920a4350b246b3916dd809fae7324e185c09a1f77a9c0b61152cc8a14da6d7274e9d4a90a58b4f02095f0d1b7a028fcc286295c9d6d759761f0389598a9c28f4b4e050cd973b26bc784ab91a98a13da8497c3a57dfbd87a2ac0b772a467d3c5a1a0674d7a8c015040c423ee6118a760589e0c32f0d2e321b41ee0dfc8f2af09692ca678767a3812a724c39c55fedf4403fbbf02b1dfa0cd87a5a1dc27c37933941ee2b0bc8cde080c2660b0416756e4d6c24cecce9f4f1b886404eb0e72ffe6f520652b46042f23d345eb7b011e677a24803ee895d51c0cda1fe662fcc586e99dbb44bb4c368b082d656549c8c60b9fa0635f21ed7300e143e99874166186718c404630989a60f774d3432c29a8adb012b963dd208d18ed85a172dbf5f9a40ce13631a37cb104a8521da1391182cc128dd667b09e1d7d02b0db99b43c17ea16d590feda0d9f6c7150fff0c88179c2166ebe78521aec92c2d4f72e9bdf51477e2ac8fe8158a16d6b592e3430faea486c76f95cb4c011d0c2871bb4c6e43ed4bc4ddf7681be9e244fb1ce97a42d10f5185e0d31311df762682cdaf0e69c1bbf6476901360294c1a567608044e57cc154693c9a445a8ca0f7518cfc50104e29ce10411973c12b61c0f3dde9dac16b9202b418c1c019dcd6b3351ac6547c3c223981091af3b5fa3fdc8aacf2751afccf08c7c1ef0953cec1b0b8618e6d77326b61eaa59551c0f51cf382e84706f360e0b9aa38f4b38b08c6fa7fe6d5ff12e89b5360f9aac38fd30270d642af44f6c05164ca95723e8429f6b76d025c180b02ed24d2f273781c23a84929b64c0e67cf934a209df575b591fe0889434e1080627738c3713f383768526a8a05597dd0f0333cd3fc4e8752a19587ebe25b8480b685cbd554ba2660d7402f05778ed6c670d3b9642773b13ef3335853fea642f4df0a04067631a0ba5cf6229ecd76b9971aff643fb3a35905c02c745172d7aa9b62b91b6e7fa161fd2aa1a503a3bbd2719ab42f47f1043870ef5d8d02d1ebe669fc5c38a57e805937bd6e013571448bb46a2062693d093601bff71846d4bac4f15290084aa5fcfac211af52732e7c9283ec90a8de0f74623bc5e6d589d326f7fe235f500bb09bb913de0b043edeae9610f9503d9b74d83420e193d022c4b8cf015f3efb307ed136f1ecea799db356e8946bccd73b08f4824f4c21cc87c33d8d747036ac0e35010eff6b916545cd8600ab0b3d886459af013118f72ab4912308cd7b30f1404706865272fc1aa9c5f5ecacad77bea93bdfb41848b77b3ccf12d298452231026405249b35ba4868530b2e5a810060ffedfb634f7379237201b734bebb92e210cf9bb8e32c96d20734b5e7593ff9707b043afd730a26ca26cef02a266ed6790d4f592012632458a9ec4c2ec7694de2198891a228add3f0ced48fbe5d705077db6a730bdad3656e78d729a041b2a6f934e4fa5777731900df7f7e8cd0adbaa0f9e783458dad86daa363adf86390260378dd70a595fa81402ef5331ad23332e146a6789e2e50be2e8d2549c3cbd057f6cd2f7824f5c3ada2eb1c20ce1b0fdda78cd06ab5875c4fb4a4ceca20ee5539d0e502e88c17c666114c2bcc98f9465eae720f2d3ee44389cd6d63d619d92edffb96b2759ab0492a692cf5ddf0ff89d24aa11ca3ebe7c081e12178cd7aa23b8f42df07e9cab6893e438bb6638b80c1b9c3d22f2632dba1ddf328cb8f9824e1e866ee5f56fe6a88b482b452c9469ddf0bced5252aabd4b3392c31b595c69b0a183aa07100981355cb8857402f310dc17d54585b394c0f2ed062ce459e16d94ce4903b7ec388dbf757b6d15081c502face0578e656e77219181ca49b51f02794dd02a20e100424eb2a89bc8f5a07e4bfd8db820926a852f40bb6c16370f78502a59c1e4fec8a4e2579050347ea3b165bd892acba1a4a36a51620c167bea4babbb8bbb70132968b7e21c987dbb6c8544da5458170cc0c5a12ca94efeab1dd925973fa235a434e107813ac921622e779082a107a67f97787aab2b82c73ee726cbc610d5395aee328098d19a45f0641fad8d79d77d006e93647ee841101c71e96ce5a1e1d8130574bc2cc92945bd44d0365e328adf4d5a96166935e48ba4f65e4158db4faa4e932e48c3e65fb54982e0bbd4b1aaeb5959bcddd9e23db626e89b20e326d4253ce88cf78424274758a4cc26c3ef55fd737a6a562d95eeb9747daf4fc7b4909a3d3c9f198e34edb94b5785efe1dea420b2e32675943c465f8ae11713291f25413ab5f5626e4ca8b4121ce67d57a70f6915bc75db393f1ec2ce82bfdbd550d87a71191bd4fb5f5904ff48f52756ca2934a46b0340248d53d35c42a687a512e13022651f6eb62e98a13059410c53abaa0abe861aedea690c1dbe9eec7c10ee73ff29cff4b254dadd44d4209824a63edddbe5b264f67be31d87e8ff49724b9cca0506c1eaf9c592abfddaac054f57ccc2d4ab0149ac59029f66a65ad6be35179eb238f95e29bcfb05426ab4effb6603ec1ae90d103766d5fdec8df3a698b001a2288705c150c2129ea3efdff5", 0xff, 0x0, 0x1, {0x0, r6}}, 0x7ff) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000200)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/21, 0x15}, {&(0x7f00000003c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f0000000680)=""/163, 0xa3}, {&(0x7f0000000740)=""/33, 0x21}], 0x7, &(0x7f0000000800)=""/62, 0x3e}, 0x10003) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x4}, 0x8001) 07:22:38 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x39, 0x0, 0x0, 0x0, 0xe) 07:22:38 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x40) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_setup(0x5, &(0x7f0000000080)=0x0) r5 = accept4$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000180)=0x6e, 0x800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) io_submit(r4, 0x2, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000440)="d684cbcd799ac69c8b0c277734bc17037568ef6df835d112c54ea0d861d6458df4d280f3a84174cb44656f16799f36f1c45db3e7ac8ca347a71425a3d4849738922ca05685963b1813561c0a49c2f041caaa7c275122c1798274363f966548694166020f3e5af02d50b5b14649cf721d8deefc087ee2f5bf78928067d6321209be35b4ef", 0x84, 0x3ff, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x2, r5, &(0x7f0000000580)="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", 0xfb, 0x7ff, 0x0, 0x2, r6}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000002e80), 0x8000, 0x28000) r10 = epoll_create1(0x80000) io_submit(r3, 0xa, &(0x7f0000002fc0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xbf2, r5, &(0x7f0000000780)="5a90d4220cd78f57c9fa1d0ddc3a1f35661351d65112d575cee95ffffda31107eb32b7548588f9e8bb21ca3987510bd114117b15e2993e61d4a985cde5410cd9c2d4fa975b14737322c766f5d39b8166b21823362e7b6e8d0ad5df5a45028d67d64fd1a32618a8f15607aae7a88b037287892745e06a9261a4062e7d4f0df718278357389080e916f82a53c32f57e7e00841b84ca3f552b23657db57ab61efcbd37106d872a4948493c2b723a29fad74c1d41b547da5a9d1932ea6acd92ab4a74184b98316", 0xc5, 0x1, 0x0, 0x3, r8}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000880)="4f48e2652f00ac3f5ba92275a3d7cc5a697fa411cbd3d335a8f0d2a1b9dac74827a7221c35a9ba65aa6d2919ea8374daffa340e0a2347028e76bd3794242850a02df2e944c9961396fe9683d8c61295ce5f55b0cccb23cff5c8445aa6434d383e5407aa3e7ec79fc100ea0db95dab8912b5eefeef10417c00ce3ee49198aba95428dbc2bc1", 0x85, 0xfffffffffffffe93, 0x0, 0xea6e49f688b509da, r7}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x3, 0xff, 0xffffffffffffffff, &(0x7f00000009c0)="c5c323431e77ac3274006362696086343e0d730e550261e8fb2e53afa15256dc7f1dd6722f260dd28e629b9a353b115e23f3bf956dd9600d869f7f184f787aabea808f400b908f8c23e07b1281c436434ae88e2fc63fd27dfbcf6c8fa949b7f7a449da2b6d9c6572df0826769f0b9a19a1f4f7c6db0520d700f471cb15c8dd696b216cdc2627760c050ee105fa23e4610ea00795c17890e2740c0c15e7ac84541d9c44", 0xa3, 0x2}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000ac0)="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", 0x1000, 0x0, 0x0, 0x2}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000001b40)="e1a2293aaf86e884126198ab67a7669a83d609bced5018a1786ba7f9fbf84beb1df84ce5b56ee14eedc815648788a67fbf9edbbd4025adbf295189c9846cbab9f6390da3384ccef30b62e9f13bc266dd40e0095c1e51e07a18db6ffcfa191a8f5bfa2c51ce00b643f843268e93cf804e44d09994286107f2762201fa8cc0c90c8cd3e7107fde652359fd58c7a660fd154ed43b7109390ef1002daea2df17980dc5cfe51689c0e19667893b7ab33bde08bc7de25eea70ff7bd2a3edd41aeb421e497a1fe9f62b", 0xc6, 0x64, 0x0, 0x2, r8}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000001c80)="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", 0x1000, 0x8, 0x0, 0x2, r7}, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x1, 0xffc1, 0xffffffffffffffff, &(0x7f0000002d00)="8fbbf5d97c6cc03e5875166a2a5e5d7189a921f9a819fb70", 0x18, 0x1, 0x0, 0x2}, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000002d80)="14d8b015bdd7320d83c2232604dbca988b30a23b1d3f9ed48c78210970590567cd10b5d52ef8d848aadad4b79036ac1880d56441c9d420822bb86c159759", 0x3e, 0x0, 0x0, 0x3, r0}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000002e00)="f55ee1c19a9828ed8db09ca33f213ab035e7485d083ec8d441ff9785eefa8fbc426c3e3ce85565de91d71e31afdb6e37371744ed3271f2c09568e7a2d63d298c6aaeaa1a73057ef668ed", 0x4a, 0x80, 0x0, 0x3, r9}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x3, 0x3, r10, &(0x7f0000003040)="dff6800aa81aae457830c76390677f2f4a18abcf411d58b1287072d596189f4dd0ab2f3bfa66e7d1bf06e3656058971053495e3056c2caa10d514c3bf9d300dccf49d9dfbf56de56be3051236b05c8f4904748cc899a5f2c7d22b5f80fcef817bb965a43f7265758cc52a562a5985d3009b9a08f18", 0x75, 0x10001, 0x0, 0x3}]) sendfile(r0, r8, &(0x7f0000000040)=0x7, 0x8080ffffff12) 07:22:38 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="04018100", @ANYRES16=r4, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20000011}, 0x10) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/108, 0x6c}, {&(0x7f00000000c0)=""/223, 0xdf}], 0x2, 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x102402, 0x0) ioctl(r1, 0x1, &(0x7f0000000240)="651590a8d26369727e3a9d8ac16f04aa063aba15a3cc3a451460f0582f20cb53af62aff0054d6947131460d9f36d4324c6a4b4d6c5cc6317a31490571bb3d19c8efa0166098d09cbe6222402951eea585f3dbe1d4ab0730a553ec344299180b50c3c3d47081b8ea808001b") syz_open_dev$tty1(0xc, 0x4, 0x4) 07:22:38 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000040)=0x3, 0x101) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r5, &(0x7f0000000180)='./bus/file0\x00', 0x250000, 0x80) 07:22:38 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x3a, 0x0, 0x0, 0x0, 0xe) 07:22:38 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b, 0x0, 0x0, 0x0, 0xe) 07:22:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x3, 0x40, 0x4, 0xffffffe1, 0x1, "f70fa99dfde7607ff19726b9c787b8ddfddac9"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, 0xffffffffffffffff, 0x0) 07:22:38 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x3c, 0x0, 0x0, 0x0, 0xe) 07:22:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount_setattr(r0, &(0x7f0000000380)='./file0\x00', 0x1000, &(0x7f00000003c0)={0xc, 0x80, 0x80000}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x110, r0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28010000120000022dbd7000ffdbdf25093800044e244e23050000000100000009000000ff03000002000000090000000300000005000000", @ANYRES32=0x0, @ANYBLOB="01000080020000007b0900000500000034000100d8d897b90bbb4f0d66f28f91c1f1e82e9ee9c3b39642bc1903b104794f2a4e389bd16d06a1af83acce3b3730a2d3e4b0a8000100d1981931464d18dd3c199dd4e4d2e3c0122986453982911bd2d7ec11823a0616f025dc1ab6c6a00f171fb73753dee2826b0b0a81f0e4d942cdef0fd56c0e30d67ae173097aa87850d671093f53970b47623ac62497d32135fc8058cb0283df39c9ae0dfd7e59f2ab573c92f7497e034f8a65d7b201bc0b678826645004a0e6757909c990ea0f589d149e98e39db79aeaea2805000000000000003de3662322e50c653972"], 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000340)={0x3, 0x3ff, 0xe3, &(0x7f0000000240)=""/227}) 07:22:39 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff1b) 07:22:39 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x3d, 0x0, 0x0, 0x0, 0xe) 07:22:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:39 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x40) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_setup(0x5, &(0x7f0000000080)=0x0) r5 = accept4$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000180)=0x6e, 0x800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) io_submit(r4, 0x2, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000440)="d684cbcd799ac69c8b0c277734bc17037568ef6df835d112c54ea0d861d6458df4d280f3a84174cb44656f16799f36f1c45db3e7ac8ca347a71425a3d4849738922ca05685963b1813561c0a49c2f041caaa7c275122c1798274363f966548694166020f3e5af02d50b5b14649cf721d8deefc087ee2f5bf78928067d6321209be35b4ef", 0x84, 0x3ff, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x2, r5, &(0x7f0000000580)="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", 0xfb, 0x7ff, 0x0, 0x2, r6}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000002e80), 0x8000, 0x28000) r10 = epoll_create1(0x80000) io_submit(r3, 0xa, &(0x7f0000002fc0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xbf2, r5, &(0x7f0000000780)="5a90d4220cd78f57c9fa1d0ddc3a1f35661351d65112d575cee95ffffda31107eb32b7548588f9e8bb21ca3987510bd114117b15e2993e61d4a985cde5410cd9c2d4fa975b14737322c766f5d39b8166b21823362e7b6e8d0ad5df5a45028d67d64fd1a32618a8f15607aae7a88b037287892745e06a9261a4062e7d4f0df718278357389080e916f82a53c32f57e7e00841b84ca3f552b23657db57ab61efcbd37106d872a4948493c2b723a29fad74c1d41b547da5a9d1932ea6acd92ab4a74184b98316", 0xc5, 0x1, 0x0, 0x3, r8}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000880)="4f48e2652f00ac3f5ba92275a3d7cc5a697fa411cbd3d335a8f0d2a1b9dac74827a7221c35a9ba65aa6d2919ea8374daffa340e0a2347028e76bd3794242850a02df2e944c9961396fe9683d8c61295ce5f55b0cccb23cff5c8445aa6434d383e5407aa3e7ec79fc100ea0db95dab8912b5eefeef10417c00ce3ee49198aba95428dbc2bc1", 0x85, 0xfffffffffffffe93, 0x0, 0xea6e49f688b509da, r7}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x3, 0xff, 0xffffffffffffffff, &(0x7f00000009c0)="c5c323431e77ac3274006362696086343e0d730e550261e8fb2e53afa15256dc7f1dd6722f260dd28e629b9a353b115e23f3bf956dd9600d869f7f184f787aabea808f400b908f8c23e07b1281c436434ae88e2fc63fd27dfbcf6c8fa949b7f7a449da2b6d9c6572df0826769f0b9a19a1f4f7c6db0520d700f471cb15c8dd696b216cdc2627760c050ee105fa23e4610ea00795c17890e2740c0c15e7ac84541d9c44", 0xa3, 0x2}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000ac0)="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", 0x1000, 0x0, 0x0, 0x2}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000001b40)="e1a2293aaf86e884126198ab67a7669a83d609bced5018a1786ba7f9fbf84beb1df84ce5b56ee14eedc815648788a67fbf9edbbd4025adbf295189c9846cbab9f6390da3384ccef30b62e9f13bc266dd40e0095c1e51e07a18db6ffcfa191a8f5bfa2c51ce00b643f843268e93cf804e44d09994286107f2762201fa8cc0c90c8cd3e7107fde652359fd58c7a660fd154ed43b7109390ef1002daea2df17980dc5cfe51689c0e19667893b7ab33bde08bc7de25eea70ff7bd2a3edd41aeb421e497a1fe9f62b", 0xc6, 0x64, 0x0, 0x2, r8}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000001c80)="e4d2e3e9539fb1a095e179091599702c8d96eeb5d6aebdafdeda02c0cef7a529f279a179abdd63649101bc24b88dc603498e53d06555bec5abe7bf25c22ce2f68e785a216ead5008003b6fadeb77e27af9335af22ea0611db38e4d98e5533c32206bda10d8fab562c6a8d8d2fa07f7404a6b52549412fe3b12666ca259873af66fb7647093529bf640fc4c4b829266f4a6e2aeaaf8197513cfe9183d05cd40305aecdf3982b2d5c44d49fb1a821c336a73b3726446e381f3721c8b38f825e6d858d2e4404baacb33e1891f7251a9198125eb88bd13f6942b5736f0d24101862d18187e596159fdc6f0f9760a7327fa37b4a5a34a7fb2df30eeb0ec9829a5c2919176f342b0de2d98b070c6e60d30bc2443f6a1bf644ad81e5e21da8f550d0491d01dbba5b84521b1bc4c99ac50c743299aea41df13dc39efbb8ace7e8672c92938f1c2db4d6dcaf4c4570e071c5582c18b435235c6520388345d8640893ce6b2cf9d829982a9d3adbfb032121a4f9a025aa6a547d7b99cdf9d752fc0570d688febb212b8ee18e807f700b68543d1f2e2f06bafb05bb04be8dcf66a2d99705a7b582d6a552ab7b850d10f0fc5fc2f1ecafadf5899f278ece3678596ca0d8d7e1c5caf76d94187c48b50916e6bb3110155d452ebffd0a6a5f884af89d6b54aec3f10b9bb080b58c72ebf8098f8c5b8238728a4d94765ee2ce5d76fd8db2dcd2552ff5a06a160ce871aa1f7e9fa8a29d37133718d8b4f75ad13ae3a31a87c74baf89ef6327fc721c8bb7c4992da0a28b1f265eb08fdc401bf419bb277372667f94e19a95bb6666bb91f5e265c70dcddb3ec061b54de0717e664845c9aa63e50f467946e2da5d478f2996aad679cd9fa697449bd5359483f59b187c171000abf798c7bfb1f51253a1d2ee1599ae74d1e11b11d3e83780eaddd94eeb62578b126c7815b4b8c1e5eacb94b234ba356a57cea54afb31f99f68bd56bdf1fa7f51939613f35d5f03194a8dbb28c3f5891d104cdc987af030bec3fc2d6f1bc33c7f3ee08710c39c37e516b9de5f4d0fa0c681b3e9321bf63b322816b9618d8bd9dc505e87e7407de5bfa3ab2792fd28a5af86038980572bf4d84e2c2fa372d30e22071012c4318b1d8361ba88f9cceac825295f6e0e427b446765c4c20f26c1bd3db9055c90be3446a56c2c8b03a12bceb5e209faef4bdf4db69469ca7cf4bbf85169e6f4563fa5d04bc35af97d44b42a7d7fb74375d352e91f0ad9651ba453cbcaade8b399104630c9e6af115fe216ec1c84ee81377bcdb332d5e2ad9b9afd8205a164749a3e01ad1e6d8a2a1ebfdbe41cd33e753c5ad8053706135eda9aa8b2d938c2ebaf2314da242c939951c1132c144b43bbbe5da1cc8ea30887928bb00af9f3994b97c9a68f223d547bad6a8417798e6d1f8dcbce91e2f9d537adb5ffe947dc39697c08b148d6adbd13da5279dbacce3cfe35dcca1d1d4e61e1affc59d97e7777c94477c4b01d4496e128ba598e3f322c6d67f2e17817fdb132d3e26a461cd3fd506999f30c09e3d8a0ca08a65e08cff187e6de42ba95983a7a02012eeeab883729e09fa5e55a9f1613e9fb9464aafea10a3b6f185ad7a6a485ed105f3be1c91f3132e8fb5f5b2b868139a4c1f46e55bd1f1249a01270e5eac8cc875589429c29c02bdd273429fe77d89001520b4fe0e034d65f7be21e8cd3c27fe86a3fc91c29a7bc2f25354cc63fb9f9b10466527fc007878458a96e19b7ac0568d123c80bd41b7b7052b4102085f69d2c2a34dcdb0ebb2f8ff1376a000693570fc21f39d60672c4369da47cae8e877c57fb5a4106818454bdf250a194046b15c4d1cb7f32e2305b84efd357aaf98aa5a57576e9cb54104444b87374096205fcebf6c8cd2fb93d30f42ad69ed1cc108fe39330d7d0bd2f6c5fd5252410ad4a2e45e282be6747d8c854c4025e40bfdd673aa6de74af01c7810c847e3376beb986bd09b67bbb11653bb68cabcc922f9e42c7e8846541271d73ae2d52c52ffd85b80b620fbd73a24dcd4680458e9d60ee69f8561b7b5c87091c0b2addd883b8f4dd5bf9b37536d536748c3fc7a5697641172402d7bf706faf8b1f084430163b4b5e4d7cdf044b335927cdb512901d3b178e1c54edb8a69d1b874933859a02de11819aae2fe6414f98e9212d0fa4f42a255332f3dee2785b32ddac3bd4ba900d6922151ad48313f220a77988168d452d562c28e0e616b2fe908e0d516e8660229c0665a07f6a8316fbe9fac3eaa0c8750f60810370572a3f37090f961dd0641979d67fdcdb0d013a29282da8abd2e12477aca8218f50fb658db59271d140b0226fc9c1042555ec78563f45cc91c2ca57d763d04b48f8982879682d3ea4998dc50370bd0df558529190b766aa2746add0c79e6e597acfaefb992c100125ddb91772ef98d6f193a2867798c1e0757ceea792e071b0a4a2163110958ce7076e49ff6361666ff490deb1a288867e637fc6a764f02041eb24c15a45a2c7e035f87ad6079ee3a5a779d276c8e8ae7d6d7411db7e22e395fe10c68625e865034b9c78c6aa0dcd62ccfb1c201751f2d1889aea59f71a268b7d54532b79a4f022f63034f132cf0d4cb8f1face6a10d0b1719f0c66cfb830aa8d5a694e367beb223deab76bdc1f32904d465dacf37da6b412cc6efb95c1d1da1dd18e959ed72a7e5a4fe74c3a4c7e63a0c2332bb102a575c97c4a4ad8154f37fde0aa0cbc9af7b940ab34c054c36a990868b1d5596d82f3cd8665ae54e713edd5c60571fdf08c9bde37e3e7ff1d70e107e21787c3ede0125f669d868ead86674ba0957a07842d3013fc2b982e5fea282c5fb38b6cd72228a3a99dd8422b49fac535c7fc2540b5e933836d5c5f60622fff6ed70f279c231d6ed369694fffe50f20f400eb82c4038c55f13d06b8ca2c970b24f5fcfaa2282ca8b512c9ddce1095223d6abbab265a37119ec635a84496f59fb887ac43476a12b3037b5c8f4f13eaf56f9f0655a344665b746d2de85a666080de9a02375798fad73214eccf0f031182b5a1807a9fa97b6eb2c9c81dbaecb66d21c3bf3d186f40fbaf6d3d78632d648a63b0c3a9be5403fc399ed6514dc5ce92810795e6b75ed26a19204430d5d6dae03297f8ee690390d431afdf84d4b3eeeae7003eaa2b99387ebf6c6b94a73f00320347954d565fb1630f990d504fa1abbd3828eba95d40bf02ee54030bfe9b2320c4782ce38a05c6c2316e9158ff394f4317c758a39bfaed2fd15424eabdc9dcffae5a603b379d58fb27fadc58d8d6e692d37a788444a488f93498dfe72a7ac1392166069277892f9af2a4763b442e0535f0ff0d443194cda6d8462b25c896721a5112dd4f1b27901b3de972eb72f4bb64d7d657ff0420b1ea6d5fdb50cbf054714754cffaac6ae4874ff8befa8c71c01c9ed5b8e27d712216490cb0e244365a0ab04d4d543d3b658130909ffc75bfd66675221ae48a7fd59308906e9e81e853190bcf4e01c1d99ccd1184fc53637624214ddf8b66851d166d332d35a166aed1c0797caf15c4a9f388560ba6a8031aefc2652ef8a7e2cc293dad5a7122af879f9c6734d576a116916a37aea8d66687a39bd2a9d19a768dd34d27dfc3786cdd0f155889c5593037d92513c953326baed1bf07262e5e1b59eccf98be7989df302287384d81fca184c87524dcb72fd152a710ecacc2edb4a03cc928daf6a1853ee33b0ded245e0a1ac8411424959b87f885d0e1503a697228967384972962d07215bf65c3691c028076a3176408a57d62fb8967344f7212c913a99a19c68d0b21940d775a80df4cb482c0ec8ea5057939c612926c9084ce5fee78fc9d1fef1060a535f58b87be38f0cb4a003688b8f4e26921b30e06a5aabca0ced20e440b6684f8d9c2ce5a2b10007bc9270b4ae08e1d1c038438a9b785159592e5838409c57795438338d8a70be6c862dc83abbee86e2a10a40d2b9cd57370aa8a7bef8ebd4177d623cb883a9e076214ed0764983c5bc7f6259733e0e278a688817f5e0a717bd0d506ac6384bddcbcfc58960ec92b8afd5aa013e6ef4d6097a6c937d8a5bb04737b9909905ce37b626e37ba23e5dad4820b026690b058e74aa9a5491f535564e8343b519b71f6db13be6e60eff249b704e929ee47bdc09b89bb3be75b33103e9c2cef7dd6c70b4254065e00550aab1067950c84aeb2740a6b5b0707a47d9bfb5417256fababbc6e6b1c526f7882e3cbd58d1c5d8a8bdeeadb38a9eb8754a95963a08672f8a3009f33f0b790f8d07d369197bf8bb0c79c3216c4d5e7ed8f26d827cc40c19ce6e2ea96d623858009b9abde1a659e2d6326d189c0f33b123d973b7725efe20eed767230922f76df42f4d172b5b5bf221d47b474953212a8cb470e1c4162d4bcf88ae5f10c9438176115514e45f3ff444640d70a6a46d9b8be40cb27549f859a97f5decacf45720e4f3d5e9056156aa406eac6c89a4e0b3290c2d9e9ea94d7bfc0f8220c5e73088b8af22723ef5a69afa6cbe39aac6cd7eacf326c4e3d26bbeaf9428900ae87e3072c85c75f78c9a25b8b77381b8cd144a1da499e4b657220e2a8dd4c4b7f8faca33c6621dc45775fc92dc442d1efb37bd258f4f97b4b4085798d0c558de29ca280f4b7a4d2cae4d5f51b7c1438de1a8e1df3f2114408e2406afd7c2f02f3437aed66c8fcfaba28e1565b36d15383634374906a6ee1d395fd5c5653f22b8a077be40710006d3a33f687b9aa27411290738235c7fdbb45840fea321dc38d9ba07d0336d86301907a1c8c321e2078e6901831ecd8aa94c18edca6403d1949e6edf288a11c7adbdb51bb12701b7689553b2500bb90a534b4119d95420e4cdba5a1b2936eec8ad01f81c8c8a2499eaa9dddc1030cf6d2fc2a8bcdee5d8388efe3427ba1065a3fb6fe511d9b2869da3fd9d66088c2310932e8825a0f4f06e9a65337052a8caedba95ddc12e13b8027f5f0c8aefff8a14e56079702d1cff8e8013040a37e1c1009e2a52988333a189600b9d9f7e5a13343c1b248cb9cf05dd02a86ee6f98c90459a6409d8102def7e78a0a0af7f879521d141019d48d02b991fdb5f2ebc6586c4fec0e3120793b313f2ac5758ed09d5083b0e3bd3c999858ee1808b38943ff7c69856ac134c78674249853739e0c3a1f002f526207037f2ca506ac7c1011fb98b6c50a5fac4fcd21b6ea4d11f0202fec9390cbbd60a898e25c08b8dc1a78059d036aea7343aaecf682e21dc85a7dea7cf8dc42e43ec143883aab4ec5e532185e3528f029d0143f349de336cd0b39e1c181945683eba5810734a9755be4afc620c15f48433650ea15cf73f45e69a5ed6698b63e258be3d95d9c8668f94429f22fc53da07146b99db383947e183b72b0786e471961148185c3293488acd1146b6892cc9b6494471438695d0bdb9039d2675fcf28617029e01b435709a6ae345eab2e528b7fe2f251458b81b131c544cb51d78b3c83aaad8580cf11c777f6838842234e95c9a24815bc81bc3286d18d3610b06267bb2c2243a58727ebce60f4c52709ba5833b8523a40803879eff0a08c6a7a9a6b07bbf293bf4d40e1c90607403059ddd4b2452a42b0336ea92c5e404ff34848feea5d75c8b0741e829adb81564d7e99565f7060df7401213b5707d20ac2f2f6a7dcc02041487e74c12945bc566cad5ce601a66bb1079089e4aa6c90406b558560e5e8786f26e17525a6f1d8827836a847f6ee3e2d78083a5439fc4110c51befc97e5f943d169376e6e9b931dce03f5c9836fc4ceb5", 0x1000, 0x8, 0x0, 0x2, r7}, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x1, 0xffc1, 0xffffffffffffffff, &(0x7f0000002d00)="8fbbf5d97c6cc03e5875166a2a5e5d7189a921f9a819fb70", 0x18, 0x1, 0x0, 0x2}, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000002d80)="14d8b015bdd7320d83c2232604dbca988b30a23b1d3f9ed48c78210970590567cd10b5d52ef8d848aadad4b79036ac1880d56441c9d420822bb86c159759", 0x3e, 0x0, 0x0, 0x3, r0}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000002e00)="f55ee1c19a9828ed8db09ca33f213ab035e7485d083ec8d441ff9785eefa8fbc426c3e3ce85565de91d71e31afdb6e37371744ed3271f2c09568e7a2d63d298c6aaeaa1a73057ef668ed", 0x4a, 0x80, 0x0, 0x3, r9}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x3, 0x3, r10, &(0x7f0000003040)="dff6800aa81aae457830c76390677f2f4a18abcf411d58b1287072d596189f4dd0ab2f3bfa66e7d1bf06e3656058971053495e3056c2caa10d514c3bf9d300dccf49d9dfbf56de56be3051236b05c8f4904748cc899a5f2c7d22b5f80fcef817bb965a43f7265758cc52a562a5985d3009b9a08f18", 0x75, 0x10001, 0x0, 0x3}]) sendfile(r0, r8, &(0x7f0000000040)=0x7, 0x8080ffffff12) 07:22:39 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0xfff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:39 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000040)=0x3, 0x101) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r5, &(0x7f0000000180)='./bus/file0\x00', 0x250000, 0x80) 07:22:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0xc02, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x973) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/185, 0xb9}, {&(0x7f0000001280)=""/230, 0xe6}], 0x4, 0xa9, 0x8000) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001440), 0x2, 0x0) sendfile(r0, r2, &(0x7f0000001480)=0x1, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x30000033fe0, 0x0) splice(r4, &(0x7f00000013c0)=0x3, r1, &(0x7f0000001400)=0x8, 0x101, 0x8) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x4, 0x7ff, 0x0, 0xf20a, 0x5, [{0x5, 0xc667, 0x6, '\x00', 0x1002}, {0xfffffffffffff801, 0xe65f, 0x0, '\x00', 0x708}, {0x3ff, 0x5, 0x5d, '\x00', 0x1}, {0x6, 0x0, 0x8000}, {0x1f, 0x1, 0x0, '\x00', 0x2400}]}) 07:22:39 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x3e, 0x0, 0x0, 0x0, 0xe) 07:22:39 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x41, 0x0, 0x0, 0x0, 0xe) 07:22:39 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0xffff, 0xb002) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000000100)=""/104, 0x68}, {&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4, 0xc1, 0xf5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r1, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000418000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r1, 0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x18}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0x10000000) syz_io_uring_submit(r4, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) r8 = syz_io_uring_setup(0xccd, &(0x7f0000000080), &(0x7f000014c000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x2) syz_io_uring_submit(r2, r6, &(0x7f0000002240)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000001240)="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", 0x1000, 0x2, 0x1, {0x0, r9}}, 0x3) 07:22:39 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x7fe) fcntl$setpipe(r1, 0x407, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000100)=""/211, 0xd3}], 0x1, 0x40, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2900, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000080)={0xb1, 0xd9}) splice(r0, 0x0, r6, 0x0, 0x1, 0x0) mmap(&(0x7f00005a5000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r3, 0x0) 07:22:39 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x42, 0x0, 0x0, 0x0, 0xe) 07:22:40 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff1c) 07:22:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x30000033fe0, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000040)) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/216, 0xd8}], 0x1, 0x8, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:40 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x43, 0x0, 0x0, 0x0, 0xe) 07:22:40 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x40) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_setup(0x5, &(0x7f0000000080)=0x0) r5 = accept4$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000180)=0x6e, 0x800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) io_submit(r4, 0x2, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000440)="d684cbcd799ac69c8b0c277734bc17037568ef6df835d112c54ea0d861d6458df4d280f3a84174cb44656f16799f36f1c45db3e7ac8ca347a71425a3d4849738922ca05685963b1813561c0a49c2f041caaa7c275122c1798274363f966548694166020f3e5af02d50b5b14649cf721d8deefc087ee2f5bf78928067d6321209be35b4ef", 0x84, 0x3ff, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x2, r5, &(0x7f0000000580)="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", 0xfb, 0x7ff, 0x0, 0x2, r6}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000002e80), 0x8000, 0x28000) r10 = epoll_create1(0x80000) io_submit(r3, 0xa, &(0x7f0000002fc0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xbf2, r5, &(0x7f0000000780)="5a90d4220cd78f57c9fa1d0ddc3a1f35661351d65112d575cee95ffffda31107eb32b7548588f9e8bb21ca3987510bd114117b15e2993e61d4a985cde5410cd9c2d4fa975b14737322c766f5d39b8166b21823362e7b6e8d0ad5df5a45028d67d64fd1a32618a8f15607aae7a88b037287892745e06a9261a4062e7d4f0df718278357389080e916f82a53c32f57e7e00841b84ca3f552b23657db57ab61efcbd37106d872a4948493c2b723a29fad74c1d41b547da5a9d1932ea6acd92ab4a74184b98316", 0xc5, 0x1, 0x0, 0x3, r8}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000880)="4f48e2652f00ac3f5ba92275a3d7cc5a697fa411cbd3d335a8f0d2a1b9dac74827a7221c35a9ba65aa6d2919ea8374daffa340e0a2347028e76bd3794242850a02df2e944c9961396fe9683d8c61295ce5f55b0cccb23cff5c8445aa6434d383e5407aa3e7ec79fc100ea0db95dab8912b5eefeef10417c00ce3ee49198aba95428dbc2bc1", 0x85, 0xfffffffffffffe93, 0x0, 0xea6e49f688b509da, r7}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x3, 0xff, 0xffffffffffffffff, &(0x7f00000009c0)="c5c323431e77ac3274006362696086343e0d730e550261e8fb2e53afa15256dc7f1dd6722f260dd28e629b9a353b115e23f3bf956dd9600d869f7f184f787aabea808f400b908f8c23e07b1281c436434ae88e2fc63fd27dfbcf6c8fa949b7f7a449da2b6d9c6572df0826769f0b9a19a1f4f7c6db0520d700f471cb15c8dd696b216cdc2627760c050ee105fa23e4610ea00795c17890e2740c0c15e7ac84541d9c44", 0xa3, 0x2}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000ac0)="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", 0x1000, 0x0, 0x0, 0x2}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000001b40)="e1a2293aaf86e884126198ab67a7669a83d609bced5018a1786ba7f9fbf84beb1df84ce5b56ee14eedc815648788a67fbf9edbbd4025adbf295189c9846cbab9f6390da3384ccef30b62e9f13bc266dd40e0095c1e51e07a18db6ffcfa191a8f5bfa2c51ce00b643f843268e93cf804e44d09994286107f2762201fa8cc0c90c8cd3e7107fde652359fd58c7a660fd154ed43b7109390ef1002daea2df17980dc5cfe51689c0e19667893b7ab33bde08bc7de25eea70ff7bd2a3edd41aeb421e497a1fe9f62b", 0xc6, 0x64, 0x0, 0x2, r8}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000001c80)="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", 0x1000, 0x8, 0x0, 0x2, r7}, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x1, 0xffc1, 0xffffffffffffffff, &(0x7f0000002d00)="8fbbf5d97c6cc03e5875166a2a5e5d7189a921f9a819fb70", 0x18, 0x1, 0x0, 0x2}, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000002d80)="14d8b015bdd7320d83c2232604dbca988b30a23b1d3f9ed48c78210970590567cd10b5d52ef8d848aadad4b79036ac1880d56441c9d420822bb86c159759", 0x3e, 0x0, 0x0, 0x3, r0}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000002e00)="f55ee1c19a9828ed8db09ca33f213ab035e7485d083ec8d441ff9785eefa8fbc426c3e3ce85565de91d71e31afdb6e37371744ed3271f2c09568e7a2d63d298c6aaeaa1a73057ef668ed", 0x4a, 0x80, 0x0, 0x3, r9}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x3, 0x3, r10, &(0x7f0000003040)="dff6800aa81aae457830c76390677f2f4a18abcf411d58b1287072d596189f4dd0ab2f3bfa66e7d1bf06e3656058971053495e3056c2caa10d514c3bf9d300dccf49d9dfbf56de56be3051236b05c8f4904748cc899a5f2c7d22b5f80fcef817bb965a43f7265758cc52a562a5985d3009b9a08f18", 0x75, 0x10001, 0x0, 0x3}]) sendfile(r0, r8, &(0x7f0000000040)=0x7, 0x8080ffffff12) 07:22:40 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:40 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000040)=0x3, 0x101) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r5, &(0x7f0000000180)='./bus/file0\x00', 0x250000, 0x80) 07:22:40 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x44, 0x0, 0x0, 0x0, 0xe) 07:22:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/96, 0x60}], 0x2, 0x4, 0x7fff) mmap(&(0x7f0000350000/0x4000)=nil, 0x4000, 0x1000004, 0xd4a204775b48d2db, r0, 0xa23e4000) 07:22:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a305972e90ff6d84b0fa2d060fc7fa3328d06af17c78ae102a22426489cf400ff938d3df12e2238808a8a6c848c8be5ebc51d0a21a5a8f3e1d0e80b693fd4a313ec27c37c3af8727b1e42649dfaa7aac95738235a442faeeda1bab187cdcda4e54e651900c47737001255d7b112bc085dcd8ba5ff9bc524001d2b9bb6"], 0x7f) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x30000033fe0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x100, 0x4, 0x3, 0x3, 0x5, 0x80}, {0x6, 0x4, 0x0, 0x1e06, 0x6, 0xc00000}], ['\x00', '\x00', '\x00']}) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1, 0xd) 07:22:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:40 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x45, 0x0, 0x0, 0x0, 0xe) 07:22:40 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x46, 0x0, 0x0, 0x0, 0xe) 07:22:41 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff1d) 07:22:41 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x47, 0x0, 0x0, 0x0, 0xe) 07:22:41 executing program 1: r0 = dup(0xffffffffffffffff) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0xc) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x4010, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/164, 0xa4}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000000)=""/9, 0x9}, {&(0x7f0000000200)=""/216, 0xd8}], 0x4, 0x3, 0xc000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x30000033fe0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r3, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040081}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1fffffff00000000000067000000080003a8375ce2d80d70545328fdf27a7bec60a36c89c677dbb707375f1d6d213711ada25715835ada309856bdc05c2be19527bf49c10ac5617c223c5a5077fb9201e23f11572d21fa1005a02e6b8526af24ef769cc59d10bf1e6bc862a7319dd69a775e10568ca7974f92d2798e92fe1dc842d0af430774637528f98f2c617b377287952077564967511569b8ebdb6556b7e53151f6bec93a00"/177, @ANYRESOCT, @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1fffffff0005000400006700000008000300dec2b099e3963d751a8db8aeb75a869876ab681a99a7a10df7165b8b5da2ae56319191d592c7f2de219967cf126ea12639ea9122a1cd8cdfd29d401c5fa93302c4b424d64ce66084bbbf605155e6ac1aa380a8b506b1aacd44c77480fca7814d62d9551c7c257454b12960c2c0f18accf85e193568fc3db454d5ce5dce4a37b6a00d1d3ef578635408e38c77c255e76bce68aa5c8380dc71f74155", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c4"], 0x30}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x8000) 07:22:41 executing program 0 (fault-call:6 fault-nth:0): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 481.130991][T29564] FAULT_INJECTION: forcing a failure. [ 481.130991][T29564] name failslab, interval 1, probability 0, space 0, times 0 [ 481.145064][T29564] CPU: 1 PID: 29564 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 481.149370][T29565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.153825][T29564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.153839][T29564] Call Trace: [ 481.153846][T29564] dump_stack_lvl+0xb7/0x103 07:22:41 executing program 3: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) renameat2(r0, &(0x7f0000000040)='./bus\x00', r0, &(0x7f0000000080)='./bus\x00', 0x6) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) fallocate(r1, 0x51, 0x1, 0x9) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) lseek(r2, 0x7, 0x1) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 481.153867][T29564] dump_stack+0x11/0x1a [ 481.185378][T29564] should_fail+0x23c/0x250 [ 481.189820][T29564] __should_failslab+0x81/0x90 [ 481.194765][T29564] should_failslab+0x5/0x20 [ 481.199308][T29564] kmem_cache_alloc_bulk+0x40/0x340 [ 481.204758][T29564] io_submit_sqes+0x491/0xe50 [ 481.209980][T29564] ? get_pid_task+0x8b/0xc0 [ 481.210682][T29573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.214633][T29564] __se_sys_io_uring_enter+0x1c7/0xa20 [ 481.214659][T29564] ? __fget_light+0x21b/0x260 [ 481.234554][T29564] ? fput+0x2d/0x130 [ 481.238450][T29564] __x64_sys_io_uring_enter+0x74/0x80 [ 481.243915][T29564] do_syscall_64+0x3d/0x90 [ 481.249213][T29564] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 481.255306][T29564] RIP: 0033:0x4665e9 [ 481.259189][T29564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:22:41 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nl=@unspec, @l2={0x1f, 0x3, @none, 0x2, 0x2}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='wg1\x00', 0x80000001, 0x6, 0x96}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a00e7"], 0x1c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/drm', 0x61a800, 0x40) write$binfmt_misc(r4, &(0x7f0000000200)={'syz1', "92270563fc6547edb23dca16d8e811e246fa4196e924b26a9361f2065c9176dc88e7514b4037475aae5950eddf6cf0787da2acb86dcdab46b719eb875c027ddacdf60d5421b6407f0de96123fb6b547e865ed0c37d0b27e6cdd0fad8ef6d12b4f8a6e95503a3960aa5a97aba362ecb03f2350d88b0f04e07664cccd6e54241ced10111a6fbfb675570d08867ca1e357e792b744111c3d0ec6867ea5a9aa49104872c8899a8bddf0df4ee1e71"}, 0xb0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 07:22:41 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x48, 0x0, 0x0, 0x0, 0xe) 07:22:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000092000/0x11000)=nil, 0x11000, 0xa, 0x10010, r0, 0xeefd000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 481.279343][T29564] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 481.287892][T29564] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 481.296206][T29564] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 481.305096][T29564] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 481.313709][T29564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.322466][T29564] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:41 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x7000) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) r0 = shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x4000) r2 = shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x2000) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x2000) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmget(0x3, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/66) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000080)=""/123) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/226) r4 = shmget(0x3, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000fed000/0x13000)=nil, 0x5000) 07:22:41 executing program 2: r0 = timerfd_create(0x9, 0x0) close(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) munmap(&(0x7f0000012000/0x1000)=nil, 0x1000) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2c0400, 0x150) clock_gettime(0x0, &(0x7f00000000c0)) socket(0x8, 0x5, 0x2) timerfd_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000040)={0x8, 0x80000000, 0x0, 0x200, 0x0, 0xfe0, 0x0, 0x5}, &(0x7f0000000240)={0x8, 0xb59, 0x9, 0x1, 0x1, 0x0, 0x91, 0x7}, &(0x7f0000000280)={0x5, 0x1, 0xfffffffffffffffa, 0x0, 0x100, 0x894, 0x7468}, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000300)={[0x8]}, 0x8}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) close_range(r2, r1, 0x2) timerfd_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000080)) 07:22:41 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x49, 0x0, 0x0, 0x0, 0xe) 07:22:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x49e400, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) [ 481.458613][ T25] kauditd_printk_skb: 15 callbacks suppressed [ 481.458626][ T25] audit: type=1326 audit(1628148161.359:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=29595 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 481.495952][ T25] audit: type=1326 audit(1628148161.399:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=29595 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=11 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 481.522373][ T25] audit: type=1326 audit(1628148161.399:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=29595 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 481.562498][ T25] audit: type=1326 audit(1628148161.399:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=29595 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 481.598858][ T25] audit: type=1326 audit(1628148161.399:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=29595 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 481.623904][ T25] audit: type=1326 audit(1628148161.399:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=29595 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 481.649120][ T25] audit: type=1326 audit(1628148161.399:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=29595 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 481.674138][ T25] audit: type=1326 audit(1628148161.399:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=29595 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 481.699056][ T25] audit: type=1326 audit(1628148161.449:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=29595 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 [ 481.723594][ T25] audit: type=1326 audit(1628148161.449:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=29595 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x7ffc0000 07:22:42 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff1e) 07:22:42 executing program 1: clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) futex(&(0x7f0000001300)=0x1, 0x80, 0x1, &(0x7f0000001380)={r0, r1+60000000}, &(0x7f00000013c0)=0x1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f00000000c0)=""/205, 0xcd}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/205, 0xcd}], 0x4, 0x2, 0xffffff7f) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r2, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0xae) 07:22:42 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x4a, 0x0, 0x0, 0x0, 0xe) 07:22:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r0, r1/1000+60000}, {0x0, 0xea60}}) clock_gettime(0x3, &(0x7f0000000180)) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='f2fs\x00', 0x100420, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x884463, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x6, 0x6, &(0x7f0000001600)=[{&(0x7f0000000280)="dca9a4033007a7e2e97eef08456ff6f3db33aa2c189ea2d5fdece5ec773340bdbeda59ab6aab7dccab8df1c85909", 0x2e, 0x7}, {&(0x7f00000002c0)="955152f39353c698abd7df820cb8af9a117daa1b3944990d6ea86ee1e04deeac0ea10c7e59c36c08934184d1620189a2fc2930d4fc1e5dacf524bc1e741dcce9fd623878a1114a7266169c85db222c19bb2f30be1af5c6bb3238c60ed956d324a5bb88d0eb49be240dd5ab38d2c2aad095834bd9d40dcb870b1a589043cac9f4b021fe0f91339db636dff6722391d4a22bf09d0877cbf537697776d333d09d99d2a812b1654b7b8f4010b7be6f1f11c830e7a7003ae1b85090d2d94f7028bc11a84a64f7eb4aa255fc46aa41395b389294937ff2c9400da0da9cd3a20acb0f0d5224615f00986c71bf0b1e", 0xeb, 0x7670}, {&(0x7f00000003c0)="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", 0x1000, 0x62}, {&(0x7f00000013c0)="700aa893538d57abfd1c", 0xa, 0x6}, {&(0x7f0000001400)="79ad500c9f29922e268048fa2cc76e3d11f3b74dd1f8584f4e7f763e43090a2c5afb87bd6e639b1f7711102920aedbbddfc42b5fea46d7630114a1f143d865da914272815322e42260668d90510ba449738a841d5bb4241ec7bf678701d480c173ff006cb1492c2c005be379767788e2a35807350a3b3ea3fe59aa0d72fea8cba12b8b33bbcb924a2af22bf68ddfb3ba1e750bc0916a0cf2057edc83272cf86888b9237a4f52cca318343dd7e083ef01495e04d077802bd29b85f99d37dcc007ac0074bdeb61913335a18f37776f6cc6a2f8537c02b180a5a4b43438f8736c77b192f4f844f81c5c91f340c9be827db8", 0xf0, 0x3f}, {&(0x7f0000001500)="db00316f605acd0b4edccbfb20f4cd54a6baba001e715944ce0fbcc35457e93623994c535b87b3ab9a1b8c867fb194792b319e45f1fd24d1bd3c2bdb1eea58992cba9f9534e0a1a5d89d66f8583fef76e6c3a3fb221ba2411ddafffeb35c3a1c3a692aef940da523d372595c51d7a2180719ebcb7761e37dce7e563c79b2cfb16ec407ccaa5637b8b95d65a684a4a4d7f428be74b82b6cc7b98f6cd14de7b6b46552e14e57587d8f3ae52f1b133ffeebb6fb7589312fcfe1c2711df8e3a4b0e81df2d2b990a8bbb0ea8506428fbe", 0xce, 0x9}], 0x88, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"]) 07:22:42 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) open(&(0x7f0000000040)='./file0\x00', 0x2400, 0x9) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x30000033fe0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:42 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x4b, 0x0, 0x0, 0x0, 0xe) 07:22:42 executing program 0 (fault-call:6 fault-nth:1): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:42 executing program 2: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) renameat2(r0, &(0x7f0000000040)='./bus\x00', r0, &(0x7f0000000080)='./bus\x00', 0x6) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) fallocate(r1, 0x51, 0x1, 0x9) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) lseek(r2, 0x7, 0x1) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:42 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x4c, 0x0, 0x0, 0x0, 0xe) [ 482.170587][T29669] FAULT_INJECTION: forcing a failure. [ 482.170587][T29669] name failslab, interval 1, probability 0, space 0, times 0 [ 482.183261][T29669] CPU: 0 PID: 29669 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 482.192783][T29669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.203151][T29669] Call Trace: [ 482.206628][T29669] dump_stack_lvl+0xb7/0x103 [ 482.213304][T29669] dump_stack+0x11/0x1a [ 482.219122][T29669] should_fail+0x23c/0x250 [ 482.223825][T29669] __should_failslab+0x81/0x90 [ 482.229165][T29669] should_failslab+0x5/0x20 [ 482.236466][T29669] kmem_cache_alloc_node+0x58/0x2b0 [ 482.242436][T29669] ? __alloc_skb+0xed/0x420 [ 482.247797][T29669] __alloc_skb+0xed/0x420 [ 482.252797][T29669] alloc_skb_with_frags+0x90/0x390 [ 482.258349][T29669] sock_alloc_send_pskb+0x436/0x4e0 [ 482.263560][T29669] unix_dgram_sendmsg+0x478/0x1600 [ 482.268767][T29669] ? selinux_socket_sendmsg+0x7e/0x140 [ 482.274616][T29669] ? __wake_up+0x8d/0xc0 [ 482.278980][T29669] ? unix_dgram_poll+0x3e0/0x3e0 [ 482.284160][T29669] sock_sendmsg+0x75/0xa0 [ 482.288583][T29669] io_issue_sqe+0x1f4f/0x64b0 [ 482.293439][T29669] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 482.299430][T29669] ? __list_del_entry_valid+0x54/0xc0 [ 482.305044][T29669] ? rmqueue_pcplist+0x145/0x1d0 [ 482.310074][T29669] ? select_collect+0x100/0x2b0 [ 482.314951][T29669] ? mntput_no_expire+0x64/0x730 07:22:42 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x4d, 0x0, 0x0, 0x0, 0xe) [ 482.319948][T29669] ? get_page_from_freelist+0x54e/0x820 [ 482.325860][T29669] ? fget_many+0x178/0x1a0 [ 482.330374][T29669] __io_queue_sqe+0xe7/0x360 [ 482.335262][T29669] io_submit_sqe+0x1695/0x3400 [ 482.340340][T29669] ? kmem_cache_alloc_bulk+0x289/0x340 [ 482.345984][T29669] io_submit_sqes+0x822/0xe50 [ 482.350838][T29669] __se_sys_io_uring_enter+0x1c7/0xa20 [ 482.356381][T29669] ? __fget_light+0x21b/0x260 [ 482.361154][T29669] ? fput+0x2d/0x130 [ 482.365149][T29669] __x64_sys_io_uring_enter+0x74/0x80 [ 482.371314][T29669] do_syscall_64+0x3d/0x90 [ 482.375758][T29669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 482.382996][T29669] RIP: 0033:0x4665e9 [ 482.387926][T29669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 482.410149][T29669] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 07:22:42 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x4e, 0x0, 0x0, 0x0, 0xe) [ 482.418762][T29669] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 482.426733][T29669] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 482.434817][T29669] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 482.442959][T29669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.450924][T29669] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:42 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x4f, 0x0, 0x0, 0x0, 0xe) 07:22:43 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff21) 07:22:43 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x50, 0x0, 0x0, 0x0, 0xe) 07:22:43 executing program 0 (fault-call:6 fault-nth:2): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:43 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x6d0100, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x448f02, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0/../file0\x00', 0x4000, 0x4b) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r1, 0x0) 07:22:43 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff1d) 07:22:43 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000040), 0xfdef}]) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x30000033fe0, 0x0) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f00000002c0)="ddda48db1375bba29be7b63822c2ae8e266174fc9c800d258388d0ea49999ff62e6fcc941d9bb5807a9ff7ec6b7121c5648105b8edffa2bf33ebdac9c8114e669edac12820919017974da654bfcc9f1ea26c6d8e26", 0x55, 0x9, 0x0, 0x2, r5}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 483.148269][T29747] FAULT_INJECTION: forcing a failure. [ 483.148269][T29747] name failslab, interval 1, probability 0, space 0, times 0 [ 483.160962][T29747] CPU: 0 PID: 29747 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 483.169926][T29747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.179979][T29747] Call Trace: [ 483.183267][T29747] dump_stack_lvl+0xb7/0x103 [ 483.187885][T29747] dump_stack+0x11/0x1a [ 483.192214][T29747] should_fail+0x23c/0x250 [ 483.196634][T29747] __should_failslab+0x81/0x90 [ 483.201500][T29747] should_failslab+0x5/0x20 [ 483.206089][T29747] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 483.211817][T29747] ? __kmalloc_node_track_caller+0x30/0x40 [ 483.217663][T29747] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 483.223145][T29747] __kmalloc_node_track_caller+0x30/0x40 [ 483.228932][T29747] ? alloc_skb_with_frags+0x90/0x390 [ 483.234407][T29747] __alloc_skb+0x187/0x420 [ 483.238996][T29747] alloc_skb_with_frags+0x90/0x390 07:22:43 executing program 1: shmat(0xffffffffffffffff, &(0x7f00004cc000/0x4000)=nil, 0x2000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r1, r1, 0x0) close(0xffffffffffffffff) fadvise64(r0, 0x2, 0x493f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x30000033fe0, 0x0) fallocate(r2, 0x0, 0x6ba1, 0x300000000) splice(r0, 0x0, r1, 0x0, 0x30000033fe0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x151803, 0xf8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r4, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, &(0x7f00000000c0)=0x101, r0, &(0x7f0000000100)=0x4, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r5, 0x0, r7, 0x0, 0x30000033fe0, 0x0) unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x200) [ 483.244157][T29747] sock_alloc_send_pskb+0x436/0x4e0 [ 483.250618][T29747] unix_dgram_sendmsg+0x478/0x1600 [ 483.256565][T29747] ? selinux_socket_sendmsg+0x7e/0x140 [ 483.262137][T29747] ? __wake_up+0x8d/0xc0 [ 483.266385][T29747] ? unix_dgram_poll+0x3e0/0x3e0 [ 483.271376][T29747] sock_sendmsg+0x75/0xa0 [ 483.275719][T29747] io_issue_sqe+0x1f4f/0x64b0 [ 483.280420][T29747] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 483.286362][T29747] ? __list_del_entry_valid+0x54/0xc0 [ 483.291802][T29747] ? rmqueue_pcplist+0x145/0x1d0 07:22:43 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x51, 0x0, 0x0, 0x0, 0xe) [ 483.296743][T29747] ? select_collect+0x100/0x2b0 [ 483.302034][T29747] ? mntput_no_expire+0x64/0x730 [ 483.307000][T29747] ? get_page_from_freelist+0x54e/0x820 [ 483.312553][T29747] ? fget_many+0x178/0x1a0 [ 483.317067][T29747] __io_queue_sqe+0xe7/0x360 [ 483.321824][T29747] io_submit_sqe+0x1695/0x3400 [ 483.326594][T29747] ? kmem_cache_alloc_bulk+0x289/0x340 [ 483.332135][T29747] io_submit_sqes+0x822/0xe50 [ 483.336822][T29747] __se_sys_io_uring_enter+0x1c7/0xa20 [ 483.342389][T29747] ? __fget_light+0x21b/0x260 [ 483.347096][T29747] ? fput+0x2d/0x130 [ 483.351338][T29747] __x64_sys_io_uring_enter+0x74/0x80 [ 483.356830][T29747] do_syscall_64+0x3d/0x90 [ 483.361260][T29747] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 483.367151][T29747] RIP: 0033:0x4665e9 [ 483.371043][T29747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 483.390919][T29747] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 07:22:43 executing program 1: select(0x3, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x30000033fe0, 0x0) clock_gettime(0x0, &(0x7f0000001140)={0x0, 0x0}) select(0x40, &(0x7f0000001080)={0x3, 0x2, 0x81, 0x6, 0x0, 0xab8b, 0x1f, 0x2}, &(0x7f00000010c0)={0x80, 0x5, 0x8, 0x800, 0x5, 0x4, 0x52}, &(0x7f0000001100)={0x6, 0x4, 0x7ff, 0x20, 0x9, 0x6c879907, 0x1, 0x4}, &(0x7f0000001180)={r3, r4/1000+60000}) r5 = openat(r1, &(0x7f0000001040)='./file0/file0\x00', 0x41, 0xc1) mmap(&(0x7f000045e000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r5, 0x7cec9000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000040)={{r6}, "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"}) 07:22:43 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x52, 0x0, 0x0, 0x0, 0xe) [ 483.399372][T29747] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 483.407418][T29747] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 483.415703][T29747] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 483.423853][T29747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.433063][T29747] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000000, 0x50, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0xc0040) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/153, 0x99}, {&(0x7f00000001c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000400)=""/252, 0xfc}], 0x5, 0x8, 0x9) close(r3) splice(r2, 0x0, r3, 0x0, 0x30000033fe0, 0x0) mmap(&(0x7f00005ca000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x16891000) flistxattr(r3, &(0x7f00000000c0)=""/46, 0x2e) creat(&(0x7f0000000040)='./file0\x00', 0xe8) 07:22:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x228102, 0x109) r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x6, 0x14000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) 07:22:43 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff22) 07:22:43 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r5 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)=[0xffffffffffffffff], 0x1) sendfile(r1, r4, 0x0, 0x8400fffffffb) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x7f, 0x8, &(0x7f0000000840)=[{&(0x7f0000000240)="ca8e9b776070bf18e6202432090211a4aa82f94cb8ae299298c96603e35bb926d8952f79b92cb642e5f01784097386e9271c802e7eefdbe721a8f612075773d5efce78b0d2c553e1948393d89f80e73f055fccb2b7a808e0fae6", 0x5a, 0xfff}, {&(0x7f0000000440)="104c08d26a1b7de57dd3efee570bb9929654f7bae597df8f0e2e655f963644043294a587b9376d7bd4e99c0698e5209ef76449be15de849024e0b8dd25003661fe40542f1d220400a91c216e84762620b2f3a0028cdadeadefb77797c268f02c3d5e5ff13dcbe1873533c1c34cbc6550884dbbdb7fde099a19334bec96295f54e84c1bd0e53c3367384a4ef1faa75eef53", 0x91, 0x5}, {&(0x7f0000000080)="5b14423e686b01b09cb0c9b7307c77e10ee16f4274dd02ef9c9674b03be238cc11e21dc925e5a241ed5adf6ee4127e1a7ac2e9", 0x33, 0x9}, {&(0x7f0000000580)="26f86bc557a450a1382c5bd1b237dfab4d9c1ac54c98b6ad8a3d90a4693b0d66b2a4d22e689307727edfcffc085eca5908c94b64d6f0075a619136fd1f4018fd5c791ed6ea6f3a4fa2325288ac87bac14b63ec2b0931ad", 0x57, 0x4}, {&(0x7f0000000600)="c7d8a4aa4cfb4a67ba1e903581250f11eb39dbf79dd54e712d93f72735fe29bfbcff115eb4281c28028e62f431b4ff7f14bbad0f269cd99847caaf9a5caf727d83eea5c7bad4e3788a2604d815e5af", 0x4f, 0x3eb}, {&(0x7f0000000680)="d3e639e6d3db81b5709ee094ca729289a3c89ce3e898c6455ad4068e1bf4c82573b4e3e4df4a01f8320f0886a5d93bebc7a903e8655095607aa40414762c25d70cac3bafbe1dca291c3057116a2a709cde66d2738a72a9dbab7dfc0592cffe148c6fc7c843df868389462340", 0x6c, 0xff}, {&(0x7f0000000180)="3fe19b7d25ca8af2529b9d0a83238952f5551779829b6114cbd9d362138769", 0x1f}, {&(0x7f0000000780)="5e0eee6f78add68c596e08da05aa9c328495211b39058e89fba1111b228c2c863fcf8f23073b06d03be0f2c1c89341bcf1844125deca2c2f76198f390cc4d17b7a310e9afbf27dbaffea4795d30b7693a6052ce8c7ac2946d1a0b3a51229765efe284fb862262c9dbd3584a79f938fa8d61985679d25b00c391d35dac109a0bc0299ca1cafab124d1309084bbae65d61e16dc8e47f9c0b764bd40b875f5724", 0x9f, 0x923}], 0x2000, &(0x7f0000000900)={[{@mode={'mode', 0x3d, 0x2}}, {@unhide}, {@map_normal}, {@uid={'uid', 0x3d, 0xee00}}, {@mode={'mode', 0x3d, 0x4}}, {@hide}, {@map_normal}, {@map_normal}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, '}w$\x04:['}}, {@audit}, {@subj_user}]}) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:43 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x53, 0x0, 0x0, 0x0, 0xe) 07:22:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = gettid() tkill(r1, 0x7) syz_open_procfs(r1, &(0x7f0000000040)='totmaps\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:44 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x15, &(0x7f0000000080)="03", 0x1) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f00000000c0)="28f093c7cadfd6400904fc44e4e97bede9f438b41a611b2b29d69fa4ea49382b2abea4555c1cd07aaef7a7129450912a7a2891e283ba643496f15ed21f99db204352b5a025228f465df4d5a4bbde048cedb9d79829e1c298e4b6a86835fbe31847ab7ee8a5b879e66c96d992bcaf393ae38fb56f481d42f5a4ecf2a1cb08145741e43f3206bd523efc490af3a3cfe12f2266240fa50bcc96684941724c13b81f90418133bc7ec3e6f897af92dfe30b63ddc750c5a6b255849c4319d93264e3d1bd2d9d4ffe16bbf4a9fd50bf0c1daf34e2bf2f196d81bd8be192151893f66c5f2ec663d19f6089", 0xe7, 0xa1, 0x0, 0x4}, &(0x7f0000000040)) 07:22:44 executing program 0 (fault-call:6 fault-nth:3): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:44 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x54, 0x0, 0x0, 0x0, 0xe) 07:22:44 executing program 1: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc0) r0 = socket(0xf, 0x80000, 0x2f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = syz_io_uring_complete(0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x100, 0x7, 0x6, 0x80000000}, {0x9, 0x4b, 0xf8, 0x1}, {0x4, 0xcd, 0x7, 0x80000001}, {0x8000, 0x3, 0x1f, 0x8}]}, 0x10) getgroups(0x2, &(0x7f0000000040)=[0x0, r1]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x20010, r3, 0x0) 07:22:44 executing program 2: timer_create(0x4, &(0x7f0000000280)={0x0, 0x1b, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000002c0)=0x0) timer_delete(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) syz_io_uring_setup(0x6b17, &(0x7f0000000100)={0x0, 0x89, 0x8, 0x1, 0x186, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3287c8a6d9e1b9b3, 0x0, 0x0, 0xbcad, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}, 0x3) [ 484.146409][T29813] FAULT_INJECTION: forcing a failure. [ 484.146409][T29813] name failslab, interval 1, probability 0, space 0, times 0 [ 484.159097][T29813] CPU: 1 PID: 29813 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 484.168189][T29813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.178410][T29813] Call Trace: [ 484.181775][T29813] dump_stack_lvl+0xb7/0x103 [ 484.187155][T29813] dump_stack+0x11/0x1a [ 484.191369][T29813] should_fail+0x23c/0x250 07:22:44 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x55, 0x0, 0x0, 0x0, 0xe) [ 484.195793][T29813] __should_failslab+0x81/0x90 [ 484.200553][T29813] should_failslab+0x5/0x20 [ 484.205047][T29813] kmem_cache_alloc_node+0x58/0x2b0 [ 484.210255][T29813] ? __alloc_skb+0xed/0x420 [ 484.214789][T29813] __alloc_skb+0xed/0x420 [ 484.219159][T29813] alloc_skb_with_frags+0x90/0x390 [ 484.219189][T29813] ? avc_has_perm+0xc8/0x150 07:22:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@ng={0x4, 0x11, "30d3"}, 0x4, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) r1 = fsmount(r0, 0x0, 0x75) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x0, 0x3, 0x2, 0xfffffffc, 0xcd, "59793710f4837f6c2688b20fa89c65dd5d959f80c4259947ea87979da796411013bb33136d042850c04d0f74b801fce022727b5978ca850eee4884804478f616702d703dc8a23207e15da2e1c3def246eedad3cb5c018e99b5fd18498025c746b72ad68cf5063d2926de162fabd0bebfe8a365eec1b3e6d544e4cb3ef40144a47833174eec72cfbf0653e44dbabb9a9259b87adc1eaeb19148f173fbd9e15ca8cfc1f3ae760305d38aff2840903c1fff8e5faf12fb3c0a41a24ae1bd9a7cbcb6c6006ba1d9b77861ad1b5f4e6d"}, 0xd6, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000040)={r1, r0, 0x2}) 07:22:44 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x56, 0x0, 0x0, 0x0, 0xe) [ 484.219207][T29813] sock_alloc_send_pskb+0x436/0x4e0 [ 484.219223][T29813] unix_dgram_sendmsg+0x478/0x1600 [ 484.219246][T29813] ? selinux_socket_sendmsg+0x7e/0x140 [ 484.219312][T29813] ? unix_dgram_poll+0x3e0/0x3e0 [ 484.219349][T29813] sock_sendmsg+0x75/0xa0 [ 484.219367][T29813] io_issue_sqe+0x1f4f/0x64b0 [ 484.219386][T29813] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 484.219406][T29813] ? __list_del_entry_valid+0x54/0xc0 [ 484.219500][T29813] ? rmqueue_pcplist+0x145/0x1d0 [ 484.219520][T29813] ? mntput_no_expire+0x64/0x730 [ 484.219537][T29813] ? get_page_from_freelist+0x54e/0x820 [ 484.219554][T29813] ? fget_many+0x178/0x1a0 [ 484.219605][T29813] __io_queue_sqe+0xe7/0x360 [ 484.219623][T29813] io_submit_sqe+0x1695/0x3400 [ 484.219646][T29813] ? kmem_cache_alloc_bulk+0x289/0x340 [ 484.219667][T29813] io_submit_sqes+0x822/0xe50 [ 484.219687][T29813] __se_sys_io_uring_enter+0x1c7/0xa20 [ 484.219703][T29813] ? __fget_light+0x21b/0x260 [ 484.219791][T29813] ? fput+0x2d/0x130 [ 484.219811][T29813] __x64_sys_io_uring_enter+0x74/0x80 [ 484.219832][T29813] do_syscall_64+0x3d/0x90 [ 484.219852][T29813] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 484.219953][T29813] RIP: 0033:0x4665e9 [ 484.219967][T29813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 484.219983][T29813] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 484.220002][T29813] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 484.220014][T29813] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 484.220027][T29813] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 484.220039][T29813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.220059][T29813] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:44 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff23) 07:22:45 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x3, 0x2, &(0x7f0000000080)=[{&(0x7f0000000780)="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", 0x1000, 0x8}, {&(0x7f0000000440)="2a9e00b871cddbe3ec87c54351f60b0f5f059812a98f76c33e4acbce593960087083b8f9d6bb7e0d93b29b8f01d48badda94732bf647136637864649f292284d9c232a063393960fca9cbdcaf2f14768e731f6c62ea6fc190c120feb5606306b4f736f78530d2638aadfd61e7b65567beec2855841aac5cdbefac070f37fda6703555a28c05b50da62fd16bb7d2bd35e1ab5ef59a0b573af84a60ad94362e366c8868fa22f5c1c6ca677d132c179928068105129cf876c90544de7802f3af25c3c922d5beedb21eb0da3a7914704cad914a8af56c3bb0793548fd8395b", 0xdd, 0x3}], 0x1000000, &(0x7f0000000580)={[{@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@nodots}, {@dots}], [{@appraise_type}, {@permit_directio}, {@uid_gt}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_gt}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@dont_measure}]}) sendfile(r4, r2, &(0x7f0000000180)=0x1ff, 0xfffffffffffffffd) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x11b400, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x43c, 0x3f3, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x2, 0x3b, [0xffff, 0x3307, 0x2, 0x1ff, 0x3, 0x1, 0x4, 0x5, 0x8, 0xd53, 0x66, 0x40, 0xd1, 0x80, 0x8, 0x80000001, 0x0, 0x6, 0x3, 0x0, 0x2, 0x8, 0x1, 0x7, 0x100, 0x9, 0x6, 0xfffffbff, 0x4, 0x0, 0x47, 0x2, 0x912e, 0x1, 0xc0, 0x10001, 0x4, 0x20f2, 0x10001, 0x10001, 0x6, 0x2, 0x40000000, 0x0, 0x142, 0x8, 0x81, 0x3, 0x8001, 0x9b, 0x1f, 0xffff, 0x800, 0x7, 0x8001, 0x5b8, 0x3, 0x1, 0x2, 0x0, 0x4, 0x3, 0x7ff, 0x8000], [0xffffffff, 0x0, 0x1, 0x9, 0x1f, 0x4, 0x2, 0x1, 0x5bba89ed, 0x2, 0x81, 0x6, 0x9, 0x181a, 0x10001, 0x8, 0x0, 0x0, 0xfffeffff, 0xfffffdcd, 0x7, 0x5, 0x3, 0x2, 0x91, 0x1ff, 0x1, 0x800, 0x40000, 0x1, 0x1000, 0x1ff, 0x200, 0x0, 0x1258, 0x3, 0x3, 0x6, 0x7, 0x0, 0x6, 0x77d2e83c, 0xdb, 0x8, 0x3, 0x3, 0x6, 0x0, 0xffffe174, 0x3, 0x0, 0xff, 0x1, 0x4, 0x7fff, 0x3, 0x86f, 0x8, 0x8e8, 0x9, 0x2, 0x6, 0x8], [0x5, 0x4978, 0x1, 0x4, 0x3, 0x1f, 0x1000, 0x6, 0x4, 0x400, 0x0, 0x2, 0x1000, 0x20, 0xfffffff9, 0x1, 0x2, 0x0, 0x5, 0x4, 0x5, 0xf606, 0x651e, 0x7, 0x9, 0xe241, 0x2, 0x9, 0x1, 0x8, 0x30, 0xff, 0x6, 0x6b, 0x0, 0x0, 0x1f, 0x1, 0x1, 0x8000, 0x7, 0x1000, 0x5, 0x1, 0xdea1, 0x0, 0x100, 0x1, 0x7, 0x8, 0x6b, 0x80000000, 0x3, 0x5, 0x3, 0x0, 0x2, 0x1, 0x8001, 0x8, 0x800, 0x2, 0x7, 0xffff0886], [0xf01, 0x7, 0x6, 0xff, 0x2bb, 0x4, 0x7, 0x5, 0x6, 0x9, 0x1ff, 0x4, 0x6, 0x5, 0x3, 0x8ea, 0x3ff, 0x3, 0xff37, 0xcf8, 0x28b, 0x10001, 0x1, 0x7, 0x8, 0x2, 0x0, 0x1, 0x9, 0xe88e, 0x0, 0x0, 0x101, 0x9, 0x20, 0x4, 0x1, 0xffff, 0x6, 0x7, 0x9ec, 0x8, 0x0, 0x8, 0xffff002f, 0x2, 0x8000, 0x659, 0x20, 0x3, 0xd9aa, 0x5, 0x1, 0x3, 0x2528, 0x7, 0x280d, 0x671cc51b, 0x6, 0x246, 0x0, 0x2, 0xcc, 0xffffffff], 0x1c, ['*\x00', '\'-%@T\xc3\x00', '^/&}]\x00', '', '@}\',\x00', '})^\x92\'\x00', '$\x00']}, [""]}, 0x43c}, 0x1, 0x0, 0x0, 0x800}, 0x800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) fchdir(r1) 07:22:45 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = dup3(r0, r0, 0x0) write$eventfd(r1, &(0x7f0000000040)=0x2, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='children\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4, @ANYRES64, @ANYRESHEX], 0x1000000c8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000001c0)) copy_file_range(r2, 0x0, r0, &(0x7f0000000080)=0x9, 0x100000001, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000100)=r2, 0x1) 07:22:45 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x57, 0x0, 0x0, 0x0, 0xe) 07:22:45 executing program 0 (fault-call:6 fault-nth:4): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 485.131057][T29910] FAULT_INJECTION: forcing a failure. [ 485.131057][T29910] name failslab, interval 1, probability 0, space 0, times 0 [ 485.143838][T29910] CPU: 0 PID: 29910 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 485.152743][T29910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.163074][T29910] Call Trace: [ 485.166531][T29910] dump_stack_lvl+0xb7/0x103 [ 485.171130][T29910] dump_stack+0x11/0x1a [ 485.175285][T29910] should_fail+0x23c/0x250 [ 485.179884][T29910] __should_failslab+0x81/0x90 [ 485.184756][T29910] should_failslab+0x5/0x20 [ 485.189462][T29910] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 485.195735][T29910] ? __kmalloc_node_track_caller+0x30/0x40 [ 485.201823][T29910] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 485.207384][T29910] __kmalloc_node_track_caller+0x30/0x40 [ 485.213114][T29910] ? alloc_skb_with_frags+0x90/0x390 [ 485.218450][T29910] __alloc_skb+0x187/0x420 [ 485.223131][T29910] alloc_skb_with_frags+0x90/0x390 07:22:45 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x58, 0x0, 0x0, 0x0, 0xe) 07:22:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) [ 485.228339][T29910] ? avc_has_perm+0xc8/0x150 [ 485.233137][T29910] sock_alloc_send_pskb+0x436/0x4e0 [ 485.238529][T29910] unix_dgram_sendmsg+0x478/0x1600 [ 485.244253][T29910] ? selinux_socket_sendmsg+0x7e/0x140 [ 485.249722][T29910] ? unix_dgram_poll+0x3e0/0x3e0 [ 485.254771][T29910] sock_sendmsg+0x75/0xa0 [ 485.259216][T29910] io_issue_sqe+0x1f4f/0x64b0 [ 485.263996][T29910] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 485.269907][T29910] ? __list_del_entry_valid+0x54/0xc0 [ 485.275393][T29910] ? rmqueue_pcplist+0x145/0x1d0 07:22:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)="72215b8b13f0f473b391c30a60a1bd45037fd7ed4635019a6ea8ad65c250961678c1ee5bfeedf5f1f0790fd247598c5c5ab5c60d7cd2b6356180d272715bafac9e3377cd91230faceb", 0x49, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x14e1, &(0x7f0000000140)={0x0, 0xfa94, 0x20, 0x1, 0xef, 0x0, r0}, &(0x7f000036d000/0x1000)=nil, &(0x7f0000196000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f0000350000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r1, 0x8000000) r2 = socket(0x1d, 0x5, 0x8) dup(r2) [ 485.281333][T29910] ? mntput_no_expire+0x64/0x730 [ 485.286450][T29910] ? get_page_from_freelist+0x54e/0x820 [ 485.293662][T29910] ? fget_many+0x178/0x1a0 [ 485.298900][T29910] __io_queue_sqe+0xe7/0x360 [ 485.305395][T29910] io_submit_sqe+0x1695/0x3400 [ 485.311074][T29910] ? kmem_cache_alloc_bulk+0x289/0x340 [ 485.316583][T29910] io_submit_sqes+0x822/0xe50 [ 485.321280][T29910] __se_sys_io_uring_enter+0x1c7/0xa20 [ 485.326757][T29910] ? __fget_light+0x21b/0x260 [ 485.331456][T29910] ? fput+0x2d/0x130 [ 485.335385][T29910] __x64_sys_io_uring_enter+0x74/0x80 [ 485.340769][T29910] do_syscall_64+0x3d/0x90 [ 485.345362][T29910] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 485.351269][T29910] RIP: 0033:0x4665e9 [ 485.355181][T29910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:22:45 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x59, 0x0, 0x0, 0x0, 0xe) [ 485.375149][T29910] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 485.383619][T29910] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 485.392120][T29910] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 485.400265][T29910] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 485.408322][T29910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.416992][T29910] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(r2, &(0x7f0000000080)={[0x400]}, 0x8) preadv(r1, &(0x7f0000001bc0)=[{&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/166, 0xa6}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/131, 0x83}, {&(0x7f0000001980)=""/224, 0xe0}, {&(0x7f0000001a80)=""/216, 0xd8}, {&(0x7f0000001b80)=""/41, 0x29}], 0x7, 0xfffffff9, 0x33) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 07:22:45 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x5a, 0x0, 0x0, 0x0, 0xe) 07:22:45 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff24) 07:22:45 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) r5 = openat$incfs(r4, &(0x7f0000000000)='.log\x00', 0x40082, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000440)=""/234, 0x3f}) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:45 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x140) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:45 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x5b, 0x0, 0x0, 0x0, 0xe) 07:22:45 executing program 0 (fault-call:6 fault-nth:5): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:45 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r5 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)=[0xffffffffffffffff], 0x1) sendfile(r1, r4, 0x0, 0x8400fffffffb) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x7f, 0x8, &(0x7f0000000840)=[{&(0x7f0000000240)="ca8e9b776070bf18e6202432090211a4aa82f94cb8ae299298c96603e35bb926d8952f79b92cb642e5f01784097386e9271c802e7eefdbe721a8f612075773d5efce78b0d2c553e1948393d89f80e73f055fccb2b7a808e0fae6", 0x5a, 0xfff}, {&(0x7f0000000440)="104c08d26a1b7de57dd3efee570bb9929654f7bae597df8f0e2e655f963644043294a587b9376d7bd4e99c0698e5209ef76449be15de849024e0b8dd25003661fe40542f1d220400a91c216e84762620b2f3a0028cdadeadefb77797c268f02c3d5e5ff13dcbe1873533c1c34cbc6550884dbbdb7fde099a19334bec96295f54e84c1bd0e53c3367384a4ef1faa75eef53", 0x91, 0x5}, {&(0x7f0000000080)="5b14423e686b01b09cb0c9b7307c77e10ee16f4274dd02ef9c9674b03be238cc11e21dc925e5a241ed5adf6ee4127e1a7ac2e9", 0x33, 0x9}, {&(0x7f0000000580)="26f86bc557a450a1382c5bd1b237dfab4d9c1ac54c98b6ad8a3d90a4693b0d66b2a4d22e689307727edfcffc085eca5908c94b64d6f0075a619136fd1f4018fd5c791ed6ea6f3a4fa2325288ac87bac14b63ec2b0931ad", 0x57, 0x4}, {&(0x7f0000000600)="c7d8a4aa4cfb4a67ba1e903581250f11eb39dbf79dd54e712d93f72735fe29bfbcff115eb4281c28028e62f431b4ff7f14bbad0f269cd99847caaf9a5caf727d83eea5c7bad4e3788a2604d815e5af", 0x4f, 0x3eb}, {&(0x7f0000000680)="d3e639e6d3db81b5709ee094ca729289a3c89ce3e898c6455ad4068e1bf4c82573b4e3e4df4a01f8320f0886a5d93bebc7a903e8655095607aa40414762c25d70cac3bafbe1dca291c3057116a2a709cde66d2738a72a9dbab7dfc0592cffe148c6fc7c843df868389462340", 0x6c, 0xff}, {&(0x7f0000000180)="3fe19b7d25ca8af2529b9d0a83238952f5551779829b6114cbd9d362138769", 0x1f}, {&(0x7f0000000780)="5e0eee6f78add68c596e08da05aa9c328495211b39058e89fba1111b228c2c863fcf8f23073b06d03be0f2c1c89341bcf1844125deca2c2f76198f390cc4d17b7a310e9afbf27dbaffea4795d30b7693a6052ce8c7ac2946d1a0b3a51229765efe284fb862262c9dbd3584a79f938fa8d61985679d25b00c391d35dac109a0bc0299ca1cafab124d1309084bbae65d61e16dc8e47f9c0b764bd40b875f5724", 0x9f, 0x923}], 0x2000, &(0x7f0000000900)={[{@mode={'mode', 0x3d, 0x2}}, {@unhide}, {@map_normal}, {@uid={'uid', 0x3d, 0xee00}}, {@mode={'mode', 0x3d, 0x4}}, {@hide}, {@map_normal}, {@map_normal}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, '}w$\x04:['}}, {@audit}, {@subj_user}]}) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 486.103181][T29965] FAULT_INJECTION: forcing a failure. [ 486.103181][T29965] name failslab, interval 1, probability 0, space 0, times 0 [ 486.117297][T29965] CPU: 0 PID: 29965 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 486.126746][T29965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.137208][T29965] Call Trace: [ 486.140595][T29965] dump_stack_lvl+0xb7/0x103 [ 486.145582][T29965] dump_stack+0x11/0x1a [ 486.150261][T29965] should_fail+0x23c/0x250 [ 486.154771][T29965] __should_failslab+0x81/0x90 [ 486.159715][T29965] should_failslab+0x5/0x20 [ 486.164396][T29965] kmem_cache_alloc_node+0x58/0x2b0 [ 486.169769][T29965] ? __alloc_skb+0xed/0x420 [ 486.174345][T29965] __alloc_skb+0xed/0x420 [ 486.178710][T29965] alloc_skb_with_frags+0x90/0x390 [ 486.183958][T29965] ? avc_has_perm+0xc8/0x150 [ 486.188707][T29965] sock_alloc_send_pskb+0x436/0x4e0 [ 486.194648][T29965] unix_dgram_sendmsg+0x478/0x1600 [ 486.200691][T29965] ? selinux_socket_sendmsg+0x7e/0x140 [ 486.206714][T29965] ? unix_dgram_poll+0x3e0/0x3e0 [ 486.212647][T29965] sock_sendmsg+0x75/0xa0 [ 486.217079][T29965] io_issue_sqe+0x1f4f/0x64b0 [ 486.222615][T29965] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 486.228452][T29965] ? __list_del_entry_valid+0x54/0xc0 [ 486.234118][T29965] ? rmqueue_pcplist+0x145/0x1d0 [ 486.239128][T29965] ? mntput_no_expire+0x64/0x730 [ 486.244068][T29965] ? get_page_from_freelist+0x54e/0x820 [ 486.249645][T29965] ? fget_many+0x178/0x1a0 07:22:46 executing program 1: add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="0cb6d5f8ad23cb8c7d546608424d5cfc66e38b2f167aba8733eed5b1228c766af20aa65a4d3c99941251c9d11ba152887ea11a7101d67e25db5bc6823fbb1295a2c06814481c264629cf37f6dbd8b702b98de38af11be94d7c28a785935e93326cacdea546f39a7c4fa4baac5d1d6e0e0ab5a8731939936871b70b79b4a599e99eef59d3a5220f35e6eb4181dece5149044450e944fd79134a790d21", 0x9c, 0xfffffffffffffff9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0xffffd000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x30000033fe0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x30000033fe0, 0x0) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="f3b4aa4ebb51c99062b8861df9087f582e3f002f320f593621ac3434afdea6bfb4a25b1ab6e30b51df0ad076453288321207c71a256c0c4eb453d80231d1e91f6133f07e0fbe3780e1dcec2b3a15584be32958edd4", 0x55}, {&(0x7f0000000240)="8f508eb61eb61368dfbb8f4cc3f43bcc48de05a54ce2c0270417c327f2e255fedcc532a5fc0675c974542c07771524eab432d6613041e866d7d26b4290945c9e252347c0d9c6994ccf6652a1628e0ad3f5366e8be53cb0112b8674fd996664427899bf240139d9", 0x67}, {&(0x7f00000002c0)="8d7cc219625bf161b25e94850570430740a772029f8251799f375a481614e498b077893a87a0fb2a23df022bd822b07f27c451", 0x33}, {&(0x7f0000000300)="722f79fb142eec0e6ff349293727be4444e78e9c4325218dfd44bb68bb14033a9474bbcd2719f0baba845a389cc00501ad2b62b387bed23e5c7715540c0d9ce07c0ec4d3d30afc4828b2e520404aa7db67794897c7784e894fbf3ecad803db8e0be86b321cc103c13afab47ecf7c7cb9e8b58d19880669841b4a66e402a72f8214cc55022ede7e0991f89f25363954324990ec5d4fba7475154b71bdd863188a050281f60eaf5c450573b160b42e50bb91bdc66a364d54252543e345fcfb85f5", 0xc0}], 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) [ 486.254070][T29965] __io_queue_sqe+0xe7/0x360 [ 486.258665][T29965] io_submit_sqe+0x1695/0x3400 [ 486.263432][T29965] ? kmem_cache_alloc_bulk+0x289/0x340 [ 486.268993][T29965] io_submit_sqes+0x822/0xe50 [ 486.273677][T29965] __se_sys_io_uring_enter+0x1c7/0xa20 [ 486.279421][T29965] ? __fget_light+0x21b/0x260 [ 486.284184][T29965] ? fput+0x2d/0x130 [ 486.288183][T29965] __x64_sys_io_uring_enter+0x74/0x80 [ 486.293650][T29965] do_syscall_64+0x3d/0x90 [ 486.298207][T29965] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 486.304223][T29965] RIP: 0033:0x4665e9 [ 486.308550][T29965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.328702][T29965] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 486.337119][T29965] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 486.345264][T29965] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 07:22:46 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x5c, 0x0, 0x0, 0x0, 0xe) [ 486.353652][T29965] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 486.362153][T29965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.371091][T29965] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x30000033fe0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1cc, 0xd, 0x2, 0x201, 0x70bd27, 0x25dfdbfe, {0x5, 0x0, 0x5}, [@typed={0x4, 0x32, 0x0, 0x0, @binary}, @generic="b4ad695e2cdbda5c64efde14f0b2bff6839a3555dffe12153f9cb8ec5d7f02194a373958ac13d6af4ab8c3bfe0eb4c34b98523e43abc21fcaa6c192ebb40babd51a4556136ce284af16e395aec122a19c772c31773c4acce743b3eee5d2ae77cf71e9d514987f7cd0d69baf2f890fed3241e70176a168b26e50b54d052c5986a1226c5af5e65e657d3d5a4ad128e4a9fed3bd9aff1aedbf28975429a80d2f415226e8bfb84c46694c4249329490815a2d499c26047d64d4ee94eaad4914df75a160c836e8722cc19bbf02bd2ce0e5fdebb3f834bc33db925405f0b4316ad96ae56706dbd986f707c8f8b05", @nested={0xc7, 0x4, 0x0, 0x1, [@generic="06ef4fe791c64eb3a593acc46428a35943c2619c999a479347a0707fbbf83e933e82c3d6fd931836422055f4a4ff9fdd3b513c4a283cca6a7c5bfedc0e4930f161647893f2df06675b57388f23d2582bc12f921dd4c2495b71ee2d55be3c4d9fc3ef12a02355436fdec9c8065e522c48674f135e682c0bf7cb425a095109043964103c92194dcce8037dce1a1d988a906fa8f6d877870543e0d18f306e5ceeeb9b0fa9b485c1e49c7776e8446205ff0c99612e51e64470f931d112d49c45577adc7612"]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44804}, 0x20040040) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:46 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x5d, 0x0, 0x0, 0x0, 0xe) 07:22:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) vmsplice(r1, &(0x7f0000002140)=[{&(0x7f0000000080)="5ddcdec30e497f67a28ebc4211", 0xd}, {&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="215021335779c26df7a9ce6c796c8ecd75d8631db1c11b2bf1bdf9fcdbc453af0d", 0x21}, {&(0x7f0000001100)="97017fb692fe4dcb5fecf60a06a4f86601bf975a42c1ce3121c815d4b007116e62817205ba28aa2da7976018a77eb42cbff2c8ef707b67292509a63ec4837deb4ebc819824076f0bdc55f4c1c4e176515071ae5e16a70f4614b00433e154ed3547c2e456447babcd79c141b63b9e98699e412a59c5a00a5769141718f5bca1805202b7d3db9e47f887b4273f557ee0af6985939ede52912eb2674d6f8b28a3604be7d14b0ebc065e2431047930ce5c566faadf80047cc37d7b3cb8897189b14f3774651b3065ba4d3f4819a6000ccb2cf3286408f4824088830a152b51ac39e150381f7126def992996093b664100e203ec900043ddf844ab2c00ee0ca701ed033414da9090d654fff11c17dbbdc2f9319ed2129901347d212751c27926c83e4253991d1792a295df27671ff33edadf42d48d86c327198f109cba14f9c5aed7380dfde2d6d56dc07dd1b94033ae2374cbe0ef893fd9039d622b4acbc7b50865ea575b8f326caccd35dadde293a5a0fc6d907fdfbfc98475bb67695c0202aa9a5cb3b379e4c5c53e653665ddc865bc26053deed2164ff0bc74b5fc734463c6360716a6b4bc74767b84f276ac987a536af0c3c6d7b7465b17b6dc1e3d7513a3a1de33d4d336dac388df656cc4351881ba0ccbd7b6276d4446f99354c74988446f4660c04c8790ad689ea2498bae4f81ba3f0fcb964903211f24257e8ae9183c04067782079d0968ed880c7c217d4b4cfdbdb2cdd85126f8e778e26c01785a62009b7ed29ba309b91f159b4c34999f7b039b34720eade196f7d0ed09792505420056eefb5d01500de115e9799162800779f359b0bcfeb6652b7cc30cba1889c80cf4e3dc58b924a5b98c318bfb36074b7871e3dd0fab4f4fbed9b72818f304bc871474c0db723a7c5eff3178e3c3fd5576998932aa71ab48578f0f9a5225f0447101cd5761229d30ae81d3f208b16bd8db4d11fc881f3d68e7b69535b4c1d75db7d71f093b1f71f322b3cae781f76eaa3d95f0d9713d47803a2a10e6ec100f2086ea284915701becdcc23c174a1f37833b079f9abe31a0a3988f1379423e28758678ac248c8219790362446d1187cedd930ea47f925f693130915385034a18603074f41470debcdbccebfa8ccc02351d314311bf51e3c712414fc6ee014f6d2d80071d3b847c8d8ac09dda186fca35e745fce6ef3f3b09a4b90d16c78638746d0abe0834515dd51b652c98eae867eb72f99bc7067569fda1c6e0ddf3f511fe358ddc1af0e4a24dd52ee640d72b47cde40f6b920b83f29bc98cebb94672b962c48d74876c198fdf7bb639484fddf059750051f156973a262a92d9dcafb9bdc9c1b32298913ee4cbfa9eb28477c95a62d3bb4856eec8f4a3e7ae9a1d16e99491f906f1496ace46f275e5709ffeaf41dc3535c4c90a6f5560d86182beaf5badd57d9a51ae445722a82c388af5b011cc9193665a3f83ebc2ed213fef7081e2353b70bbd6e387a67d12f210a5fe27ca2bcbc26d0c5cba3bee2303c55030c1d65456a453a2136e46f2812fa0f399429c40c1176c9fd2a38497adacaee61c64f177f639edcd8efe7c4893e73cb5894844d175721acd7be0858846bc8457989a5332d9ec0e787e62a98f130cb7622d029d949d01c0c24e199ec63945a60befb9fc3099de4aee56ff1ce4007cdf76654ab8f2b0ecb7e725446adff50ae88945f25857c85669f43e4a0fbbefefa6c455c7e5b1094243970fa84c7e347ad455eaad6ade16f9e8301932610360f2d6e01300ead6ea18828033f3ec798f59f4e51ae224af864d46f31c2a2cfc961f5a4574b760b786a0babc4e3653948b9fd2cdc0ba81f91a497a85536aa35db61fd4fac7027940ef7906bca054c4fdfd5d1c319cea47c95c52bc9555622a57caffc601678ad10de791abe34cc19ff7a629aec46ceb80c4c6579008c45f359e10b10ef3532dfcc0559938923d114de579d488803a9c925d31a5e71ed1eccf425403a88ed464ac88400b2f2037d0566091645c7e403e51fac21d18edfdd2862c5109d380245f843217dfcb31dd963a1688b989f63deb733d5fcb9ab01b76923feb5a3781642e5a33cab1f2310ab3a3fd5db6c074c85ae9e3f6871e5e97e44a9a536361152d15f538c216558a4b9d24fcccfdee902685ca4d9b679d19ec4d83cbe535833d34e8e27e1496af3859a354532728f936e53e752a8939d3535d7d2b2f9f2a4267359a04e4ccd581c1642c6f474564a9f211b0971b49e66a50277e9bb763d2cdbc203c3c13fe8217759fb4c79b203c7274a0b338a68b71e35a27a3e44813deb4a4848ea812683ca1df9ca01212cf40908f753553283111602c19e38e50d79a8a76a7f4b85e2faeb233d91dcae2462953e940aab9033c93bd328e7ec2e7804257e5c0ec8f13022ebceb91827a33c90fffffe525c77a6bf59d4a2059deddfdc57f134e82cce8af7a8916a0a0fed8fc7fb1d01bb761242fd93a7093b432c70a1518fd8755ff76e5c7496c7836ba83eff97f50df29468f071d04bc7958713579ac6443daef788b3a535eb25e472d78d6ddced92f9d30aad47e9aed82596f4432cdfd4f0ecaef7e6cccd0d2fba9fb5faa63703d14a0782beea505aaf3c52fc04a2c44cd02fc977123dc66ae5403e81b1158c7d89e44dbc2613585339fccb15dba8a71f73c117abf57363e31808b387fd7f69c755f0687c25bd2b2054a3ffdd822a44b6781ee86329147de1070eed17badf3cc1760ffbe04a0dc3407a5f36595d20c2acb6421b8a094e886f9f41e6669013f06c4c141b1456aa237713ac7209ae4c7f3431dd1e62d13a497da6b7e3f58b27645a9afd0e00e9e96896b036fe352ec950e8634c84fb13f4ef96240ea14c42b5693692bd940b193fea5473f0e630b8dc37993a0535b5e6ed24ee242b36f09ff0392a23f4e2cd846d5036a38e08708d30e5f22f789d10b6cc6af95912656ccfb0342c5a9f8aee5f58b1b78c736344ec30b789d4319d94a42443f413828c1fcbe28bc7b42cd4a32e8b0e652fbd7cfcd50a4960cb170c2f069107ddee6f41fd886a3b15725a13bf3f92a899bbeabaac79a2a5dd21f63fb4497eda42621a977434cdca66d1828f9c0290ba7f59f1c96355e7baffc53ad03bc86b851c3bc6d9e95d25470db8e9cc834227832ae9de8667a47b5d38b43795419821c81c4215cd9ffdb75477888710a274e73c0b1bdf9df06e34cfcfdae683f1fad40da5278de42297c307e5f30fdcb7c44ec8177e113c1a506833c5445bafc52e050ea36c9b9322c1b7db36eb977ddc753fc2c7f3c11915ccf7e16e124fc36dc42cfebb41b37c9738884de7ada58adf0d497374349d3fd50d203f0ca1b996f94bd4ee783bf81ba2448325c57b69998e05746f0b899b96e4b99227c876acb488486477334aa1950969b1f7dc599f21b977ef3fdf028463852a673f2c022151fa8c0da0d7535aa0b453b0a577282879fd9f9ad8897fb5179c16f9199a959bfaa2dac8fa9fc097737b79e26443e413f6f74e21bfbe1807dbb5910445bacecf95c1f7a50b9b329d6583e60d43b3281cb3bbffc4411cc042f350ca426dcd9671eb39b6f1c9441908f758cfaaf646ded6c6cdffbd1487055ee642435a70be270f99e5054cbd68596477cd2e41d480da606f0670527c2250dfa4416f40eb0d130af94e16bfbd687ed6b6a43d31527b6c214fad562dc2aef13fe8aa608871b13331a09dd4fce09882d6ea828a7756d2ca36c5b039352962682129d37e7c1c60cab11f807b2a629336c08c36d4f3bc4abd587a38f5999a1bc25212233a4fa42654f6b0d786e1e999f268f133355e9399cb8d10b1523dc42c4ab79f8ce50a3a7aa8c5bd1d21e28eec0c0cd4e37ea1c1cec76a3e292ee82e295d3c944985c242305bf042fc8855fead2e5a04631fcd1ab815e28fd4549f3ec686ed49df268ceb64aa67d1fd39d906a43757b6271d94a83f50260eedca70712236e36c4c3f89aabb80af128f3984da504edf4744688a6728a8f393db0d8977a747dfcc1b488c7989b870a20827386ebe381e7ea2f9c4b8749423ac6e3653cad8481bc724d90d012c61ef124a8264d3ea3bd562806e686d64c010e965eb9c145ea9bff13beabe3c9b2d79fcf3b547d996fdfc44ea8b59b208f7478d94bf3ef256544fd6592db561cf9a81c53f65f454dcce3ee94aac883751ccded6bd21fa561e36313dff53756b355362875b8641b6ff256659e40f0ad0b6e44254c39291ed1887a3f08d75a56a377a7cf2878da51c78cbf346fefb7c9e9cd07caabaecc735013292df2ecb5efa1dda67dd1be1f476922127a19c90cc03138d23647197126386594ff3cc20372f3ddb4ac8e8b6c41031baa95ee52fa4cd8ecf77a661b0f843f3572a94d948ae4536f83db58a811925aa44ad63b3298c40a1a66b2ba1cc69552e002b6e48e467914ee5805d635fff98e3e13f7496cfcf53e00328bd110896ebd8482218a5dade2795745af6efb2a9046ec2218d1f7cbf3f16fc9d7f6c46326a2a75a23db42b7666c612f196a3537da7702c0bf4148a7f31cef0ea2e1c6c27a3461bb7e84ad31e396b836d7caaba0192d9f520b4c876aa47356c1812c091afa31f214e39d7612c6b9a6703c2d0edf42424d914d9c48032f02890f5b4e72028c0decbdd17814e9fa3f2938054309bd661276923c5158d5ff8c5aaea193059a520c149c1b386a7ca47acd84a40865426fe6f922d32726ee205f7a81a73f6d0e5ee6e6e4ef3e3a772d5287f12742fb7aea6714d5c8eb4a763665b1987110929c0dfab978e8c8a3f14f0ea097769657ad20d8c86b7528cdd8da6e274f36d27d4d122cec64d8cb3207a8bd48f15b8f696e2e73ab7906780304206cf890735047829504c4e8f3cd5acf548f7869ea5a7a5b4f1a248f4443678e3ebfbeabf5fccf71e55ef8cf32fce218cab93bd0335b0803f12df1c7e3856b34183fa7b6dd36747cf5f3c98e65b9f87b24675af680cc8086a46a11c6538c431143462e2f497820edf4b7974af6d067ae2018baa56341adc75048f1db527c30985f170d1693e762bf2f49759a722198af8954c2731459f7110a54527a2a6c39177802bee2d0dd317413e861382bba818d91980739aa1009cec5db961b44dee60460fa5a529cc60f7ecafd8042d8b5913a18040c2f6a2f2fda05201d2392a1c5643277e0e6ee90077dd5967db7a8373c30ccb822c3ddb23ece402dc782532bb57ee085b4b367668efd9d63e644c6aaf2e7678fe0c3e92b71d9dd495f9b2426662ec97ee63b23f7110fae3f2cdb63c299d0a32d07b4822bfcc8f01362e008aff9d756cafbb7b153d476c185a0134231235dbd6f754725c86114c3d225d2606d75ec6c942132fd552fa7294bb43591a643b97db46547898ebffb550778469c3f885abb0f276d872a0417fbb204606fffbe143f074dd4d14f877becbe9b80d6f98c4d22e01653af2d64f1530c794617907effc12e82eb0fdfbc73c66189aec463cdb0901aa752782c2285ccb299678359b8e0339a226fa5a6836581319fbca4218b90b662b2adb27fc981e629bc286c0d2e69df000c84ff43d26764deb950eedf256c804739c9f34ac08db52702b6b09da2e2d17886dbf652d17954b249bf200111395d192861e48bc77fd496b23853c827a52d7a066cc17ba441e876aa9204219b644eca6c4e970f690ef5ec883bbb4ab792949fbc47471ab202ea6d0eb68b554553baa5ffe8a76d4b061988bb19afcb2cda6be50e0b8d67a07ec15dcaf889092472793c505b445900a54a5dd", 0x1000}, {&(0x7f0000002100)="e584313e6ef5ab89f3e0545ed79e7e5db33c643e6be1b1b55bc7d6fa64d013acf74b0a47dd6a7102fb4195b64c2ccd26ab1b235ff4dcc6", 0x37}], 0x5, 0x8) openat(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x102) mmap(&(0x7f0000793000/0x3000)=nil, 0x3000, 0x100000e, 0x80012, r0, 0x75ec5000) 07:22:46 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x5e, 0x0, 0x0, 0x0, 0xe) 07:22:46 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff25) 07:22:46 executing program 1: setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000180)={0x3, 0x6}) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x1000000c8) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="200025bd7f000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40818) 07:22:46 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x5f, 0x0, 0x0, 0x0, 0xe) 07:22:46 executing program 0 (fault-call:6 fault-nth:6): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:46 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0xfdef}]) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x30000033fe0, 0x0) r7 = dup2(r1, r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r9 = eventfd2(0x6, 0x800) io_submit(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x6, r6, &(0x7f0000000440)="c46f608b3110b3f03b91b375e4b8446855155ff444b7aaca9ec5607a067008e07c89629f13d21f2512db48a4f781eb027996eb2162c5005bf8faed39e58b4fb1bc6f5fead7c050c6485d09bb609a8f2d4f7f040ebab643cddedc69e23fe9af0d88ced50b4b21178ae461b0985810cc72ec1de856f2c5c1712e1d1f36c74bc5f9a1effb3b323981e572c63a03edcc308309c2f10fe3813fae6b36adb0dd9e1a7b607f59d2615757245892259e083fb64ee0f5e571d70f28b6ad2a93f9a334f9ba6b19f58e53dcc2775118c3417b8b7a68d004b2c9a33fb5a936d6740ffa63fc05109e6cf26f946c0fb2eb9db24e298b2aa295", 0xf2, 0xffffffffffffff01, 0x0, 0x3, r7}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r8, &(0x7f0000000580)="3e0f0570c0a5ca281ad1c1c549fd8dbc2c718ff0043cd33dff95bb3aba2e25de219b2472a7aff1ce5f6e84a6f205b05356b2301f092dd0bf217826c4ff7c7305f24a8dc1e3a77330700e501ad2261c49f51fd1c753e831e76a6c3362bae1a197b5630069a791feca3db55ddc7f18a4be11087fa0d7a70d451b5a73fe89c46e58c7590a7f8cf76f1b8362bd999c5734a421fa041143ef56130db95dc575759cc13b88b99906c548", 0xa7, 0x3, 0x0, 0x3, r9}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 487.053150][T30054] FAULT_INJECTION: forcing a failure. [ 487.053150][T30054] name failslab, interval 1, probability 0, space 0, times 0 [ 487.066035][T30054] CPU: 1 PID: 30054 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 487.074791][T30054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.084847][T30054] Call Trace: [ 487.088124][T30054] dump_stack_lvl+0xb7/0x103 [ 487.092781][T30054] dump_stack+0x11/0x1a [ 487.096927][T30054] should_fail+0x23c/0x250 [ 487.101344][T30054] __should_failslab+0x81/0x90 [ 487.106970][T30054] should_failslab+0x5/0x20 [ 487.111750][T30054] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 487.117540][T30054] ? __kmalloc_node_track_caller+0x30/0x40 [ 487.123338][T30054] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 487.128848][T30054] __kmalloc_node_track_caller+0x30/0x40 [ 487.134466][T30054] ? alloc_skb_with_frags+0x90/0x390 [ 487.139770][T30054] __alloc_skb+0x187/0x420 [ 487.144256][T30054] alloc_skb_with_frags+0x90/0x390 [ 487.149455][T30054] ? avc_has_perm+0xc8/0x150 [ 487.154111][T30054] sock_alloc_send_pskb+0x436/0x4e0 [ 487.159417][T30054] unix_dgram_sendmsg+0x478/0x1600 [ 487.164545][T30054] ? selinux_socket_sendmsg+0x7e/0x140 [ 487.169991][T30054] ? unix_dgram_poll+0x3e0/0x3e0 [ 487.174988][T30054] sock_sendmsg+0x75/0xa0 [ 487.179597][T30054] io_issue_sqe+0x1f4f/0x64b0 [ 487.184550][T30054] ? rb_erase+0x4cb/0x750 [ 487.189285][T30054] ? __list_del_entry_valid+0x54/0xc0 [ 487.194706][T30054] ? rmqueue_pcplist+0x145/0x1d0 [ 487.199995][T30054] ? mntput_no_expire+0x64/0x730 [ 487.205183][T30054] ? get_page_from_freelist+0x54e/0x820 [ 487.211011][T30054] ? fget_many+0x178/0x1a0 [ 487.215419][T30054] __io_queue_sqe+0xe7/0x360 [ 487.220007][T30054] io_submit_sqe+0x1695/0x3400 [ 487.225315][T30054] ? kmem_cache_alloc_bulk+0x289/0x340 [ 487.230832][T30054] io_submit_sqes+0x822/0xe50 [ 487.235651][T30054] __se_sys_io_uring_enter+0x1c7/0xa20 [ 487.241285][T30054] ? __fget_light+0x21b/0x260 [ 487.245942][T30054] ? fput+0x2d/0x130 [ 487.249815][T30054] __x64_sys_io_uring_enter+0x74/0x80 [ 487.255391][T30054] do_syscall_64+0x3d/0x90 [ 487.259870][T30054] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 487.265757][T30054] RIP: 0033:0x4665e9 [ 487.269649][T30054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 487.289248][T30054] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 487.297660][T30054] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 487.305679][T30054] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 487.313757][T30054] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 487.321709][T30054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.329753][T30054] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) write(r0, &(0x7f0000000000)="64a5d23f08be242f9b3a43a4551283d78a1d412b640c52e62e99554ebbb4353174220a113c797e163b7376fc1fdbb836d30fb7a0bd438a229d88d9d9782c71e8c72476df575c535db3d25ff55f9273b105b07be5e727ae5f27788a3062f0538a765984ae52cfa62a0f169292112a5db9619223465e44ec7cad5fc45c45d4ce460ae879489e9fa3e1d9d065ff668c1a7b34d870397db9b310cb34bb3297bde90e99466c4d4c9bb06b473b3a6400e73bf34c09d938b0b5d3a332b778ca3975401872f4b0c2f2ffd2095dd0cca8648f78c276693f7e1d4455", 0xd7) close(r0) 07:22:47 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x60, 0x0, 0x0, 0x0, 0xe) 07:22:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r1, 0x0, &(0x7f0000000100)="067a09a0296116ae236e9bea7c35c7a54e1fa32e5128f0e7a55d11c7462b0b61cb3604aece7fb21438989103695ce7284f8c205dc731caf7237a6601256ce34fdecd0536a2dd008b80d170fe153e84d9163a3611d157c465854e", 0x5a, 0x8020}, 0x9) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000000c0)) mmap(&(0x7f00002e8000/0x1000)=nil, 0x1000, 0x300000e, 0x12, r0, 0x400000) vmsplice(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)="dbfe8f2b5e0b19e2db371c15bd297c268ebad485ebb66cd060059574bffb95b1b894396616c2ec63e61ce27f23878dfc998010b3c76a08994737b2d6b16369ba54b94ac83342d216d12ab104e362446d29c4f1fc0c8eec3303a558f3af3070d5ff620cd0d53f555ff109f3b93e45d3f95a4a440f1495f58d607eeb1328eaa454a7f864d804f43880b313ee54036f739be7e3807430eb003ea734c2d4fbfe7fb19de0cf93792c1ea02c0ab981c2864b912d6c81432cae860439bfdd921c41bdfa6993a8b45dc9fc37066d766b2bab086bc15788", 0xd3}, {&(0x7f00000003c0)="8434d564a1a542a6ca67a08c193327dbb5c0e28ea592f6fac2a607f07de871d9b70e0770fe45ec39a5cc809ada6d48b50c710df123305903dc08f675fba73d9cf0c4991727c92f8da6f611a3765e0357fceabdaa0b1cf597b6c6e73d5b13121f3e3f59da29c72a9ef21f2345ece369652e94edd3f40b769be5241cdd3a60d9531b3dbfec5d73906a8b7cc47a536b51e06130c299cdffd31313998f58ca104bd3b6c63c17dc87df7dbcd6fcc3b012a9c2fd09360bcf598064877560b31a0128fccd2268484ce1b007a9a855f0cf982b7fd67a49b0ec6fde4a7b8ac098b5f0443ccb8382f1", 0xe4}], 0x2, 0x6) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) 07:22:47 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x61, 0x0, 0x0, 0x0, 0xe) 07:22:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000104030000000000000000000000a1f53206000500010001"], 0x24}}, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0xb0, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x8000]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffc00}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000841) r2 = signalfd(r0, &(0x7f0000000440)={[0x8]}, 0x8) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x55) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x220200}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xed97}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x10000}, {0x5, 0x14, 0x1}}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x100, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}]}}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x20044090) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x801) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x0) 07:22:47 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x62, 0x0, 0x0, 0x0, 0xe) [ 487.505419][T30075] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 07:22:47 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x63, 0x0, 0x0, 0x0, 0xe) [ 487.582822][T30075] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 07:22:47 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff26) 07:22:47 executing program 2: setuid(0xee00) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000003c0)="e1", 0x1, 0xffffffffffffffff) r1 = geteuid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[], 0x1000000c8) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000084c0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000180)=""/203, 0xcb}], 0x3, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000380)=""/58, 0x3a}, {&(0x7f0000000500)=""/149, 0x95}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/233, 0xe9}, {&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000840)=""/128, 0x80}, {&(0x7f00000008c0)=""/120, 0x78}], 0x4, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000ac0)=""/91, 0x5b}, {&(0x7f0000000b40)=""/42, 0x2a}, {&(0x7f0000000b80)=""/174, 0xae}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x4}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/4, 0x4}, {&(0x7f0000001d40)=""/100, 0x64}], 0x2, &(0x7f0000001e00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/79, 0x4f}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)}, {&(0x7f0000001fc0)=""/34, 0x22}], 0x4, &(0x7f0000002040)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002080)=@abs, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1, &(0x7f0000003140)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100080002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x128}}, {{&(0x7f0000003280), 0x6e, &(0x7f0000004880)=[{&(0x7f0000003300)=""/239, 0xef}, {&(0x7f0000003400)=""/161, 0xa1}, {&(0x7f00000034c0)=""/48, 0x30}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/38, 0x26}, {&(0x7f0000004540)=""/131, 0x83}, {&(0x7f0000004600)=""/128, 0x80}, {&(0x7f0000004680)=""/196, 0xc4}, {&(0x7f0000004780)=""/166, 0xa6}, {&(0x7f0000004840)=""/51, 0x33}], 0xa, &(0x7f0000004940)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000049c0)=@abs, 0x6e, &(0x7f0000006e40)=[{&(0x7f0000004a40)=""/94, 0x5e}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/149, 0x95}, {&(0x7f0000005b80)=""/117, 0x75}, {&(0x7f0000005c00)=""/205, 0xcd}, {&(0x7f0000005d00)=""/90, 0x5a}, {&(0x7f0000005d80)=""/164, 0xa4}, {&(0x7f0000005e40)=""/4096, 0x1000}], 0x8, &(0x7f0000008780)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000000c0100b35e269000005cb5e4d3a55fee2fe33f634894916eafd209266e35de42c1e162b1d126e268e1566a75254edec195fa9ce90afeb6b6780c91885f78d82d15f38cee655f67d3ef2e12d134373658c5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x130}}, {{&(0x7f0000007000)=@abs, 0x6e, &(0x7f0000008400)=[{&(0x7f0000007080)=""/111, 0x6f}, {&(0x7f0000007100)=""/24, 0x18}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/85, 0x55}, {&(0x7f00000081c0)=""/223, 0xdf}, {&(0x7f00000082c0)=""/165, 0xa5}, {&(0x7f0000008380)=""/98, 0x62}], 0x7, &(0x7f0000008480)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0xa, 0x0, &(0x7f0000008740)={0x0, 0x3938700}) fchown(r2, r3, 0xee01) keyctl$chown(0x4, r0, r1, 0xee01) 07:22:47 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x64, 0x0, 0x0, 0x0, 0xe) 07:22:47 executing program 0 (fault-call:6 fault-nth:7): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 487.973100][T30104] FAULT_INJECTION: forcing a failure. [ 487.973100][T30104] name failslab, interval 1, probability 0, space 0, times 0 [ 487.986213][T30104] CPU: 0 PID: 30104 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 487.996118][T30104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.007467][T30104] Call Trace: [ 488.010947][T30104] dump_stack_lvl+0xb7/0x103 [ 488.016265][T30104] dump_stack+0x11/0x1a 07:22:47 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) r3 = signalfd(r1, &(0x7f0000000000)={[0x7fffffff]}, 0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0xf0, 0x7, 0x8, 0x7f}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:47 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x65, 0x0, 0x0, 0x0, 0xe) [ 488.020943][T30104] should_fail+0x23c/0x250 [ 488.025486][T30104] __should_failslab+0x81/0x90 [ 488.030475][T30104] should_failslab+0x5/0x20 [ 488.035158][T30104] kmem_cache_alloc_node+0x58/0x2b0 [ 488.040667][T30104] ? __alloc_skb+0xed/0x420 [ 488.045378][T30104] __alloc_skb+0xed/0x420 [ 488.049934][T30104] alloc_skb_with_frags+0x90/0x390 [ 488.055526][T30104] ? avc_has_perm+0xc8/0x150 [ 488.060886][T30104] sock_alloc_send_pskb+0x436/0x4e0 [ 488.066605][T30104] unix_dgram_sendmsg+0x478/0x1600 07:22:48 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x66, 0x0, 0x0, 0x0, 0xe) [ 488.072792][T30104] ? selinux_socket_sendmsg+0x7e/0x140 [ 488.078525][T30104] ? unix_dgram_poll+0x3e0/0x3e0 [ 488.086106][T30104] sock_sendmsg+0x75/0xa0 [ 488.091446][T30104] io_issue_sqe+0x1f4f/0x64b0 [ 488.096241][T30104] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 488.102157][T30104] ? __list_del_entry_valid+0x54/0xc0 [ 488.107712][T30104] ? rmqueue_pcplist+0x145/0x1d0 [ 488.114195][T30104] ? mntput_no_expire+0x64/0x730 [ 488.119793][T30104] ? get_page_from_freelist+0x54e/0x820 [ 488.125920][T30104] ? fget_many+0x178/0x1a0 [ 488.130347][T30104] __io_queue_sqe+0xe7/0x360 [ 488.135105][T30104] io_submit_sqe+0x1695/0x3400 [ 488.140247][T30104] ? kmem_cache_alloc_bulk+0x289/0x340 [ 488.146421][T30104] io_submit_sqes+0x822/0xe50 [ 488.151551][T30104] __se_sys_io_uring_enter+0x1c7/0xa20 [ 488.157504][T30104] ? __fget_light+0x21b/0x260 [ 488.163264][T30104] ? fput+0x2d/0x130 [ 488.167664][T30104] __x64_sys_io_uring_enter+0x74/0x80 [ 488.173054][T30104] do_syscall_64+0x3d/0x90 [ 488.177893][T30104] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 488.183871][T30104] RIP: 0033:0x4665e9 [ 488.187762][T30104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 488.207372][T30104] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 488.215823][T30104] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 07:22:48 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x67, 0x0, 0x0, 0x0, 0xe) 07:22:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x794d80, 0x39) modify_ldt$write(0x1, &(0x7f0000000000)={0x3, 0x100000, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "023cb0105d4365361e5347355bb7ce0e9ca531a8"}, 0xffffffffffffff65, 0x2) [ 488.223804][T30104] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 488.231779][T30104] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 488.239747][T30104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.248071][T30104] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:48 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x68, 0x0, 0x0, 0x0, 0xe) 07:22:48 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x30000033fe0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x5) dup(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close_range(r4, r3, 0x2) r5 = openat(r3, &(0x7f0000000000)='/proc/self/exe\x00', 0x400002, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r5, 0x0) 07:22:48 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x69, 0x0, 0x0, 0x0, 0xe) 07:22:48 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff27) 07:22:48 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x6a, 0x0, 0x0, 0x0, 0xe) 07:22:48 executing program 0 (fault-call:6 fault-nth:8): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:48 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@flushpolicy={0x10, 0x1d, 0x305}, 0x10}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f0000000380)=""/215, 0xd7}, {&(0x7f0000000480)=""/196, 0xc4}, {&(0x7f0000000580)=""/145, 0x91}], 0x6, 0x3ff, 0xff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) signalfd4(r1, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 07:22:48 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000000180)=""/12, 0xc}], 0x3, 0x1, 0x560615) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:48 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) r3 = signalfd(r1, &(0x7f0000000000)={[0x7fffffff]}, 0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0xf0, 0x7, 0x8, 0x7f}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 488.968503][T30176] FAULT_INJECTION: forcing a failure. [ 488.968503][T30176] name failslab, interval 1, probability 0, space 0, times 0 [ 488.982641][T30176] CPU: 1 PID: 30176 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 488.991670][T30176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.002485][T30176] Call Trace: [ 489.005997][T30176] dump_stack_lvl+0xb7/0x103 [ 489.010877][T30176] dump_stack+0x11/0x1a 07:22:48 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x6b, 0x0, 0x0, 0x0, 0xe) 07:22:48 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x6c, 0x0, 0x0, 0x0, 0xe) [ 489.015389][T30176] should_fail+0x23c/0x250 [ 489.020077][T30176] __should_failslab+0x81/0x90 [ 489.025024][T30176] should_failslab+0x5/0x20 [ 489.029825][T30176] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 489.035905][T30176] ? __kmalloc_node_track_caller+0x30/0x40 [ 489.041725][T30176] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 489.047263][T30176] __kmalloc_node_track_caller+0x30/0x40 [ 489.052941][T30176] ? alloc_skb_with_frags+0x90/0x390 [ 489.058371][T30176] __alloc_skb+0x187/0x420 [ 489.062795][T30176] alloc_skb_with_frags+0x90/0x390 07:22:49 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x6d, 0x0, 0x0, 0x0, 0xe) 07:22:49 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x6e, 0x0, 0x0, 0x0, 0xe) [ 489.068236][T30176] ? avc_has_perm+0xc8/0x150 [ 489.072941][T30176] sock_alloc_send_pskb+0x436/0x4e0 [ 489.078320][T30176] unix_dgram_sendmsg+0x478/0x1600 [ 489.083711][T30176] ? selinux_socket_sendmsg+0x7e/0x140 [ 489.089205][T30176] ? unix_dgram_poll+0x3e0/0x3e0 [ 489.094348][T30176] sock_sendmsg+0x75/0xa0 [ 489.098864][T30176] io_issue_sqe+0x1f4f/0x64b0 [ 489.103787][T30176] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 489.109724][T30176] ? __list_del_entry_valid+0x54/0xc0 [ 489.115743][T30176] ? rmqueue_pcplist+0x145/0x1d0 [ 489.121128][T30176] ? mntput_no_expire+0x64/0x730 [ 489.126475][T30176] ? get_page_from_freelist+0x54e/0x820 [ 489.132023][T30176] ? fget_many+0x178/0x1a0 [ 489.136581][T30176] __io_queue_sqe+0xe7/0x360 [ 489.141652][T30176] io_submit_sqe+0x1695/0x3400 [ 489.147305][T30176] ? kmem_cache_alloc_bulk+0x289/0x340 [ 489.153155][T30176] io_submit_sqes+0x822/0xe50 [ 489.157917][T30176] __se_sys_io_uring_enter+0x1c7/0xa20 [ 489.164229][T30176] ? __fget_light+0x21b/0x260 [ 489.169355][T30176] ? fput+0x2d/0x130 [ 489.174007][T30176] __x64_sys_io_uring_enter+0x74/0x80 [ 489.179787][T30176] do_syscall_64+0x3d/0x90 [ 489.184321][T30176] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 489.190258][T30176] RIP: 0033:0x4665e9 [ 489.194247][T30176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:22:49 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:49 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x6f, 0x0, 0x0, 0x0, 0xe) [ 489.213857][T30176] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 489.222398][T30176] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 489.230422][T30176] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 489.238619][T30176] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 489.246742][T30176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.255056][T30176] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:49 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff28) 07:22:49 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x70, 0x0, 0x0, 0x0, 0xe) 07:22:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000080)={{r0}, "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"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x30000033fe0, 0x0) fsetxattr$security_evm(r2, &(0x7f0000001080), &(0x7f00000010c0)=@v2={0x5, 0x0, 0x13, 0x0, 0xed, "c9b4ffe6b60f0c66e095c1e1bcda4ea8f0520ef4c757c3fbad55c507563f30262146f830166387c16a44a98620f3d2df58bca1733e40b49d131f340261939dc8a85bad9059a894c6d1a0ffc0c746e2698deb09334bf7176ae0fc0cae2ebfa8b87bcd431fc0f7d344949ea95afa432d1824b10e2d807e2121dfa8924b9dd8a8abf99afef4588a8cc22cf07489145b7f670b01fa621ceac0ba5a6e3264b56d23c108f4bd55f262468a501625862bd1126d1175071783a7f4fda9830a2076819d18293a6e69a36ec7d91a0fabdee043a1251c9cbef6a679194ba8fbac4347e2976c7ff7ec1d778bcdd9d74a90be6a"}, 0xf6, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x625, 0x2, 0x6087, 0x7, 0xfffffe00, 0xffff}) 07:22:49 executing program 0 (fault-call:6 fault-nth:9): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:49 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x20000) pwritev2(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="6e896ebc73fcbb7078a6fd34fb3c484cadec9e9cf43bc12a14250be7199670b8553fbb2cba08caea2c0a64fb3a7f18fe3948fef9ffa5451a33556c4bcc5939a7aa5d8a9f88954c53d7328690374c749116302e8f5bcf11e93e82e01a55940a89e93cfe87a72b2482f54a56b4b3", 0x6d}, {&(0x7f0000000180)="1b521a94cb0db1e953", 0x9}, {&(0x7f0000000240)="2e3d98dcc2c158889618ad2381e9ee70fb3eb844f8cab27e419e9f843bb285c63a99affdb2bddaaa41d701662ff1cc350caefde32f7d9ba9c9bb68b80628142eb17de08cb3aa04991ea34035edd41a8a0b8d0d74153086b1e3a558b9c40ca294", 0x60}], 0x3, 0x3, 0x3b02, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r6, 0xd7c24000) 07:22:49 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000000180)=""/12, 0xc}], 0x3, 0x1, 0x560615) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:49 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x71, 0x0, 0x0, 0x0, 0xe) [ 490.003503][T30283] FAULT_INJECTION: forcing a failure. [ 490.003503][T30283] name failslab, interval 1, probability 0, space 0, times 0 [ 490.016488][T30283] CPU: 0 PID: 30283 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 490.026049][T30283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.039406][T30283] Call Trace: [ 490.043650][T30283] dump_stack_lvl+0xb7/0x103 [ 490.049368][T30283] dump_stack+0x11/0x1a [ 490.054080][T30283] should_fail+0x23c/0x250 [ 490.059122][T30283] __should_failslab+0x81/0x90 [ 490.064111][T30283] should_failslab+0x5/0x20 [ 490.069380][T30283] kmem_cache_alloc_node+0x58/0x2b0 [ 490.074678][T30283] ? __alloc_skb+0xed/0x420 [ 490.079256][T30283] __alloc_skb+0xed/0x420 [ 490.083873][T30283] alloc_skb_with_frags+0x90/0x390 [ 490.089156][T30283] ? avc_has_perm+0xc8/0x150 [ 490.094028][T30283] sock_alloc_send_pskb+0x436/0x4e0 07:22:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x242000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:50 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0xe) [ 490.099810][T30283] unix_dgram_sendmsg+0x478/0x1600 [ 490.105952][T30283] ? selinux_socket_sendmsg+0x7e/0x140 [ 490.112181][T30283] ? unix_dgram_poll+0x3e0/0x3e0 [ 490.117585][T30283] sock_sendmsg+0x75/0xa0 [ 490.122302][T30283] io_issue_sqe+0x1f4f/0x64b0 [ 490.127449][T30283] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 490.133978][T30283] ? __list_del_entry_valid+0x54/0xc0 [ 490.139479][T30283] ? rmqueue_pcplist+0x145/0x1d0 [ 490.145090][T30283] ? mntput_no_expire+0x64/0x730 [ 490.150188][T30283] ? get_page_from_freelist+0x54e/0x820 [ 490.155827][T30283] ? fget_many+0x178/0x1a0 [ 490.160437][T30283] __io_queue_sqe+0xe7/0x360 [ 490.166156][T30283] io_submit_sqe+0x1695/0x3400 [ 490.171197][T30283] ? kmem_cache_alloc_bulk+0x289/0x340 [ 490.176878][T30283] io_submit_sqes+0x822/0xe50 [ 490.182140][T30283] __se_sys_io_uring_enter+0x1c7/0xa20 [ 490.188002][T30283] ? __fget_light+0x21b/0x260 [ 490.193273][T30283] ? fput+0x2d/0x130 [ 490.198785][T30283] __x64_sys_io_uring_enter+0x74/0x80 [ 490.204339][T30283] do_syscall_64+0x3d/0x90 [ 490.208784][T30283] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 490.214776][T30283] RIP: 0033:0x4665e9 [ 490.218691][T30283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 490.244831][T30283] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 07:22:50 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x73, 0x0, 0x0, 0x0, 0xe) 07:22:50 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0xe) [ 490.255069][T30283] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 490.263573][T30283] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 490.271824][T30283] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 490.279789][T30283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.287949][T30283] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:50 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000040)={0x20, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x9, &(0x7f00000024c0)=[{&(0x7f0000000100)="5c801b81f01a098c2f962a2f49aeaf28adfbeb5ad2d7ab5c3a97b67179cc22d5fbed272919c9681815809574069e5c7d5ddaedd353d31753c646710654025ca13e54a4ad78aac2d091bc9ba24b9253924680e66cf4a1ec03e711fc77b6c3fe53014264693bc319d6239aa6c533efa05ad7dcbcec87eaca1ab055a10232d3a03633ff537c6a3fac11d78b8292d26c59c2fdcc99d6649601e4896fbe339317b9954b04f957bfed601350513a1912df7608fc476c3f910cd04b9de5a20b06103a5c73c3426f4b28651d7111b0293e46ce814c7c9c9accdb0b98ba3fe8578e60adabe29982fa1548dc9d9efd17e84c0f17ed82399cbca4742b1957ee6c4835d5bfe05024448df8b1f4ec7d71fb966713330fd029c43b42e8ee4e21cd4085298cdbc84d5f0919da50f9cc3ce32a020e5274cecf95eb1b81a4552b4506f51e89621ec3885ed550ef3d94d2ae3579d5bcc2251ea93312f9a0daf04d21a7e122cd1da4c1a3bb87fef09b95eaad6b1c1cee3861177d3bb1cd0daa8af3f0324584a67690c577749bb293000416c2ac01e54a156b0db52bec70f4f60d85e9221b41fd279e14dc69e2548f7544bbe8692d235324e04755a182b2545a446cfba394675c2052b3de17d17014edde66f32fde7dc6be3c77cb2deac653858c4eab5f190c777d42fd357a907cac79f15d7c9a618ad878c2c603686f5062303cff5cddc8cadd6642aa5adb14998088317bfb8038a233e9593114cba8152f1a76b0d69f590234c13e69b23adf3bbf1838e98df23cac60f517b8a9d4361241dbdbd7b022cda67c342c52bcfbe0b7b2d529a398cc7484fb002557fee30c902d72db09c0966ecd611317819ec5b40313aa671fe44cd72ad07d4552bc8f155ad59cf8d08164dc95e9100d5c04a465ca9775c3a07485a74b2302f4eea06547ee85ab54cb5c33b356e7a6b6aa6159d9641bb6c69e4184c467d350bae495c2d6d6f67b792ccce5e1e3e75178e289b90bbe756d306806a168c857fc7b2a909a04585bde078fbc9532115166f470761eaa5505ff9664d92ef2eb79d03f40cace51f412ad5e7acc3acdf4a2920e0dcafcc02e3ec2448d5096f6daa9546e3ef1c71aa6a551d4ce609e8b3eb36e46cdf4563af33e9537e7c286c8974903438ae54fd5ac17cbb0f2297649ca0c0da1fa512bcf4b5a1d797ad5c70b1ab59422ae8b58b7842cdeee80910415a959bbe0757c42700441225e597abc2cd5e19522e7ab6200f6eb02f889ed24d101b6ab4692b1c6a9efabcf6834b3ac66ebe75ddeddf2efbfe76eeca108a669a430ae41c67d4d75b5372c1a7d0200d50970190dc460dd73527a3f0b04e74622a7928478115e9f1dc0c6728b652797e802cf1c4868f51e3b871869ff61209a4b250e3ee7c2f29e2b4c98585ff4c93bbe7a7c26bc73aa9c628f9e4b12847f87f56fef1317e51ca9ac23e06a576847e4f95e201983da63af4dae1489822f3f30e5fe53fafc074d56c3372f9384b7c7fd3f1b51fcefe511fbdf1d8e79cbe3e247db9340158b00780575cb812608282d8c8a012243ced4a462c17c317c971cd5589d92e880f73e7d89a0f2370d5d5aea00caa74993b3ecf5402558a01eb7d235f8d4be619720fed5228b9ec00f24ec857b29d031f6ce64ef67e7d8ebca87a619578152e22013af9bd8d2a772bc989039d51aeda030d399c4605905e3aa07233e986ea36a83308f632692766624a72ae8331d4d7710cacaceeeb57896626a5ce78b747debe029a56c9a83051e8e2ca0d5a64297491132d66258e61ad244ac2a51fcef146223dd67d50375c7aa5512b1c6044c5c4340cdfb7bdf7f82195ce483342cc5dd45719265641cba0b2482b9eb35e099ad5550762697e75b1b930e9b13735c2f506db7f0605b2fa534228d0f30bd103ac70c1154cbca47566ade2e8482f5675a7fa3b451dc9ea022f0bbf4c1246d6c4e773b3cef363044a4479789e12cba888c085ab7d980e14c7b199635569f94bcc16c0764dbaae424f837b58bbf1615fcc4f4dd3e98c8b61b3633330843027be1629b077742c13bf48f57d451ab18223eeac4465b11491507d05d470508609efac54485ffa6183ac6268962691c30180c051e0423565d7b9598a42366cb9f1093f15f6548bf07975c596b740b2f35463e4b72468ad7b023d80d1e47ecc1af2b26065f2e70e83d444956ef07b55af9f7e9abdfe1bb512b9b98a045f5a5c20b1a1d2e95f98eda87849fa4d37524e3da868106a7ec3d1269c4c334f374f202644f31d7ac77292b9afcbebf447f35128fb7b28029da23f67175776a37d43596cb66efc67b99268eb58bec4f37793e230055526aa27238443d8df37cd3db1c41a929faa4dd044a9cea7bc0690992611939e76f4f0181936553b059f0795ebeb4eca3a0fde637ab123c2a779768b0ca25195a19734b1cffb6bf4bdce6c76531ac9519ece53358fa48078a3b5f707cffd83d5972b827dba5fe7c3ac665e7988655a2ab42dd3615d28746c4636e836faa0ce4f791e5d47f78f85adf6a03cc270c9b690a612beba219239c107cdef1c84e10ff4899c970e35eff4b64d7c0bc14aee0422d153623efac85201a501036a86001a9968e9b1a752333472108a4c262a1c4b981c8184fb81f1375c1aadd0737211d54613e463acf5491019e7286699a92e6d994030fc36aa71e7150f4f98393b9b8cbf82ccc0ced2b8cf3d246f873b9322959e1ee00bff2e95edc24e80f0fe1762fb405594b1195f5aaf81a20f58c97a291d64921365b12d65f309a07c4cea8e340a954fe1fa09b8988b1dd4d67535d71ef9285a991af880c35e603ef237e50475d661ea6f43feb327a29530554f6a6d29f6dfa1adfc08bb650e2a132fd1b73579d6a9e7036ba75ad9a3d61fb96a18bb3ac88c5592ded4bc23a344e6fc2d71ed325bda7f5267247b46239a3e1da25f7d0afaefa0ede4e708a773a128b60232531dff94f33343a46460901b5b2f5349d73ff113d87ee0063342acaa37b7319cd92d60af7cc3a5eda90cf364dcfc824f4f9d0497a679e75aab892d54af4628d1ff48bdec240e3f17fbbd3ba0af03aef2856c4d3e827c1c69ac7b3109276196d979d0dafdae796ecfd0452239f59dc8302e4da7fe6dd06c23bc190a7b7d96575c1aa324988ca4b117e0947d4a7053e99043fafa7981b79b9c62a3e139e2c85e091807245e5ef4b03e7cc49c2da7fc3ff9a91f08761c283f989871cf5eabc0fe758bf0b86dd491c6054f10a003c91ac5cd92844410a9c576e6688eac5b5f963476cb1cc07a238a449ec0181861034362709ca693fa98c287e6c8fbbed7403515625cf0e0921b335baf46f06b1007772f8a97ad38a3b2d6a490dcd8cce64243565dfa957f6a3235b6e795c8f0a35a7489b2668fbe06c23b8dc78fd2cdfb32cc0917304f918e244d881d3a903f6ad0bb1763cff36b9f3f963d29d04dcee0a1b27e34f2aff5a62844137eacd0ed51837397c0e5c578e77f2374f0b107a13ce7c6014a41f383cbe2d17d617ccc22f1a3d43ff07a883c64d988eb6b99d7a98c9a188d252bd0ba7d4652766e5521d105a96a03f13bbda5334e5af3ded46a86dabe98ea475ca46f6e0acd319ee34803716e049a789ea9555a814a42f37b321a5070060543f1ad1993f2a3cf2f7ee3ac7131d4cc0b95c4351b033e72d5522e8857634b3876e673187e59dcc14b0e6b90ef2c9f9f828c43c08230073c1704451a7e4fe93e65047e572fb71e7dff7a70bedc9fbc6c1188c321d50d110a630b490dd79f77f676e4c26a2d59295ff91db37cfc08e52b76123b3f327c193490b4be416810d2ed7a71bf886ed2834a918a70592a0ff4fc4564f3c3de15184a56b1598b2518b50060ee5664e5bb15111e0db47c7e297a1540e7468b3a35ca2c18eaaa20c237dcb62f39387450630890d728d5785880490b1281690f3cf952cc12e9863af86740338dc206ab43bcbd1ac423f6948c7886c908950492dd3e76e0eda7fdc37117b550a51bc331e1ff42523387f88c9aa469a6494eec26ab4b8e3031d3602d8f498fdde412ba12841fc37cff99fe5c20539344d195eef924a6996569ccddca4cb02b052b7344b1a524061c8b27b458d39915a6c0e9588ef0f52df4e68e16dc0e62c423272e593d456f51bfda8b23aa112b01e8931d78ccf2ffe11028e4cc8acd312e47787702cd4a65c7b87b812fce48ef405d8517ba633b357714176a4756ab6d5642f6eae46e0603dbffd01fa1fcd599a27776f09c6d372138ec90f0cbafaf3a3281459078d4bf77cde766b92a04f18d5f307612a4d7b3e690326124e7b62a0afe7e0dc2871f37710cc168f3d6e7be7bff0129433afe2a7721addbcbc5337c5289c11b0c18c085bebbd86db9daef675547b5db3d48281b6adaadec1b317526a3319ec219f9596d0dc1fc9563b465c6f95d711991c7ed60ef03a2415a20d91ab94dea9176055d03e1d83858a1c05f28414a93a3c4d89f42ef66f997bd3204d8e9ae69a87e02ec71a4b44d73ca3a980dd32edfb8fb63644073d22711f9037b0d6c5388cf0635f716dfb13c2e9485bbb75cc0a0d3cc47950d51a1debcc09bae1e321da551f37eea1a59b3769e981923e657c977dbba0cb96b170e4f0b291d899c5d80195c395ac9c6607121fa547dc7b89455a8a380cfbb40c8ac5eac150a8225c46ac9b235ab03aa373121bcd18e01b62ef733e2f18655344fcb6382c27efbf0737c6fef8fb820a94f984fbb8048436cf667daa8519743064feac4b307da9d27340b66ef03a1a89b13fbb1c6c19389f56fbe54203b293642cfc9d4d62b9ebcdd073cdb43103d0b9a1e09d7c637febd419182467fa618e29b7ad2c5e046654166ed91ffaf7706ca8e9541aa718049dcb9328fe7a88494ae380fe4f620e3f7b9e18db102f2730df77403e0d1c1005523cea0a1352ebdff6a9db0352af90c5ec26bd261ec24188decb9037e2cf671197f4723e8de8eaa826fdf385e99f4b5642786ba8af09624e74218ccc6e8ca2ec33ea4ae361336d4f65db9b770aa16c6df3af8d6dbde1fa64e1a11187127dfcbe343617611efe17c98e649115b489c0438297f1c61ee1ec75f9c69004fab7334cf549592eaf3607becef41d22c2940773fe78d9f77bd6b213656cac437518ddd1ccc2a7674818993db559f3b466cd6be77bd84f3edbc16a74a50b75f8132c8bd035d28dc18662e8e1e6782cbcbd5939b7b7b0fdb629d5298769e914743407fbb35dc96aea36d3cf79f122569433db5b2f5607fead151f191edf1bbf9fc7a59d549beb33f0ecaa4ba606ed687a6322be1d96fed0c8b42ab241af35c75f89dccb95b8703b67615b0fcb7c0cc200d05ea3885e268e58d814c8196f4049385d2642f5d620ab59a43ebf99937c5fae3d8d1cda9d09b082705296cdc1d2d7ae3af3eac728697c987bf9a574b4b7bc2e73de87b6a01857f1b73e35066b33ffc87e9d0b5281e7148844da82b80caa3674f5ac490be6ba225bc472ccb35b34fc304268dbe4ee87be3481b3e3adc872f7712d366885f4280853036c72497758cc06d034e54c02ddc8c37c0bdad0c7ea072b3140547a903c0a54bf7e5d6beb7a71b1b7765ebeed86177a61afef9eb8cee8c1bf6585a585d10a2059270de903a36211b19ff493cead03e4ef18d2ad830b185ced295f88226c5e00a41ead1c60a8cd05f7c6a1a9f1af17f530ae8c416a67e3f4bd8e4320ab274a5b6258cb7c736660dca8e8624053f24f8cd3605e13fcf03e989a6b65be93effbbc88cb6f9f10d3bb6dca4e936f178814", 0x1000, 0x8f8}, {&(0x7f0000001100)="cab9d6ede58f9b5bbd81843f45ee9ffedbf01fab1256e5daa2e65b035fb9e967caf44dcbec8fc391a629f7da9977a50198997cf6309d838e32c2318ff6ac07d2aed5ce937cf57b157c18c44fd9fa09ef2af59dbc0b8a27511a3601ad09", 0x5d}, {&(0x7f0000001180)="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", 0x1000, 0x2400000000000}, {&(0x7f0000002180)="85c5", 0x2}, {&(0x7f00000021c0)="f65afb0e978dc3416c32d01758", 0xd}, {&(0x7f0000002200)="35a70ad63ce9f43c6ff9457967ee97daf3936d1517abb0b3becae06ff30b06bc9645fe4a334c3898c86d130acdbfb21f7bcadd6fa686d0e9dd2c5148c1e63e917dddc6a48aa2438a7ab8648fd6d383ccdfe1d00d65903265b3599bdce5a9dacf48f4d089d240d0a0816ea124c5f733122e29d37142c40533b3e9db3b34747641db94238bc82715b4bfbb0c56b6f51c3cd4aa9fcfa2ea7a303290ab3426db598c1d93da3e3ec40ed6f59affb5439a517e4a86465ccd544260534f3816ec9cf5e2582a0a9eac8f54579b1213ff17fadfd93144aae3c5217b200cdb269c305d7f74ab", 0xe1, 0xffff}, {&(0x7f0000002300)="16a04518fc94815b6c93e92a7e82356f299cf3b2a4165330201f9cae4e1ed4cb65630511e870cc7bf9781297e9ec9f81723b5c37a30ff093209a9aeaa46321a9da6638a3cde903e2933749edae2dd5", 0x4f, 0x40}, {&(0x7f0000002380)="5b4d879597febc3205dace30664c0d288ec382a836aa019a087b1ee6723b4b5923ef51b3e36d3752a06eefc006ed362fb1dcea36718d16d8815ab51073524e1f46f63d752627f2179f94332fcf3b6514d8b15733cbd93a8732556e5f37a38881b8e9566c32b98f4ba62accdb1e2c10a3c263e6295117578f40821201a0331c539e03ab0f6d8999cfdeda1eb82cf68e47a365107117c314f0e1f40a5e1363e8126535cda64e548bb4eadc1a33db054a05bbbf0767303cc9", 0xb7, 0x7f}, {&(0x7f0000002440)="9d3fddc2f9dd2cc6ddbe9e83832445f81a9f7caaed54f1eb6b45c24e3f1e8938915a00b9cb0710be66d774c281a8aa7384f743f0130ba1bf56665548fdd06fc841d4f5c11e7aad06b732c41f9da84de9f8c78057adf06c51ff0338bf129bf318fecb", 0x62, 0x6}], 0x80480, &(0x7f00000025c0)={[{@numtail}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@uni_xlateno}, {@fat=@discard}, {@uni_xlateno}, {@numtail}], [{@hash}, {@hash}, {@appraise}]}) fallocate(r0, 0xa, 0x600000000000000, 0xffffffffffffff63) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x80, 0x1, 0x8}, 0x49d3}}, 0x18) 07:22:50 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff29) 07:22:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000278000/0x4000)=nil, 0x4000, 0x3800007, 0x80010, r1, 0x4a07f000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:50 executing program 0 (fault-call:6 fault-nth:10): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:50 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="d638431abe3b9b87b379b4e483ab3d27b35c5f3454475517616d7407c9977557acec766aadca904cdd44ba4630b40457260be8740c82a79a0bd76cdb07131421fded0d80d49f754673c114e95cbc3520f9f8db14fedd6fe8940eadbb2cb07ef3759e15d6daa7f21be89e879be113295a3dca2d9f3dd343ca9cda0df4153ad3e5a76048ea845824f04795", 0x8a, 0x1ff}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000580)="22bc6875f6d7a49fcd02eb2ee3b26471c785f8994c05748644425cb40ecc282f8164c133337dae41dd0c6d9e1b9643e0f3dc6b4ff7b3fbfaab6989974195ab13e1196c5523e2aa4a4e4a609a8fd684e79e1896be51da8a7690db42e033bcae6ed7478baf96de4c53809e165a6d194de3cb", 0x71, 0xfd0, 0x0, 0x0, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)="b28077adab4bc208f9c20328daba6c1603a211d5cd536eb769b47370359f4804951348aec66b5782cc0d7c1b1cab939a76866b6e9ae19a820be2caf2d6df6c282cf25b57b5ba06e906ceac919647a824396644eb132b176365ad0f1e0f5c535c7d0fba9eb2e771913bef67542faf9e79362f5efccc4b50b1a6e14240dd8ff694a7b94f26db9c0b2a2a7d33f504da526b387ee1dd4f1c95df69a511baed9952c6b3e934586c1870c333420dc9167ada641116ecdb190f232f6b393694f2bdcd7436915f3dcadd19aa21b47b6c9194b67d0958a8a2dbf068912379088d7931", 0xde, 0x0, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800)="5cbb1f3122d3edff1cd7e5e8f623bea8bb737379ee6f810fc87fa3dfdb339ca24825ea366bb49776d29bdd5a4dc3f82617ae055ac1edd30a7e4d4b97baf16f7cb6bbd9e73df0bbb45bd8c975", 0x4c, 0x3, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)="f295ced5d47934bbec85f762c7000eeb1b406ca35bd6aea2bcddea2b5387e500741b5d8e0cd2707298bb93135b80f3a6e43211214853655f053eb6138c129f1c2d002c3503d4076a5d620d3499880d66c9dd319c6050d06ee7b5fdcc95f3c6c11203372c4b9becb36f81a52c8be222c8fe7927017326462f7d2eb52115e20251d6f215f569078d4b06446e83dcc252b8948aa69576592de3fddc4331dc70f06ab81bd7916ed8e72632a593ee6e167b3aeaf05488d13b8c2d771f9812b7408887763b7d8c58a99fbc02f6103f677023b85ff97176b2231b3e9be99782b81598942967dc92d143", 0xe6, 0x5de, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x27, r1, &(0x7f0000000a00)="5c1e3d06192a268768bc14d9b53898249a96ba8c7a1eb99f2d50eec5208373", 0x1f, 0x722, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000ac0)="1a81002c1aeb73f8cf4c81ea346abcc3afd3db7ef2e8789b73ed7c8d482d5c5f5d8cced9366979f5ae1e8b71627a4e1cce42d91e752d202a4ff64bbe133170d0b0b499c3f9694dcf1356f994a7f0798dbf329100eb76c182099d5d3d63ed27fe3e545175ed2176d5c4cd7b3b1f3e49b8a0b72a53885b67b9229016f98434bd38d43c9403aa7dc48d9f9eba622e8e930f3937dcbd70bbddc25e28a3e89ae4810412bd05359d3aba220487626756b72ed77012", 0xb2, 0x3, 0x0, 0x2, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000c40)="0dbbf5069c5b346d4018bbaa003ee1cf16d3cf53aee496bf2db6dc3065e7f9f79731c295d39b5524eb1aee6e8f24c76f1fd16f464fbcc64d53d2ebac8268dcfa0f6cb3962bb66569364d20aeb42f8e2cacf7bebefe37ad0e3dad751adda202c27e83c9288326e73b7c32da4dc6f429a0e6261c2d3f92c57fb7002e40329f", 0x7e, 0x9, 0x0, 0x0, r7}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xfffc, r8, &(0x7f0000000d00)="851206fceffbb8bdbce2959e8a3f25f50c1575798fe6f8ffe7d0009fe224bf32a916fdf966345afbba0a0fee38adb710e852d15975f21a78ba8867b9db9db25ec5bd014c56eff7696890d5feabf47010fe5e74f6ddb4eedbc31c530a192fd59cf6b2621ea5433921df07e10ebb06ce5020432f42f0f19a", 0x77, 0x8, 0x0, 0x1, r4}]) r9 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:50 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x75, 0x0, 0x0, 0x0, 0xe) 07:22:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f00000011c0)=""/212, 0xd4) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x40000) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="c7b9a1cdbe3fb138c52f4ab0948f552a78ad502fc53f693018a02db264f6a634b96853bd5362223a3504ad8fda88c5e7f896566550427aef3ea6cb5f1c19e6e312f633d2bfbbfedba0bc20cfb4d8a21cebeb95941c8a4200dc7c4920aa5f0a7ac8301cf8bd0af962665a624fb30081eb31bd77c56fb00d6d7b9d9699f13be720c0cde04008faa1510edb14b618d8e17fb4f4b43ada795768b3d7a152edc46cb9524f05d008e238c0b3f972ecfe97713358cd9dd29a0d47f6c233c6d4f9ac16435de747459b9507217e792c993a3a4a3cfd635afb0c987a13fd7bda942ded4c511cbb8660eaf6d1968b1407d1e99a304db1", 0xf1}, {&(0x7f00000001c0)="60e1f0be38c41c1d4a9fac14b5a6f205b8898c952a3978f9cfd91fefaab44944b31080e67524893d49b653ea561b2291389272da8a9cf3d1d1bf220403474b80c747ed9c375a6115a05db2d6ca5134aa214cc0363aad01e87702767bf8a74cb55cab8348811656839baaa5586efa511aa452daec595863a59915acafd6aee9b26ce02b60d7087baf05e7a940c70e204991e23f78b921919c1413cd8ab2e031e61040c932f990730fe16ca71dc5f44411f0bf4dfcc8a2078491500c004bc1ffd8d92e516d9ef6bb534faf689815c0", 0xce}], 0x2}, 0x235eb8151daab898) [ 490.994101][T30337] FAULT_INJECTION: forcing a failure. [ 490.994101][T30337] name failslab, interval 1, probability 0, space 0, times 0 [ 491.007661][T30337] CPU: 1 PID: 30337 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 491.016822][T30337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.027289][T30337] Call Trace: [ 491.030609][T30337] dump_stack_lvl+0xb7/0x103 [ 491.035373][T30337] dump_stack+0x11/0x1a [ 491.039840][T30337] should_fail+0x23c/0x250 [ 491.044301][T30337] __should_failslab+0x81/0x90 [ 491.049071][T30337] should_failslab+0x5/0x20 [ 491.054215][T30337] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 491.060412][T30337] ? __kmalloc_node_track_caller+0x30/0x40 [ 491.066347][T30337] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 491.072182][T30337] __kmalloc_node_track_caller+0x30/0x40 [ 491.078197][T30337] ? alloc_skb_with_frags+0x90/0x390 [ 491.083828][T30337] __alloc_skb+0x187/0x420 [ 491.088497][T30337] alloc_skb_with_frags+0x90/0x390 [ 491.094579][T30337] ? avc_has_perm+0xc8/0x150 [ 491.099440][T30337] sock_alloc_send_pskb+0x436/0x4e0 [ 491.104769][T30337] unix_dgram_sendmsg+0x478/0x1600 [ 491.110282][T30337] ? selinux_socket_sendmsg+0x7e/0x140 [ 491.116159][T30337] ? unix_dgram_poll+0x3e0/0x3e0 [ 491.121424][T30337] sock_sendmsg+0x75/0xa0 [ 491.126151][T30337] io_issue_sqe+0x1f4f/0x64b0 [ 491.131294][T30337] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 491.137285][T30337] ? __list_del_entry_valid+0x54/0xc0 [ 491.143113][T30337] ? rmqueue_pcplist+0x145/0x1d0 [ 491.148178][T30337] ? mntput_no_expire+0x64/0x730 [ 491.153229][T30337] ? get_page_from_freelist+0x54e/0x820 [ 491.158862][T30337] ? fget_many+0x178/0x1a0 [ 491.163381][T30337] __io_queue_sqe+0xe7/0x360 [ 491.167989][T30337] io_submit_sqe+0x1695/0x3400 [ 491.172983][T30337] ? kmem_cache_alloc_bulk+0x289/0x340 [ 491.178565][T30337] io_submit_sqes+0x822/0xe50 [ 491.183246][T30337] __se_sys_io_uring_enter+0x1c7/0xa20 [ 491.188710][T30337] ? __fget_light+0x21b/0x260 [ 491.193486][T30337] ? fput+0x2d/0x130 [ 491.197488][T30337] __x64_sys_io_uring_enter+0x74/0x80 [ 491.203744][T30337] do_syscall_64+0x3d/0x90 [ 491.208705][T30337] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 491.215147][T30337] RIP: 0033:0x4665e9 [ 491.219251][T30337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:22:50 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001340)="1c", 0x1}, {&(0x7f0000001380)="843ae81b1b86bde0d6e82c0f25b6ecb3cdb6a522a80d0cff6f9385d3691c757d21dd6657db4b469c23374c63e81223ac9f391536a9026e8d5bb4481d8c5a2786ca53de51a7a2533e75b4d262a72f1a839032daaba77da1524160fb618d895c4464d4c5632f72ade1ea21e6fbda95502f3a73941f488870b64803c46c50450b5143357d690d07a52190cc7276977af00889fd9344989a5889af5ff710f0e33449c5852487a85b6b1713907358bd0c40b56e82bfcceabda46ef062e4f7351d677d802c4b8bff2980b4786d130b3097e7b55898a683e7a253092ef0ab8392aa", 0xde}, {&(0x7f0000001480)="c8d7bd0844da668e68c69848db788c7c7f2522616d74e6ebe2417049ab4d20229ec078d40ce68a655ddab4497088cafa4240853b7541d4f082d6b83241a50d3a06c818482384d4dd077501c9f9cc9365a48ee338575329446632ca22329e249a366aece89eadf7852dbfc0a95d8f", 0x6e}], 0x3, 0x0, 0x0, 0x44000}, 0x4000040) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f00000001c0)={0x1078, 0x3b, 0x1, 0x70bd28, 0x25dfdbfc, {0x17}, [@generic="0756670b1668757b41380c513fcfb8372204313b4ce3c098de5507af809fdfeff1808c35bbd3d0fc4dec60fbc7a2b54c14659a4ba1c69923a578945260a739ff5d48b63b70ae8c68347b3e95398d0a8fa2f91747e816c506f00aaf6524f5088265", @generic="d658c8798b10a2545e2b52490df9b5ee27746c80903adbac17855e789ff1d4632baf7f2fc772d818b62d02d474b4d8159fc4591d5dfa4e97c0de6e7dd2b55c74e99d34d28ddb0189b56f971c10b276008c9353df9980963c77313746ec9f3ce53f01b903e3fd13c789a8f442aa34459673b7e29d0ddbdb025e8690bd3f95ec12befbd3fcf5115a246ca214176c530abef54065b935fd166c2f60255b5776706b1050695219419d66fd093360297ab5b9de5dbb0898aad6b79bdf1a223fbdce0b7dff9a8bce2e6a777190a84a44cc8372dafdf9d2380bf4b5299adf1dc96bdf16918c3bf7dd6062abd0b5e62d3db41ec25660a377c1d0caaf5931e8237421f7fefadbfc2fce15e49f34a11f4f9d8258158562a5d92ae1108f6dfe2ee1eaeff97b966cee0d04b5551e69d443bbbeb0b079ec7a13bd43b2483a2d6eac0243a1aaac052cb78554e2b758a4345154da4816cc181ed6dc210c709852d2348754dedd9fe41c0248857b8cdb78066c6362ebcd65be4f50bd143282501e253b91cc3b4fac4762fa5c8033b01c8a8afa7871da93bcc7abd90c69424fd9e9f712331e15a609f6c041bf355a93bf0fd422d959cd4bd561b805392fdd18ec86348d4c5ec73ab6a18373a8077f4e64c1912cd6d34bb997341a6651e64689254d2be87560ea279305583eff2579e7c01611269c87b5248430c023df26d10f0bd13d17ee83a5c0342accdce5b0cd220a7e11680b28a65d43e2ba73da85d6c5643e139011d029b814e9565ef3c58adcd731224b4246853a9b422f9093869807b6c5a2d4a00474eb212779e34839824882c838fe4efb5be892c2ca32a8900348dc4eadb7b6aa2103ed25e19862edc361cfc3a41b41800acd0514519d92836128a461d77f0b54374ff8143e7e172fec4a387d21fab045a550ee70a1805856cfca71faf907cc2ece4f7c59fb7d66e86bcb0448801423e69416339d49a0db3fcb960af0471b0e7996b28bd71abbe83642a4a1947a763781a35ead6d83208084e381acea524f6b6cc05d779207175c62416bf5c7624354c96ba81dd36a1174fd3be516213b6d7d13f72134d599123c21c3370c14049d4068385e9f92e6d4748f8784bdea9833a8c8f6b2da437c464108ef4e36f5e75ed5dd549c9212e22897feba400672113f14ad269bcc277d276ef4e843d86caccf115522374281cbf0a4180331a2b3b15c736ff259e26dbffa01bd75a37d7d6dfd54390236884fcabac244fd53cecef28506317a856371025fa148d97f9178a4933dbc05b03c7328fcc2ca782778a729233d51ef51561b2827d53b0e276ea54b4de215449a679b30d89f7359031ed77d076801c434fa4f9f922556cba70f115daa7dfa47fb71da28d7d01ab992c3c7d00b4373d04fa60f68dfa0b335000c37e4cac046ff7c24226c14819eb21a54edd996616a6f759fdd152946ce90fbf5eb4315c64a5ecd82ecdad2411a39afbd40a150fc08a2efff22068fdcf4deeb464f166e07f4828de6f5a9cd2c8892149c62dd5cbebf05e7a1ea50e14d11e67a561799adc7cad2aacc8c4b5c4d3f03f31415839a53b61557620e5db0a1713a0dafb31cbc8419cd363b9de1997fd882d9e1910e7ecd7ef1161fdeaebe7f4c20d584f01934cc8b6b15c7930296e53a508f45344c4497b2a826d8b55770354413faefb1a5781e983a8214214dd0b7d884ea751b5d02f7031831c0493392c663d428c7c3f2bf8873cec9484bec3215877e6f08e69068ffb44a3f10b0593f07bd65f110e4c18051e8c4bfc0478fc1356f7da6fb053eb1f88e957bd620a0d3fcec6ab663d501fc7df680a212e87ef06812659beb3d06528f5dfdeaa59da8c20984bfdb4438b7d8d2a0664f5c83438614bf758bd5989e81dac852f920ee0c06306df387dcfea632252a6822ba0bfcc4de89f7fc9b928416c0bfeb067f669e887e10760f0819b3c4028b15b4e948e3d23f28f6f8f847e7c5857acca879b8e422a26f27b9cfc8efe35b211a8329010746bd3a8c274796302ee2f227373d45ba708ace7d28fcf1045e9ab9e9eaa8a3a6fb893976b5aea10d18e811f21cefd31b4f8e2c7b0167e318b13bfa3aa1818b03f6d6c3b6a2f7b949f8f002f8323b4aab8e7bee0610e8ad79cd25046586b338ac1b0a80e4de993a07fed2413a1adae86f65fc4497ec4c475221c63d29fd1707f93f4656f0888de0dd6afe412a7af2b17ba44734ba74ad49e8844dd6586fc5cd7578ddc21782a31444fa4ca3f00d5fc563e43a49c082c2ba635ec8d944771c8c028da4e2884874b595079c959f0800d03543936f84ede8dfa74b611f8d6ef35938e0a2b8c03450a96aafcca57a15d6efd7bfc61e143c470eb6eeb90708b29d238610aa3583c31cac24aea36109bb6e79e35458a3b4e23fe143f8f8b49cf4c488a208b08dc2923e7f8b5715af104bf90553476dc4462568cb5e9232b5472dbad06d9a2811065d937661e6302c11597f30498342f7993b9311ee15845b17c0c53de090c8cb7e4b4435f2117fcd2b3d3b0aa9e1601d7ad48f3eb226970cc34f3b28b9263d812e0d08a9494a24de6fe9464b99bfa31a7fb84c809f65ddcc0b73c6dfe4902bc6a4c35b3db1e7389816681f1e0d7d3542b42767649595e31062b054ef869854b7efbb87006b5bed5d551b98bd5fff7a0f99eb1d76b212fe1c38b1f07ec09e56f80b702aee3236a85f09320b9b1c42656193046d08823c5033f5d7981a76eb7f3ca9ead5e69091b60c0128a1a929b67e9ebc5fc2c2df4ad80c83c3c76b3ec2de4fa05074c4f704b7e3bb1c5a62102018279dcaabf2448de32a63fa93ddd8937064bc3f6d4f90e30dff5dc1e59ef3100a4fcad5258259bd084ab03a5b877706bdcf1fe1d1c43fd108ab93540580ae6b5e46f47a3c48938cca69b8d3e0e206321bd7d329759d579b378929b22356784753b98396f0215b84445e7ff1744941708359bd767295799068d6fe46bd716d5f7f31d68c70d40bd6ec9e1fc9a1cb3a17fd19214d626e6367d71e2a3d99c45483dceba43c02da213199175a6d2291fda6566b9827ccfae0b05429972a636c2207d2106cb8b91272800d01ceceff8013f9057ce43619b102cedf4040549dfcfeb0343fbe6ba43845586bfb831db5a437ce9907e6311558ca7bdf78148493fcaed131633c88301c1059234552ae769343b3d8d95bee7315a111335e403aea6a9c9eb184a1044d243e4aeb15b2fae46caf9d458e13e7824a31fd1e11061eb33edccfa971b25ec214bd3885a49f57dda7885ef820d832fac79fa93bdbb4b2d9342974f762fc3bf4d4308a507fb7e48390f1a0585917160c52078cb156b8ff21becd84681c94508761aafdec7f97c4849e02362bfe7d1ac262e68ba417db5ad44aad9a3578eeb08c1595fa749a6d656552ea92040bf8ace64b2446100800a1b8bc51a0c0d523e4a86c60be7c5f9c5e0a48fc4dce77d3c7f56bfaab18236aeeed0dfd493cbaa44b9bae47e6df42f095442394536824fa466c109432b5c1171bda15a4b1de33f204a7c76ac898172a0502549b04c93cd367766253b8b92d775d4a92d5a8156cdec9f6f652f2442835d95560561bdb5a6f76eaddb5f456ec3e53a40e222e3c01eed5a961950a09a2d5cd89f200ba1e49c22622ba18741c41c1fabaedc8a18596ea84243e5583d39fd6488fb1c79ad8b4a16a8b85b83d89ae409c8276a1fbf0232f3d99661010d76190138698c58a5387fd6515c732b2a97fd49d443209607c1f78b96355efb0f45ceabb3dda7dc87108a1644ee4b0cd839e4d90bcde993e4c87a1e9cd41d069a590f975ebfa2dd4f97d4b967921fcc8947ba55ad077a77c7fa404449c0142e64937ec0bb92724fb625d0706bafe161e04097f895999a6713e0c61fc208e422d49102e39acd8bbfa1c765abeff8878bef230428d71255c6e1535f58d79e9e360ba87fc77de5e8cdb25f9a3f77af9c53132857dd2d554118b5a99c613af303521f0da0af4f7dbdcbc352333032d73dd74821d2669ca38c3311d5bd2f24332133cba6eef378dfea0a07ae1845e9ac64f89e114dac0b32b50791f79b8ee8ec9d0a3523ba824083214e689030ab188ca632f21dd7f445162686ffc05e6c07ad2ffb85749d7b244cc9102805552728103fe2b8ca90ec3ef664e752a6e4496387e6f004c3a82d021ad7ef297639eae3bd5cd81c05e901b34b87e95f08eced3f7241ee8482c3f2af8d2add27afdbfc6a7828ce6fd2492c05667c15a73510e941b4ff88ab8726fe5db442bab7d37b9474845d453364ab1e7f6fe787ccf405b032a5f46f51e8e8f4cd56e732ae5e9fdeaf87494fc832475e984dca7c995c9443ea6c2dfa473231bc2f66aa779b054df32244362ebe207f5e5099c8cbaef2727dacb983c768cad2229bd653d8c6ef1c2485496ebcc6a31cc3aca62a6b50c59aa7a54ecb894b217ed302109462bd48ef0a3cb44be2790918f4d332b6051e877d8b4131dd56dd1f7ab0936511d86b8be2c087a93471cf91943929f0d6d17986bd977b1d786d2ca63f19d75b7012729cbd9cf1bf0bcf9ae8cd70546c2a96e15c7a037144be5a4e3507117b4f942d11deef4e39a29d7c7681cc9835d02332af1f3b7221c96338143e8e0cf9bd430336215b55d79cc1c7c2905032bc3758278321f21878818ae7ae330c09ce123d272f91ad6d5242727db70c3e860c47deaf3cee92d99ec3a5ade346f302f10a9d80a279dd0fe3cbce0e3adf2ac755b9ddce686115100c06671acfb1141a2bdc496a9314ae6266344572ea7cf3a944f1ad352c2637e3b3138f6a55466a8ab98573eccafaf5125741a1eeb192fe9c3843294a1c59aa29fd30165af019b8587280fe895741b7b0628f092588af8607641f9833be18bb06f3a8ecf018ae950d09040ade8f81dca743e006067e7a523a4c9c53020a1e1ba6799ec940f3557b1e0375ba9337120782802787a07826395c37a1c683fd703af6eb59ae12f113fcf0e50ee04b47f446538251bc1c02a51abd036ea495aa2a7abeddce8cc68b7abd624d942671adbd0cd5c5c569a6fd8744bf4545fb9c301c7eecdf9420f6f07b0eee033725064f08eb0d51c79215702c6308797d2034b5b3531ec4e354799561cd888ba8748591e3f58994595b9a7f7adf837a0354065e98c4d1185a93975bc361c1002c344b93cbf4e76afc63479caca4f2d874020d395f4eef7e753be910e35f2e02d2bac44f6a5ccc6e236ec47b6f7808f23b5cad7bd9cf6479f65671f05ad221edc7e86f22ca4d30505265b3a3256231b3336f6ba41a3981f60f694127ed4d545ad10f104af918585ab571325a0c4a5e40c97ac91ab4ad58c46d7e54cfe2d6ccb1498a321fd030c2901fcb6db4854d16e1bbd069d1f59bb1610acee8c231cef2187381172267b76c7de98e17bf58fb01de782b07de17c08e2a842fb7dbf498c00ee9731d7b2f5ab89f7d10a778cd0344be3669c4157a7b0cc6b4ffa6440e396cc5cc70666611193abb86ab2709f59489bfe3cff7a783fc6e0b2f40f9dd8b74ad95b73a83a80bf617139ad85aa39a597e18eecb613a369593bb10aa468e9fbf960d65f4b477066f32ab3c8376c84bbaa4d7d0911325547a58c2d54e3e858f79a3d53b95efc22a4c2598bf6930eee40417238b0d14856aae0053dfcccafa0db01bc727103a66a92c80c397ee2ae426898597742b1b69e51305987110614c0264bcdf4f42d20ad2651fd7dd83070455fa4adc598d385acae7346b7d1fd41c4992461afc9a5febbeacdf9177113d53147c0b8e6"]}, 0x1078}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x30000033fe0, 0x0) dup2(r2, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/212, 0xd4}], 0x1, 0x80000001, 0x7ff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) 07:22:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10040, 0x0) getsockname$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa, 0x80012, r0, 0x0) 07:22:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x185003, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x6, "6ef55548589de0fa57d2dc544a28adfba9"}, 0x13, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x8000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x30000033fe0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r4 = accept4(r3, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x180000) mmap(&(0x7f0000077000/0xb000)=nil, 0xb000, 0x2000008, 0x12, r4, 0x86aa0000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) 07:22:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}}, 0x0) [ 491.239394][T30337] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 491.247918][T30337] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 491.256048][T30337] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 491.264887][T30337] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 491.272950][T30337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.281701][T30337] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:51 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x76, 0x0, 0x0, 0x0, 0xe) 07:22:51 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x0, @perf_bp, 0x404a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[], 0x1000000c8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x4, 0x8, 0x80, 0x7}, {0xff, 0x7, 0x8, 0x4}]}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x100}}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) setfsuid(0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000040)={0x80, 0x7f, 0x1}) io_setup(0x100, &(0x7f00000003c0)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) 07:22:51 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff2a) 07:22:51 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x77, 0x0, 0x0, 0x0, 0xe) 07:22:51 executing program 0 (fault-call:6 fault-nth:11): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:51 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x30000033fe0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6800) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 491.944692][T30396] FAULT_INJECTION: forcing a failure. [ 491.944692][T30396] name failslab, interval 1, probability 0, space 0, times 0 [ 491.958814][T30396] CPU: 0 PID: 30396 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 491.970032][T30396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.981121][T30396] Call Trace: [ 491.984725][T30396] dump_stack_lvl+0xb7/0x103 [ 491.989470][T30396] dump_stack+0x11/0x1a 07:22:51 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x78, 0x0, 0x0, 0x0, 0xe) [ 491.993931][T30396] should_fail+0x23c/0x250 [ 491.998537][T30396] __should_failslab+0x81/0x90 [ 492.003948][T30396] should_failslab+0x5/0x20 [ 492.009848][T30396] kmem_cache_alloc_node+0x58/0x2b0 [ 492.016040][T30396] ? __alloc_skb+0xed/0x420 [ 492.021546][T30396] __alloc_skb+0xed/0x420 [ 492.026436][T30396] alloc_skb_with_frags+0x90/0x390 [ 492.032575][T30396] ? avc_has_perm+0xc8/0x150 [ 492.038711][T30396] sock_alloc_send_pskb+0x436/0x4e0 07:22:51 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x79, 0x0, 0x0, 0x0, 0xe) [ 492.045089][T30396] unix_dgram_sendmsg+0x478/0x1600 [ 492.052186][T30396] ? selinux_socket_sendmsg+0x7e/0x140 [ 492.058484][T30396] ? unix_dgram_poll+0x3e0/0x3e0 [ 492.063892][T30396] sock_sendmsg+0x75/0xa0 [ 492.068297][T30396] io_issue_sqe+0x1f4f/0x64b0 [ 492.073088][T30396] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 492.079767][T30396] ? __list_del_entry_valid+0x54/0xc0 [ 492.085595][T30396] ? rmqueue_pcplist+0x145/0x1d0 [ 492.091378][T30396] ? mntput_no_expire+0x64/0x730 [ 492.096825][T30396] ? get_page_from_freelist+0x54e/0x820 [ 492.103472][T30396] ? fget_many+0x178/0x1a0 [ 492.108167][T30396] __io_queue_sqe+0xe7/0x360 [ 492.112805][T30396] io_submit_sqe+0x1695/0x3400 [ 492.117673][T30396] ? kmem_cache_alloc_bulk+0x289/0x340 [ 492.123822][T30396] io_submit_sqes+0x822/0xe50 [ 492.128881][T30396] __se_sys_io_uring_enter+0x1c7/0xa20 [ 492.136203][T30396] ? __fget_light+0x21b/0x260 [ 492.140978][T30396] ? fput+0x2d/0x130 07:22:52 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x30000033fe0, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x1f}, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80012, r2, 0x0) [ 492.145841][T30396] __x64_sys_io_uring_enter+0x74/0x80 [ 492.151562][T30396] do_syscall_64+0x3d/0x90 [ 492.156265][T30396] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 492.162339][T30396] RIP: 0033:0x4665e9 [ 492.166585][T30396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:22:52 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a, 0x0, 0x0, 0x0, 0xe) [ 492.188035][T30396] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 492.197099][T30396] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 492.205944][T30396] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 492.214356][T30396] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 492.222532][T30396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.230971][T30396] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:52 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x7b, 0x0, 0x0, 0x0, 0xe) 07:22:52 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="d638431abe3b9b87b379b4e483ab3d27b35c5f3454475517616d7407c9977557acec766aadca904cdd44ba4630b40457260be8740c82a79a0bd76cdb07131421fded0d80d49f754673c114e95cbc3520f9f8db14fedd6fe8940eadbb2cb07ef3759e15d6daa7f21be89e879be113295a3dca2d9f3dd343ca9cda0df4153ad3e5a76048ea845824f04795", 0x8a, 0x1ff}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000580)="22bc6875f6d7a49fcd02eb2ee3b26471c785f8994c05748644425cb40ecc282f8164c133337dae41dd0c6d9e1b9643e0f3dc6b4ff7b3fbfaab6989974195ab13e1196c5523e2aa4a4e4a609a8fd684e79e1896be51da8a7690db42e033bcae6ed7478baf96de4c53809e165a6d194de3cb", 0x71, 0xfd0, 0x0, 0x0, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)="b28077adab4bc208f9c20328daba6c1603a211d5cd536eb769b47370359f4804951348aec66b5782cc0d7c1b1cab939a76866b6e9ae19a820be2caf2d6df6c282cf25b57b5ba06e906ceac919647a824396644eb132b176365ad0f1e0f5c535c7d0fba9eb2e771913bef67542faf9e79362f5efccc4b50b1a6e14240dd8ff694a7b94f26db9c0b2a2a7d33f504da526b387ee1dd4f1c95df69a511baed9952c6b3e934586c1870c333420dc9167ada641116ecdb190f232f6b393694f2bdcd7436915f3dcadd19aa21b47b6c9194b67d0958a8a2dbf068912379088d7931", 0xde, 0x0, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800)="5cbb1f3122d3edff1cd7e5e8f623bea8bb737379ee6f810fc87fa3dfdb339ca24825ea366bb49776d29bdd5a4dc3f82617ae055ac1edd30a7e4d4b97baf16f7cb6bbd9e73df0bbb45bd8c975", 0x4c, 0x3, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)="f295ced5d47934bbec85f762c7000eeb1b406ca35bd6aea2bcddea2b5387e500741b5d8e0cd2707298bb93135b80f3a6e43211214853655f053eb6138c129f1c2d002c3503d4076a5d620d3499880d66c9dd319c6050d06ee7b5fdcc95f3c6c11203372c4b9becb36f81a52c8be222c8fe7927017326462f7d2eb52115e20251d6f215f569078d4b06446e83dcc252b8948aa69576592de3fddc4331dc70f06ab81bd7916ed8e72632a593ee6e167b3aeaf05488d13b8c2d771f9812b7408887763b7d8c58a99fbc02f6103f677023b85ff97176b2231b3e9be99782b81598942967dc92d143", 0xe6, 0x5de, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x27, r1, &(0x7f0000000a00)="5c1e3d06192a268768bc14d9b53898249a96ba8c7a1eb99f2d50eec5208373", 0x1f, 0x722, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000ac0)="1a81002c1aeb73f8cf4c81ea346abcc3afd3db7ef2e8789b73ed7c8d482d5c5f5d8cced9366979f5ae1e8b71627a4e1cce42d91e752d202a4ff64bbe133170d0b0b499c3f9694dcf1356f994a7f0798dbf329100eb76c182099d5d3d63ed27fe3e545175ed2176d5c4cd7b3b1f3e49b8a0b72a53885b67b9229016f98434bd38d43c9403aa7dc48d9f9eba622e8e930f3937dcbd70bbddc25e28a3e89ae4810412bd05359d3aba220487626756b72ed77012", 0xb2, 0x3, 0x0, 0x2, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000c40)="0dbbf5069c5b346d4018bbaa003ee1cf16d3cf53aee496bf2db6dc3065e7f9f79731c295d39b5524eb1aee6e8f24c76f1fd16f464fbcc64d53d2ebac8268dcfa0f6cb3962bb66569364d20aeb42f8e2cacf7bebefe37ad0e3dad751adda202c27e83c9288326e73b7c32da4dc6f429a0e6261c2d3f92c57fb7002e40329f", 0x7e, 0x9, 0x0, 0x0, r7}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xfffc, r8, &(0x7f0000000d00)="851206fceffbb8bdbce2959e8a3f25f50c1575798fe6f8ffe7d0009fe224bf32a916fdf966345afbba0a0fee38adb710e852d15975f21a78ba8867b9db9db25ec5bd014c56eff7696890d5feabf47010fe5e74f6ddb4eedbc31c530a192fd59cf6b2621ea5433921df07e10ebb06ce5020432f42f0f19a", 0x77, 0x8, 0x0, 0x1, r4}]) r9 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000000)) 07:22:52 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x7c, 0x0, 0x0, 0x0, 0xe) 07:22:52 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff2b) 07:22:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x30000033fe0, 0x0) preadv(r1, &(0x7f00000000c0), 0x0, 0xa3f2, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) write(r3, &(0x7f0000000600)="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", 0x1000) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00f5af", @ANYRES16=r4, @ANYBLOB="100028bd7000fedbdf250500000058000180060001000a00000008000800090000000600010000000000080006007365640008000500000000000800080004000000060002003a000000060002007300000008000800000800000c0007000300000010000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x72000, 0x0) preadv(r5, &(0x7f0000000280), 0x0, 0xd9f, 0xfffffffe) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0xa6, 0x1, 0x81, 0x2}}) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b315d", 0xff7c}], 0x1) 07:22:52 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x7d, 0x0, 0x0, 0x0, 0xe) 07:22:52 executing program 0 (fault-call:6 fault-nth:12): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:52 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0xc8401, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:52 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x7e, 0x0, 0x0, 0x0, 0xe) 07:22:52 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x82, 0x0, 0x0, 0x0, 0xe) [ 493.039448][T30510] FAULT_INJECTION: forcing a failure. [ 493.039448][T30510] name failslab, interval 1, probability 0, space 0, times 0 07:22:53 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x83, 0x0, 0x0, 0x0, 0xe) 07:22:53 executing program 3: open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x4) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6800) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r4 = syz_io_uring_complete(0x0) openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000780)={{r1}, 0x0, 0xe, @unused=[0x101, 0x7, 0xfffffffffffffffc, 0x2], @subvolid=0x100000000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r5, r3, 0x0, 0x8400fffffffd) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x30000033fe0, 0x0) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000a0a010100000000000000000a01000108000a40000000008df0309f4ad637e2000000090900020073797a300000000008000f4000000007"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x8881) [ 493.039472][T30510] CPU: 1 PID: 30510 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 493.039495][T30510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.039505][T30510] Call Trace: [ 493.039512][T30510] dump_stack_lvl+0xb7/0x103 [ 493.039533][T30510] dump_stack+0x11/0x1a [ 493.039549][T30510] should_fail+0x23c/0x250 [ 493.039573][T30510] __should_failslab+0x81/0x90 [ 493.039634][T30510] should_failslab+0x5/0x20 [ 493.039651][T30510] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 493.039694][T30510] ? __kmalloc_node_track_caller+0x30/0x40 [ 493.039721][T30510] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 493.039799][T30510] __kmalloc_node_track_caller+0x30/0x40 07:22:53 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="d638431abe3b9b87b379b4e483ab3d27b35c5f3454475517616d7407c9977557acec766aadca904cdd44ba4630b40457260be8740c82a79a0bd76cdb07131421fded0d80d49f754673c114e95cbc3520f9f8db14fedd6fe8940eadbb2cb07ef3759e15d6daa7f21be89e879be113295a3dca2d9f3dd343ca9cda0df4153ad3e5a76048ea845824f04795", 0x8a, 0x1ff}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000580)="22bc6875f6d7a49fcd02eb2ee3b26471c785f8994c05748644425cb40ecc282f8164c133337dae41dd0c6d9e1b9643e0f3dc6b4ff7b3fbfaab6989974195ab13e1196c5523e2aa4a4e4a609a8fd684e79e1896be51da8a7690db42e033bcae6ed7478baf96de4c53809e165a6d194de3cb", 0x71, 0xfd0, 0x0, 0x0, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)="b28077adab4bc208f9c20328daba6c1603a211d5cd536eb769b47370359f4804951348aec66b5782cc0d7c1b1cab939a76866b6e9ae19a820be2caf2d6df6c282cf25b57b5ba06e906ceac919647a824396644eb132b176365ad0f1e0f5c535c7d0fba9eb2e771913bef67542faf9e79362f5efccc4b50b1a6e14240dd8ff694a7b94f26db9c0b2a2a7d33f504da526b387ee1dd4f1c95df69a511baed9952c6b3e934586c1870c333420dc9167ada641116ecdb190f232f6b393694f2bdcd7436915f3dcadd19aa21b47b6c9194b67d0958a8a2dbf068912379088d7931", 0xde, 0x0, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800)="5cbb1f3122d3edff1cd7e5e8f623bea8bb737379ee6f810fc87fa3dfdb339ca24825ea366bb49776d29bdd5a4dc3f82617ae055ac1edd30a7e4d4b97baf16f7cb6bbd9e73df0bbb45bd8c975", 0x4c, 0x3, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)="f295ced5d47934bbec85f762c7000eeb1b406ca35bd6aea2bcddea2b5387e500741b5d8e0cd2707298bb93135b80f3a6e43211214853655f053eb6138c129f1c2d002c3503d4076a5d620d3499880d66c9dd319c6050d06ee7b5fdcc95f3c6c11203372c4b9becb36f81a52c8be222c8fe7927017326462f7d2eb52115e20251d6f215f569078d4b06446e83dcc252b8948aa69576592de3fddc4331dc70f06ab81bd7916ed8e72632a593ee6e167b3aeaf05488d13b8c2d771f9812b7408887763b7d8c58a99fbc02f6103f677023b85ff97176b2231b3e9be99782b81598942967dc92d143", 0xe6, 0x5de, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x27, r1, &(0x7f0000000a00)="5c1e3d06192a268768bc14d9b53898249a96ba8c7a1eb99f2d50eec5208373", 0x1f, 0x722, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000ac0)="1a81002c1aeb73f8cf4c81ea346abcc3afd3db7ef2e8789b73ed7c8d482d5c5f5d8cced9366979f5ae1e8b71627a4e1cce42d91e752d202a4ff64bbe133170d0b0b499c3f9694dcf1356f994a7f0798dbf329100eb76c182099d5d3d63ed27fe3e545175ed2176d5c4cd7b3b1f3e49b8a0b72a53885b67b9229016f98434bd38d43c9403aa7dc48d9f9eba622e8e930f3937dcbd70bbddc25e28a3e89ae4810412bd05359d3aba220487626756b72ed77012", 0xb2, 0x3, 0x0, 0x2, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000c40)="0dbbf5069c5b346d4018bbaa003ee1cf16d3cf53aee496bf2db6dc3065e7f9f79731c295d39b5524eb1aee6e8f24c76f1fd16f464fbcc64d53d2ebac8268dcfa0f6cb3962bb66569364d20aeb42f8e2cacf7bebefe37ad0e3dad751adda202c27e83c9288326e73b7c32da4dc6f429a0e6261c2d3f92c57fb7002e40329f", 0x7e, 0x9, 0x0, 0x0, r7}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xfffc, r8, &(0x7f0000000d00)="851206fceffbb8bdbce2959e8a3f25f50c1575798fe6f8ffe7d0009fe224bf32a916fdf966345afbba0a0fee38adb710e852d15975f21a78ba8867b9db9db25ec5bd014c56eff7696890d5feabf47010fe5e74f6ddb4eedbc31c530a192fd59cf6b2621ea5433921df07e10ebb06ce5020432f42f0f19a", 0x77, 0x8, 0x0, 0x1, r4}]) r9 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:53 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x84, 0x0, 0x0, 0x0, 0xe) [ 493.039820][T30510] ? alloc_skb_with_frags+0x90/0x390 [ 493.039870][T30510] __alloc_skb+0x187/0x420 [ 493.039888][T30510] alloc_skb_with_frags+0x90/0x390 [ 493.039912][T30510] ? avc_has_perm+0xc8/0x150 [ 493.039930][T30510] sock_alloc_send_pskb+0x436/0x4e0 07:22:53 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x18) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) r5 = socket$inet(0x2, 0x6, 0xfffffffa) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) [ 493.040003][T30510] unix_dgram_sendmsg+0x478/0x1600 [ 493.040026][T30510] ? selinux_socket_sendmsg+0x7e/0x140 [ 493.040058][T30510] ? unix_dgram_poll+0x3e0/0x3e0 [ 493.040077][T30510] sock_sendmsg+0x75/0xa0 [ 493.040095][T30510] io_issue_sqe+0x1f4f/0x64b0 [ 493.040114][T30510] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 493.040136][T30510] ? __list_del_entry_valid+0x54/0xc0 [ 493.040190][T30510] ? rmqueue_pcplist+0x145/0x1d0 [ 493.040236][T30510] ? mntput_no_expire+0x64/0x730 [ 493.040254][T30510] ? get_page_from_freelist+0x54e/0x820 [ 493.040271][T30510] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 493.040295][T30510] __io_queue_sqe+0xe7/0x360 [ 493.040315][T30510] io_submit_sqe+0x1695/0x3400 [ 493.040347][T30510] ? kmem_cache_alloc_bulk+0x289/0x340 [ 493.040368][T30510] io_submit_sqes+0x822/0xe50 [ 493.040387][T30510] __se_sys_io_uring_enter+0x1c7/0xa20 [ 493.040405][T30510] ? __fget_light+0x21b/0x260 [ 493.040445][T30510] ? fput+0x2d/0x130 [ 493.040465][T30510] __x64_sys_io_uring_enter+0x74/0x80 [ 493.040485][T30510] do_syscall_64+0x3d/0x90 [ 493.040505][T30510] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 493.040557][T30510] RIP: 0033:0x4665e9 [ 493.040570][T30510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 493.040586][T30510] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 493.040603][T30510] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 493.040616][T30510] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 493.040628][T30510] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 493.040640][T30510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.040652][T30510] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:53 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff2c) 07:22:53 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x85, 0x0, 0x0, 0x0, 0xe) 07:22:53 executing program 0 (fault-call:6 fault-nth:13): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:53 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0xc8401, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:53 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x86, 0x0, 0x0, 0x0, 0xe) [ 493.977466][T30563] FAULT_INJECTION: forcing a failure. [ 493.977466][T30563] name failslab, interval 1, probability 0, space 0, times 0 [ 493.992796][T30563] CPU: 0 PID: 30563 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 494.008333][T30563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.019870][T30563] Call Trace: [ 494.023145][T30563] dump_stack_lvl+0xb7/0x103 [ 494.027823][T30563] dump_stack+0x11/0x1a [ 494.031989][T30563] should_fail+0x23c/0x250 [ 494.036596][T30563] __should_failslab+0x81/0x90 [ 494.041460][T30563] should_failslab+0x5/0x20 [ 494.045965][T30563] kmem_cache_alloc_node+0x58/0x2b0 [ 494.051171][T30563] ? __alloc_skb+0xed/0x420 [ 494.055699][T30563] __alloc_skb+0xed/0x420 [ 494.060031][T30563] alloc_skb_with_frags+0x90/0x390 [ 494.065334][T30563] ? avc_has_perm+0xc8/0x150 [ 494.069931][T30563] sock_alloc_send_pskb+0x436/0x4e0 [ 494.075178][T30563] unix_dgram_sendmsg+0x478/0x1600 [ 494.080294][T30563] ? selinux_socket_sendmsg+0x7e/0x140 [ 494.085795][T30563] ? unix_dgram_poll+0x3e0/0x3e0 [ 494.090832][T30563] sock_sendmsg+0x75/0xa0 [ 494.095173][T30563] io_issue_sqe+0x1f4f/0x64b0 [ 494.100287][T30563] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 494.106105][T30563] ? __list_del_entry_valid+0x54/0xc0 [ 494.111490][T30563] ? rmqueue_pcplist+0x145/0x1d0 [ 494.116471][T30563] ? rb_erase+0x4cb/0x750 [ 494.120815][T30563] ? get_page_from_freelist+0x54e/0x820 07:22:54 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x87, 0x0, 0x0, 0x0, 0xe) [ 494.126365][T30563] ? fget_many+0x178/0x1a0 [ 494.130808][T30563] __io_queue_sqe+0xe7/0x360 [ 494.135408][T30563] io_submit_sqe+0x1695/0x3400 [ 494.140272][T30563] ? kmem_cache_alloc_bulk+0x289/0x340 [ 494.146179][T30563] io_submit_sqes+0x822/0xe50 [ 494.151210][T30563] __se_sys_io_uring_enter+0x1c7/0xa20 [ 494.156970][T30563] ? __fget_light+0x21b/0x260 [ 494.161657][T30563] ? fput+0x2d/0x130 [ 494.165555][T30563] __x64_sys_io_uring_enter+0x74/0x80 [ 494.171042][T30563] do_syscall_64+0x3d/0x90 [ 494.175571][T30563] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 494.182075][T30563] RIP: 0033:0x4665e9 [ 494.186293][T30563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 494.207875][T30563] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 494.216357][T30563] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 07:22:54 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x88, 0x0, 0x0, 0x0, 0xe) [ 494.224363][T30563] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 494.232511][T30563] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 494.240766][T30563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.249447][T30563] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:54 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x89, 0x0, 0x0, 0x0, 0xe) 07:22:54 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0xc8401, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:54 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="d638431abe3b9b87b379b4e483ab3d27b35c5f3454475517616d7407c9977557acec766aadca904cdd44ba4630b40457260be8740c82a79a0bd76cdb07131421fded0d80d49f754673c114e95cbc3520f9f8db14fedd6fe8940eadbb2cb07ef3759e15d6daa7f21be89e879be113295a3dca2d9f3dd343ca9cda0df4153ad3e5a76048ea845824f04795", 0x8a, 0x1ff}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000580)="22bc6875f6d7a49fcd02eb2ee3b26471c785f8994c05748644425cb40ecc282f8164c133337dae41dd0c6d9e1b9643e0f3dc6b4ff7b3fbfaab6989974195ab13e1196c5523e2aa4a4e4a609a8fd684e79e1896be51da8a7690db42e033bcae6ed7478baf96de4c53809e165a6d194de3cb", 0x71, 0xfd0, 0x0, 0x0, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)="b28077adab4bc208f9c20328daba6c1603a211d5cd536eb769b47370359f4804951348aec66b5782cc0d7c1b1cab939a76866b6e9ae19a820be2caf2d6df6c282cf25b57b5ba06e906ceac919647a824396644eb132b176365ad0f1e0f5c535c7d0fba9eb2e771913bef67542faf9e79362f5efccc4b50b1a6e14240dd8ff694a7b94f26db9c0b2a2a7d33f504da526b387ee1dd4f1c95df69a511baed9952c6b3e934586c1870c333420dc9167ada641116ecdb190f232f6b393694f2bdcd7436915f3dcadd19aa21b47b6c9194b67d0958a8a2dbf068912379088d7931", 0xde, 0x0, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800)="5cbb1f3122d3edff1cd7e5e8f623bea8bb737379ee6f810fc87fa3dfdb339ca24825ea366bb49776d29bdd5a4dc3f82617ae055ac1edd30a7e4d4b97baf16f7cb6bbd9e73df0bbb45bd8c975", 0x4c, 0x3, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)="f295ced5d47934bbec85f762c7000eeb1b406ca35bd6aea2bcddea2b5387e500741b5d8e0cd2707298bb93135b80f3a6e43211214853655f053eb6138c129f1c2d002c3503d4076a5d620d3499880d66c9dd319c6050d06ee7b5fdcc95f3c6c11203372c4b9becb36f81a52c8be222c8fe7927017326462f7d2eb52115e20251d6f215f569078d4b06446e83dcc252b8948aa69576592de3fddc4331dc70f06ab81bd7916ed8e72632a593ee6e167b3aeaf05488d13b8c2d771f9812b7408887763b7d8c58a99fbc02f6103f677023b85ff97176b2231b3e9be99782b81598942967dc92d143", 0xe6, 0x5de, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x27, r1, &(0x7f0000000a00)="5c1e3d06192a268768bc14d9b53898249a96ba8c7a1eb99f2d50eec5208373", 0x1f, 0x722, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000ac0)="1a81002c1aeb73f8cf4c81ea346abcc3afd3db7ef2e8789b73ed7c8d482d5c5f5d8cced9366979f5ae1e8b71627a4e1cce42d91e752d202a4ff64bbe133170d0b0b499c3f9694dcf1356f994a7f0798dbf329100eb76c182099d5d3d63ed27fe3e545175ed2176d5c4cd7b3b1f3e49b8a0b72a53885b67b9229016f98434bd38d43c9403aa7dc48d9f9eba622e8e930f3937dcbd70bbddc25e28a3e89ae4810412bd05359d3aba220487626756b72ed77012", 0xb2, 0x3, 0x0, 0x2, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000c40)="0dbbf5069c5b346d4018bbaa003ee1cf16d3cf53aee496bf2db6dc3065e7f9f79731c295d39b5524eb1aee6e8f24c76f1fd16f464fbcc64d53d2ebac8268dcfa0f6cb3962bb66569364d20aeb42f8e2cacf7bebefe37ad0e3dad751adda202c27e83c9288326e73b7c32da4dc6f429a0e6261c2d3f92c57fb7002e40329f", 0x7e, 0x9, 0x0, 0x0, r7}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xfffc, r8, &(0x7f0000000d00)="851206fceffbb8bdbce2959e8a3f25f50c1575798fe6f8ffe7d0009fe224bf32a916fdf966345afbba0a0fee38adb710e852d15975f21a78ba8867b9db9db25ec5bd014c56eff7696890d5feabf47010fe5e74f6ddb4eedbc31c530a192fd59cf6b2621ea5433921df07e10ebb06ce5020432f42f0f19a", 0x77, 0x8, 0x0, 0x1, r4}]) r9 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:54 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r4 = epoll_create1(0x80000) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1000) dup(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 07:22:54 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x8a, 0x0, 0x0, 0x0, 0xe) 07:22:54 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff2d) 07:22:54 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) r4 = open(&(0x7f0000000040)='./bus\x00', 0xc8401, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:54 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x8b, 0x0, 0x0, 0x0, 0xe) 07:22:54 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x30000033fe0, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="8d4edcddcf4d320256724afd1113acc04ba81ab6e210e8eaae644d", 0x1b}, {&(0x7f0000000040)="4302c01af76b1522a9d9d98c83b83362e9e4e1da63a1e9a598e268acd94b5b15f93e3fec72cfadeb21d5242330e22fe06d", 0x31}, {&(0x7f0000000080)="0c1f5def3f78f96a0c68dc410dcb2671a3cec6c6489bb3888a75ef", 0x1b}, {&(0x7f0000000240)="456f3d77330b77290b90f28326022e9346719798972f2546b9fad2d55ac4fa97c18db26e6cf97f1dad39274274c2514f008e1206d82b96e85012ad4548ef2d3b0d778a0e6786cdb03769e398acee3c78b2441f2e8cab59b78bef92cbee8844", 0x5f}, {&(0x7f0000000440)="a0a5ab771cd541f58fc9b2d6cc37458f3a7321eee891132c6d279df3a44fa02a66b44779e6602af14fae3cf02defb2fb056222b7ff47232ec534a28debde599f691391025d1aea4f30b169f6ce3177af169081bf5a531d0d18d358a7d6988239200c196058f1792bfe0281cacbeb488ee8872049c8ba04f9b55281df2690c477e26b34ec1477e6896584e2a7ea22bc9d94a415bd27898c8655f98df7d63fe4e5", 0xa0}, {&(0x7f0000000580)="9e7145961b444f2121d3ff96840e3d9b834372825e197801bc905c20ee55b3ca5b9121b57e326c8c76636d3e98e0a0686ad3785a46e806dab7dd2609416b39cae8ccf2f10ce143ad4fa1b9f3e065ab2662ed22fef5a9980bfc381ce8456f449206fdba2ae3986a302c8c4ebfaa0ef60859192d0cc776010104614be1a5c28771d41171e3c3404dcf9d7416b01fcac436b7e1d31b50f0de1e", 0x98}], 0x6, &(0x7f0000000780)=[{0xd8, 0x29, 0x1, "424737ae0a70ed7d41b71c7f5a089b0d19a889be658aa79890f5527eef9feb898bfa4e64c207a168dea64cecb7d09738bda7584e14893321d57703566672f9f463f9c17dfbb4dfa054b2b966ef6be9318677978f6735cbd75376b5fea7d5edd9c2342bd1f9975adb51c30842774bd21ad477b10b06b5d9f926f7e23365ab1e5ba9748dfafbd04892be029eeb31b645e660624cfa46f3894bb83d8fa8e2cde266aec447e8830497ad1031001384807b7c81d17d46afe629305798b79d8bf8b2f078d09a398f7e"}, {0x110, 0x10a, 0x6, "b9f32f2ac34ddb71197af08776c767330aebc4525362daf4ac9bb307bd61849108883cfdd8828d3b2e324b0467183dfee99ccd5be51e1ecd11632d1b6d61e5e79230d07b80c1108e22ed2e39559cfe2bd7cb7e56f6aa19e20cb2e43b1003cb58b029eef3b36231081c2620334ce1c2e7e7f997863dc7843984f72f039d89a0bf290686ad5c545348b4e6b41681d9ba1ae3f06d65c0dfe5e167d4350f51c5e205ac1adb02697cd07be86b236134f176d11d56417df64f43c2814641abed69a4d3ae2b54b48bbf472bfef2efb363183fab6a4309371c03901df0cefbb7316f5438603cbc1e2867e94593a9d071581a9bbfcca3f25045456b376df21bfa0f"}, {0x28, 0x2f, 0x6, "81e5c3ffd00d4f39e5a2a2795da4452d7784"}, {0x78, 0x6, 0x1, "f3e754943826650de796f4990678cd638d12a3692bd697457e51c25d5cc93f6b1f842b4648666264752dd9d0e0a1d74fdc697d86f5adf3c60ca580c663096482fccd52dd01076732b2c50666045febaa5cba45ae05f9f24fe20761b4911d4ad195ff"}, {0x78, 0x84, 0xdf, "7775d7ba5325af3c4e6e00fb7f9d0a0ae4af223557da31cc2a337876a456062a701839859da71de65e08cd70a94f696a609cddb859de1f4c49c62301d2716de8dae393a5cca38c1f48166c8c0db5b583433b089cec48bc2a356f377eaef9061f3f912e502581a5"}, {0xf8, 0x10b, 0x81, "d29494bb1ee8964ab540b085214d9ffaa22ac790e237bc1481ce25a6110ab4772e8a08ff752bf03651fb87c4dffcb98c9ef22030d95686b7312d2984064d4194865bb6e28b95fe7281ec20a9a5b1859974b2bc0fcd956f60f22c23437bcbfc771c8543573184ce94e27d9ee6979fb12e1857441a45661b4f93614b227db9bcbfe8601b66dfd9e113d7dc35522ed8f4822e0abbac1d48bea041c3a57d084a8328bbf563287b95ff97efee32003b1300d54269a4bcf4b3122d10fce21d8b63f41068883b30bda6880e531d06a4bcb2148292cfdab8d9672cb69066925052ca42b8c9b41e686f24f5"}, {0x40, 0x116, 0x9, "fd203933fb53c578fba54849e1c0d76ffb12eb4a02182c96aaff48430a411ed685f7acfbca52d953ec5db3"}, {0x108, 0x11, 0x1c, "d09ff78c90579d5d479fe3239b35f89329a141cd301769aca799022e87a5bfff455dc3d9f2eb80e9f78b35b81874fe45dc1384239062c3067f37b28d1d1dcf550294a580e7c1f973fc9c7ff3c59658846dc1346a488a8606c3507eaa282cfc0fe899da19860bcb60281336b3ac5e2ba47133a674be4d5c20c976701d119275977022647ccde5b301afb1a357ee873b805e53f8978238e053b244700ceea7791894145ccdc8e81e39be6e822d80a0ade9c3e43a507652b2e4e8a2eef79fad2a99656356fac8c8a1fd0bee635bb6de25f0b0e5988215352161fe062fed646774c96acf02cfb8621b46751718f94a53cf88d6e51369a8e0e7fa"}], 0x540}, 0x8010) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:54 executing program 0 (fault-call:6 fault-nth:14): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:54 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x8c, 0x0, 0x0, 0x0, 0xe) 07:22:54 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x8d, 0x0, 0x0, 0x0, 0xe) [ 494.923571][T30625] FAULT_INJECTION: forcing a failure. [ 494.923571][T30625] name failslab, interval 1, probability 0, space 0, times 0 [ 494.936476][T30625] CPU: 1 PID: 30625 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 494.945334][T30625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.955479][T30625] Call Trace: [ 494.958760][T30625] dump_stack_lvl+0xb7/0x103 [ 494.963390][T30625] dump_stack+0x11/0x1a [ 494.967561][T30625] should_fail+0x23c/0x250 07:22:54 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x8e, 0x0, 0x0, 0x0, 0xe) [ 494.971989][T30625] __should_failslab+0x81/0x90 [ 494.976856][T30625] should_failslab+0x5/0x20 [ 494.981380][T30625] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 494.987333][T30625] ? __kmalloc_node_track_caller+0x30/0x40 [ 494.993813][T30625] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 494.999923][T30625] __kmalloc_node_track_caller+0x30/0x40 [ 495.006010][T30625] ? alloc_skb_with_frags+0x90/0x390 [ 495.011806][T30625] __alloc_skb+0x187/0x420 [ 495.016959][T30625] alloc_skb_with_frags+0x90/0x390 07:22:54 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x8f, 0x0, 0x0, 0x0, 0xe) [ 495.022995][T30625] ? avc_has_perm+0xc8/0x150 [ 495.027691][T30625] sock_alloc_send_pskb+0x436/0x4e0 [ 495.032949][T30625] unix_dgram_sendmsg+0x478/0x1600 [ 495.038117][T30625] ? selinux_socket_sendmsg+0x7e/0x140 [ 495.043728][T30625] ? unix_dgram_poll+0x3e0/0x3e0 [ 495.048674][T30625] sock_sendmsg+0x75/0xa0 [ 495.052998][T30625] io_issue_sqe+0x1f4f/0x64b0 [ 495.057772][T30625] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 495.064088][T30625] ? __list_del_entry_valid+0x54/0xc0 [ 495.069958][T30625] ? rmqueue_pcplist+0x145/0x1d0 [ 495.075007][T30625] ? mntput_no_expire+0x64/0x730 [ 495.080335][T30625] ? get_page_from_freelist+0x54e/0x820 [ 495.086307][T30625] ? fget_many+0x178/0x1a0 [ 495.090919][T30625] __io_queue_sqe+0xe7/0x360 [ 495.095621][T30625] io_submit_sqe+0x1695/0x3400 [ 495.100385][T30625] ? kmem_cache_alloc_bulk+0x289/0x340 [ 495.106056][T30625] io_submit_sqes+0x822/0xe50 [ 495.110820][T30625] __se_sys_io_uring_enter+0x1c7/0xa20 [ 495.117513][T30625] ? __fget_light+0x21b/0x260 [ 495.122190][T30625] ? fput+0x2d/0x130 [ 495.126075][T30625] __x64_sys_io_uring_enter+0x74/0x80 [ 495.132626][T30625] do_syscall_64+0x3d/0x90 [ 495.137548][T30625] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 495.143775][T30625] RIP: 0033:0x4665e9 [ 495.147759][T30625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 495.171230][T30625] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 495.180263][T30625] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 495.188784][T30625] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 495.197007][T30625] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 495.206107][T30625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.214189][T30625] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:55 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x90, 0x0, 0x0, 0x0, 0xe) 07:22:55 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="d638431abe3b9b87b379b4e483ab3d27b35c5f3454475517616d7407c9977557acec766aadca904cdd44ba4630b40457260be8740c82a79a0bd76cdb07131421fded0d80d49f754673c114e95cbc3520f9f8db14fedd6fe8940eadbb2cb07ef3759e15d6daa7f21be89e879be113295a3dca2d9f3dd343ca9cda0df4153ad3e5a76048ea845824f04795", 0x8a, 0x1ff}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000580)="22bc6875f6d7a49fcd02eb2ee3b26471c785f8994c05748644425cb40ecc282f8164c133337dae41dd0c6d9e1b9643e0f3dc6b4ff7b3fbfaab6989974195ab13e1196c5523e2aa4a4e4a609a8fd684e79e1896be51da8a7690db42e033bcae6ed7478baf96de4c53809e165a6d194de3cb", 0x71, 0xfd0, 0x0, 0x0, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)="b28077adab4bc208f9c20328daba6c1603a211d5cd536eb769b47370359f4804951348aec66b5782cc0d7c1b1cab939a76866b6e9ae19a820be2caf2d6df6c282cf25b57b5ba06e906ceac919647a824396644eb132b176365ad0f1e0f5c535c7d0fba9eb2e771913bef67542faf9e79362f5efccc4b50b1a6e14240dd8ff694a7b94f26db9c0b2a2a7d33f504da526b387ee1dd4f1c95df69a511baed9952c6b3e934586c1870c333420dc9167ada641116ecdb190f232f6b393694f2bdcd7436915f3dcadd19aa21b47b6c9194b67d0958a8a2dbf068912379088d7931", 0xde, 0x0, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800)="5cbb1f3122d3edff1cd7e5e8f623bea8bb737379ee6f810fc87fa3dfdb339ca24825ea366bb49776d29bdd5a4dc3f82617ae055ac1edd30a7e4d4b97baf16f7cb6bbd9e73df0bbb45bd8c975", 0x4c, 0x3, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)="f295ced5d47934bbec85f762c7000eeb1b406ca35bd6aea2bcddea2b5387e500741b5d8e0cd2707298bb93135b80f3a6e43211214853655f053eb6138c129f1c2d002c3503d4076a5d620d3499880d66c9dd319c6050d06ee7b5fdcc95f3c6c11203372c4b9becb36f81a52c8be222c8fe7927017326462f7d2eb52115e20251d6f215f569078d4b06446e83dcc252b8948aa69576592de3fddc4331dc70f06ab81bd7916ed8e72632a593ee6e167b3aeaf05488d13b8c2d771f9812b7408887763b7d8c58a99fbc02f6103f677023b85ff97176b2231b3e9be99782b81598942967dc92d143", 0xe6, 0x5de, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x27, r1, &(0x7f0000000a00)="5c1e3d06192a268768bc14d9b53898249a96ba8c7a1eb99f2d50eec5208373", 0x1f, 0x722, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000ac0)="1a81002c1aeb73f8cf4c81ea346abcc3afd3db7ef2e8789b73ed7c8d482d5c5f5d8cced9366979f5ae1e8b71627a4e1cce42d91e752d202a4ff64bbe133170d0b0b499c3f9694dcf1356f994a7f0798dbf329100eb76c182099d5d3d63ed27fe3e545175ed2176d5c4cd7b3b1f3e49b8a0b72a53885b67b9229016f98434bd38d43c9403aa7dc48d9f9eba622e8e930f3937dcbd70bbddc25e28a3e89ae4810412bd05359d3aba220487626756b72ed77012", 0xb2, 0x3, 0x0, 0x2, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000c40)="0dbbf5069c5b346d4018bbaa003ee1cf16d3cf53aee496bf2db6dc3065e7f9f79731c295d39b5524eb1aee6e8f24c76f1fd16f464fbcc64d53d2ebac8268dcfa0f6cb3962bb66569364d20aeb42f8e2cacf7bebefe37ad0e3dad751adda202c27e83c9288326e73b7c32da4dc6f429a0e6261c2d3f92c57fb7002e40329f", 0x7e, 0x9, 0x0, 0x0, r7}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xfffc, r8, &(0x7f0000000d00)="851206fceffbb8bdbce2959e8a3f25f50c1575798fe6f8ffe7d0009fe224bf32a916fdf966345afbba0a0fee38adb710e852d15975f21a78ba8867b9db9db25ec5bd014c56eff7696890d5feabf47010fe5e74f6ddb4eedbc31c530a192fd59cf6b2621ea5433921df07e10ebb06ce5020432f42f0f19a", 0x77, 0x8, 0x0, 0x1, r4}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:55 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) open(&(0x7f0000000040)='./bus\x00', 0xc8401, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:55 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff2e) 07:22:55 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x91, 0x0, 0x0, 0x0, 0xe) 07:22:55 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:55 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000000440)=""/65, 0x41}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000580)=""/69, 0x45}, {&(0x7f0000000180)=""/41, 0x29}, {&(0x7f0000000600)=""/152, 0x98}, {&(0x7f0000000780)=""/181, 0xb5}, {&(0x7f00000006c0)=""/89, 0x59}, {&(0x7f0000000840)=""/30, 0x1e}], 0xa, &(0x7f0000000940)=""/139, 0x8b}, 0xa19e}], 0x1, 0x20000000, &(0x7f0000000a40)) sendmsg$NFT_BATCH(r5, &(0x7f0000003080)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x200, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x158, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xad04}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8c}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x84, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x68, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x104, 0x9, 0xa, 0x706, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_USERDATA={0xda, 0xd, 0x1, 0x0, "bbdde11139de74b1cebd8bfbb4b834c466dcb44bffcd10995d719266572ef77e753ab475b623545d140ecdcede60dc02388a6373ddbe7d9458b55d7db92c030b4735d7fb28cfa8b790d7eca606fea83681d889469585976d62420f24ef8041978d8b19f322cf77718b80e8fd2baa91e47522f7e4a3072e9e3a2f23244538bef4fb763a59bc259d0a507badd219d87c8dd4f91e37209fe9d9693a5d07fb058338dfc17f6547ce8430e3320ecb80a235c79d57f0c535608486a5a2ae1192d62d91e097b796b9943a9d575d24dd9e74e0911bb952f5a2cf"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x205c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x69c, 0x3, 0x0, 0x1, [{0x4}, {0x694, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_USERDATA={0xf2, 0x6, 0x1, 0x0, "fca673d506335640210e800af999add8b4f92c127c007283e5649d11274065fd875e5b4661d5950d814f666c4713a45b67642b48069d597b08a1d33a5d10082b7fc8354f90c514d3022ec8e259311b853e261ccc2e2b83421b739f33efa22c20d47d62e3f12758dcd50248361e83934620c81d1d3fa0ad6c03677e840360e23780faf7b686172266424311b4fb33d979e4d6d7030b2a673922816fd59fb83d548ed492d59fcf5e038ce1f520ed74519a48751930508bf18d36ffdcf69607f0b1ca613e5f39d1d96e71b57677051d57f2a73fd1a580401c39022c0b4dd7a663c406551434b59b5da1567a3cb7fad3"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "df23e4a7316adab1ba7e560e32a8de7b8c000506ab78a2"}, @NFTA_SET_ELEM_KEY_END={0x260, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "2a2568550b0680bdaa57471ea51292e52ab3d79f58cb6661d805e80cfce304a0836642a7d97edfbc199379fa6991a071ce00b032fb10fd87cbb0a54e43062c1d7bef593bd57e680eb6c58a8fae08a7b15207ad83bdf7c39c2f2d9094946311689bc29c85e3707507f9c70721aa21709c3453bae48f25abf259198bc67b3ee9573e4b9833c29569c11cd951e183eb9ea079628bad55e7c2163c3ebf6b"}, @NFTA_DATA_VALUE={0x3d, 0x1, "079ae98308469f74846e08eb585e78ad1c959cdc42a37d21402e852cf581f9304381fd8916dd431f71559eebf24da50690e18bfeab377bddd4"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2e, 0x1, "6f8ec2d6e6f975f2cb40baeb0bad8c4138b3b59dfd05ea7d5a2db8d9a496c4d341090533933aaac9cb04"}, @NFTA_DATA_VALUE={0x1c, 0x1, "d526b626acc3ae9af58d4b4a70e7970a9d0e3daa27c3b6ec"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "785171ce0f77ad0bde7afc9b353de148cdaa22a8daa1f434ce583b59a68d57866c6996ac47861e56e2a5ab8e93469a74732511a0f59f9536f265891d6279713bf209be509d5271251218986c6dcd46418b04055a733f319fdf3b297998b60b9dc2f73a39b185098aa1e35f9d39962b6511a507c84ef47f9ecd60fe1aa2dc4ffaaea03aa26c86168736283d5abb5d843cab57caf63f254b6a54e8e012e0ed173a7528f3502ffb78c97ce8cf8e8108b631cd9ff435620b1cba7c47b7fde03f658aa0965da45a"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x2dc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x5, 0x1, '{'}, @NFTA_DATA_VALUE={0x81, 0x1, "88f70dc08b2f08928c28682579ad1da5a14f6e3fb463c9ec19951704dac3fd74319c6fd1eb0ef834e00216e5fbb9468c8400eedf3d07d28d78948c99be9d32ab766382506e372fadc9c62f608568a727bf94de05c6826ff54fc831026211e8131ebf7ef835dccb8cabadfa9181a6233357d5ef93abb6ad7becb55dd7fe"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "660dadaff5c16397201508bf5bad05beb0034fd6f3ecf9b2b43d9906ea3f71f5a20b2f1ec42e9f2db53a8579066a21e9bcfbb72bfc60a793986d90282ac011562e5248cda1d8c9e8f28cc927ab90a4bc08210c1b188ef4f0565004f98ee1133ea64dbb42c06b60e0466bf0cd9ade1fc6b866d56c0aac2b5e13b498e86aa0524efe2b7af548af2979d997"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x35, 0x1, "a453004bb309c8d25029f3c9043519a1edad3075117221d30b4391d8a1c9b6106e69e5f75a1f343d27e352dc3162e238ff"}, @NFTA_DATA_VALUE={0xc9, 0x1, "f069a9a1419034e9b642ad5abb6f79cdf36b11eff3a4f6139d29ab595c9eca418045482dadf51355722b38cafd2e344970f865b3119d36ea0ab11fe8d3cc6dd2b59bd3512805eb2fe8d4da10ed2a668c561a3ae9bf1ff3feac4636565f82d979af69753ea438436e29dd9f0c1d3903edcd85e39d0554312ced19878952c6f5298762b0c781e06ac199ee6f5f1049c342c6efa515b90381465a7be8e9d8542c7cfda371abef218c4f1a2852cdae82f34c4c348d6ce3163055b946235b154869fdfebf7a347b"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x197c, 0x3, 0x0, 0x1, [{0x188, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x13, 0x1, "4aaab30427ee51b0a89f5a8551d78d"}]}, @NFTA_SET_ELEM_USERDATA={0xa5, 0x6, 0x1, 0x0, "239daa50ad8138e54821e9214574faa99d235dce33e71e8d2da7a74c88afc1bcea3a3eab1e0d5d8abbbe2be3d22d832e16e7df70148da37c825687ca88b1a56399b90963929e2c4dba1ef17e153796439735549b9e571fc8b7598f657067ada728215d3c81d9f690ffbfd3ffeddcf1725b20b666199a65814c1928ceee996c60ae4911d7099bd4409452653798d7025f53a804b668d29abba838b47b583d2765a0"}]}, {0x10d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "b5603ea2c8b53e1d08b95953cde6c77f147fd0f7d8d491aef60c4ed68b292c76e2f386bd0dbf34996246dbbb16158a2692045104f7026edc4dd5767688311f21e7e09d0fd90d3983740c2c3becaadf4967b7009f3288a38e4e0436a6c8bc21a46815e7ce8cab500820fdd67d9c5d5d3166ea1575654fcdd9243e2c78a3f0fb9010f058d0ebb40c80dcdd09f8763e6afd62c0496476200574e37c4b2a81444207bd9f38d99020801ceb61d09842c8cab8d8e5df8099b97b55aa15aa89b566627415ef28b933004c88a389b365d81499fcfa884b7e61dcd565184dcff018afa576d0a7326dfc28cbc320ac7cb76ad18d75a29e6efda151942af3705031e7edbd67c93d8859f3103871534d56b961994ea4647744c7fdfbd9d0e3d6cfd6f1b27d1e1e7cb18056e0c88c9c8b8ebf9e6a5dabd79a4300f23809da053327c038fd0c1d007b2496ebdea34f50689351c739b51d7d51a9869120dc8817d67069602a2e2a30a84d27d7240f360f32244ee34bf91e1888f9fba9c86fcca15bcda3da15fa4d2cf7b6e01a446e6e062acef8e4b33aa643151847219b5cacdb612ee08597a035ce191ef7f71844a21e332acc62678c63f0dee5acd439bda479b995b8b7cff5715f256d8e4155a4b5945634b7e74021219ff9c1563c62163468149d41085496ef84c511fc24c5768e6e7cdf6d1d6669c3684fbc6a0440bf0017bc4bd4d63388e605070ed6aa487ab58830f1292778ed7c3bc92a644a666b5827b967f01fe2e567cc3266de335ea922e2bbe06baa3147cf8455158982b633709053f361595a13965f53f2812757d863f292d813ea47bda5799275b246b7bc9e50f8c178106cc66a7ebbf3713bcf3de442712a3d4f27a943a901a026fb69d305425d09b0780fc2dc119e4607bbdd62d1127c17e4b8653b8d527dfcaee28921bb447ca1572a03d42287e124f1555b1fd0b8079d1b8a65e007edceb850809aa692a755daf288840bf479d8ad71582542dea15036321514005b5b759bd3de0f2ec8f3c0ced7a8e2d13211f8c9ac0a49e3f212710c14807352f9b0cd29871d293a590bb9a661b25f6d2663a0284d8a855caa62e8548d9ca1eb60cce488a78f259e24ca33b9a7908aed026b64825d6497ee0fe1db1f3f05b9dfdff017b1c7bb09c3c26fb1acf91b4fa81876b6c311b14d7a541d0d0a5e32e6d0b534ce5094d2bb82ccd342c3c000a7ae87e201eb68c37f2810eca6b222115f102ae2c382f16c15a020bb12471bf0cd46c7bf5b81f707c4f57091d11ca71bd5ba9a76559f383fc4b767043a3d50e2c5823c097614e78d86d97224d7cd6990df2051733067b51131e437a72970fd45b98f11b03af690758fd1b6c4cba3bd3e82a3237c73d3563ac7f1e33a6ff4114710622d531256b5184c7d35f3c2b9b38ae28814472a3feb4767f5be54405191ac20a92012cec520a062cb598d368609c83ec35e05484dfd874829d564f8a10c5d92124b863a73c9fc34db327afeeba1e8b1ab8cfb2dbabebf7acb57237e1d28949ca864a50114d58d3298313f4f1fc95f841311673321c851704e921068e1e091bbcdd5bd43a4fbdd4c710bfcc56ceb39ee24ea500d6635ce2ed750ca5397d105f6c6dc5d48a1b64f163783db9b7ef24d379dca1dd4e404ae3b3486c3843276022e6c1aed69d6c7901827a9f9dd4d27979f6bfbce7e285b9e4924296ae54fded5564a9f0c66a1a3854f1526a8d166c025eefc38135160f2f948951313cd7c1ccc005eb5c2c27a8f349c9804605253ad76829db4ab50c0393e3908c2b19419e3b65f040ff56c1c95466738aec5f15cdcf68d2796efcb1e45bb46f473ae67280e8ed4333c36b2baa522ca27ca259b2ab6205dee6ec1210d51d82bfdcff349d69383b9e4bd85c5d9c508a26ddec82f939d9be7955831ce8932fec78ba3ebe6b1d129ccab77b19081ac4dad1bb17a65f67d827d1b9aba45eb34217b713c3eb66dfc7526f08f4ed26acaccbd3eb92ce9939d8be5d6b7f40e105dbf12d9a73587949941f54f1481e1e59652288f5293cee2655dd3e4a1e83dfea98312e4fbecbc9d4ecf46274efdb9e6ecdbc75911cf1d08603de5812c628e580eb9266fd139f0ed568e6bb5bb94944868b6eeb826e5307597f1879ad50a62fbba53eb039d3e9ea23572f9bea62bc0374ebf18ac2c997efdaac2d7b0783f5d222ec62a9edfd736efa195869ed7d1e65b94d58cfdb93e5225679131f8afb00a09f46d14ae613a19ac71c6838b418117d7259e5660f091acfc61760ccd2be8c5b0212cfd61c21f1ac13fbd4508a827f7ef2994ca2019d971f07910ed2bb1c0ff8d09f5778280a91c72531094c9a2d42d0ee768fcaeec3a2a5755ae21b3ecbc09912a45981461384911273933497bb909e49e8f574419f75551f41d5506b747a3a93607a0baa0bb74ae74202ba8a2e48c38dbf6f41de0c159a8d73cf331775b63efb51bb218236467ef0e5604c2df750444a725f1a94b6cb7e23a8e2b36d38f7999f7a3eb757cab18a778c65ea1883fe1298bd27b95fd7b8cc53ad5def58d25541cd697e4411612e95dd3010d76bddfe101a77ddc5147b13ef7148f92bfb22932d854dd6aa01187bb6ef168f0e7bb722a993d9106180eb38dc623f4643837924250165fa6181285ab8fb3c07b1bc397045af68864ac26b47bf7b8cce5dcf773463cab70893dcf8102807e4e432a61647aa5afd31c41a81bd3d293b1fe038ac3e17fe71366cca13611bddb0e92df38b296cf99cdb376dd91cbe6ad0fcf8c7b4a433be3651bfb2fffa8277bc0c9ccb847c94ff7e323523506b1f230f13cc563e7cfc0595768305c972e551dfd2d838049c52ebb73596b440df7047af32dbbb7ee856104baff98dfd301502430de3fb8b4750feb1f323d084a8e7d044babff89c53d8bad9db67782b919da9581fc2cf2470c40f79ef1f511331b4a9ab88239d94c37f0baceecad8a379e948580454d5346719a8e4396918541fd53607803c5f21d6ee5ed2995a457ac56c2391db30b63f8c990102e0bd3b2908355528a71f45b21ba3220212744835da31c8d3e6bbdaddeceda12376d437c21a66a11b046f3da6b6d6f13c3817d7bc2c84599163d4084a29a071d3d74575d4e337234e7dcbec7fd62b7fb962e7695f8520aa3f21777b472396dd0ad8635d5a0ef213769eb7a8cb8d4d2446e66a3fb51780502c5badf9990f6b7295605546b86ef84043fb11a4089daf0745488bba48d1e1f3dae3da875c0d223f15cfe188f3424f56e7a3795875c5dab178bdad3f87df9029e2ff44de316fe1881a2bb9738db62f01688b273875636c15baab61559782229a09e7b62afdd91df16ab78381a421ad923b1b719ddccdf693d79b9123c9de97519be1a8b04d347f9b868be921fe372919817124030b714a028f46f22e69bee565760012ed33d2262affd726ef5c155b8ac1ffd1de6dfb623b77cd87fca379097d2019701660505ab0119dc8f310989eb39fe4f74d2c7f3b066c45686dc09dee633b003a056cb5859406043552a10ef0bd788cf0feafaafe5dd59eb56b6d8206e707a934dde075d84a561af0fbecf240bb601c945a27b10ddca8f22a78a7c44cb93971fe9ccd65974bd27ca654c6f73cb2e0c3bb8f2b8fbb5890d572e18375ba0b63846f0dd51ac558f3add0fd9aa702af4dbf45734b3d65870e9d2182f673180ee440b33bd4d85f234b416fa22517c9d1dce5a3250343f95991644570b1c933e0901f170cd52dcca8870b7c15cca1bedc1c4bea451425ff4976fdf414c38be0713944305883df80c3e19e9805501e5880fda9ada7b0a2edc309cabfda59356db39f26c5064577a45674d0d5ec1c88af010d5c6891fd4eaf2d496bd343c88ccc209ed09b26c9c5703de71980817605f3171a5a45fc110fd797a67a4c6b3ce2d7c4942457cedb9d5c11d4b9d68785c42321eb66e6eb84c76714827df2bd18615bd22f4414ee83d822d1b3ee680f6bdef79b27055e6e72f8e540bec9d605d9f7a17be4583ef2b2c26cb6310422dcf08599209a2b2d3a8b223f1c3f6ddd96051af73f0afba8ee82b6a00ae753e3e9f1fec35bf9f5e4cbd983df947bc70ba874170b94b5a76cff2235830f1982fd38c301101b9419778cd2bfef3566243af3f56ccba1cb511a2ba4f5ae0965307181cae29d590c607cb5cbefe53b6f42f43f8782a86268b3c49b70ce94588a8d4c53fc06d798cf10b4a1d44c0b7be20604afbaa3da4ae2b60cb5d66cea25b9328dd17af1964da1b2d3a6a813c7ff74d937ea405b7b69172d4779de472ad76edd599880886da9b475f2b5ca4dd8c3ef5ca689f08f41433b6b8d473bef7788a24b710355a724fbc71681315dbede9f272c5c38ad4a42329b610abb24088ceb54e42c8714daa519f8d556ee9da1103254f66f805f076c90d9cf091db0637c95273069ca9855d6674b9f45d09f8093590d11dc9bbe3ea7fccdf892b22160cfb211222bc2afb0d9fc686126988eed9e23e49c6470be7d0c83a003275ca79808e2d34721d5aaf80c096110c465591a8caca696b36804d2e17199cf9c418e1b13308ccef52957416475481be8c7ef7a1835bcc00e0e1d2ff777b7d62d99cf90f492775e2bd141797fe696dcfb20dbc5b65113bd47415d6b72cf81e21b677628d7b99e1cee97f8a8dc7902b4d4f82cbc1a34921eb7b2ddfe3c0cd0897c383d6e944da4c538b302af805eaf93fd7a95eb0cc0e4858f399011d7b3cc524d5af6cdecc5a8a7bdc24e90515c8ce16d2bcb0b903365915f5969fc9f494e50a4227bf9c2e4fc2b7de54472295807c0ba8dd52777ff0319fd723bf427f5ab508dd9a8c26247477511387aa5d9def22c6715ab06b17e8bf72805ca412cce44a753e96aeba3cf280769650657ada6aecd3db27ed6a43850b0ed36f0a227170519ff571c091574009a70a556c83eeb778e8b65d56daf8f078877793052e61a1cb51b1afd628931b8aa08c10f3d4b8b813f62f059bec65ac6b252213e1d2b4b47a0f8901689df2b81853f1233fab47f200e97d7476b6436fc825c662a911b452cc74055b6c10494b1ee72a3b9a5970b1d852b507448da8653a964f366ecfa7304bc59d3e77000b5f362570a2b265f7976a008e56ececd61aee081fe1dba096889c46b3b72f5e30f10bf39efd1d79643bf31167e6044cda241a2a56e6495c554b38517e66d5ca02a3a742d432950efff1c3c81db888751997393adce82bce875300ce78b1e37f20652a87e4cd07f6b25a39b85f18a8b2df8b59787b86c62f88775a7eaee15eb7bdb78ba7b858cc70962a64afa9ee7af522285ed262ee3feb4fcd40a30bcc6951fc0a1335b172a1a4f5e7b435d99f88b966dce2d2ac73e1bb0eb8ea88c0a8852a1a9a1e8980d194a268c6c1c0641baa33685b244fd33f5156c5e4ecc5015e26aabe105f1bba3b78f166361159f2fcfdf06c164cfec9fd3b11d5ee13b2efae168eb51e48f8ab67cd6d3814fffdd25999dd124634ab3b465adf5d16b82077f1e46785b8e8d887aa6fa330c2d5ebc97e78d2a852dc87207de1de466dd2b7953dd049262778a65b81df4e474f8b10fadc17a1d84bfc9bdbd550114bc41599788a9754d0a312165fc5ee40965569d28a296be7b5797b1f1e8397fb8a98647cdf1eb4d702a24238cdc3a85baf0482035c0059dda7ee5663cb779b4ccb4c32414935159f6a997a72590d4bdcdb7293b2fdbc378039bb7d939255856d893f5df2cc8859c5ace652782211eebb26fb8cc5b0ae13c9af26a9f2f88af40512ba66b63224"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x7c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xff, 0x1, "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"}]}]}, {0x288, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x1bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x6c, 0x1, "4d32f850dd82d3a3a77eeb0c00e672d15f53288dda91267ad249ba331c49c672289aaecb36cfc8f0d1618362e4f894d5cf2c3fd7dbc04b3ddc943e2d91a745ef7bb585d63c01ed0dbfd79e99d8e612c6d763b9b345ba4d8568a4449d7369c10784a100de94a70ce3"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "bfd7f2979425e68938d153a2a3da6265f5682c573cbd078f227874e51c035c8927a53a40f65d986c2a3cfca34a0406d365988ad4947e7a669a2bc4a9f627bc0c496d50aa622891f418d5abdcf3753ca0f16c84e3fb625b47c2bba5d5b218eb299a3a2f1b8624f718f250ff94397e7bb16e82ce8fa5c4b63884bd6aa0b23e7ba09ee1f4cb5379f8a3bb464f475aa92d5d44b2a5ecd8d1b6f008065d6e5df00235fa5e805056ecb3b384efe884293cfb9f224f3cf1e3c5ad64bfcf00f3463408a398ea0585b197db45a724f4a934d18e65d6b4b1e020"}]}, @NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "21966849bcd6b7c6bd3e53c721d5b414500804da3a6e2dd42bd1d0010304e10a185569beb650fcbb422bf37588421fbdf18fc637b89e4c05cbd2c6ee866afc4d9e9e05240b753ab145ac3991d85ba09771c2aaf95cc0fe185e2c28c2a334d9b49ef28788b9e4dceca752aac0279d14bb2ac10a1619904e34d6c7ca805641d44dde6b4a28f61f618b4adc3012ab0e0c6dc59ec208d38d7d5d608cecbe4c25ecd1b358184d18152ec429"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x388, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x190, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d6e8"}, @NFTA_DATA_VALUE={0x4d, 0x1, "5ba91af31fd1219372dcaa05ed48fc021c6c2fdfa37e7a8d44ab6abbcde37017e9e8c1658b9190e33387c0d154ca96ed9c2cbfd5b2f16fb705f362d03d73ff200d1ba42d95a62daf24"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "73a8468ab720ea0bd85014605db6fa03f54004e6cdf748163d0dc5a54d9a4f80f21b2b5691e999fdaeaeb634bd0f991d23f91b36b3d4d4778033dd691b6d55a4f7c81269f6ed43fc48c9eb16c98bc9e861972af3a419f0a322ad94a92ac47e00bae3801307157ff0638786667cd0d781c4cb7cf8bfc3b6e08c15557a18e44f17b25c1dd872973c4b88b6049b966dde443fa33a4895df9ab778662942ca14a19e287310d06a35cf90f8134fab942afd553bbc7a6bd043d2b3077cfe4c9636b6818c267f61743c58fdcb6680ec23fef2e12475c67599d513aeb7c484bc92729079cf2b28b4"}]}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x54, 0x1, "dbf5d9cc90ec80197b54f6eb4aea57dba155f30b4cde59368b811b2fe111abb920b928bd9692bcfa2579062540322eb8fe07d64b1d3b36b6ff673ac807d14110d7c211d91de65720519bfbb3810684fd"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "00eda1a05749f6fb26bfc9e376349f0fd906146427822b2b692c75eda0ae2cb3cda72a539505258ef77e6edce20aeef4eecc9b07ad6a12d55cf7db4cb52ceceda6274d20e009136187796f7c6390a988dd6fe4fb7a68a95c9cf259378d82bed413435614a0c5fa514b24f5bfa162ce60fd5f505d02818ab2ac334ccbb0f99bbda9e99c18fa0e74a330b5324e475bd3471fba8ca8e40a4c05aa3322705a0482dbe58834d800ab0b9df2b3f955d4"}, @NFTA_DATA_VALUE={0x75, 0x1, "b733b88db5d1c4988382b0cbf6e672c3daa1d8525081b36838a7a5645c48108e3c14143871d6462317a416acbff0d2a740013df442ad212118c02e43dfb74da4e7d64a5577c1c92530946e0fda4737e67a6cc6647428dfcfcc2f38816ce1dd57bc0dacedeec33828c0d0ba30e7d9c51cdd"}]}, @NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "90514e60615055"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x58, 0x12, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x44, 0x4, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}], {0x14}}, 0x254c}, 0x1, 0x0, 0x0, 0x2404c001}, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:55 executing program 0 (fault-call:6 fault-nth:15): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:55 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0xe) [ 495.865526][T30714] FAULT_INJECTION: forcing a failure. [ 495.865526][T30714] name failslab, interval 1, probability 0, space 0, times 0 [ 495.878849][T30714] CPU: 0 PID: 30714 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 495.887788][T30714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.898451][T30714] Call Trace: [ 495.901738][T30714] dump_stack_lvl+0xb7/0x103 [ 495.906340][T30714] dump_stack+0x11/0x1a [ 495.910498][T30714] should_fail+0x23c/0x250 [ 495.914920][T30714] __should_failslab+0x81/0x90 [ 495.919813][T30714] should_failslab+0x5/0x20 [ 495.924409][T30714] kmem_cache_alloc_node+0x58/0x2b0 [ 495.929918][T30714] ? __alloc_skb+0xed/0x420 [ 495.935781][T30714] __alloc_skb+0xed/0x420 [ 495.940635][T30714] alloc_skb_with_frags+0x90/0x390 [ 495.946095][T30714] ? avc_has_perm+0xc8/0x150 [ 495.950781][T30714] sock_alloc_send_pskb+0x436/0x4e0 [ 495.956300][T30714] unix_dgram_sendmsg+0x478/0x1600 07:22:55 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x93, 0x0, 0x0, 0x0, 0xe) [ 495.961599][T30714] ? selinux_socket_sendmsg+0x7e/0x140 [ 495.967439][T30714] ? unix_dgram_poll+0x3e0/0x3e0 [ 495.972683][T30714] sock_sendmsg+0x75/0xa0 [ 495.977024][T30714] io_issue_sqe+0x1f4f/0x64b0 [ 495.981968][T30714] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 495.988576][T30714] ? __list_del_entry_valid+0x54/0xc0 [ 495.994327][T30714] ? rmqueue_pcplist+0x145/0x1d0 [ 495.999924][T30714] ? mntput_no_expire+0x64/0x730 [ 496.005654][T30714] ? get_page_from_freelist+0x54e/0x820 [ 496.011950][T30714] ? fget_many+0x178/0x1a0 [ 496.016635][T30714] __io_queue_sqe+0xe7/0x360 [ 496.021480][T30714] io_submit_sqe+0x1695/0x3400 [ 496.026611][T30714] ? kmem_cache_alloc_bulk+0x289/0x340 [ 496.032300][T30714] io_submit_sqes+0x822/0xe50 [ 496.038142][T30714] __se_sys_io_uring_enter+0x1c7/0xa20 [ 496.044203][T30714] ? __fget_light+0x21b/0x260 [ 496.048982][T30714] ? fput+0x2d/0x130 [ 496.052920][T30714] __x64_sys_io_uring_enter+0x74/0x80 [ 496.058411][T30714] do_syscall_64+0x3d/0x90 07:22:56 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x94, 0x0, 0x0, 0x0, 0xe) [ 496.063186][T30714] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 496.069638][T30714] RIP: 0033:0x4665e9 [ 496.073634][T30714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.094052][T30714] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 496.103660][T30714] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 07:22:56 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:56 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x95, 0x0, 0x0, 0x0, 0xe) [ 496.112287][T30714] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 496.120558][T30714] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 496.129036][T30714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.137421][T30714] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:56 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="d638431abe3b9b87b379b4e483ab3d27b35c5f3454475517616d7407c9977557acec766aadca904cdd44ba4630b40457260be8740c82a79a0bd76cdb07131421fded0d80d49f754673c114e95cbc3520f9f8db14fedd6fe8940eadbb2cb07ef3759e15d6daa7f21be89e879be113295a3dca2d9f3dd343ca9cda0df4153ad3e5a76048ea845824f04795", 0x8a, 0x1ff}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000580)="22bc6875f6d7a49fcd02eb2ee3b26471c785f8994c05748644425cb40ecc282f8164c133337dae41dd0c6d9e1b9643e0f3dc6b4ff7b3fbfaab6989974195ab13e1196c5523e2aa4a4e4a609a8fd684e79e1896be51da8a7690db42e033bcae6ed7478baf96de4c53809e165a6d194de3cb", 0x71, 0xfd0, 0x0, 0x0, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)="b28077adab4bc208f9c20328daba6c1603a211d5cd536eb769b47370359f4804951348aec66b5782cc0d7c1b1cab939a76866b6e9ae19a820be2caf2d6df6c282cf25b57b5ba06e906ceac919647a824396644eb132b176365ad0f1e0f5c535c7d0fba9eb2e771913bef67542faf9e79362f5efccc4b50b1a6e14240dd8ff694a7b94f26db9c0b2a2a7d33f504da526b387ee1dd4f1c95df69a511baed9952c6b3e934586c1870c333420dc9167ada641116ecdb190f232f6b393694f2bdcd7436915f3dcadd19aa21b47b6c9194b67d0958a8a2dbf068912379088d7931", 0xde, 0x0, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800)="5cbb1f3122d3edff1cd7e5e8f623bea8bb737379ee6f810fc87fa3dfdb339ca24825ea366bb49776d29bdd5a4dc3f82617ae055ac1edd30a7e4d4b97baf16f7cb6bbd9e73df0bbb45bd8c975", 0x4c, 0x3, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)="f295ced5d47934bbec85f762c7000eeb1b406ca35bd6aea2bcddea2b5387e500741b5d8e0cd2707298bb93135b80f3a6e43211214853655f053eb6138c129f1c2d002c3503d4076a5d620d3499880d66c9dd319c6050d06ee7b5fdcc95f3c6c11203372c4b9becb36f81a52c8be222c8fe7927017326462f7d2eb52115e20251d6f215f569078d4b06446e83dcc252b8948aa69576592de3fddc4331dc70f06ab81bd7916ed8e72632a593ee6e167b3aeaf05488d13b8c2d771f9812b7408887763b7d8c58a99fbc02f6103f677023b85ff97176b2231b3e9be99782b81598942967dc92d143", 0xe6, 0x5de, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x27, r1, &(0x7f0000000a00)="5c1e3d06192a268768bc14d9b53898249a96ba8c7a1eb99f2d50eec5208373", 0x1f, 0x722, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000ac0)="1a81002c1aeb73f8cf4c81ea346abcc3afd3db7ef2e8789b73ed7c8d482d5c5f5d8cced9366979f5ae1e8b71627a4e1cce42d91e752d202a4ff64bbe133170d0b0b499c3f9694dcf1356f994a7f0798dbf329100eb76c182099d5d3d63ed27fe3e545175ed2176d5c4cd7b3b1f3e49b8a0b72a53885b67b9229016f98434bd38d43c9403aa7dc48d9f9eba622e8e930f3937dcbd70bbddc25e28a3e89ae4810412bd05359d3aba220487626756b72ed77012", 0xb2, 0x3, 0x0, 0x2, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000c40)="0dbbf5069c5b346d4018bbaa003ee1cf16d3cf53aee496bf2db6dc3065e7f9f79731c295d39b5524eb1aee6e8f24c76f1fd16f464fbcc64d53d2ebac8268dcfa0f6cb3962bb66569364d20aeb42f8e2cacf7bebefe37ad0e3dad751adda202c27e83c9288326e73b7c32da4dc6f429a0e6261c2d3f92c57fb7002e40329f", 0x7e, 0x9, 0x0, 0x0, r7}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xfffc, r8, &(0x7f0000000d00)="851206fceffbb8bdbce2959e8a3f25f50c1575798fe6f8ffe7d0009fe224bf32a916fdf966345afbba0a0fee38adb710e852d15975f21a78ba8867b9db9db25ec5bd014c56eff7696890d5feabf47010fe5e74f6ddb4eedbc31c530a192fd59cf6b2621ea5433921df07e10ebb06ce5020432f42f0f19a", 0x77, 0x8, 0x0, 0x1, r4}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:56 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x96, 0x0, 0x0, 0x0, 0xe) 07:22:56 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x97, 0x0, 0x0, 0x0, 0xe) 07:22:56 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:56 executing program 0 (fault-call:6 fault-nth:16): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:56 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff2f) 07:22:56 executing program 3: open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6800) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) 07:22:56 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x98, 0x0, 0x0, 0x0, 0xe) [ 496.849343][T30787] FAULT_INJECTION: forcing a failure. [ 496.849343][T30787] name failslab, interval 1, probability 0, space 0, times 0 [ 496.862439][T30787] CPU: 0 PID: 30787 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 496.871413][T30787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.881560][T30787] Call Trace: [ 496.884832][T30787] dump_stack_lvl+0xb7/0x103 [ 496.889516][T30787] dump_stack+0x11/0x1a [ 496.893710][T30787] should_fail+0x23c/0x250 [ 496.898221][T30787] __should_failslab+0x81/0x90 [ 496.903201][T30787] should_failslab+0x5/0x20 [ 496.907714][T30787] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 496.913515][T30787] ? __kmalloc_node_track_caller+0x30/0x40 [ 496.919338][T30787] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 496.924916][T30787] __kmalloc_node_track_caller+0x30/0x40 [ 496.930585][T30787] ? alloc_skb_with_frags+0x90/0x390 [ 496.935980][T30787] __alloc_skb+0x187/0x420 [ 496.940414][T30787] alloc_skb_with_frags+0x90/0x390 07:22:56 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x99, 0x0, 0x0, 0x0, 0xe) [ 496.945539][T30787] ? avc_has_perm+0xc8/0x150 [ 496.950268][T30787] sock_alloc_send_pskb+0x436/0x4e0 [ 496.955774][T30787] unix_dgram_sendmsg+0x478/0x1600 [ 496.961450][T30787] ? selinux_socket_sendmsg+0x7e/0x140 [ 496.967177][T30787] ? unix_dgram_poll+0x3e0/0x3e0 [ 496.972267][T30787] sock_sendmsg+0x75/0xa0 [ 496.976863][T30787] io_issue_sqe+0x1f4f/0x64b0 [ 496.981735][T30787] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 496.989088][T30787] ? __list_del_entry_valid+0x54/0xc0 [ 496.995048][T30787] ? rmqueue_pcplist+0x145/0x1d0 [ 497.000564][T30787] ? mntput_no_expire+0x64/0x730 [ 497.005597][T30787] ? get_page_from_freelist+0x54e/0x820 [ 497.011275][T30787] ? fget_many+0x178/0x1a0 [ 497.015731][T30787] __io_queue_sqe+0xe7/0x360 [ 497.020337][T30787] io_submit_sqe+0x1695/0x3400 [ 497.025284][T30787] ? kmem_cache_alloc_bulk+0x289/0x340 [ 497.030762][T30787] io_submit_sqes+0x822/0xe50 [ 497.035432][T30787] __se_sys_io_uring_enter+0x1c7/0xa20 [ 497.040968][T30787] ? __fget_light+0x21b/0x260 [ 497.045660][T30787] ? fput+0x2d/0x130 [ 497.049647][T30787] __x64_sys_io_uring_enter+0x74/0x80 [ 497.055027][T30787] do_syscall_64+0x3d/0x90 [ 497.059443][T30787] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 497.065426][T30787] RIP: 0033:0x4665e9 [ 497.069360][T30787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.089046][T30787] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 497.097497][T30787] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 497.105676][T30787] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 497.113912][T30787] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 497.122040][T30787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.130658][T30787] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:57 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x9a, 0x0, 0x0, 0x0, 0xe) 07:22:57 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:57 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="d638431abe3b9b87b379b4e483ab3d27b35c5f3454475517616d7407c9977557acec766aadca904cdd44ba4630b40457260be8740c82a79a0bd76cdb07131421fded0d80d49f754673c114e95cbc3520f9f8db14fedd6fe8940eadbb2cb07ef3759e15d6daa7f21be89e879be113295a3dca2d9f3dd343ca9cda0df4153ad3e5a76048ea845824f04795", 0x8a, 0x1ff}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000580)="22bc6875f6d7a49fcd02eb2ee3b26471c785f8994c05748644425cb40ecc282f8164c133337dae41dd0c6d9e1b9643e0f3dc6b4ff7b3fbfaab6989974195ab13e1196c5523e2aa4a4e4a609a8fd684e79e1896be51da8a7690db42e033bcae6ed7478baf96de4c53809e165a6d194de3cb", 0x71, 0xfd0, 0x0, 0x0, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)="b28077adab4bc208f9c20328daba6c1603a211d5cd536eb769b47370359f4804951348aec66b5782cc0d7c1b1cab939a76866b6e9ae19a820be2caf2d6df6c282cf25b57b5ba06e906ceac919647a824396644eb132b176365ad0f1e0f5c535c7d0fba9eb2e771913bef67542faf9e79362f5efccc4b50b1a6e14240dd8ff694a7b94f26db9c0b2a2a7d33f504da526b387ee1dd4f1c95df69a511baed9952c6b3e934586c1870c333420dc9167ada641116ecdb190f232f6b393694f2bdcd7436915f3dcadd19aa21b47b6c9194b67d0958a8a2dbf068912379088d7931", 0xde, 0x0, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800)="5cbb1f3122d3edff1cd7e5e8f623bea8bb737379ee6f810fc87fa3dfdb339ca24825ea366bb49776d29bdd5a4dc3f82617ae055ac1edd30a7e4d4b97baf16f7cb6bbd9e73df0bbb45bd8c975", 0x4c, 0x3, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)="f295ced5d47934bbec85f762c7000eeb1b406ca35bd6aea2bcddea2b5387e500741b5d8e0cd2707298bb93135b80f3a6e43211214853655f053eb6138c129f1c2d002c3503d4076a5d620d3499880d66c9dd319c6050d06ee7b5fdcc95f3c6c11203372c4b9becb36f81a52c8be222c8fe7927017326462f7d2eb52115e20251d6f215f569078d4b06446e83dcc252b8948aa69576592de3fddc4331dc70f06ab81bd7916ed8e72632a593ee6e167b3aeaf05488d13b8c2d771f9812b7408887763b7d8c58a99fbc02f6103f677023b85ff97176b2231b3e9be99782b81598942967dc92d143", 0xe6, 0x5de, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x27, r1, &(0x7f0000000a00)="5c1e3d06192a268768bc14d9b53898249a96ba8c7a1eb99f2d50eec5208373", 0x1f, 0x722, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000ac0)="1a81002c1aeb73f8cf4c81ea346abcc3afd3db7ef2e8789b73ed7c8d482d5c5f5d8cced9366979f5ae1e8b71627a4e1cce42d91e752d202a4ff64bbe133170d0b0b499c3f9694dcf1356f994a7f0798dbf329100eb76c182099d5d3d63ed27fe3e545175ed2176d5c4cd7b3b1f3e49b8a0b72a53885b67b9229016f98434bd38d43c9403aa7dc48d9f9eba622e8e930f3937dcbd70bbddc25e28a3e89ae4810412bd05359d3aba220487626756b72ed77012", 0xb2, 0x3, 0x0, 0x2, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000c40)="0dbbf5069c5b346d4018bbaa003ee1cf16d3cf53aee496bf2db6dc3065e7f9f79731c295d39b5524eb1aee6e8f24c76f1fd16f464fbcc64d53d2ebac8268dcfa0f6cb3962bb66569364d20aeb42f8e2cacf7bebefe37ad0e3dad751adda202c27e83c9288326e73b7c32da4dc6f429a0e6261c2d3f92c57fb7002e40329f", 0x7e, 0x9, 0x0, 0x0, r7}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xfffc, r8, &(0x7f0000000d00)="851206fceffbb8bdbce2959e8a3f25f50c1575798fe6f8ffe7d0009fe224bf32a916fdf966345afbba0a0fee38adb710e852d15975f21a78ba8867b9db9db25ec5bd014c56eff7696890d5feabf47010fe5e74f6ddb4eedbc31c530a192fd59cf6b2621ea5433921df07e10ebb06ce5020432f42f0f19a", 0x77, 0x8, 0x0, 0x1, r4}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:57 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x9b, 0x0, 0x0, 0x0, 0xe) 07:22:57 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:57 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x9c, 0x0, 0x0, 0x0, 0xe) 07:22:57 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x9d, 0x0, 0x0, 0x0, 0xe) 07:22:57 executing program 0 (fault-call:6 fault-nth:17): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 497.548635][T30840] FAULT_INJECTION: forcing a failure. [ 497.548635][T30840] name failslab, interval 1, probability 0, space 0, times 0 [ 497.561393][T30840] CPU: 1 PID: 30840 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 497.570194][T30840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.580429][T30840] Call Trace: [ 497.583699][T30840] dump_stack_lvl+0xb7/0x103 [ 497.588283][T30840] dump_stack+0x11/0x1a [ 497.592447][T30840] should_fail+0x23c/0x250 [ 497.596855][T30840] __should_failslab+0x81/0x90 [ 497.601649][T30840] should_failslab+0x5/0x20 [ 497.606153][T30840] kmem_cache_alloc_bulk+0x40/0x340 [ 497.611346][T30840] io_submit_sqes+0x491/0xe50 [ 497.616106][T30840] __se_sys_io_uring_enter+0x1c7/0xa20 [ 497.621583][T30840] ? __fget_light+0x21b/0x260 [ 497.626301][T30840] ? fput+0x2d/0x130 [ 497.630254][T30840] __x64_sys_io_uring_enter+0x74/0x80 [ 497.635721][T30840] do_syscall_64+0x3d/0x90 [ 497.640141][T30840] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 497.646182][T30840] RIP: 0033:0x4665e9 [ 497.650185][T30840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.670742][T30840] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 497.679140][T30840] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 497.687087][T30840] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 497.695112][T30840] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 497.703170][T30840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.711233][T30840] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:57 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff30) 07:22:57 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:57 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xbe) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000480)=""/2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="14570000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf00ffff000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x5714}, 0x1, 0x0, 0x0, 0x4880}, 0x10) r6 = fsmount(r4, 0x0, 0x82) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x4080, 0x0) socket$netlink(0x10, 0x3, 0x6) io_submit(r3, 0x3, &(0x7f00000006c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x200, r6, &(0x7f0000005ec0)="309a310e08215c5bf447dfadcbc3724f9fb06a7a1e78cdf0b9599138afcc705f3a6f6ada0300000000000000b1100b3e20d5545a5527cce8f7ef8f24294fa072185dc48700e1f982194ee302e49c87b0038d2345123fc70b3e1aa6e63641b9d3b7798a506eaec8712d0400d984b7d5bf5dc428389f64ec7736c5c83183574600bf270a6fe1d8ded0ffe20fef1d2c772b51a7893472e5dac35acd522132830e93ce2aa7", 0xa3, 0x80000000, 0x0, 0x5, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x1f, r2, &(0x7f0000005f80)="876fe105a4482585e2d146e25d2ef7674b1d067aa8cd27c7ea4e729d9c21c122f4897107c3576e88fb810708bf1963b524fe2e7b80cb4c54a365151ba6c5e065f309681b6fbc78b0e35ff6ea49e0dcc4a208cdba96f8517a3beb1567e7460dbfd79f262210ab14b4897378bafa05e0568c8f377304e67bafb85f0d54cd319f57f1d8b0546cf0d7bbcb3c20f56734f89ec437022148e1b15719aed7d11259284eee4563814f115f491f72ce68262b80712ae417f5234a0ac267cb8f8a3b55c515e010d66995c9653494992ea46623e9b69a0e0b6bea503c9a22bf84c26e8541387634d426d6eb9dcba2e57f8c1deb5f456fccd62d30c8c959", 0xf8, 0x20, 0x0, 0x0, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x7, r1, &(0x7f0000000580)="bd5ccfa3f640edc2cf90fde35cb89068d5a15bc4b2c14fd46641dac67ce2934099a8b265b0d9a9ff13b7ee1643b1c59308c1f6b774cc05a79ad17684be89588b82b890e8b210d7a6343100919aef2e4ef9a89fe5672487c3e871f97ae030a90a18f67f7e796688333d4fa9570c623cb78b43de9d6b527fb7b2a9212246b9c85ac30ec4fd9266f4ddab6769035628049dbeb8079e86f075fe8ee68cc0753f41695e1b17bcab2e9d4842cb9a550b9281779e2d1fe78969a943371982bba2e5df977de6afcdf36287f860b3a09ee7ca4d75888537f60fa87c5ff8722dfc30", 0xdd, 0x2, 0x0, 0x1, r1}]) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:57 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x9e, 0x0, 0x0, 0x0, 0xe) 07:22:57 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:57 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x9f, 0x0, 0x0, 0x0, 0xe) 07:22:58 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="d638431abe3b9b87b379b4e483ab3d27b35c5f3454475517616d7407c9977557acec766aadca904cdd44ba4630b40457260be8740c82a79a0bd76cdb07131421fded0d80d49f754673c114e95cbc3520f9f8db14fedd6fe8940eadbb2cb07ef3759e15d6daa7f21be89e879be113295a3dca2d9f3dd343ca9cda0df4153ad3e5a76048ea845824f04795", 0x8a, 0x1ff}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000580)="22bc6875f6d7a49fcd02eb2ee3b26471c785f8994c05748644425cb40ecc282f8164c133337dae41dd0c6d9e1b9643e0f3dc6b4ff7b3fbfaab6989974195ab13e1196c5523e2aa4a4e4a609a8fd684e79e1896be51da8a7690db42e033bcae6ed7478baf96de4c53809e165a6d194de3cb", 0x71, 0xfd0, 0x0, 0x0, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)="b28077adab4bc208f9c20328daba6c1603a211d5cd536eb769b47370359f4804951348aec66b5782cc0d7c1b1cab939a76866b6e9ae19a820be2caf2d6df6c282cf25b57b5ba06e906ceac919647a824396644eb132b176365ad0f1e0f5c535c7d0fba9eb2e771913bef67542faf9e79362f5efccc4b50b1a6e14240dd8ff694a7b94f26db9c0b2a2a7d33f504da526b387ee1dd4f1c95df69a511baed9952c6b3e934586c1870c333420dc9167ada641116ecdb190f232f6b393694f2bdcd7436915f3dcadd19aa21b47b6c9194b67d0958a8a2dbf068912379088d7931", 0xde, 0x0, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800)="5cbb1f3122d3edff1cd7e5e8f623bea8bb737379ee6f810fc87fa3dfdb339ca24825ea366bb49776d29bdd5a4dc3f82617ae055ac1edd30a7e4d4b97baf16f7cb6bbd9e73df0bbb45bd8c975", 0x4c, 0x3, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)="f295ced5d47934bbec85f762c7000eeb1b406ca35bd6aea2bcddea2b5387e500741b5d8e0cd2707298bb93135b80f3a6e43211214853655f053eb6138c129f1c2d002c3503d4076a5d620d3499880d66c9dd319c6050d06ee7b5fdcc95f3c6c11203372c4b9becb36f81a52c8be222c8fe7927017326462f7d2eb52115e20251d6f215f569078d4b06446e83dcc252b8948aa69576592de3fddc4331dc70f06ab81bd7916ed8e72632a593ee6e167b3aeaf05488d13b8c2d771f9812b7408887763b7d8c58a99fbc02f6103f677023b85ff97176b2231b3e9be99782b81598942967dc92d143", 0xe6, 0x5de, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x27, r1, &(0x7f0000000a00)="5c1e3d06192a268768bc14d9b53898249a96ba8c7a1eb99f2d50eec5208373", 0x1f, 0x722, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000ac0)="1a81002c1aeb73f8cf4c81ea346abcc3afd3db7ef2e8789b73ed7c8d482d5c5f5d8cced9366979f5ae1e8b71627a4e1cce42d91e752d202a4ff64bbe133170d0b0b499c3f9694dcf1356f994a7f0798dbf329100eb76c182099d5d3d63ed27fe3e545175ed2176d5c4cd7b3b1f3e49b8a0b72a53885b67b9229016f98434bd38d43c9403aa7dc48d9f9eba622e8e930f3937dcbd70bbddc25e28a3e89ae4810412bd05359d3aba220487626756b72ed77012", 0xb2, 0x3, 0x0, 0x2, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000c40)="0dbbf5069c5b346d4018bbaa003ee1cf16d3cf53aee496bf2db6dc3065e7f9f79731c295d39b5524eb1aee6e8f24c76f1fd16f464fbcc64d53d2ebac8268dcfa0f6cb3962bb66569364d20aeb42f8e2cacf7bebefe37ad0e3dad751adda202c27e83c9288326e73b7c32da4dc6f429a0e6261c2d3f92c57fb7002e40329f", 0x7e, 0x9, 0x0, 0x0, r7}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xfffc, r8, &(0x7f0000000d00)="851206fceffbb8bdbce2959e8a3f25f50c1575798fe6f8ffe7d0009fe224bf32a916fdf966345afbba0a0fee38adb710e852d15975f21a78ba8867b9db9db25ec5bd014c56eff7696890d5feabf47010fe5e74f6ddb4eedbc31c530a192fd59cf6b2621ea5433921df07e10ebb06ce5020432f42f0f19a", 0x77, 0x8, 0x0, 0x1, r4}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:58 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:58 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xa0, 0x0, 0x0, 0x0, 0xe) 07:22:58 executing program 0 (fault-call:6 fault-nth:18): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:58 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 498.247403][T30878] FAULT_INJECTION: forcing a failure. [ 498.247403][T30878] name failslab, interval 1, probability 0, space 0, times 0 [ 498.260120][T30878] CPU: 1 PID: 30878 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 498.268861][T30878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.279006][T30878] Call Trace: [ 498.282275][T30878] dump_stack_lvl+0xb7/0x103 [ 498.286861][T30878] dump_stack+0x11/0x1a [ 498.291007][T30878] should_fail+0x23c/0x250 [ 498.295419][T30878] __should_failslab+0x81/0x90 [ 498.300169][T30878] should_failslab+0x5/0x20 [ 498.304705][T30878] kmem_cache_alloc_node+0x58/0x2b0 [ 498.309904][T30878] ? __alloc_skb+0xed/0x420 [ 498.314397][T30878] __alloc_skb+0xed/0x420 [ 498.318778][T30878] alloc_skb_with_frags+0x90/0x390 [ 498.323872][T30878] ? avc_has_perm+0xc8/0x150 [ 498.328468][T30878] sock_alloc_send_pskb+0x436/0x4e0 [ 498.333730][T30878] unix_dgram_sendmsg+0x478/0x1600 [ 498.339951][T30878] ? selinux_socket_sendmsg+0x7e/0x140 [ 498.345412][T30878] ? unix_dgram_poll+0x3e0/0x3e0 [ 498.350441][T30878] sock_sendmsg+0x75/0xa0 [ 498.354776][T30878] io_issue_sqe+0x1f4f/0x64b0 [ 498.359441][T30878] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 498.365582][T30878] ? kvm_sched_clock_read+0xd/0x20 [ 498.370705][T30878] ? sched_clock_cpu+0xe/0x180 [ 498.375455][T30878] ? select_idle_sibling+0x4a3/0x690 [ 498.380720][T30878] ? __cgroup_account_cputime+0x9b/0x1e0 [ 498.386358][T30878] ? select_task_rq_fair+0x186/0xc10 [ 498.391836][T30878] ? kcsan_setup_watchpoint+0x8b/0x3e0 [ 498.397490][T30878] ? rb_insert_color+0x7e/0x310 [ 498.402584][T30878] ? mempool_free_slab+0x19/0x20 [ 498.407605][T30878] ? ___cache_free+0x3c/0x300 [ 498.412487][T30878] ? flat_send_IPI_mask+0x42/0x70 [ 498.417708][T30878] ? mempool_free_slab+0x19/0x20 [ 498.422999][T30878] ? mempool_free_slab+0x19/0x20 [ 498.428091][T30878] ? fget_many+0x178/0x1a0 [ 498.432897][T30878] __io_queue_sqe+0xe7/0x360 [ 498.437878][T30878] io_submit_sqe+0x1695/0x3400 [ 498.443084][T30878] ? kmem_cache_alloc_bulk+0x289/0x340 [ 498.448575][T30878] io_submit_sqes+0x822/0xe50 [ 498.453382][T30878] __se_sys_io_uring_enter+0x1c7/0xa20 [ 498.458923][T30878] ? __fget_light+0x21b/0x260 [ 498.463666][T30878] ? fput+0x2d/0x130 [ 498.467747][T30878] __x64_sys_io_uring_enter+0x74/0x80 [ 498.473382][T30878] do_syscall_64+0x3d/0x90 [ 498.478444][T30878] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 498.484854][T30878] RIP: 0033:0x4665e9 [ 498.489019][T30878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 498.510442][T30878] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 498.518844][T30878] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 498.526802][T30878] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 498.534931][T30878] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e 07:22:58 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xa1, 0x0, 0x0, 0x0, 0xe) [ 498.542987][T30878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.550978][T30878] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:58 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff31) 07:22:58 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:58 executing program 3: open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) write$sndseq(r1, &(0x7f0000000780)=[{0x81, 0x5, 0x8, 0x20, @tick=0x8, {0x9d, 0x20}, {0x7, 0x81}, @result={0x5, 0x2}}, {0xe3, 0x40, 0xba, 0x3, @time={0x1, 0x101}, {0xfb, 0x7}, {0x8, 0x1f}, @ext={0xd0, &(0x7f0000000440)="2bc4b7d48a3f8d42b9ce7cdf9102f11d13e49877b0519f4b23d225b1977047331f21710778c019427896f47305dca78f4b3661fb763e5ba99de10a606950499c65203862c39c8410c9e431ae090eebfdaae32cbadd7e9d70ee2fc0731c9763a923e675feea16187d36ba0fac9b5105435285343f1d6e376a1b08955bba0ce068faad6fea35d99821d165bcc6eaa93c704ee2f3baf2db85aa378007dd55328701038bf5ce2211870c5a14fdaf16af2cd485acf193601e5434851e394f71a259311024690805f3eba5aaf2115fbeedf324"}}, {0x5, 0x2, 0x41, 0xf7, @time={0x4, 0x1}, {0x8, 0x3}, {0x7, 0x2}, @queue={0x4, {0x0, 0x83b3}}}, {0x5d, 0x4, 0x0, 0x5, @time={0x4, 0x1ba5}, {0x80, 0x50}, {0x3, 0x3}, @queue={0x40, {0x5, 0x8000}}}, {0x0, 0x5, 0x8, 0x6f, @tick=0x2, {0x4, 0x4}, {0x6, 0x40}, @result={0x101, 0x9}}], 0x8c) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x2, 0x2, 0xa02d, 0x1, 0x8000, 0x80000001}, {0xffff, 0x2, 0xfffffffffffffffd, 0x63, 0x5, 0x4}], ['\x00', '\x00', '\x00']}) lseek(r0, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1ff, r2, &(0x7f0000000040)="af4ca7d0c87e8cba4d970257707550478bb356f8faf671e9266770a20ad1c2f3024085a5a44dab9dfe544b5ff6bbdee58e50e364f0b4e990b1cbe8b8a317e83e2ae2d58aa647c0fc536df6ab48007c39c44a1d1bfdc9ac9e3f6c8359d7049c48392578ef77a5cb0ebd93", 0x6a, 0x10001, 0x0, 0x3, r2}, &(0x7f0000000240)) sendfile(r0, r4, 0x0, 0x8400fffffffb) r5 = socket$inet6(0xa, 0x4, 0xfffffff8) sendfile(r0, r5, &(0x7f0000000100)=0x9, 0x5) 07:22:58 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xa2, 0x0, 0x0, 0x0, 0xe) 07:22:58 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:58 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x12a, 0x3}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30000033fe0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) io_submit(r3, 0x5, &(0x7f00000027c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x40, r1, &(0x7f0000000240)="c4e09d981dd135748fe95c147f1c41e0470a4c9c0460197a0b29d53a53baf3e8f772aba969e638e517c3e7bbdd516f35e3f983b04ce7e5b1889ecfab8bef9552ed4fe09596d2d57bb928b349b5a16c377118b38d53c1d1100c03a1cc2d69ca4a7b0f48cbe15c9c7bdf72b5b32d8c7fe2c96446d9b55cbe2ca11ea1309ffd10ce8157310e9e78d4d91a62f624ec903ee4d3a116e771a817c9c7d2dc6135578ef140", 0xa1, 0x401, 0x0, 0x0, r4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xa4, 0xffffffffffffffff, &(0x7f0000000300)="890926b9f54aeb2e3cb9d77096481a5da1198280af07c61e211846d564a4822f6fc89291d36845924a1d40fff3d4f6f629c94db72e59649b9fc7d1d80cbd94ffe8073404bdc200e93424fef1cda2ef6fc4018bb6469040abe84cfd3842af532bdac917c85fbd3f56f86391657392fcc58d92c5d63c651779eca3d3e72dc4a3f3c93c9eec15683761", 0x88, 0x5, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x817d, 0xffffffffffffffff, &(0x7f0000000780)="1370169f2b1b39de46d7a1e435646bf11aefe798b502546b71250585e98ada53d6f2c8b6092a4d524a0ec884a1c025198d5747c1a9a035d18a007ec42c6ebe210d3dc75cb76b683f580ee833e4c9ba3b6ba377a0f046800dfa77bb4f363a940461752ff7e7fae7d9054432732dc307deda35b8fb69eeae97669998eecb21e591073d016b93d88822e4e2b6d93d2bf082d3d166c641228a4379a7ca95015c53865eb8404b08845d0b238548965d307f4ab63355e9245c22df299c07e110def301225b4c4757908488db0d511a14777cff90dff0acba1daeaefe8f15b9dfd42f421b6a242f77b58b84fd0f591cce0f6b69bd50b3eed3bc7a9c63716b4c1c6b776a5384d225775b1f5de65f7f9ec3d9efffd88ede809b436cae064dad99c59fcc50962d75e0ee7d5cd68919cc00017355cb9b68cf943f4e1f0d482c269d03a4c48754396762301d7d910da126175672f0f10d916745e1e287d906f7b8c4f6fe50ddbb2fb5ffc4c4bd1de111d035608114a0229f110fb6df7be8779c7f5ce76f5deec0c060089bbcc9a256ea1684c49707d27c0218f2a6e0fa4aa1643a92d1f845bf69f84bad33f273d9a6eccb6aa54c4328fa6443a85d7fc35f3f0d01fdd78ae90d9e6b4a85408ebed4d0046c780bedf27157507f1de5b1702f7f264034fdd33f992f52c64f1fc704e737fa8b0c7d82d59440fd8ff6ba64186508a37269dd72eb6d689e5c175e97b4574a09014d376cdadbb145d8db3ab9657e697d0ca5d98cb2b18563e6885f572b37df6daf7adc6e2b0548654838774236c20cc36b18d5210cb3456f7cdacef52334fb8e97b0fa338c8ae91e10630126b307ca6604345b85b70461243192611ac1ceb1a8dced2862f06bcca3c86a0218302e43e797bac03bd4ea92eb561b3a0332c5f73f20211d0d88eb4607810aa9d08d54a2d5ae43f382b81510435fcf5e0e2052598a981f5c8b33b162e1983bf4b4ff6e51623b02a53a50a49e295c2ba24459c8a372802fc1df69c4435766b473ef26246e69f2389af17ffaaf58bc13f56ed4551136ff7e5fee56136b96190772aa0a7d8f02908d69d109344d8049977a17703bea503ad0995dbda1a1be8781748176ddf351eb122c2a6dfd37fd8c306bbe42418cbb98201d558b4290760fa1a50e062ac7f5268f4f0bb147706d95c0ee02c633d166df3928418ac904f85d5097489187a566dbb31b719de00fbc4387bf20849a664a04c70d4b85909340a5cdd6cec9c81b5e42a18cf5b287984283b7e85fefba470fe7992d15066f536280966a5a117bf11ddd24c5e194dd24ad6ab22827629bf5c9ed05b5e474c6a6778940b2e5e7274a114e8f1eac68efe118e15c00b1d1e17f21989c83b9da7344b038120b1d2dd06522ce689e1fcd2984a45f01703c927d0f85edb6cfa2c4fbfdc74b62f3f0b875ba4cc9d077a5adc00bb6434cfae683b1695a6c36d9acf903999128a6173e77af49ec4e125a826a5c0cec43c810325547e15fcaf6001e9bc44eb71a72e1dcedc267cdef95f45cefba9556c52f68aaf63e255202a412249ff145ff6350250667cfd744cfbcac13aef3686110bbe84b9fdb91a7b41220f64d4f25e7987e41259fee1872f0dd54c0fd0af379c905240105a935cad81e10b8fbfbede17afbf91f21fc7eb328bcbb39c94cdfd03c4e8b8e8e0c0989ced757526c7efb34116bd8db2e2c01fafd498b6ce8d6ebd80aeb5b74b499cf26ff77f10f173593aa83e37531e014c817db58d758a36d5e9acc72153ee324108544ec75270a143106ae08d2fe903552bec8e03988b7d43f5d97aa7113431100536c255caa570fa1a4f23800fa54d413a55d11702a51982df5bccbea71061a21ca1b10f1c447aeb373a0b7b73657c4b0d39865e87f194a1d0aca10e0b632fff8664b4f834b705a50ae5e37d973278540b5df6b751c58ec728e97de689641521f1115691a69b550b2efe2843c5f29922d7cb9e03c8ef3844db218033c84662ba9b0930d33df038e81021a6e132b2ccc9f5c5a2829c2ff6b6983a168fdc053f3635dec50fe4603ce443c20d4961c153372e43dea48f5327b3a3fbcd08c5c76947705c20b9410fd7c1690a5e0b9253ccff711c88b6ca496b07717616c4264ec2823afb1096ddec7f7cfde3136cc26b9d542edaa0ace0a052ec19bb8d62f349986fe40c37dc5ae4f5e4cc99d498f593a8e234ee28bd1c59a38288201f2e9d1dbd4f6ac41e0ca4b9d96486507c8e918426b3df032ba2fbfedcb52127511f34ab366499e8a6707ac7a1712696dbd01992bec4cc137c2f5300b7b1094fb581e5c2491e0adecb9186f20f27d9b34af1cdf468a3e6e236fec84c5c23cf5b8f2b792a60af2f873baffd753413c6724fae02a46cdf89945876a229a99e446328318096a511fa2016c4cc8b4446acdd3c76f658f2b37321a9864ac396b2f54f7081f36f8a7db27f75de096455863d2bdfef62b4a8e0767e316cb921bf0f6df96cae2bfcf729ad02fd94467a08491f2125a8b64606adb4b6c6c43372aa6c70c2dbcc55b33c35e10c5015c3a880062d20691b25d619b80fb894feaad843a3657b4f9be44f209b422c5d49ae9fa2de2ab667624c9e5a4ebd20419386eb9fc3115d81d06cc3c52f181dda8e139d31fd2011b4710847f0624117fc4f0bf81ba74a913ded144ab2b40b8e7936d4c40ad1f02ccfc52723138363dbf5ce469074de73a661f2023f967555a7f153433327935ddad70290e5657de8a5d5c391922704c067805b013293f3443e9c9d2da7deb47437e0bf6408faa07ff0e7688a5b526d201ac3c5db0b8af3d4c9c340219fcec5b12d9346748c82624940833ecd41a920a7bd6fa825c56f43f9a7417f6cf209cf3114ea9f50e8c6fcff4f8589b43d20a07335b101bdf57c3c8c79b6ab247056fe3e8e0c3d8db8fa5a89cfb0ef78fb6c2401fa393ee29f2d9a142061e5fe82a9acbdb386e1efb13ea1b7dae3279319972444317a9db10f108539ddc72f7006689db624ba544c0a27f409b8babb2e66895ba8bd74b7caa0b7d46e88f44723f1dce8311f3a3380cd2ce7a2344b9580784692f20f5b6cd2e4628e4781e8aa881ff50b2ef035037628e36588714aed421ff858baaeea0badd75a0f669f26508b43034dab9c4799fdcff76016b06defade558e80439b9c681bd26f58f3b826e5a89733c207b0c81ba33bf71e61bc88b9c8dc39e2130590c70e53ba1e974e070a3f1657fa2f75b724c92a4e8d8522de39906805e3259467b35f60ab11d061452150873dd7dbfaca76aa0a8ff6e2600017ecb234c3daf000f9d1826acd9ff9dca43ce71995fe1d9abe39b7fa408459d2b07ad8207a61a51b2eed6dadbb4b57f2991ab62b64569ea30d3c7bcd54c0091fa921a72d96081e110077830190069de8e53ae7cb68c11c8aa9de458b78d0377af2f6795425380ab1e72a1687f140f7dfa25334671596971a80b3d232fbe89156f8627e30658a0d091d74b580b83630f6e8a740d186a7f2ff2539e39ab1752de2248a6ea4ddee9895bd4a08402ee8ff742a3b8b75914d3fee0f995408ad17509c90edf57f6e2926d1ec150b90519d76f0bcec4111168f842e9e1d6632457bf488202db0625d723425ca4e085f92774ef5b9b77cb04861318ba8420a67aa1f47e9ebd7765a3f8317587b2e5a47dc9316631914d80e469d0f5849c2f7a6ffd5d2e6b0bfcef2946bf8a0f7142df695b59b4fa1d116cc31c80b9b2aba5c3da2b4a3f3366c24bd5ec067b98265004395f02bbc66ae918a1676ccf7ec8f1d2b9d8b1494779bfd28ea0b540ab39bb7e6ce7fee97621c91452f5da729acfb1431049f7271103cc579ab2c3f722b71bc26cfd75a88565feb5992b12f51c9bff4f61b44e1e2dd503dfb5d5ef26ea930b62a8241baa0224258f2b6d092d0a29019826373a1587bafa4bb9686030d1d55c23881cba1f81e8f3da86f71795e337a4b6418654c4a12bc71cdbc05303e0b14be5c9b37e1fd3c50618a1b22ebd301cac409cb995549d40e45fcf3e4fe99a67ab2635a63452c92830a3962ef4c33fcb72678a8981ccf2cf64ebb224b2dd6679c7d153e4edddd25c616c8210a231c692163bb7bb893d5df09d6faf2c62fbefa8a656e0e03f9c543bda9fb99598add648cf5f725f5f043a919e355650677c6c86ef9ebca9767b8d05fb5932608a513436b96f76b27519f113b3c0ba6d578d5161aa9d07c5c920b8bc76729cf4ad04dafa63f10e7d9f704aafe8d8161b1c230c94cc084fcb92cc71dc41ba5bc79e99b4cefbc2ffbbabbac979c967e2ac0827afbb8170ac25b5244abb017b9512ea083c0ef88bd2112229a5b9cc0a3337c7b96d3e8fa049a485b34f2538ef874ae045577efae70d1c91a0587abf53f79b4b8a91e090af3f2ca0d7f845f84d74933d30d33fa83607aaaffd5198802796289c13848074777151e89d9bb6d07644aa67accf4cdcec29132d6fe0ad528733a5630ed6a7280f532caad4c8d5bb91f5b2351d70105f1108d55ede59dba18e87fb1b1060cbed3d18a3c590a5882282af2745fc088bf14f8c09c7d17779f524aff1ea99d2771622bac0776f37028086dd4b170a38f73574b84204fc878b084c5e9370352b2afead40013965eb33b88a3f82ea8afbfe7785d0f104da4631bed06b011849c3703d68baee9511dc828e1c5dcd1ea2e7510e91ca935cc6280702ac2e691a1ccf57c1658947c9b79f946f6535463ce4456c8de16487c2b3885304feb56671dae862d1a31b18c693c47e09dab100b845a3a378c6d669422892f291a1a5d4c40f063f533042b1ba31e65573072eadce7f4b3946c60dd61699c952d3bc4697ae486e0b2296afa722f134e6c604496262932b72e7c4c8e8813815bd358ad045abcf852b4684b73d3817f68a8f37ad8cbe4adbd32367c6aa60c8500a63d4a761f4ac65d06d553469d79a2de8e677355223b13be8b2ddee340dd56fc4722fa3303706b2df4e1654e7ee6928621ab1e1e741467dfa7a60fcaf0563f779790edaa6ff4701db8d242f477c81e0418ae130f5624c808cdfb42b2008863590534889a55a601481ee066783b415829e79af90cb7de5072348dfd318c80457786c8580417939891174cdad0754348fda1d50b643f026a9d435c15eb6d3800d8dd5ec86c92867f1251414fc8b8d8cd3a46e26c48fed000e0ecb255164db6febb26fa64ef6573bbddae9806a938965cf02325b0736ed05b768f22fb331478b6be44abd9f84ed0483cc1226f169b0798e1dfaaa1e0d768eff3d514e3f672a99b086b21560399042db505aa4c9af47fc8f3080a87f1f1eb3f942cc967851d9b84770702a2ca850fa6853f8060a8918d6bb2b6667e1e85db71701e046fba3c63834c9e092bd0d07a2126b379304c23fbafc1a0c2826209307c3032b192de718e40bd5663ad32b8f34c396af8a84929f3f98b617208390af83674a06a6486c804b908aead8430100a91ff5c088e10c7ea3481ff29c086acc6527f09745ceb1d19a763eaa7861de9dc396d74ce0bff3d8a0129baa33b9956c0fb8ffb6eeb84951b593e6409c9fde9cac57df64447d1b2c6af44b1794ec7bdaac983bcc4e182d4711c8c3f0f7b17901c578990c0d3879d51c0975cefbce57da80a7fc82f8803392537c1fcfa08ee20c7cce527d93fff99910ff339dd0b32eb8eb7c1216587ae049015f52ecc7402d577ccf1be96c3dab530eaf0d84b98c9f4b8c6d5028b0fe8bc13e93e0a636ad9db7d2d25d96a78423cbccb2b4019e2f6b57e38545c2fe3d758a8fb55feea38", 0x1000, 0x4, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, 0xffffffffffffffff, &(0x7f0000000480)="4880a18eaa3a90425a1987cd252c5b856d2b6a7840c78f3695cf42defe705fe2a17bc02b4acea80244d9d52c751f994c5bade91569c946a0faad9730e09f686981b21798fab88ab20e14739e3268f490e7e89f9146cd51b91e8d47618b1461c62393fdd4a2dd33c921b510b0f336473548e275bc034d3f3d6efd54d16c367f9e4406c956b66d97bff3e8b14e89981cdef7a9d9c170be3290f3", 0x99, 0x4, 0x0, 0x2, r5}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x5, 0x7fff, r6, &(0x7f0000001780)="6660fa7118770a0bfd9221815f416ce37728a56d547b89a87d9c04183891abad405e37ddd974f06475fdc29db907485e265ead9d825c95f1943325c689d33afd0688f002c51c59db5cf2a071847b678143b00106e13019b1e0ad5dddc91f1514661f66eb8dabaae3f3a38fc3398a472df0517f2f9a00dad13565f5332013d3a870b1851c17d6c5621ce47119dda908159e88cdc64c0697df56c9e54c86e35f0a75f2a8def250947c8c4cab3724a3f0318eda527be6969164b2ee07d702e0a2c614d5b24057c5a48addbf1222a37ae53aa0dafbee6c1b725083134e079f328de0ee3be9dfda4fd929fe96719a98778112dfc75029f7b582d7d1b042a2e6889d6386848217859b52695dc78b03421b5294138ec619ea64aa221ced7fac035e17acf2237e5b9351b9202d3cad54922d676944863295db8f5673538a5b5007d3b08dee8a1b8d06195931957a65d91b9d4adf7158b6070744f09f7a3bad290c594fc2c10f019606da4dda27e3186368faee1087ea5ccd333dc80fe9dc661825b0c4fcf94b0d5ebf4b63d58ef79081e8d45918e0711a0e657524b5fb3edd862d45a41c0ff676078c5b31508ee2aabcd759f66f5911ad6150abbf49826657b87409fe68d48cb80c7614ea56fc3e0e9d1f479a940026b9aaf812ca1a108d5c2d7c9e71adaa9db0576827dab75562652ec2bbba8f53d4a182edd032969ffad647833d815c9ecb139dab92f41eed9eca97dfae4ada5b43cba6ea5103b648dabeabd35c8a849560ce875156cc5ceba00d3bd671899fcbe021002aebaaf4c78d430f0b08b94429b02910fc3bd672679cb2725ebae889c01c3fd7a7d6930ab819de55b01af8b03f6bc9ce7e1150ee319bbd0c6a783dc6eb677d55119082ca762bfb51f414a72f6ebfc8354224a23e0dac7a20206e0feb5ba6e88fba543cf709b3bd1a5523d260a1d073df2bbf5080a89bb0610195c6e7cd10fd5837a50d12feebc073dced6e5c8ec0fd3b0cfb8fb2ed122a9143bb37eeb953bb520c51e61fbcf2722fb0f2ef0a468642d181be74e7ff81a63ad784b40f357864fc5dff0631813bafeb1121c63082fbb294d3814dbee24a32faeb736e1037f047f9333df7a60df475cd7881745eaf0e84236c8edbe1765afd6225b9972b5e914f3ba3c3a750703aa8ac6e645178dab4c0fc500314a88a3827dc878d1b980c79d921c57f12a722a93f98fafb1e6e0d4233c572f93ff1d2431d207002af0b3e0685b43329346cdcb147c06a81252fea69c210a7cbb0b00723808e7e5c7decb6a154a3c59898f6c868fc82f4d1fcfe757734efa81486d2726f8cd8b7a00243b858d87b241b5ecbbc55c5bcbb515887f7cea70433847f34f6164e286dcafdf647ea8d3178d50b798f542b504208b83039c6b27a9d6f2674164d745a03090ad07c6095a746a5737025dc08d47f7ca1c405ab7ff0588f5094142bf7864507901f422f5d033f92cbcf243a03a604e9db439ceffdbd0e1d94f3e51c9294141216758468b87c3536a8ec6ed2887900966642c80fe8b7627e7bfdb3d5686a6828f3a44c7c37adcc8299b3a26080aa1909eab9641f1684b3ba9e0045ed411e4745d579b2d9e91d1675b087cc90eef17dfb87456b0d8dd60b0085200de9ed1e31f420f0100c6aedfb51bf783d4a338b9737a1a79cdfb151de9c0bff927adb5b3ddd5abc1ab54edbc53c1e3eec50c43cf3af5142af8226568d740a90667a612f35f91843ef7424b994b64ff660f267433c15fa6cb50f20d0551b1318250a744bbe52f313d722566dceda672f28d367c97dd669aca1f040c06697261b0cd53e096945636ed50304b69565a14e80d49ed374b4641edf406b6afecf45b8e24fcc46613bd895975742090ef53d50e5574b4286041d5cfbc73a393baa1ea76d150c5ffeb5a69bbb2d0b46b769affc3962c1798b2e5876a0ff100a2e19407cfed55b6b1e881921aaab194ac2aa61abf5bbbaba9fbba3858836fc55abf25626e2c9f214aa1526e5d6bb49319ab250f65ab5965b83836cfba5d108baf010f949b16526bb18b2d0ad20760177d1f1432ea9d213d6575b4b68ff4d7bc0d5042df0810971353fa2bb904834365980c2e1e641ae3accb05a2803acb185cb844566571ae080e6a0ba02b00d0ab3e668ee11db81228c681cba50698a0c11fe8155acda9eb4ac1e6a80192204796b65dcc562e371d192fa5bc1cd5b3d7c07373b15999765cefd0c9e71aaab096d71e33f0a48d40c0da00e4f1a6c125b4ad1e079356a549d59b24f4c91d499bd906f80dfae1a448475e98cdba079ac473a1d63d507fdc32730e806811c4e9ba6fd024f9dfae965b6027b5f55facbb511a7692868569e46c8874fceccb53027ee41b3328c54dfc5f96a43f3ab1058eff5bf72abaf15b003cbc220fe847727b877dd7ed53c8ac39caa311040c4036c35cd37fab43170f1891bebf05a1b2cd5fe41e86b9236858cf98170faef30c6e7279ed50b425906e2efd02fcd6cc0d14b390f169f801d43bda4a14d6c171d41629e90bf5c928273eda4555c7dc94677776b1fd8e7d63ba093982b63f19fcebbc2c9a42bd0f9d9e655c95dd201c7f37305bccf61359bed8a0cfa89cc12392199de5fbb293dc7ff52226ede80595e60422d4334b2b7a0bae065922705233025b53e758afe51d51805ca271ac27f52d13f0e4faf4bf0b3c876557d97c6045dbbe53b2ddb1168011fe2b2ccb58248dd9b2d8f630c54b0781ea6a7849e13c9d6d2ea122cee287beeddaafc4cda06ca42a951ac131c000529145e11e9668c3cac2dddedc8b887e8adef7d07c271059c2ec8dd2416e0e782bd5f931ce744d5a58f15beb25e343e3d16848dac6ec37484a50457acbee2e707a5f5aafc3ca4668a50ef2ccdf10a18d19090168d6f09c80885caeeee821491362d84c6a197766932d52592df76b99a99bddb689115a29c983141894b0afeda8550bbbbcc9777989fb2221c76b16e552cbae153e226da0ab2b2f4234aeb6a6f0fa5b5102da4916be97619b1acb74f46b139f567bb0446d3238db03fd843eef5632d9b7ae93cf8acbddb149f9a4bccb6822cc8620eba4c95d2a3ce6591449b4cf4a70b67b6bed9559197f7073febadde342aad88fa44dd51621668a684d0bd5ea85a9df8ee80c2c392a6e222fdf34d3963da311221391a4e93bdc87b7893c5bad785a7d8e3bdc4ed65f228939335bd4a10eb13fedae46e94a4724546e6a09fe771c96b6352a6d907672fb55c46a17d5593b6bba5aec7ffc5650fc717e545ce89ed0d1b54b338a01a08cd883623bcba0f46689d764fbc8267c34e01fb90215e242cd043676213859d8bc9f729b1e9e0091ddf569daa9cc645055f846e5586c80ed549fd9ff884734621d0f356c2daabc6029219a3b583000f352fed911ccb90371decda88ffe6673872f24972087c6fbeee3d13f043460efa74b04f195c6aad015270b7d45c98875ecff43dacc54d6ed814f4f92ed6953f32b4f2da254b749d657eef0b131a2249018188cca71c0ece0e34c160681f0843421664e6f072ac3f3eec2c518690b9ff1fac4ea204a853a42dbcf6675aa498400dca001fb8f79f896ec22e91ba8279f7386b775c5772d5c81ad54e7367b02caca4491080627063a2827ea814cd8e14543b7192ecb5df9dccb737dc8b2217253d3d49d1aaac4c04a43ccca6fcb95d949228f7d90cb459c45f9c3ab15defd6268709429020a4e893d1e7af128a52da4f035195f58c515f609e999e66608b0e024c7ccbecbfe2d9d76be2f38658bb3a2cec33e45bc2cc07d5652af4f8556b9da182ff69b47c947d0656f40faaf8df88bbdfaeac97ccc6cbcbbfdabb33c399fa37a23a10c31887982fbc7e7ec90427d2670029a9cda386dc9aba4e9f7356c61760f56d8f32c7a4ea0a03323bcf3b49a418b5001e2a04813c3e63c16ab58e5f41dc4ed1c37ab4344944a099d5c75e1e187eedd1a5c2075fa3a47ebe9870b68bff60ca5a4ed41de1272f337175724662e873f03f4a2b337d55bd9d065db0ba3607a863e8f8390d6548a558a43cdeb56ee0dc12a22f72643de20a4eb427e0a4d69ecb29369b3c20f354f9abd165a615af95af2def38f8ed674665e8649d6bb7381ad91468615d0c72962ee98ca7b9bb14c3ae1c55495322e39e93e7b24b91fca878bd93b082e65652ee66f992fa3860b87f223e0ec961de2d7e5d1074d36547a27c4f00e40e3005224c94d99524b9d3bb1d6e7ec40b041ada6143f5be10986dbaaad3763659965ec0516dd2d73a79fc56ac7e996860d8a5d02059c9f26f4ec07f90b31229b16d4460ebea40b532218aebf8c83b1ec500277981b71db58ecef634b358b1a1c37fe752d3400afcada383d0ad49614ce21a7b39eff63d6732d5db666b2bb606a3311ca62a94fb8a32ae374bef06c70f369b3eb6b9edd3159ba3385a0720e9dda24f2a5cdd6b7811e2b89b264f950494adf89493c81c14811fd90dc5dc42537600b95a5dcbe9e8670cb138454d6f1485fa4d12ec1063e5206833dbd33901ec6526f4006fe742d0b458474b593c0ae68a8a8e9ab0164d023443572736de062c819fe906c6c15045bf865eb821f280a196d99a816582eb2d77fc8545e1bd6aea4ab0cae6f4b2cd25e9456953a7e697065a911b636695b797c7cf90e59af72f7e021ddc6d22d7774ed89d672e483b6f61bec17e33102babc4fce9f6ba84229b034ce1dd87c0a93e359b7e92f5c89cb4815a6f6706c4ed8d8faa70046a9a31a3b6f17eaabe6544f32879366e1f7f7e202cd431a7b259e48d56663fc00e78273ed88a8aeacf87fa5987a8ddfac251d8f4f28f9faaaecd005c2a118199449a861af05369cbd9bcc2fb8e89f4663cf539cd819ea13437b01b68ef4617c7e83feeb1570dbf08b35b91680822ff1ea1bcaf4ba41cd88b32e27936f6f794fc1de925664181c7ab82eeaac21f68da5807bde50bf665798d514c2ca9b4e22b3d96d3fb06e802f4e60c18946c77d530b8990990dac0349ed3ad84879980707b4111cb657a488940e86d51cc8f4991ff304864bd363e4763fb09ec7fe7eb223ee40aab983b546feec6a080a40541e8b6bcb2d7f3a05f0e50fcb8e9049efd4634ec4da09b13eadbf0ce275832bf65ca236d5a1619ca0c16c9237adebf0de697c7f7eeb032914ade4276089e4324438887c9ac0641635c9e8bb264513f170e1577d32e76a98a96b60e87fc810e0b58d7b50469f1e3e866d36de405c8b20063c05fcfcda721efd425cfbdda624516f321f44e12d746b6c08da8fdbe6c49657ea3c63878a8dc9928466b02e7104ef247d9b02f226d7f29fbee7a5b3e4a0bbe443e42e81ee4003981f71ed3ea1c351411c1946383e4420f8ce35007d21c7c7a8de0080c8bd20a7d40e7289e4395c7574ed8b8c79a4dd64c04d318da98849fcfc48de92766266beab7dd3169c2cb3cc5a77180f706fc2b39d22d09702c236bd27c3e6dfb9e7042ddea10d836f06bb7298842af87943437a26d7bf65434bd0fc986355a0908514598cc29f3374651560de683fff63f291f93500b5c7586334a07212c7f424ecea244af3e7c13720d8f75b38da86d9bcb2a2be4061e154bea0f9db5c9dc1f9f9b959ad9e57d2c4a4abcda799a2f7f4f4cc74ec406cc8117bfef9b7d32e203c73a161f414b787885b8c5d10e5b9d8889519dcf28c8f119d0e86c7804c872f5caa9876f7c64ba53170146994738a57ede57b181d7232b56840585255a29897ca37195991c4ceb03636485849c8cfeaac83b1dae9918725a80bdcbbe", 0x1000, 0x2, 0x0, 0x1, r7}]) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = memfd_create(&(0x7f0000000000)='n*:)-%\x00', 0x4) sendfile(r1, r8, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:59 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="d638431abe3b9b87b379b4e483ab3d27b35c5f3454475517616d7407c9977557acec766aadca904cdd44ba4630b40457260be8740c82a79a0bd76cdb07131421fded0d80d49f754673c114e95cbc3520f9f8db14fedd6fe8940eadbb2cb07ef3759e15d6daa7f21be89e879be113295a3dca2d9f3dd343ca9cda0df4153ad3e5a76048ea845824f04795", 0x8a, 0x1ff}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000580)="22bc6875f6d7a49fcd02eb2ee3b26471c785f8994c05748644425cb40ecc282f8164c133337dae41dd0c6d9e1b9643e0f3dc6b4ff7b3fbfaab6989974195ab13e1196c5523e2aa4a4e4a609a8fd684e79e1896be51da8a7690db42e033bcae6ed7478baf96de4c53809e165a6d194de3cb", 0x71, 0xfd0, 0x0, 0x0, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)="b28077adab4bc208f9c20328daba6c1603a211d5cd536eb769b47370359f4804951348aec66b5782cc0d7c1b1cab939a76866b6e9ae19a820be2caf2d6df6c282cf25b57b5ba06e906ceac919647a824396644eb132b176365ad0f1e0f5c535c7d0fba9eb2e771913bef67542faf9e79362f5efccc4b50b1a6e14240dd8ff694a7b94f26db9c0b2a2a7d33f504da526b387ee1dd4f1c95df69a511baed9952c6b3e934586c1870c333420dc9167ada641116ecdb190f232f6b393694f2bdcd7436915f3dcadd19aa21b47b6c9194b67d0958a8a2dbf068912379088d7931", 0xde, 0x0, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800)="5cbb1f3122d3edff1cd7e5e8f623bea8bb737379ee6f810fc87fa3dfdb339ca24825ea366bb49776d29bdd5a4dc3f82617ae055ac1edd30a7e4d4b97baf16f7cb6bbd9e73df0bbb45bd8c975", 0x4c, 0x3, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)="f295ced5d47934bbec85f762c7000eeb1b406ca35bd6aea2bcddea2b5387e500741b5d8e0cd2707298bb93135b80f3a6e43211214853655f053eb6138c129f1c2d002c3503d4076a5d620d3499880d66c9dd319c6050d06ee7b5fdcc95f3c6c11203372c4b9becb36f81a52c8be222c8fe7927017326462f7d2eb52115e20251d6f215f569078d4b06446e83dcc252b8948aa69576592de3fddc4331dc70f06ab81bd7916ed8e72632a593ee6e167b3aeaf05488d13b8c2d771f9812b7408887763b7d8c58a99fbc02f6103f677023b85ff97176b2231b3e9be99782b81598942967dc92d143", 0xe6, 0x5de, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x27, r1, &(0x7f0000000a00)="5c1e3d06192a268768bc14d9b53898249a96ba8c7a1eb99f2d50eec5208373", 0x1f, 0x722, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000ac0)="1a81002c1aeb73f8cf4c81ea346abcc3afd3db7ef2e8789b73ed7c8d482d5c5f5d8cced9366979f5ae1e8b71627a4e1cce42d91e752d202a4ff64bbe133170d0b0b499c3f9694dcf1356f994a7f0798dbf329100eb76c182099d5d3d63ed27fe3e545175ed2176d5c4cd7b3b1f3e49b8a0b72a53885b67b9229016f98434bd38d43c9403aa7dc48d9f9eba622e8e930f3937dcbd70bbddc25e28a3e89ae4810412bd05359d3aba220487626756b72ed77012", 0xb2, 0x3, 0x0, 0x2, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000c40)="0dbbf5069c5b346d4018bbaa003ee1cf16d3cf53aee496bf2db6dc3065e7f9f79731c295d39b5524eb1aee6e8f24c76f1fd16f464fbcc64d53d2ebac8268dcfa0f6cb3962bb66569364d20aeb42f8e2cacf7bebefe37ad0e3dad751adda202c27e83c9288326e73b7c32da4dc6f429a0e6261c2d3f92c57fb7002e40329f", 0x7e, 0x9, 0x0, 0x0, r7}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xfffc, r8, &(0x7f0000000d00)="851206fceffbb8bdbce2959e8a3f25f50c1575798fe6f8ffe7d0009fe224bf32a916fdf966345afbba0a0fee38adb710e852d15975f21a78ba8867b9db9db25ec5bd014c56eff7696890d5feabf47010fe5e74f6ddb4eedbc31c530a192fd59cf6b2621ea5433921df07e10ebb06ce5020432f42f0f19a", 0x77, 0x8, 0x0, 0x1, r4}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:59 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xa3, 0x0, 0x0, 0x0, 0xe) 07:22:59 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:59 executing program 0 (fault-call:6 fault-nth:19): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 499.175156][T30970] FAULT_INJECTION: forcing a failure. [ 499.175156][T30970] name failslab, interval 1, probability 0, space 0, times 0 [ 499.187917][T30970] CPU: 0 PID: 30970 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 499.197028][T30970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.207697][T30970] Call Trace: [ 499.211058][T30970] dump_stack_lvl+0xb7/0x103 [ 499.216273][T30970] dump_stack+0x11/0x1a [ 499.220930][T30970] should_fail+0x23c/0x250 [ 499.225452][T30970] __should_failslab+0x81/0x90 [ 499.230308][T30970] should_failslab+0x5/0x20 [ 499.234911][T30970] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 499.240823][T30970] ? __kmalloc_node_track_caller+0x30/0x40 [ 499.246639][T30970] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 499.252232][T30970] __kmalloc_node_track_caller+0x30/0x40 [ 499.257866][T30970] ? alloc_skb_with_frags+0x90/0x390 [ 499.263246][T30970] __alloc_skb+0x187/0x420 [ 499.267781][T30970] alloc_skb_with_frags+0x90/0x390 [ 499.272953][T30970] ? avc_has_perm+0xc8/0x150 [ 499.277632][T30970] sock_alloc_send_pskb+0x436/0x4e0 [ 499.283030][T30970] unix_dgram_sendmsg+0x478/0x1600 [ 499.288596][T30970] ? selinux_socket_sendmsg+0x7e/0x140 [ 499.294152][T30970] ? unix_dgram_poll+0x3e0/0x3e0 [ 499.299169][T30970] sock_sendmsg+0x75/0xa0 [ 499.303530][T30970] io_issue_sqe+0x1f4f/0x64b0 [ 499.308236][T30970] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 499.314205][T30970] ? __list_del_entry_valid+0x54/0xc0 [ 499.319600][T30970] ? rmqueue_pcplist+0x145/0x1d0 07:22:59 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xa4, 0x0, 0x0, 0x0, 0xe) [ 499.324797][T30970] ? mntput_no_expire+0x64/0x730 [ 499.329739][T30970] ? get_page_from_freelist+0x54e/0x820 [ 499.335398][T30970] ? fget_many+0x178/0x1a0 [ 499.339852][T30970] __io_queue_sqe+0xe7/0x360 [ 499.344574][T30970] io_submit_sqe+0x1695/0x3400 [ 499.349344][T30970] ? kmem_cache_alloc_bulk+0x289/0x340 [ 499.355044][T30970] io_submit_sqes+0x822/0xe50 [ 499.359854][T30970] __se_sys_io_uring_enter+0x1c7/0xa20 [ 499.365369][T30970] ? __fget_light+0x21b/0x260 [ 499.370223][T30970] ? fput+0x2d/0x130 [ 499.374380][T30970] __x64_sys_io_uring_enter+0x74/0x80 [ 499.379914][T30970] do_syscall_64+0x3d/0x90 [ 499.384334][T30970] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 499.390220][T30970] RIP: 0033:0x4665e9 [ 499.394102][T30970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 499.415649][T30970] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 07:22:59 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xa5, 0x0, 0x0, 0x0, 0xe) [ 499.424155][T30970] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 499.432435][T30970] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 499.440583][T30970] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 499.448655][T30970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.456811][T30970] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:22:59 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff32) 07:22:59 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xa6, 0x0, 0x0, 0x0, 0xe) 07:22:59 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:22:59 executing program 0 (fault-call:6 fault-nth:20): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:22:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x149042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x80f5b, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x20202, 0x2) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 499.805398][T31031] FAULT_INJECTION: forcing a failure. [ 499.805398][T31031] name failslab, interval 1, probability 0, space 0, times 0 [ 499.818153][T31031] CPU: 1 PID: 31031 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 499.827148][T31031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.837838][T31031] Call Trace: [ 499.841104][T31031] dump_stack_lvl+0xb7/0x103 [ 499.845714][T31031] dump_stack+0x11/0x1a [ 499.849983][T31031] should_fail+0x23c/0x250 [ 499.854401][T31031] __should_failslab+0x81/0x90 [ 499.859247][T31031] should_failslab+0x5/0x20 [ 499.863760][T31031] kmem_cache_alloc_node+0x58/0x2b0 [ 499.868982][T31031] ? __alloc_skb+0xed/0x420 [ 499.873775][T31031] __alloc_skb+0xed/0x420 [ 499.878120][T31031] alloc_skb_with_frags+0x90/0x390 [ 499.883329][T31031] ? avc_has_perm+0xc8/0x150 [ 499.887917][T31031] sock_alloc_send_pskb+0x436/0x4e0 [ 499.893397][T31031] unix_dgram_sendmsg+0x478/0x1600 [ 499.898606][T31031] ? selinux_socket_sendmsg+0x7e/0x140 07:22:59 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 499.904326][T31031] ? unix_dgram_poll+0x3e0/0x3e0 [ 499.909432][T31031] sock_sendmsg+0x75/0xa0 [ 499.914385][T31031] io_issue_sqe+0x1f4f/0x64b0 [ 499.919597][T31031] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 499.925949][T31031] ? __list_del_entry_valid+0x54/0xc0 [ 499.932119][T31031] ? rmqueue_pcplist+0x145/0x1d0 [ 499.938033][T31031] ? mntput_no_expire+0x64/0x730 [ 499.943802][T31031] ? get_page_from_freelist+0x54e/0x820 [ 499.949928][T31031] ? fget_many+0x178/0x1a0 [ 499.954934][T31031] __io_queue_sqe+0xe7/0x360 [ 499.959598][T31031] io_submit_sqe+0x1695/0x3400 [ 499.965135][T31031] ? kmem_cache_alloc_bulk+0x289/0x340 [ 499.970868][T31031] io_submit_sqes+0x822/0xe50 [ 499.976093][T31031] __se_sys_io_uring_enter+0x1c7/0xa20 [ 499.982185][T31031] ? __fget_light+0x21b/0x260 [ 499.988995][T31031] ? fput+0x2d/0x130 [ 499.993880][T31031] __x64_sys_io_uring_enter+0x74/0x80 [ 499.999552][T31031] do_syscall_64+0x3d/0x90 [ 500.005112][T31031] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.011982][T31031] RIP: 0033:0x4665e9 [ 500.016600][T31031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.036862][T31031] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 500.047260][T31031] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 500.055720][T31031] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 500.064128][T31031] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 500.072787][T31031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.080845][T31031] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:00 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="d638431abe3b9b87b379b4e483ab3d27b35c5f3454475517616d7407c9977557acec766aadca904cdd44ba4630b40457260be8740c82a79a0bd76cdb07131421fded0d80d49f754673c114e95cbc3520f9f8db14fedd6fe8940eadbb2cb07ef3759e15d6daa7f21be89e879be113295a3dca2d9f3dd343ca9cda0df4153ad3e5a76048ea845824f04795", 0x8a, 0x1ff}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000580)="22bc6875f6d7a49fcd02eb2ee3b26471c785f8994c05748644425cb40ecc282f8164c133337dae41dd0c6d9e1b9643e0f3dc6b4ff7b3fbfaab6989974195ab13e1196c5523e2aa4a4e4a609a8fd684e79e1896be51da8a7690db42e033bcae6ed7478baf96de4c53809e165a6d194de3cb", 0x71, 0xfd0, 0x0, 0x0, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000600)="b28077adab4bc208f9c20328daba6c1603a211d5cd536eb769b47370359f4804951348aec66b5782cc0d7c1b1cab939a76866b6e9ae19a820be2caf2d6df6c282cf25b57b5ba06e906ceac919647a824396644eb132b176365ad0f1e0f5c535c7d0fba9eb2e771913bef67542faf9e79362f5efccc4b50b1a6e14240dd8ff694a7b94f26db9c0b2a2a7d33f504da526b387ee1dd4f1c95df69a511baed9952c6b3e934586c1870c333420dc9167ada641116ecdb190f232f6b393694f2bdcd7436915f3dcadd19aa21b47b6c9194b67d0958a8a2dbf068912379088d7931", 0xde, 0x0, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000800)="5cbb1f3122d3edff1cd7e5e8f623bea8bb737379ee6f810fc87fa3dfdb339ca24825ea366bb49776d29bdd5a4dc3f82617ae055ac1edd30a7e4d4b97baf16f7cb6bbd9e73df0bbb45bd8c975", 0x4c, 0x3, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)="f295ced5d47934bbec85f762c7000eeb1b406ca35bd6aea2bcddea2b5387e500741b5d8e0cd2707298bb93135b80f3a6e43211214853655f053eb6138c129f1c2d002c3503d4076a5d620d3499880d66c9dd319c6050d06ee7b5fdcc95f3c6c11203372c4b9becb36f81a52c8be222c8fe7927017326462f7d2eb52115e20251d6f215f569078d4b06446e83dcc252b8948aa69576592de3fddc4331dc70f06ab81bd7916ed8e72632a593ee6e167b3aeaf05488d13b8c2d771f9812b7408887763b7d8c58a99fbc02f6103f677023b85ff97176b2231b3e9be99782b81598942967dc92d143", 0xe6, 0x5de, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x27, r1, &(0x7f0000000a00)="5c1e3d06192a268768bc14d9b53898249a96ba8c7a1eb99f2d50eec5208373", 0x1f, 0x722, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000ac0)="1a81002c1aeb73f8cf4c81ea346abcc3afd3db7ef2e8789b73ed7c8d482d5c5f5d8cced9366979f5ae1e8b71627a4e1cce42d91e752d202a4ff64bbe133170d0b0b499c3f9694dcf1356f994a7f0798dbf329100eb76c182099d5d3d63ed27fe3e545175ed2176d5c4cd7b3b1f3e49b8a0b72a53885b67b9229016f98434bd38d43c9403aa7dc48d9f9eba622e8e930f3937dcbd70bbddc25e28a3e89ae4810412bd05359d3aba220487626756b72ed77012", 0xb2, 0x3, 0x0, 0x2, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000c40)="0dbbf5069c5b346d4018bbaa003ee1cf16d3cf53aee496bf2db6dc3065e7f9f79731c295d39b5524eb1aee6e8f24c76f1fd16f464fbcc64d53d2ebac8268dcfa0f6cb3962bb66569364d20aeb42f8e2cacf7bebefe37ad0e3dad751adda202c27e83c9288326e73b7c32da4dc6f429a0e6261c2d3f92c57fb7002e40329f", 0x7e, 0x9, 0x0, 0x0, r7}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xfffc, r8, &(0x7f0000000d00)="851206fceffbb8bdbce2959e8a3f25f50c1575798fe6f8ffe7d0009fe224bf32a916fdf966345afbba0a0fee38adb710e852d15975f21a78ba8867b9db9db25ec5bd014c56eff7696890d5feabf47010fe5e74f6ddb4eedbc31c530a192fd59cf6b2621ea5433921df07e10ebb06ce5020432f42f0f19a", 0x77, 0x8, 0x0, 0x1, r4}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:00 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xa7, 0x0, 0x0, 0x0, 0xe) 07:23:00 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:00 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xa8, 0x0, 0x0, 0x0, 0xe) 07:23:00 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xa9, 0x0, 0x0, 0x0, 0xe) 07:23:00 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xaa, 0x0, 0x0, 0x0, 0xe) 07:23:00 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff33) 07:23:00 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:00 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xab, 0x0, 0x0, 0x0, 0xe) 07:23:00 executing program 0 (fault-call:6 fault-nth:21): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 500.780292][T31130] FAULT_INJECTION: forcing a failure. [ 500.780292][T31130] name failslab, interval 1, probability 0, space 0, times 0 [ 500.795042][T31130] CPU: 0 PID: 31130 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 500.804227][T31130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.815099][T31130] Call Trace: [ 500.818920][T31130] dump_stack_lvl+0xb7/0x103 [ 500.824331][T31130] dump_stack+0x11/0x1a [ 500.829328][T31130] should_fail+0x23c/0x250 [ 500.834609][T31130] __should_failslab+0x81/0x90 [ 500.839605][T31130] should_failslab+0x5/0x20 [ 500.844250][T31130] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 500.850615][T31130] ? __kmalloc_node_track_caller+0x30/0x40 [ 500.857149][T31130] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 500.862872][T31130] __kmalloc_node_track_caller+0x30/0x40 [ 500.868570][T31130] ? alloc_skb_with_frags+0x90/0x390 [ 500.873870][T31130] __alloc_skb+0x187/0x420 [ 500.878290][T31130] alloc_skb_with_frags+0x90/0x390 [ 500.883912][T31130] ? avc_has_perm+0xc8/0x150 [ 500.888624][T31130] sock_alloc_send_pskb+0x436/0x4e0 [ 500.894140][T31130] unix_dgram_sendmsg+0x478/0x1600 [ 500.899734][T31130] ? selinux_socket_sendmsg+0x7e/0x140 [ 500.905424][T31130] ? unix_dgram_poll+0x3e0/0x3e0 [ 500.911696][T31130] sock_sendmsg+0x75/0xa0 [ 500.916188][T31130] io_issue_sqe+0x1f4f/0x64b0 [ 500.920979][T31130] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 500.926928][T31130] ? __list_del_entry_valid+0x54/0xc0 [ 500.932634][T31130] ? rmqueue_pcplist+0x145/0x1d0 [ 500.937799][T31130] ? mntput_no_expire+0x64/0x730 [ 500.943567][T31130] ? get_page_from_freelist+0x54e/0x820 [ 500.949397][T31130] ? fget_many+0x178/0x1a0 [ 500.954051][T31130] __io_queue_sqe+0xe7/0x360 [ 500.958765][T31130] io_submit_sqe+0x1695/0x3400 [ 500.963640][T31130] ? kmem_cache_alloc_bulk+0x289/0x340 [ 500.969271][T31130] io_submit_sqes+0x822/0xe50 [ 500.974041][T31130] __se_sys_io_uring_enter+0x1c7/0xa20 07:23:00 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xac, 0x0, 0x0, 0x0, 0xe) [ 500.979687][T31130] ? __fget_light+0x21b/0x260 [ 500.984362][T31130] ? fput+0x2d/0x130 [ 500.988518][T31130] __x64_sys_io_uring_enter+0x74/0x80 [ 500.994279][T31130] do_syscall_64+0x3d/0x90 [ 500.998903][T31130] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.004896][T31130] RIP: 0033:0x4665e9 [ 501.008799][T31130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 501.031664][T31130] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 501.041296][T31130] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 501.051381][T31130] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 501.059827][T31130] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 501.067810][T31130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.076880][T31130] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:01 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xad, 0x0, 0x0, 0x0, 0xe) 07:23:01 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x9f) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000440)="15d767490949b6061be40e38871a1c9d111b4c1e4cf8520f39163a6feda64ed935c1166791e2386d5086db9928a7270e63c64597d4feb8bcb38d64382f829767e2f8b23c6ebfcae68871103ee244284f51a68a7ac62832bbd246ba4f08d4ff98627f19639157394ba080bd9776e30cc000313ec430ed28b2df786080c7c17170bd89f486", 0x84}, {&(0x7f0000000780)="07284b2980a92d96df51359fd25b4b67f100a1c00d5b9e093258df1ab914a44358593fc8f590bcb8cfbb87b1637d3fdd8afcdfc726c3f20c658594f041c34157d2a78e597a4f06d9db49c29532a40ef9a167b4c920aad8e8625b4c753e534cb2c6c70d29a56681d1d0bb3b122eaac3388db8077c2994a84c75ad8b3c965f94453aba2dcd02aca75bb3c7e371a2867bc915d8005fbee798237f2a2f605f09870aaebd10c33e2ddc889a131eebef30e9b2ddac6c1b062495289bd54c316aa4e585b03f3f932b144c279cff20258d7c2fa603ddbd8f61c1c6db6d9cd0f97e077f1df0cbf713a8440006a04d4f31415bc50bed9b07e73779be1d1babaa96e3e17310fadb755af72a326d09e5f9b57d99c70b5a4961f91d15b6df6dbc6ad2fff0f9cec543bd940d22a8eee1bc5b2771d2af924c2e3ec4e8b8217b20faec4d6ad683cbce603a7821735b1ab2dc55c415eb20870364fe120c9aa1c60150b60ec06177acceaf72d6c3c4f720c22ccc317934a05a7041cd50aa9885ec9ee4e11e302ff18db6887f48c1b774d40d9051639e2289341286e7afb0f3deb3986c6437b05e733fb10bca98c8ec9df723ce29f36e76d5759dbd627b3543d20582ba22b68534003005b158ba682277822e4388679e36006945054d800e0bfed03c7366692fd73235c2e7ecf5167bdd64ed88e9ee46765a8e57070567004f93d93c6264b6c22493335c7476a010dea1cc80e1f0416ae29a2fc4873fad8a7ac19a4f029835243c63ae93cc5a9fdb623e05311447e5992723b4a10cfd0c9de121405161d5bfb8c90cfa32cdecd53accc4e27c5239b07e57ff36aa47c1ba3fe2e4cbd73bd1db985b6328b04e8e7fbb3a30801736ef89690bc969ad7070803261cd2a78a24786451d77f9b4af0ac3e0665154a72595449b6f0d7b899550a60cb4c3da59a1809326e07a5cdca0df61ffb6cdb9fd5b0297dcbf5714a765d5eb43a1d400536f436747bb299b3cabe708e1b614a2c1bdcd5060486d8de80c2d814f116eec30ba7f1ec7337b3a2372d3502cb566b19820e509f0aaa0480dc346aadcaf9f5d8f1ce949f7ce80094b67cb4494ddd72eed5a4e54e7acd670dfc88f7dc5a5073da2cd125be650674a6f031b6ac2d6a15e996f2826b153e3668c505cbc60a23eaba2010dc5ed18451380991fa6519ee8c28ea093171a7dd5fa963ab4234ef9eadf8d26e81c91f168fa121fa1b8e5724feeb1d0f14e746067be711247ac9471199d3d8208ef7962da8eac6a057da3da50afe6d3c9b859f5afc428f274f37b02e2724f9373001b1f3adbdcc40d711967ce76b6ae65967e47677dc1dab2ecfba07cce0ab469c2f8536b26c31a3c99af3bc1972c1fa0bc9be81699dd09fc91a067a3b387a2dcfd8052d623166855ef39c4e57b7c821d1e4151688dc10b2283440b69ff1efd57956763ea5153d85c0f9779a6c22cb81057bfcd431ec7aee2018767e25ae81010d389e7dcdc223883f89f3c2836802a34b191e6b9ac50bc842976c0a7ded100d957fde489a64e784672373e072c338bef543b48a69d1b860020f5e4772424f257553baeb1326e0ddbc502f0c66ac17e6853ff2b212d8251cd2b33a70d9ff04a05168ad80ffa8bccb1230fd2774bb28467a1179c167c9baa77a25ec41ba111bc92828265efe29114c7afbf40e45ec48843f1571b56e5229e7f4d54fd33a5b2878afef2e27018cc4f596e272c219404f93dd2cdc1bc1997339b6efb7d653a3974a6e6da13e2ca49e8cddcf8f2bb4ad91de7776d8dce60b8670e61a3fd9e3e1dfd1544febbad452ea16c213a11c5675a20943354bf7791b729c39fb16b79fa3270205813e8697fc9afb6c4b89c0aa418b560711cf674c4e950b9d2090e2858f00049fce50d21dd1f230db1dfdc713ffeb709c9019e2c976a95232221d79c96481cd5e722bc51f204e7ca95fdcd13657f72463e01111e90fafe8aa06a0a2d6938d3d94ea3667690319dbc8f02d505a60f1870b76a6e3f9b4be78812c54d7d1a4cc04a55ba5cb09715ba50c9414687a942a4d3ad00575f861c463716a9a9207185aca5d5e3c0156805c45664c0a4ece476a4d6ff5f59a1e22a13fbeee041ca5e160de9b735a85069839cb03e494b2d4c0d032dffdb89d70abcbedb48dedb640add4c1d0297a769aa25c6d827c9717455ed8293948c66396e1fe18e68c1b7dfcf1cc3e38d87c0e63aacf4c273da7202a619d32cbb4029824689c541572b5b509147f4b3e1c4f31a8b2c3e3ff397ee8aa5da0e1e8b4d4d9ae3e841a751bc49db903d564c712cecf08070c6a4ba9cc89ac94f597494b566db19a1e7e852fce027fb759046cf25deed41c87ef629dc9340ae946d856a355d13c64db5c7324fa9b3d6a7e86f6d9cf4148d14915ac051cc79b1a63c14869d61f9cb1d16da46adb86bac9c9afa0f5bb189ce93f80b39066f14e1efed00a40004ed97b9d2f08a0bcd44dc2e7cbb61d76e532daedc370ac0588c7ce37eaf00544c24eb13fb3f0f0364ed3f08a085af64cb6c681e836d9a89c33a2893203e751ded8d8b48a4142d25fc1726dc77808576fc7e05be7950b594e34be3c95a96b14f44d97d6e4763bdf140ac3b1bc0b907cf23f4cc2e56a23949e7a529af2e6c206e9254d3f23aa0e3f0352da7a3f0521d46fa92c9845563e16381b135b0d18aa131a37da7a93466552516c2cc396fb1877d1ee5a5c857aca1ef07843fb1d60263c69aa2d6918251003705ec31afdd696a78573a33ea5a66a70fc1e9b28db1b2710bc88b7f2237b47b97ee63c2ce7b233742ef53feb3e8abd813c11eea1fe3d8fc217a4284cd1d98754434d94cb5c93ca30b77951e357662f25f107453f59f3326cf160a9f1436effd583d72d83c2ed3695d04e33aa663c480558a0e30e3dc4d8506c45189ae559a1643a934bfd538f52135335592509f08d4d211e18dcbb276e0df18dea819ba6730f75e4262f0b211cc59a0ad5d1a1f85ac081f8cba3e48bf9491a62db08a0a9f8115adf28275cc3103c8d73d7999cb626955658a1b293784de838069b2ab13bd25984251cdf9935f116217de2a9c6ba840c827bddc9f652bf2b100646f6a09afd8fc3f99cb3365b7c657e126cf15d176e8eec2abc63fcd68b6b8123a237591ac23f1ea512608da22de5dfb48fb45c7f1514431b7b21c4210d99d1d08f5e59b3aa8b83abc937a65b3feda0fbb0b02c447750885e36db93a3472011f3ee2d3fda9b29b13e71b3c650cd01ae4a31e316ff641cad2ef191551b471ca57d0015081aa7239c036aacadeeca8379093e481b98fa086578a24add5ddf62623cb0f65402a14a216ed100986134e4f32458d8550c5288883db26e1a0b265187e8cc059592e8911f65e955ac4f82460fd0f4b34f8a428444fd685a3b4424ef05663861daef987666c8b6793aabdfbdb0185282cfbc95208e4261a279044af553c944c71ff2899807463d89c596dfa15a5cc93c50d43f8bfa26848fa9f852658abb4180ab6b4671e1c694eb692ebafb14adcbf78d8730fa4a22002f8927c5382dba3f22fab1c166706fef021cdca8df783c2d14c923c2ab03d7a6e697cc97a997de54d8e54c47e7af4b6924a23a5acca3c53283d3aa4b87485c575cceed61898a563c656e5eb8e2f2d95bd943989f7601e5583e9fc59bd3357ab558ea3da0d2279146002192fd3d55fa440edea79e96ebc420085c7328a25166ae3af3dace3645ad25ac3744e1e65fb5c1754b509106afcb832241dda84131f264272a74affe8b186bea1ce0fe8d1790fabbd99d6778145e8b3262682cb9947fa571a0a8b9c13b9aa9fe2942bc0b14a4717cd395c9e4f039aae6cf7ac31b90d2fa2215beefea04256579d648f59a6b125de152ba34efd95244ee36d1f09cca83793853a706e2f1bfd87d236fd0b51f670199658a4de6a6005405dd7ece43e24e39e564dc07c8e5cf22ddbfc6a39694909add42042205bbf4cfb1e043cb34125bbf660b3da5dbe045fc8bae95d96a2c6abce50efcc3414e1a1a88d47362fc0e7e0b100a412261569133b1f23a511f8f0eb25bb41a2b41cde851725498e3858b8cc5e7b215c7a09ac9e16fd2e7ace9d0c32a648bc0dc6c7087803c9bab518f0541471690826d4673afd09b3ce9014454acaf0205e50818f7b960777316f95405c9ebc809b90fd9b4c554ef4503a25e2865803dd2d58dacf59462ff0a8bcb4448c7028b77f9f751cdbc4f3089a81bd2818a38966197f4efbaf8e8a4f428dd4a87c37c893577a93a4611b41fcdcf486765810ca3e42364b6fb54329829b8806f0781098aadb07fa1affad773f86716d59a2fd7ff7c347d5215af0b83b1ff429dbd291034d5a469bcb0fd757b1d26b5acfaa7472884b638ba89bc3d8a02df80238c2c8a461cc434e0fb8d3d154aa5e9e36bed8027fcb3209aad73b60cd5b4e554f725f54a285bb3b31022b136be9c8092d0f4b178120ce26b65cd5dc50a2e7ee536382ff951fd4a66c2bcfcfe9b448e5468612a9aaf2ff87f2bcbee6060d8cc36bf0a05894fa6c72fba3dc9821a70445f5e49c8ba7fa84feb9dd4dda1626db603b4c6a07418910bd34a1b40aa43ec621b0a0a3c5ddc08f0971d50ee811e31e95dd4e5a1531b1186800826e2f595e2a5e4db727f56269cffcd98d1542687ea88dce70af2ad4c9de49051a5526beae5b3951378fddd1077957fdb5ae196febb82a7a89441edbe5c2e81877b28d1ccb789bdb00b1a62ff0a84431ef5dbbc4d1dc3803073df9adf9b992a6a522960f9e394af8a9dc5efc05abaeaf15f830a9408f9dc3195d2f4f3f47c0659c05165c3794b79e58203375e5a517fa7efe4917a79d092fe906abcb5c7d8d2b162490c5ad3989b4ff32d2ef6153e9870dd35c1620e408cd2637124ebc1914f006f8dd0aab1f84b457165c9a36af885080ba02e2b0e05dfdc14217ad04748eab58f34b0990f5786d6ef3b2c44f50d8c5ada47ec45a56b676c4120dcd0494f7446edec2b7a1f763dfa73f7b748132a8e49689e660c9f46abbeb74a890f2666a492edb0992a3a38a1426748c572ca3ada34c4945ce7a62a0c6c260465d707c9532c1a8b6b3f0a8e0421d13ab385b33be98a60202d0a99f201713c944fda9844ca64d315998b958529013d17b3ce3452948eacfa43197a52ac2094187390400c5ad5c8d37b71aade93fc09854f29615681b555441355161708a305b6e8dbc807126d2d6af1c83026db3a35c8ef72ee72528efefc5bebeaf714c7da3939f32b063a15adf280675be1ac7a528b7dd81c6c3ec2c67c53958016ef713abb8e15671e08b7c9325ecaaba0d6d48d9c4387c2b2bea813443eef07e48dcef6d88d299f5bd03957c8e330c3f9c3d896ebdffcc8b87b40354e4cf436463548000d376e0f42d4bc12fab8d650ee94f58771ba315f11f479609f1306d03dfd77f2eb51668ead84f5857ee83949c12406a873e07ed7aed6b41aab99ad285852f9d33445c51c3334006d55c61fa08ecd83f082badcca55dd9bb8f99d8414726c23f3da6451b2d4b449d108d538dd1f66152e7138eb35bfe7b5c76fd237045287283df743ab57e2de0cde3710caeec3d703bd68b5f3501b161848e9b81f9bb0574f19d0988b1c18ecb4a85fe64f709a81b29dba0994ae06078998b88689512823324d477f725412b60f242c3fdcd0fa0c61846219e876d6c5f89c5abcd89b4e9f773f4a420b50956420f12faf1277a33480fc25cea25827dcad7f193ae17150dc2759bbc7a18e17c8eace05e90eec818ba6adc9b0a256945ad06c311", 0x1000}, {&(0x7f0000000580)="0cab9170251f17a39d783be2138225e6704eca31f2056741b085f4d61b48da4b13d7537754429ce4bf5c4903615a9136652d6f19a7c68ff9a8cacaec36255565c4d84de8991e1437ee8cb5c5223c7ccc5c4c36cc95d3e9c9d1978de3de07b62d97b9c29945840a498ebf23132aeecb508845852f18cf6d7316d3e3d0b31babcf0450397fd434e382a7fe93de2754d94b4b19466ddaedcddb09799aefb7960922ccb15cb015a49a108ebc06d143a2167e5143cc78c70d0c8e5d81b53378155f3e9ad022", 0xc3}, {&(0x7f0000001780)="1ff9943f3539e22ecff6678d5302ebd208db314631d4d0b9a199c7b0eca2618f9b8823d8aafff8086c32dcb3eb2c793d40dccda8f57219b7925cc02b6623bef17b06f5c1412cafbc157b30558456a8a14b438e1fac7fd004016dc35fbc53048bfb244445028209288877889c46107621ce2498c2b02ed3a4bff58ae62d428f88bbbc4569f975799b343eb41c50698bae10347e8596a7f58f405ca3db7aece3febdc11829ef7c6673a4c86e014000a032fef8b4cf6adcadfc7451802679ca8b6993a1b31ca93f31ae2498a74459652da1da415c638e2cb6689bff0e8b57", 0xdd}], 0x4, 0x9) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[], 0x1000000c8) inotify_add_watch(r2, &(0x7f0000000000)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:01 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:01 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:01 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xae, 0x0, 0x0, 0x0, 0xe) 07:23:01 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xaf, 0x0, 0x0, 0x0, 0xe) 07:23:01 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:01 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff34) 07:23:01 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xb0, 0x0, 0x0, 0x0, 0xe) 07:23:01 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:01 executing program 0 (fault-call:6 fault-nth:22): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:01 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xb1, 0x0, 0x0, 0x0, 0xe) [ 501.731247][T31184] FAULT_INJECTION: forcing a failure. [ 501.731247][T31184] name failslab, interval 1, probability 0, space 0, times 0 [ 501.745163][T31184] CPU: 1 PID: 31184 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 501.755902][T31184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.766021][T31184] Call Trace: [ 501.769316][T31184] dump_stack_lvl+0xb7/0x103 [ 501.774959][T31184] dump_stack+0x11/0x1a 07:23:01 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0xe) [ 501.779378][T31184] should_fail+0x23c/0x250 [ 501.783955][T31184] __should_failslab+0x81/0x90 [ 501.788984][T31184] should_failslab+0x5/0x20 [ 501.794346][T31184] kmem_cache_alloc_node+0x58/0x2b0 [ 501.799555][T31184] ? __alloc_skb+0xed/0x420 [ 501.804059][T31184] __alloc_skb+0xed/0x420 [ 501.808679][T31184] alloc_skb_with_frags+0x90/0x390 [ 501.813846][T31184] ? avc_has_perm+0xc8/0x150 [ 501.818566][T31184] sock_alloc_send_pskb+0x436/0x4e0 [ 501.823890][T31184] unix_dgram_sendmsg+0x478/0x1600 [ 501.829157][T31184] ? selinux_socket_sendmsg+0x7e/0x140 [ 501.834689][T31184] ? unix_dgram_poll+0x3e0/0x3e0 [ 501.839612][T31184] sock_sendmsg+0x75/0xa0 [ 501.843945][T31184] io_issue_sqe+0x1f4f/0x64b0 [ 501.848755][T31184] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 501.854641][T31184] ? __list_del_entry_valid+0x54/0xc0 [ 501.860062][T31184] ? rmqueue_pcplist+0x145/0x1d0 [ 501.864979][T31184] ? mntput_no_expire+0x64/0x730 [ 501.869958][T31184] ? get_page_from_freelist+0x54e/0x820 [ 501.875484][T31184] ? fget_many+0x178/0x1a0 [ 501.879882][T31184] __io_queue_sqe+0xe7/0x360 [ 501.884512][T31184] io_submit_sqe+0x1695/0x3400 [ 501.889274][T31184] ? kmem_cache_alloc_bulk+0x289/0x340 [ 501.894786][T31184] io_submit_sqes+0x822/0xe50 [ 501.899597][T31184] __se_sys_io_uring_enter+0x1c7/0xa20 [ 501.905280][T31184] ? __fget_light+0x21b/0x260 [ 501.910104][T31184] ? fput+0x2d/0x130 [ 501.914077][T31184] __x64_sys_io_uring_enter+0x74/0x80 [ 501.919519][T31184] do_syscall_64+0x3d/0x90 [ 501.928832][T31184] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.935466][T31184] RIP: 0033:0x4665e9 [ 501.940064][T31184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 501.961159][T31184] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 501.970180][T31184] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 501.978462][T31184] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 501.987180][T31184] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 501.995323][T31184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.004719][T31184] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:02 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xb3, 0x0, 0x0, 0x0, 0xe) 07:23:02 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="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", 0x1c, 0x7}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:02 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x8001) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) fchown(r1, 0xee00, 0xee00) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:02 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:02 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0xe) 07:23:02 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="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", 0x1c, 0x7}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:02 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff35) 07:23:02 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xb5, 0x0, 0x0, 0x0, 0xe) 07:23:02 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r0 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:02 executing program 0 (fault-call:6 fault-nth:23): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 502.652517][T31244] FAULT_INJECTION: forcing a failure. [ 502.652517][T31244] name failslab, interval 1, probability 0, space 0, times 0 [ 502.665210][T31244] CPU: 0 PID: 31244 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 502.674153][T31244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.684418][T31244] Call Trace: [ 502.687711][T31244] dump_stack_lvl+0xb7/0x103 [ 502.692543][T31244] dump_stack+0x11/0x1a [ 502.697065][T31244] should_fail+0x23c/0x250 [ 502.701836][T31244] __should_failslab+0x81/0x90 [ 502.706597][T31244] should_failslab+0x5/0x20 [ 502.711232][T31244] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 502.717126][T31244] ? __kmalloc_node_track_caller+0x30/0x40 [ 502.723727][T31244] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 502.729542][T31244] __kmalloc_node_track_caller+0x30/0x40 [ 502.735195][T31244] ? alloc_skb_with_frags+0x90/0x390 [ 502.740521][T31244] __alloc_skb+0x187/0x420 [ 502.745030][T31244] alloc_skb_with_frags+0x90/0x390 [ 502.750145][T31244] ? avc_has_perm+0xc8/0x150 [ 502.754729][T31244] sock_alloc_send_pskb+0x436/0x4e0 [ 502.759933][T31244] unix_dgram_sendmsg+0x478/0x1600 [ 502.765051][T31244] ? selinux_socket_sendmsg+0x7e/0x140 [ 502.770740][T31244] ? unix_dgram_poll+0x3e0/0x3e0 [ 502.775685][T31244] sock_sendmsg+0x75/0xa0 [ 502.780027][T31244] io_issue_sqe+0x1f4f/0x64b0 [ 502.784801][T31244] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 502.790757][T31244] ? __list_del_entry_valid+0x54/0xc0 [ 502.796314][T31244] ? rmqueue_pcplist+0x145/0x1d0 [ 502.801318][T31244] ? mntput_no_expire+0x64/0x730 [ 502.806254][T31244] ? get_page_from_freelist+0x54e/0x820 [ 502.812275][T31244] ? fget_many+0x178/0x1a0 [ 502.817397][T31244] __io_queue_sqe+0xe7/0x360 [ 502.822552][T31244] io_submit_sqe+0x1695/0x3400 [ 502.827878][T31244] ? kmem_cache_alloc_bulk+0x289/0x340 [ 502.834581][T31244] io_submit_sqes+0x822/0xe50 [ 502.841295][T31244] __se_sys_io_uring_enter+0x1c7/0xa20 [ 502.847048][T31244] ? __fget_light+0x21b/0x260 [ 502.852406][T31244] ? fput+0x2d/0x130 [ 502.856320][T31244] __x64_sys_io_uring_enter+0x74/0x80 [ 502.861977][T31244] do_syscall_64+0x3d/0x90 [ 502.866395][T31244] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 502.872299][T31244] RIP: 0033:0x4665e9 [ 502.876226][T31244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:23:02 executing program 2: r0 = open(0x0, 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:02 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xb6, 0x0, 0x0, 0x0, 0xe) [ 502.896291][T31244] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 502.905036][T31244] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 502.913155][T31244] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 502.921136][T31244] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 502.929665][T31244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.937827][T31244] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:02 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xb7, 0x0, 0x0, 0x0, 0xe) 07:23:03 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xb8, 0x0, 0x0, 0x0, 0xe) 07:23:03 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r3 = accept(r1, 0x0, &(0x7f0000000000)) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000540)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f336a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88b8691bca2fd88dc6a635fb7f3adce8b7710160129146e5a27582a8d9b23150991c2e9d9d541948252ab140ca6ad0f3a7b7bcc6521e2d03151881bbc8bbe7c3ab78dcc8e7638f966e9c3517d4e7e0cd593937ad2a88391067c211f8ed6e84b2498e09334cb84753e6d2efb61062af80052ca670f634be", 0x1a0, 0x7}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0xb22, r1, &(0x7f0000000440)="667e87ecfa3870ff73a44a28775eaaa1859d31a670f77f34b6d221193d290d78ef1c369530213d953afd38028a8e024bb244a20fbfc26dd8aff5c2c94db4f2016a4b2c0bd1e75e40e9468d7589a352aeacba67a9291a76b0aa6e0d6df24a3f6d460cff0bc441bfb7a0c17895423d17bd54fdd3cb373f33d97eef3f20901a623b6c7e08df658614e871f52df28342d8c8cd1229b0693335f84c4457edc09bbfecb0ad8a6830f97300b945b7def449128e58aefd5df1c004718476043b1020f0a30e52fb1842ecf507ede7557ce1c98c87d0edf6f525952636eeb2c6064a57779d10426b84c642ea8e", 0xe8, 0x3}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:03 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:03 executing program 2: r0 = open(0x0, 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:03 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xb9, 0x0, 0x0, 0x0, 0xe) 07:23:03 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff36) 07:23:03 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xba, 0x0, 0x0, 0x0, 0xe) 07:23:03 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x41ff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) close(r3) splice(r2, 0x0, r3, 0x0, 0x30000033fe0, 0x0) sendfile(r1, r2, 0x0, 0x9b) r4 = creat(&(0x7f0000000740)='./bus\x00', 0x140) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="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", 0x12a, 0x7}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x30000033fe0, 0x0) r8 = syz_open_dev$rtc(&(0x7f0000000040), 0x5, 0x80200) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r8) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:03 executing program 2: r0 = open(0x0, 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:03 executing program 0 (fault-call:6 fault-nth:24): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 503.693066][T31336] FAULT_INJECTION: forcing a failure. [ 503.693066][T31336] name failslab, interval 1, probability 0, space 0, times 0 [ 503.706102][T31336] CPU: 0 PID: 31336 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 503.716621][T31336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.727686][T31336] Call Trace: [ 503.730978][T31336] dump_stack_lvl+0xb7/0x103 [ 503.735750][T31336] dump_stack+0x11/0x1a [ 503.740058][T31336] should_fail+0x23c/0x250 [ 503.745224][T31336] __should_failslab+0x81/0x90 [ 503.750015][T31336] should_failslab+0x5/0x20 [ 503.754701][T31336] kmem_cache_alloc_node+0x58/0x2b0 [ 503.760013][T31336] ? __alloc_skb+0xed/0x420 [ 503.765839][T31336] __alloc_skb+0xed/0x420 [ 503.770276][T31336] alloc_skb_with_frags+0x90/0x390 [ 503.775698][T31336] ? avc_has_perm+0xc8/0x150 [ 503.780411][T31336] sock_alloc_send_pskb+0x436/0x4e0 [ 503.785932][T31336] unix_dgram_sendmsg+0x478/0x1600 [ 503.791232][T31336] ? selinux_socket_sendmsg+0x7e/0x140 [ 503.796745][T31336] ? unix_dgram_poll+0x3e0/0x3e0 [ 503.801781][T31336] sock_sendmsg+0x75/0xa0 [ 503.806207][T31336] io_issue_sqe+0x1f4f/0x64b0 [ 503.811066][T31336] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 503.817316][T31336] ? __list_del_entry_valid+0x54/0xc0 [ 503.822682][T31336] ? rmqueue_pcplist+0x145/0x1d0 [ 503.828702][T31336] ? mntput_no_expire+0x64/0x730 [ 503.834127][T31336] ? get_page_from_freelist+0x54e/0x820 [ 503.840499][T31336] ? fget_many+0x178/0x1a0 [ 503.846041][T31336] __io_queue_sqe+0xe7/0x360 [ 503.851257][T31336] io_submit_sqe+0x1695/0x3400 [ 503.856460][T31336] ? kmem_cache_alloc_bulk+0x289/0x340 [ 503.863133][T31336] io_submit_sqes+0x822/0xe50 [ 503.868371][T31336] __se_sys_io_uring_enter+0x1c7/0xa20 [ 503.873832][T31336] ? __fget_light+0x21b/0x260 [ 503.878522][T31336] ? fput+0x2d/0x130 [ 503.882579][T31336] __x64_sys_io_uring_enter+0x74/0x80 [ 503.887966][T31336] do_syscall_64+0x3d/0x90 [ 503.892388][T31336] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.898363][T31336] RIP: 0033:0x4665e9 [ 503.902273][T31336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.922749][T31336] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 503.932053][T31336] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 07:23:03 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xbb, 0x0, 0x0, 0x0, 0xe) [ 503.940818][T31336] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 503.948821][T31336] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 503.957320][T31336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.966257][T31336] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:03 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:03 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x8000) fallocate(r2, 0x11, 0xff, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:04 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xbc, 0x0, 0x0, 0x0, 0xe) 07:23:04 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:04 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:04 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xbd, 0x0, 0x0, 0x0, 0xe) 07:23:04 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff37) 07:23:04 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xbe, 0x0, 0x0, 0x0, 0xe) 07:23:04 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:04 executing program 0 (fault-call:6 fault-nth:25): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 504.640975][T31415] FAULT_INJECTION: forcing a failure. [ 504.640975][T31415] name failslab, interval 1, probability 0, space 0, times 0 [ 504.654246][T31415] CPU: 0 PID: 31415 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 504.664604][T31415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.676790][T31415] Call Trace: [ 504.680884][T31415] dump_stack_lvl+0xb7/0x103 [ 504.686146][T31415] dump_stack+0x11/0x1a [ 504.691007][T31415] should_fail+0x23c/0x250 [ 504.696117][T31415] __should_failslab+0x81/0x90 [ 504.700878][T31415] should_failslab+0x5/0x20 [ 504.705396][T31415] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 504.711463][T31415] ? __kmalloc_node_track_caller+0x30/0x40 [ 504.718483][T31415] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 504.724946][T31415] __kmalloc_node_track_caller+0x30/0x40 [ 504.730717][T31415] ? alloc_skb_with_frags+0x90/0x390 [ 504.736306][T31415] __alloc_skb+0x187/0x420 [ 504.740916][T31415] alloc_skb_with_frags+0x90/0x390 [ 504.746184][T31415] ? avc_has_perm+0xc8/0x150 [ 504.751101][T31415] sock_alloc_send_pskb+0x436/0x4e0 [ 504.756473][T31415] unix_dgram_sendmsg+0x478/0x1600 [ 504.761690][T31415] ? selinux_socket_sendmsg+0x7e/0x140 [ 504.767345][T31415] ? unix_dgram_poll+0x3e0/0x3e0 [ 504.772293][T31415] sock_sendmsg+0x75/0xa0 [ 504.776821][T31415] io_issue_sqe+0x1f4f/0x64b0 [ 504.781762][T31415] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 504.787569][T31415] ? __list_del_entry_valid+0x54/0xc0 [ 504.793008][T31415] ? rmqueue_pcplist+0x145/0x1d0 [ 504.797953][T31415] ? mntput_no_expire+0x64/0x730 [ 504.802925][T31415] ? get_page_from_freelist+0x54e/0x820 [ 504.808561][T31415] ? fget_many+0x178/0x1a0 [ 504.813324][T31415] __io_queue_sqe+0xe7/0x360 [ 504.818183][T31415] io_submit_sqe+0x1695/0x3400 [ 504.822955][T31415] ? kmem_cache_alloc_bulk+0x289/0x340 [ 504.828467][T31415] io_submit_sqes+0x822/0xe50 [ 504.833367][T31415] __se_sys_io_uring_enter+0x1c7/0xa20 [ 504.838863][T31415] ? __fget_light+0x21b/0x260 [ 504.843536][T31415] ? fput+0x2d/0x130 [ 504.847433][T31415] __x64_sys_io_uring_enter+0x74/0x80 [ 504.852817][T31415] do_syscall_64+0x3d/0x90 [ 504.857332][T31415] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.863455][T31415] RIP: 0033:0x4665e9 [ 504.867352][T31415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:23:04 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xbf, 0x0, 0x0, 0x0, 0xe) [ 504.887279][T31415] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 504.896007][T31415] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 504.905450][T31415] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 504.913511][T31415] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 504.921484][T31415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.929575][T31415] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:04 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:04 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xc0, 0x0, 0x0, 0x0, 0xe) 07:23:05 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) syz_open_pts(0xffffffffffffffff, 0x519000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x528acda7, 0x6, 0x8, 0x0, 0x15, "79cd3aaae7dea13e6cb89b935430445997def1"}) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x12a, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x30000033fe0, 0x0) finit_module(r5, &(0x7f0000000040)='-\x00', 0x3) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:05 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xc1, 0x0, 0x0, 0x0, 0xe) 07:23:05 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:05 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:05 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xc2, 0x0, 0x0, 0x0, 0xe) 07:23:05 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff38) 07:23:05 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:05 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xc3, 0x0, 0x0, 0x0, 0xe) 07:23:05 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x25) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:05 executing program 0 (fault-call:6 fault-nth:26): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 505.648478][T31489] FAULT_INJECTION: forcing a failure. [ 505.648478][T31489] name failslab, interval 1, probability 0, space 0, times 0 [ 505.661525][T31489] CPU: 0 PID: 31489 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 505.670300][T31489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.680347][T31489] Call Trace: [ 505.683645][T31489] dump_stack_lvl+0xb7/0x103 [ 505.688322][T31489] dump_stack+0x11/0x1a [ 505.692482][T31489] should_fail+0x23c/0x250 07:23:05 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xc4, 0x0, 0x0, 0x0, 0xe) [ 505.696903][T31489] __should_failslab+0x81/0x90 [ 505.701670][T31489] ? io_arm_poll_handler+0x277/0x6e0 [ 505.706987][T31489] should_failslab+0x5/0x20 [ 505.711558][T31489] kmem_cache_alloc_trace+0x49/0x310 [ 505.716983][T31489] io_arm_poll_handler+0x277/0x6e0 [ 505.722118][T31489] ? fget_many+0x178/0x1a0 [ 505.726838][T31489] __io_queue_sqe+0x135/0x360 [ 505.731779][T31489] io_submit_sqe+0x1695/0x3400 [ 505.736711][T31489] ? kmem_cache_alloc_bulk+0x289/0x340 [ 505.742184][T31489] io_submit_sqes+0x822/0xe50 [ 505.746870][T31489] __se_sys_io_uring_enter+0x1c7/0xa20 [ 505.752331][T31489] ? __fget_light+0x21b/0x260 [ 505.757004][T31489] ? fput+0x2d/0x130 [ 505.760938][T31489] __x64_sys_io_uring_enter+0x74/0x80 [ 505.766450][T31489] do_syscall_64+0x3d/0x90 [ 505.770874][T31489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.777079][T31489] RIP: 0033:0x4665e9 [ 505.780995][T31489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.803220][T31489] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 505.813257][T31489] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 505.822336][T31489] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 505.830364][T31489] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 505.838337][T31489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.846390][T31489] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:05 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:05 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xc5, 0x0, 0x0, 0x0, 0xe) 07:23:05 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xc6, 0x0, 0x0, 0x0, 0xe) 07:23:05 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:06 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:06 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xc7, 0x0, 0x0, 0x0, 0xe) 07:23:06 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff39) 07:23:06 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:06 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xc8, 0x0, 0x0, 0x0, 0xe) 07:23:06 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x10441, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@access_any}, {@access_client}]}}) 07:23:06 executing program 0 (fault-call:6 fault-nth:27): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:06 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:06 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xc9, 0x0, 0x0, 0x0, 0xe) 07:23:06 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 506.665124][T31560] FAULT_INJECTION: forcing a failure. [ 506.665124][T31560] name failslab, interval 1, probability 0, space 0, times 0 [ 506.679638][T31560] CPU: 1 PID: 31560 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 506.688463][T31560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.698511][T31560] Call Trace: [ 506.701792][T31560] dump_stack_lvl+0xb7/0x103 [ 506.706381][T31560] dump_stack+0x11/0x1a [ 506.710675][T31560] should_fail+0x23c/0x250 07:23:06 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xca, 0x0, 0x0, 0x0, 0xe) [ 506.715386][T31560] __should_failslab+0x81/0x90 [ 506.720244][T31560] should_failslab+0x5/0x20 [ 506.725024][T31560] kmem_cache_alloc_node+0x58/0x2b0 [ 506.730525][T31560] ? __alloc_skb+0xed/0x420 [ 506.735488][T31560] __alloc_skb+0xed/0x420 [ 506.740688][T31560] alloc_skb_with_frags+0x90/0x390 [ 506.746068][T31560] ? unix_write_space+0x128/0x130 [ 506.751140][T31560] ? __kfree_skb+0xfe/0x150 [ 506.755646][T31560] sock_alloc_send_pskb+0x436/0x4e0 [ 506.760869][T31560] unix_dgram_sendmsg+0x478/0x1600 [ 506.766078][T31560] ? selinux_socket_sendmsg+0x7e/0x140 [ 506.771537][T31560] ? unix_dgram_poll+0x3e0/0x3e0 [ 506.776477][T31560] sock_sendmsg+0x75/0xa0 [ 506.780935][T31560] io_issue_sqe+0x1f4f/0x64b0 [ 506.785781][T31560] ? __list_add_valid+0x28/0x90 [ 506.790672][T31560] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 506.797162][T31560] ? __io_queue_proc+0xa7/0x2b0 [ 506.802359][T31560] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 506.809143][T31560] ? unix_dgram_connect+0x840/0x840 [ 506.814438][T31560] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 506.820136][T31560] ? io_arm_poll_handler+0x55c/0x6e0 [ 506.825844][T31560] ? io_sqe_buffer_register+0xb90/0xb90 [ 506.832913][T31560] __io_queue_sqe+0xe7/0x360 [ 506.837502][T31560] io_submit_sqe+0x1695/0x3400 [ 506.842376][T31560] ? kmem_cache_alloc_bulk+0x289/0x340 [ 506.848204][T31560] io_submit_sqes+0x822/0xe50 [ 506.852990][T31560] __se_sys_io_uring_enter+0x1c7/0xa20 [ 506.858603][T31560] ? __fget_light+0x21b/0x260 [ 506.863746][T31560] ? fput+0x2d/0x130 [ 506.867717][T31560] __x64_sys_io_uring_enter+0x74/0x80 [ 506.873264][T31560] do_syscall_64+0x3d/0x90 [ 506.877823][T31560] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 506.884252][T31560] RIP: 0033:0x4665e9 [ 506.888383][T31560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 506.909457][T31560] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 506.918368][T31560] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 506.926702][T31560] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 506.934836][T31560] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 506.943271][T31560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.952574][T31560] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:06 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:06 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:06 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xcb, 0x0, 0x0, 0x0, 0xe) 07:23:07 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff3a) 07:23:07 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:07 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xcc, 0x0, 0x0, 0x0, 0xe) 07:23:07 executing program 0 (fault-call:6 fault-nth:28): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:07 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x30000033fe0, 0x0) lseek(r2, 0x1, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6800) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000740)='./bus\x00', 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x8) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:07 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xcd, 0x0, 0x0, 0x0, 0xe) 07:23:07 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:07 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 507.652647][T31609] FAULT_INJECTION: forcing a failure. [ 507.652647][T31609] name failslab, interval 1, probability 0, space 0, times 0 [ 507.666387][T31609] CPU: 1 PID: 31609 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 507.675367][T31609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.685426][T31609] Call Trace: [ 507.688707][T31609] dump_stack_lvl+0xb7/0x103 [ 507.693305][T31609] dump_stack+0x11/0x1a [ 507.697714][T31609] should_fail+0x23c/0x250 07:23:07 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xce, 0x0, 0x0, 0x0, 0xe) [ 507.702479][T31609] __should_failslab+0x81/0x90 [ 507.707323][T31609] should_failslab+0x5/0x20 [ 507.712042][T31609] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 507.718303][T31609] ? __kmalloc_node_track_caller+0x30/0x40 [ 507.724508][T31609] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 507.730534][T31609] __kmalloc_node_track_caller+0x30/0x40 [ 507.736282][T31609] ? alloc_skb_with_frags+0x90/0x390 [ 507.741665][T31609] __alloc_skb+0x187/0x420 [ 507.746163][T31609] alloc_skb_with_frags+0x90/0x390 [ 507.751517][T31609] ? unix_write_space+0x128/0x130 [ 507.756601][T31609] ? __kfree_skb+0xfe/0x150 [ 507.761723][T31609] sock_alloc_send_pskb+0x436/0x4e0 [ 507.766910][T31609] unix_dgram_sendmsg+0x478/0x1600 [ 507.772378][T31609] ? selinux_socket_sendmsg+0x7e/0x140 [ 507.778665][T31609] ? unix_dgram_poll+0x3e0/0x3e0 [ 507.784381][T31609] sock_sendmsg+0x75/0xa0 [ 507.788710][T31609] io_issue_sqe+0x1f4f/0x64b0 [ 507.793382][T31609] ? __list_add_valid+0x28/0x90 [ 507.798276][T31609] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 507.804372][T31609] ? __io_queue_proc+0xa7/0x2b0 [ 507.809555][T31609] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 507.815263][T31609] ? unix_dgram_connect+0x840/0x840 [ 507.820489][T31609] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 507.825931][T31609] ? io_arm_poll_handler+0x55c/0x6e0 [ 507.831429][T31609] ? io_sqe_buffer_register+0xb90/0xb90 [ 507.836981][T31609] __io_queue_sqe+0xe7/0x360 [ 507.841568][T31609] io_submit_sqe+0x1695/0x3400 [ 507.846317][T31609] ? kmem_cache_alloc_bulk+0x289/0x340 [ 507.851890][T31609] io_submit_sqes+0x822/0xe50 [ 507.856693][T31609] __se_sys_io_uring_enter+0x1c7/0xa20 [ 507.862144][T31609] ? __fget_light+0x21b/0x260 [ 507.866852][T31609] ? fput+0x2d/0x130 [ 507.870727][T31609] __x64_sys_io_uring_enter+0x74/0x80 [ 507.876174][T31609] do_syscall_64+0x3d/0x90 [ 507.880588][T31609] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 507.886564][T31609] RIP: 0033:0x4665e9 [ 507.890438][T31609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 507.910303][T31609] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 507.918842][T31609] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 507.926808][T31609] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 507.935050][T31609] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 507.943098][T31609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.951044][T31609] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:07 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:07 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xcf, 0x0, 0x0, 0x0, 0xe) 07:23:07 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:08 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff3b) 07:23:08 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:08 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xd0, 0x0, 0x0, 0x0, 0xe) 07:23:08 executing program 0 (fault-call:6 fault-nth:29): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:08 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r4, 0x5a33b000) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) dup2(r5, r0) recvfrom$unix(r2, &(0x7f0000000040)=""/111, 0x6f, 0x3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) open(&(0x7f0000000000)='./bus\x00', 0x410180, 0x1) r6 = open(&(0x7f0000000180)='./bus\x00', 0x80000, 0xc1) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:08 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xd1, 0x0, 0x0, 0x0, 0xe) [ 508.600506][T31687] FAULT_INJECTION: forcing a failure. [ 508.600506][T31687] name failslab, interval 1, probability 0, space 0, times 0 [ 508.614140][T31687] CPU: 1 PID: 31687 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 508.623253][T31687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.634136][T31687] Call Trace: [ 508.637405][T31687] dump_stack_lvl+0xb7/0x103 [ 508.642003][T31687] dump_stack+0x11/0x1a [ 508.646153][T31687] should_fail+0x23c/0x250 07:23:08 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xd2, 0x0, 0x0, 0x0, 0xe) 07:23:08 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xd3, 0x0, 0x0, 0x0, 0xe) [ 508.650600][T31687] __should_failslab+0x81/0x90 [ 508.655517][T31687] ? io_arm_poll_handler+0x277/0x6e0 [ 508.661050][T31687] should_failslab+0x5/0x20 [ 508.665562][T31687] kmem_cache_alloc_trace+0x49/0x310 [ 508.670882][T31687] io_arm_poll_handler+0x277/0x6e0 [ 508.675997][T31687] ? io_sqe_buffer_register+0xb90/0xb90 [ 508.681652][T31687] __io_queue_sqe+0x135/0x360 [ 508.686418][T31687] io_submit_sqe+0x1695/0x3400 [ 508.691180][T31687] ? kmem_cache_alloc_bulk+0x289/0x340 07:23:08 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xd4, 0x0, 0x0, 0x0, 0xe) [ 508.696708][T31687] io_submit_sqes+0x822/0xe50 [ 508.701422][T31687] __se_sys_io_uring_enter+0x1c7/0xa20 [ 508.707043][T31687] ? __fget_light+0x21b/0x260 [ 508.711712][T31687] ? fput+0x2d/0x130 [ 508.715607][T31687] __x64_sys_io_uring_enter+0x74/0x80 [ 508.721044][T31687] do_syscall_64+0x3d/0x90 [ 508.725460][T31687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 508.731686][T31687] RIP: 0033:0x4665e9 [ 508.735610][T31687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 508.755933][T31687] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 508.764524][T31687] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 508.772900][T31687] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 508.781074][T31687] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 508.789040][T31687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.797007][T31687] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:09 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:09 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xd5, 0x0, 0x0, 0x0, 0xe) 07:23:09 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:09 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xd6, 0x0, 0x0, 0x0, 0xe) 07:23:09 executing program 0 (fault-call:6 fault-nth:30): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:09 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:09 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r4, r1, 0x0, 0x800004000) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:09 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff3c) [ 509.581909][T31746] FAULT_INJECTION: forcing a failure. [ 509.581909][T31746] name failslab, interval 1, probability 0, space 0, times 0 [ 509.594561][T31746] CPU: 0 PID: 31746 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 509.603411][T31746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.613459][T31746] Call Trace: [ 509.616734][T31746] dump_stack_lvl+0xb7/0x103 [ 509.621551][T31746] dump_stack+0x11/0x1a [ 509.625760][T31746] should_fail+0x23c/0x250 [ 509.630185][T31746] __should_failslab+0x81/0x90 [ 509.634981][T31746] should_failslab+0x5/0x20 [ 509.639631][T31746] kmem_cache_alloc_node+0x58/0x2b0 [ 509.645015][T31746] ? __alloc_skb+0xed/0x420 [ 509.649890][T31746] __alloc_skb+0xed/0x420 [ 509.654313][T31746] alloc_skb_with_frags+0x90/0x390 [ 509.660133][T31746] ? finish_task_switch+0xce/0x290 [ 509.665310][T31746] sock_alloc_send_pskb+0x436/0x4e0 [ 509.670824][T31746] unix_dgram_sendmsg+0x478/0x1600 [ 509.676285][T31746] ? selinux_socket_sendmsg+0x7e/0x140 [ 509.682845][T31746] ? unix_dgram_poll+0x3e0/0x3e0 [ 509.688171][T31746] sock_sendmsg+0x75/0xa0 [ 509.692502][T31746] io_issue_sqe+0x1f4f/0x64b0 [ 509.697189][T31746] ? __list_add_valid+0x28/0x90 [ 509.702139][T31746] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 509.707974][T31746] ? __io_queue_proc+0xa7/0x2b0 [ 509.713607][T31746] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 509.719266][T31746] ? unix_dgram_connect+0x840/0x840 [ 509.724543][T31746] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 509.730262][T31746] ? io_arm_poll_handler+0x55c/0x6e0 [ 509.735560][T31746] ? io_sqe_buffer_register+0xb90/0xb90 [ 509.741716][T31746] __io_queue_sqe+0xe7/0x360 [ 509.746404][T31746] io_submit_sqe+0x1695/0x3400 [ 509.751605][T31746] ? kmem_cache_alloc_bulk+0x289/0x340 [ 509.757241][T31746] io_submit_sqes+0x822/0xe50 [ 509.762227][T31746] __se_sys_io_uring_enter+0x1c7/0xa20 [ 509.767860][T31746] ? __fget_light+0x21b/0x260 [ 509.772968][T31746] ? fput+0x2d/0x130 [ 509.777099][T31746] __x64_sys_io_uring_enter+0x74/0x80 [ 509.782676][T31746] do_syscall_64+0x3d/0x90 [ 509.787673][T31746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 509.793941][T31746] RIP: 0033:0x4665e9 [ 509.797920][T31746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.818255][T31746] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 07:23:09 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xd7, 0x0, 0x0, 0x0, 0xe) 07:23:09 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 509.827273][T31746] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 509.835266][T31746] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 509.843338][T31746] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 509.851445][T31746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.859849][T31746] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:09 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xd8, 0x0, 0x0, 0x0, 0xe) 07:23:09 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1', "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"}, 0xff) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:09 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[], 0x1000000c8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:09 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x0, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:09 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xd9, 0x0, 0x0, 0x0, 0xe) 07:23:10 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xda, 0x0, 0x0, 0x0, 0xe) 07:23:10 executing program 0 (fault-call:6 fault-nth:31): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:10 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xdb, 0x0, 0x0, 0x0, 0xe) 07:23:10 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x0, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 510.327205][T31826] FAULT_INJECTION: forcing a failure. [ 510.327205][T31826] name failslab, interval 1, probability 0, space 0, times 0 [ 510.342714][T31826] CPU: 1 PID: 31826 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 510.352949][T31826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.363100][T31826] Call Trace: [ 510.366463][T31826] dump_stack_lvl+0xb7/0x103 [ 510.371103][T31826] dump_stack+0x11/0x1a [ 510.375334][T31826] should_fail+0x23c/0x250 [ 510.379925][T31826] __should_failslab+0x81/0x90 [ 510.384689][T31826] should_failslab+0x5/0x20 [ 510.389191][T31826] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 510.395025][T31826] ? __kmalloc_node_track_caller+0x30/0x40 [ 510.401165][T31826] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 510.406834][T31826] __kmalloc_node_track_caller+0x30/0x40 [ 510.412494][T31826] ? alloc_skb_with_frags+0x90/0x390 [ 510.417786][T31826] __alloc_skb+0x187/0x420 [ 510.422268][T31826] alloc_skb_with_frags+0x90/0x390 [ 510.427636][T31826] ? unix_write_space+0x128/0x130 [ 510.432855][T31826] ? __kfree_skb+0xfe/0x150 [ 510.437736][T31826] sock_alloc_send_pskb+0x436/0x4e0 [ 510.443320][T31826] unix_dgram_sendmsg+0x478/0x1600 [ 510.448563][T31826] ? selinux_socket_sendmsg+0x7e/0x140 [ 510.455264][T31826] ? unix_dgram_poll+0x3e0/0x3e0 [ 510.460631][T31826] sock_sendmsg+0x75/0xa0 [ 510.466309][T31826] io_issue_sqe+0x1f4f/0x64b0 [ 510.472479][T31826] ? __list_add_valid+0x28/0x90 [ 510.478448][T31826] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 510.484528][T31826] ? __io_queue_proc+0xa7/0x2b0 [ 510.489419][T31826] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 510.495177][T31826] ? unix_dgram_connect+0x840/0x840 [ 510.500684][T31826] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 510.506378][T31826] ? io_arm_poll_handler+0x55c/0x6e0 [ 510.511652][T31826] ? io_sqe_buffer_register+0xb90/0xb90 [ 510.517180][T31826] __io_queue_sqe+0xe7/0x360 [ 510.521971][T31826] io_submit_sqe+0x1695/0x3400 [ 510.526858][T31826] ? kmem_cache_alloc_bulk+0x289/0x340 [ 510.532599][T31826] io_submit_sqes+0x822/0xe50 [ 510.537403][T31826] __se_sys_io_uring_enter+0x1c7/0xa20 [ 510.543024][T31826] ? __fget_light+0x21b/0x260 [ 510.547756][T31826] ? fput+0x2d/0x130 [ 510.551641][T31826] __x64_sys_io_uring_enter+0x74/0x80 [ 510.557034][T31826] do_syscall_64+0x3d/0x90 [ 510.562007][T31826] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 510.568411][T31826] RIP: 0033:0x4665e9 [ 510.572827][T31826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 510.592526][T31826] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 510.601023][T31826] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 510.609082][T31826] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 510.618011][T31826] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 510.626454][T31826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.634884][T31826] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:10 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff3d) 07:23:10 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xdc, 0x0, 0x0, 0x0, 0xe) 07:23:10 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x0, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:10 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xdd, 0x0, 0x0, 0x0, 0xe) 07:23:10 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[0x0]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:10 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:10 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xde, 0x0, 0x0, 0x0, 0xe) 07:23:10 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) close(0xffffffffffffffff) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0xfdef}]) io_pgetevents(0x0, 0x40e, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x0, 0x3938700}, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) r6 = gettid() tkill(r6, 0x7) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={r6, r8}, 0xc) 07:23:11 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[0x0]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:11 executing program 0 (fault-call:6 fault-nth:32): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:11 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xdf, 0x0, 0x0, 0x0, 0xe) 07:23:11 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[0x0]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 511.244537][T31886] FAULT_INJECTION: forcing a failure. [ 511.244537][T31886] name failslab, interval 1, probability 0, space 0, times 0 [ 511.257240][T31886] CPU: 0 PID: 31886 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 511.266227][T31886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.276918][T31886] Call Trace: [ 511.280195][T31886] dump_stack_lvl+0xb7/0x103 [ 511.285028][T31886] dump_stack+0x11/0x1a [ 511.289272][T31886] should_fail+0x23c/0x250 [ 511.293861][T31886] __should_failslab+0x81/0x90 [ 511.298714][T31886] ? io_arm_poll_handler+0x277/0x6e0 [ 511.304165][T31886] should_failslab+0x5/0x20 [ 511.308670][T31886] kmem_cache_alloc_trace+0x49/0x310 [ 511.313978][T31886] io_arm_poll_handler+0x277/0x6e0 [ 511.319154][T31886] ? io_sqe_buffer_register+0xb90/0xb90 [ 511.325005][T31886] __io_queue_sqe+0x135/0x360 [ 511.329670][T31886] io_submit_sqe+0x1695/0x3400 [ 511.334520][T31886] ? kmem_cache_alloc_bulk+0x289/0x340 [ 511.341068][T31886] io_submit_sqes+0x822/0xe50 [ 511.346099][T31886] __se_sys_io_uring_enter+0x1c7/0xa20 [ 511.351608][T31886] ? __fget_light+0x21b/0x260 [ 511.356301][T31886] ? fput+0x2d/0x130 [ 511.360387][T31886] __x64_sys_io_uring_enter+0x74/0x80 [ 511.366246][T31886] do_syscall_64+0x3d/0x90 [ 511.370764][T31886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 511.376747][T31886] RIP: 0033:0x4665e9 [ 511.380721][T31886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 511.401810][T31886] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 511.410414][T31886] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 511.418590][T31886] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 511.427535][T31886] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 511.436312][T31886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.445827][T31886] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:11 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff3e) 07:23:11 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xe0, 0x0, 0x0, 0x0, 0xe) 07:23:11 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:11 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:11 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xe1, 0x0, 0x0, 0x0, 0xe) 07:23:11 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:11 executing program 0 (fault-call:6 fault-nth:33): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:11 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_io_uring_setup(0x4d62, &(0x7f0000000000)={0x0, 0xed2a, 0x8, 0x1, 0x31a, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000008, 0x4010, r0, 0x10000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r6, 0x0, r7}, 0x1) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfffe, r2, &(0x7f00000002c0)="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"/298, 0x12a, 0x7}]) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:11 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xe2, 0x0, 0x0, 0x0, 0xe) 07:23:11 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 512.028065][T31914] FAULT_INJECTION: forcing a failure. [ 512.028065][T31914] name failslab, interval 1, probability 0, space 0, times 0 [ 512.041067][T31914] CPU: 0 PID: 31914 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 512.051072][T31914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.061301][T31914] Call Trace: [ 512.064662][T31914] dump_stack_lvl+0xb7/0x103 [ 512.069258][T31914] dump_stack+0x11/0x1a [ 512.073484][T31914] should_fail+0x23c/0x250 [ 512.077911][T31914] __should_failslab+0x81/0x90 [ 512.082777][T31914] should_failslab+0x5/0x20 [ 512.088279][T31914] kmem_cache_alloc_node+0x58/0x2b0 [ 512.093541][T31914] ? __alloc_skb+0xed/0x420 [ 512.098658][T31914] __alloc_skb+0xed/0x420 [ 512.103261][T31914] alloc_skb_with_frags+0x90/0x390 [ 512.109067][T31914] ? unix_write_space+0x128/0x130 [ 512.114474][T31914] ? __kfree_skb+0xfe/0x150 [ 512.119067][T31914] sock_alloc_send_pskb+0x436/0x4e0 [ 512.124672][T31914] unix_dgram_sendmsg+0x478/0x1600 [ 512.130589][T31914] ? selinux_socket_sendmsg+0x7e/0x140 [ 512.136584][T31914] ? unix_dgram_poll+0x3e0/0x3e0 [ 512.141737][T31914] sock_sendmsg+0x75/0xa0 [ 512.146779][T31914] io_issue_sqe+0x1f4f/0x64b0 [ 512.152152][T31914] ? __list_add_valid+0x28/0x90 [ 512.157619][T31914] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 512.163441][T31914] ? __io_queue_proc+0xa7/0x2b0 [ 512.168311][T31914] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 512.174390][T31914] ? unix_dgram_connect+0x840/0x840 [ 512.179599][T31914] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 512.185086][T31914] ? io_arm_poll_handler+0x55c/0x6e0 [ 512.190400][T31914] ? io_sqe_buffer_register+0xb90/0xb90 [ 512.195986][T31914] __io_queue_sqe+0xe7/0x360 [ 512.200659][T31914] io_submit_sqe+0x1695/0x3400 [ 512.205450][T31914] ? kmem_cache_alloc_bulk+0x289/0x340 [ 512.210918][T31914] io_submit_sqes+0x822/0xe50 [ 512.215601][T31914] __se_sys_io_uring_enter+0x1c7/0xa20 [ 512.221061][T31914] ? __fget_light+0x21b/0x260 [ 512.225828][T31914] ? fput+0x2d/0x130 [ 512.229725][T31914] __x64_sys_io_uring_enter+0x74/0x80 [ 512.235103][T31914] do_syscall_64+0x3d/0x90 [ 512.239619][T31914] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 512.245937][T31914] RIP: 0033:0x4665e9 [ 512.249822][T31914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 512.269937][T31914] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 07:23:12 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xe3, 0x0, 0x0, 0x0, 0xe) [ 512.278351][T31914] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 512.286554][T31914] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 512.294539][T31914] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 512.302602][T31914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.311017][T31914] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:12 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:12 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff41) 07:23:12 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x30000033fe0, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x30000033fe0, 0x0) r9 = accept4(r2, &(0x7f0000000900)=@phonet, &(0x7f0000000980)=0x80, 0x800) io_submit(0x0, 0x7, &(0x7f0000000bc0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x928, 0xffffffffffffffff, &(0x7f0000000440)="357a37c5e43df20a8c5f5ecce3c6ed35ed86184bac1951358dae22820968aeee46e009a7086b4e4d6edbe6531bfecef2519ab6707603601ae8f99f1215182b7433ce4d2c94df4029edd8ea5e44a77736679195cb404202929dcdab31733bd7581ea2a3e0b809d408c79359fa4eef7b67f3dd73e2bf35cdbf89f8947858f20b24686cf14e5d8a8daaeda26ab8649d47daff8b1993312ea72f82c97be0b2909e6548d1b4721995c588ad20ce966d072c764807fc86405b19bca34fca63ed6fa81e9acb103d4f91241257703532b584c38695f0", 0xd2, 0x4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0xf81, r2, &(0x7f0000000240)="8dbaf97cc21f8d9eaaf2b56bbf781d4f6acedd3457143a83acbee89a3f63843c2f94c58c4766e6164b20f94d7e6281f02bce4556809f3dc914881b75a7f0f3e094a6a5401f588e5f72330a551f6dbcdfcd9119d63b760dca7e61c3e259dce108af4e7d813fc9fb43f3ee39254eee85a0cf", 0x71, 0x7, 0x0, 0x2, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x20, r6, &(0x7f0000000d00)="37251c9978a1d93d33d66a9e5ab3259f5e33aed4b9f9ea77496f0b2dcb2459827a6e5895f2f8a8e4c4b481dd16dd6c103190d16668d88109ae471e548885da248371cda013ddb24f9097b2a24ab61b5ac32e6e11bd476652c4379fbcde51d6d29c0d3fb192bc7e986ad7792f34d4b449bdf23dcd96c56210cd2dda68b20fab064f4103e34bd100b690ee0458e5d983caa81caf4a83cf2d3e3c9da95b179ddf3f6f9c5e8a52be54dc30894884536504b22861ca8464ad169abb389a9b35d385d9b0b28d700cb0dfc2f50c4fa533857e3961afd971264303707eb2a0aabe47a7e9fdaf7cfb9b910b8ef30176025898de31a9163370eb43dc053134f3ac2f1bfb22b1744236cdeb26f3346f653553c9fc2616111ae783f00f30d9f9a5d95f159ad206b711d6c89cc155bfba4acbba", 0x12d, 0x0, 0x0, 0x3, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0xfba, r8, &(0x7f0000000c00)="121f29347ed0e9ae69e2fae25451e4c186a49f42bd1aef2724cb53df4a7cbd65b18fcef7c195891873866cb21aacf52c815214138197f1ef18ca02ccd0653b7b859fa4a4bca8558a65b57f7c41e1ad448076f31bb1611a14d88fbbe96c26c998f1cfcf4161b70606cc7bde0bc76d8a286494b40e50a53b6ae07773666446e74ffd2f20dae2a3a13c30d091248f8f6bd84a5f62ff550fcc5c40c2235b072c844592fb3d740bac023484e3023f94999288f7cd667f7c4571741d048a8c42ab8493d062314adc35dd08f9", 0xc9, 0x8, 0x0, 0x1, r0}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0x7d, r4, &(0x7f00000007c0)="e983653a7a55e055576a3f060029f7a6f2345701e9c450cb398649d27041372bf07e1bc8bab9b5b712c348e6c1251aab5621a31aed0135981de2f222864aaeb25c459c148bb6fb36f64a44ad7c15b95d0c5f384110016c76f4e349bf7212957d602bb4e776f582587990c38bd21376b1e13599c0e0333944923b3dffd8f3252d5c61b79b1fb8511ed401c8ff23e9637e0e4ea778b7104c44b34056b10da0a16ab0934d4681a00f3cbbcea3a3787713bbed7c15074681db5f95c5902843833c78d9b76ff92f7eacb6d1aba4753263cba1e6bc0304e091e009bf5d7511187ea8cb2343495e46f49b27914d7c1e53ea593c084f", 0xf2, 0x3, 0x0, 0x0, r4}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x81, r9, &(0x7f00000009c0)="1d115e41073255b3c921847270fd2ae5d118fc32ddcd49622c2f6e9fc494d6e1944d4002fd2b8cc9c871848b9cb5352c4d7e2dfbde9f910a16f473df987aafeca898d9da7d159adf6c3b8c12f7a4fc2426247c030f36d854d309d12aec856c90cf237739d9d5024bbe3b9d0732a97f4a2aad17ca8b815e7f4b5ebb1ba695d36da6374a23f014c13ca1c602f04275bc411fc84a43b49e809cb6c5083586cb40f41bcc3dc04d4491a2040654644a1ab66be37c77d21cbb1fcd65748b72155844ddf37978040f154fbb5df4f9aa400ede2c7f1107283ca5c4d1e77dc5d3bf216f0cebe7b10cedd52c6822e807a6f8429459bd29", 0xf2, 0x1ff, 0x0, 0x3, r2}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f00000005c0)="8b987a02f0a8bdcfb797a46a7369080f3e41219a4e6afa8b13b33e6de56d46a15d1cd6d46c4107a41dc121c85b49db68efbc751fee6f33098f0f26deae2c94508d73358f5afef5296bbb8386288d4890c1df1748aac7b2c2921ef0e7948826237cb6", 0x62, 0xce3, 0x0, 0x2, r2}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe5) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:12 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xe4, 0x0, 0x0, 0x0, 0xe) 07:23:12 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2d173d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c6516200000000000002006b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:12 executing program 0 (fault-call:6 fault-nth:34): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 512.745803][T31950] FAULT_INJECTION: forcing a failure. [ 512.745803][T31950] name failslab, interval 1, probability 0, space 0, times 0 [ 512.758999][T31950] CPU: 1 PID: 31950 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 512.768937][T31950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.779800][T31950] Call Trace: [ 512.783343][T31950] dump_stack_lvl+0xb7/0x103 [ 512.788042][T31950] dump_stack+0x11/0x1a [ 512.792182][T31950] should_fail+0x23c/0x250 [ 512.796595][T31950] __should_failslab+0x81/0x90 [ 512.801350][T31950] should_failslab+0x5/0x20 [ 512.806199][T31950] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 512.812228][T31950] ? __kmalloc_node_track_caller+0x30/0x40 [ 512.819793][T31950] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 512.825351][T31950] __kmalloc_node_track_caller+0x30/0x40 [ 512.831153][T31950] ? alloc_skb_with_frags+0x90/0x390 [ 512.836428][T31950] __alloc_skb+0x187/0x420 [ 512.840941][T31950] alloc_skb_with_frags+0x90/0x390 [ 512.847124][T31950] ? unix_write_space+0x128/0x130 [ 512.852139][T31950] ? __kfree_skb+0xfe/0x150 [ 512.856662][T31950] sock_alloc_send_pskb+0x436/0x4e0 [ 512.861851][T31950] unix_dgram_sendmsg+0x478/0x1600 [ 512.866952][T31950] ? selinux_socket_sendmsg+0x7e/0x140 [ 512.872391][T31950] ? unix_dgram_poll+0x3e0/0x3e0 [ 512.877393][T31950] sock_sendmsg+0x75/0xa0 [ 512.881792][T31950] io_issue_sqe+0x1f4f/0x64b0 [ 512.886498][T31950] ? __list_add_valid+0x28/0x90 [ 512.891447][T31950] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 512.897377][T31950] ? __io_queue_proc+0xa7/0x2b0 [ 512.902374][T31950] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 512.908103][T31950] ? unix_dgram_connect+0x840/0x840 [ 512.913351][T31950] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 512.918806][T31950] ? io_arm_poll_handler+0x55c/0x6e0 [ 512.924087][T31950] ? io_sqe_buffer_register+0xb90/0xb90 [ 512.929635][T31950] __io_queue_sqe+0xe7/0x360 [ 512.934336][T31950] io_submit_sqe+0x1695/0x3400 [ 512.939204][T31950] ? kmem_cache_alloc_bulk+0x289/0x340 [ 512.944965][T31950] io_submit_sqes+0x822/0xe50 [ 512.949626][T31950] __se_sys_io_uring_enter+0x1c7/0xa20 [ 512.955060][T31950] ? __fget_light+0x21b/0x260 [ 512.959713][T31950] ? fput+0x2d/0x130 [ 512.963928][T31950] __x64_sys_io_uring_enter+0x74/0x80 [ 512.969307][T31950] do_syscall_64+0x3d/0x90 [ 512.973725][T31950] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 512.979726][T31950] RIP: 0033:0x4665e9 [ 512.983801][T31950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 513.004389][T31950] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 513.012782][T31950] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 513.020744][T31950] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 513.028705][T31950] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 513.036678][T31950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.044675][T31950] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:13 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:13 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xe5, 0x0, 0x0, 0x0, 0xe) 07:23:13 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1c, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:13 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x401, 0x30) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) sendfile(r0, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:13 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xe6, 0x0, 0x0, 0x0, 0xe) 07:23:13 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:13 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xe7, 0x0, 0x0, 0x0, 0xe) 07:23:13 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff42) 07:23:13 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xe8, 0x0, 0x0, 0x0, 0xe) 07:23:13 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:13 executing program 0 (fault-call:6 fault-nth:35): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 513.739333][T32031] FAULT_INJECTION: forcing a failure. [ 513.739333][T32031] name failslab, interval 1, probability 0, space 0, times 0 [ 513.752983][T32031] CPU: 0 PID: 32031 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 513.761770][T32031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.771830][T32031] Call Trace: [ 513.775105][T32031] dump_stack_lvl+0xb7/0x103 [ 513.779698][T32031] dump_stack+0x11/0x1a [ 513.783944][T32031] should_fail+0x23c/0x250 [ 513.788452][T32031] __should_failslab+0x81/0x90 [ 513.793208][T32031] ? io_arm_poll_handler+0x277/0x6e0 [ 513.798494][T32031] should_failslab+0x5/0x20 [ 513.803027][T32031] kmem_cache_alloc_trace+0x49/0x310 [ 513.808415][T32031] io_arm_poll_handler+0x277/0x6e0 [ 513.813679][T32031] ? io_sqe_buffer_register+0xb90/0xb90 [ 513.819495][T32031] __io_queue_sqe+0x135/0x360 [ 513.824390][T32031] io_submit_sqe+0x1695/0x3400 [ 513.829632][T32031] ? kmem_cache_alloc_bulk+0x289/0x340 07:23:13 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xe9, 0x0, 0x0, 0x0, 0xe) [ 513.835207][T32031] io_submit_sqes+0x822/0xe50 [ 513.840124][T32031] __se_sys_io_uring_enter+0x1c7/0xa20 [ 513.845684][T32031] ? __fget_light+0x21b/0x260 [ 513.850378][T32031] ? fput+0x2d/0x130 [ 513.854276][T32031] __x64_sys_io_uring_enter+0x74/0x80 [ 513.859824][T32031] do_syscall_64+0x3d/0x90 [ 513.864240][T32031] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 513.870144][T32031] RIP: 0033:0x4665e9 [ 513.874160][T32031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 513.893853][T32031] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 513.902267][T32031] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 513.910681][T32031] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 513.918656][T32031] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 513.926631][T32031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.934597][T32031] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:14 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:14 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:14 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xea, 0x0, 0x0, 0x0, 0xe) 07:23:14 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x91) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:14 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:14 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xeb, 0x0, 0x0, 0x0, 0xe) 07:23:14 executing program 0 (fault-call:6 fault-nth:36): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 514.390506][T32075] FAULT_INJECTION: forcing a failure. [ 514.390506][T32075] name failslab, interval 1, probability 0, space 0, times 0 [ 514.403391][T32075] CPU: 0 PID: 32075 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 514.412445][T32075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.422580][T32075] Call Trace: [ 514.425864][T32075] dump_stack_lvl+0xb7/0x103 [ 514.431236][T32075] dump_stack+0x11/0x1a [ 514.435485][T32075] should_fail+0x23c/0x250 [ 514.439997][T32075] __should_failslab+0x81/0x90 [ 514.444899][T32075] should_failslab+0x5/0x20 [ 514.449423][T32075] kmem_cache_alloc_node+0x58/0x2b0 [ 514.454743][T32075] ? __alloc_skb+0xed/0x420 [ 514.459244][T32075] __alloc_skb+0xed/0x420 [ 514.464170][T32075] alloc_skb_with_frags+0x90/0x390 [ 514.469414][T32075] ? unix_write_space+0x128/0x130 [ 514.474642][T32075] ? __kfree_skb+0xfe/0x150 [ 514.479236][T32075] sock_alloc_send_pskb+0x436/0x4e0 [ 514.485395][T32075] unix_dgram_sendmsg+0x478/0x1600 [ 514.490961][T32075] ? selinux_socket_sendmsg+0x7e/0x140 [ 514.496951][T32075] ? unix_dgram_poll+0x3e0/0x3e0 [ 514.502264][T32075] sock_sendmsg+0x75/0xa0 [ 514.507009][T32075] io_issue_sqe+0x1f4f/0x64b0 [ 514.511709][T32075] ? __list_add_valid+0x28/0x90 [ 514.516562][T32075] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 514.522419][T32075] ? __io_queue_proc+0xa7/0x2b0 [ 514.527413][T32075] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 514.533669][T32075] ? unix_dgram_connect+0x840/0x840 [ 514.539414][T32075] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 514.545410][T32075] ? io_arm_poll_handler+0x55c/0x6e0 [ 514.550891][T32075] ? io_sqe_buffer_register+0xb90/0xb90 [ 514.556530][T32075] __io_queue_sqe+0xe7/0x360 [ 514.561332][T32075] io_submit_sqe+0x1695/0x3400 [ 514.566464][T32075] ? kmem_cache_alloc_bulk+0x289/0x340 [ 514.572026][T32075] io_submit_sqes+0x822/0xe50 [ 514.576794][T32075] __se_sys_io_uring_enter+0x1c7/0xa20 [ 514.582391][T32075] ? __fget_light+0x21b/0x260 [ 514.587240][T32075] ? fput+0x2d/0x130 [ 514.591215][T32075] __x64_sys_io_uring_enter+0x74/0x80 [ 514.596789][T32075] do_syscall_64+0x3d/0x90 [ 514.601773][T32075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 514.608399][T32075] RIP: 0033:0x4665e9 [ 514.612295][T32075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 514.632299][T32075] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 514.640949][T32075] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 514.649946][T32075] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 514.658939][T32075] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 514.667058][T32075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 514.675060][T32075] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:14 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff43) 07:23:14 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xec, 0x0, 0x0, 0x0, 0xe) 07:23:14 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:14 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xed, 0x0, 0x0, 0x0, 0xe) 07:23:14 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:15 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) pipe(&(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:15 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb76297535e52f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b72", 0x95, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:15 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xee, 0x0, 0x0, 0x0, 0xe) 07:23:15 executing program 0 (fault-call:6 fault-nth:37): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:15 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[], 0x1000000c8) write$binfmt_elf64(r3, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x7, 0x7, 0x4, 0x3, 0x3, 0x3e, 0xf, 0x383, 0x40, 0x2ee, 0x2, 0x4ffb, 0x38, 0x2, 0x2, 0x400, 0x7}, [{0x60000000, 0x1, 0x5, 0x1f, 0x0, 0x80, 0x5, 0x40}], "895fc216baab6cc3897b1ee27f7e19cd34b0b9f8bd2de979d9ca9d6eba12e5f5858ebdfb7328d6dd9ef52c252119f44d9b8ca608d8ed92431bb6cac7b2738a25fdaf20ec9f6369589542485eb145c0610248a42708cee7d8eb302dec79bdae8cd752ac2c8b5c3f", ['\x00']}, 0x1df) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0xec, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x200448c4}, 0x4004014) r7 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) 07:23:15 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xef, 0x0, 0x0, 0x0, 0xe) [ 515.222218][T32121] FAULT_INJECTION: forcing a failure. [ 515.222218][T32121] name failslab, interval 1, probability 0, space 0, times 0 [ 515.235316][T32121] CPU: 0 PID: 32121 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 515.244125][T32121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.254186][T32121] Call Trace: [ 515.257459][T32121] dump_stack_lvl+0xb7/0x103 [ 515.262130][T32121] dump_stack+0x11/0x1a [ 515.266422][T32121] should_fail+0x23c/0x250 [ 515.270917][T32121] __should_failslab+0x81/0x90 [ 515.275993][T32121] should_failslab+0x5/0x20 [ 515.280582][T32121] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 515.286321][T32121] ? __kmalloc_node_track_caller+0x30/0x40 [ 515.292217][T32121] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 515.297749][T32121] __kmalloc_node_track_caller+0x30/0x40 [ 515.304009][T32121] ? alloc_skb_with_frags+0x90/0x390 [ 515.309675][T32121] __alloc_skb+0x187/0x420 [ 515.314254][T32121] alloc_skb_with_frags+0x90/0x390 07:23:15 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 515.319615][T32121] ? unix_write_space+0x128/0x130 [ 515.324706][T32121] ? __kfree_skb+0xfe/0x150 [ 515.329771][T32121] sock_alloc_send_pskb+0x436/0x4e0 [ 515.335257][T32121] unix_dgram_sendmsg+0x478/0x1600 [ 515.340377][T32121] ? selinux_socket_sendmsg+0x7e/0x140 [ 515.345880][T32121] ? unix_dgram_poll+0x3e0/0x3e0 [ 515.350915][T32121] sock_sendmsg+0x75/0xa0 [ 515.355290][T32121] io_issue_sqe+0x1f4f/0x64b0 [ 515.360147][T32121] ? __list_add_valid+0x28/0x90 [ 515.365088][T32121] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 515.370998][T32121] ? __io_queue_proc+0xa7/0x2b0 [ 515.375849][T32121] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 515.381482][T32121] ? unix_dgram_connect+0x840/0x840 [ 515.386748][T32121] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 515.392215][T32121] ? io_arm_poll_handler+0x55c/0x6e0 [ 515.397562][T32121] ? io_sqe_buffer_register+0xb90/0xb90 [ 515.403117][T32121] __io_queue_sqe+0xe7/0x360 [ 515.407710][T32121] io_submit_sqe+0x1695/0x3400 [ 515.412557][T32121] ? kmem_cache_alloc_bulk+0x289/0x340 [ 515.418100][T32121] io_submit_sqes+0x822/0xe50 [ 515.422813][T32121] __se_sys_io_uring_enter+0x1c7/0xa20 [ 515.428273][T32121] ? __fget_light+0x21b/0x260 [ 515.432959][T32121] ? fput+0x2d/0x130 [ 515.436876][T32121] __x64_sys_io_uring_enter+0x74/0x80 [ 515.442467][T32121] do_syscall_64+0x3d/0x90 [ 515.446889][T32121] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 515.452855][T32121] RIP: 0033:0x4665e9 [ 515.456833][T32121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 515.479488][T32121] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 515.490648][T32121] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 515.499427][T32121] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 515.508014][T32121] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 515.517311][T32121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.525453][T32121] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:15 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff44) 07:23:15 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xf0, 0x0, 0x0, 0x0, 0xe) 07:23:15 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:15 executing program 0 (fault-call:6 fault-nth:38): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 515.884040][T32167] FAULT_INJECTION: forcing a failure. [ 515.884040][T32167] name failslab, interval 1, probability 0, space 0, times 0 [ 515.897165][T32167] CPU: 1 PID: 32167 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 515.905933][T32167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.916225][T32167] Call Trace: [ 515.919716][T32167] dump_stack_lvl+0xb7/0x103 [ 515.925142][T32167] dump_stack+0x11/0x1a [ 515.929586][T32167] should_fail+0x23c/0x250 [ 515.934288][T32167] __should_failslab+0x81/0x90 [ 515.939084][T32167] ? io_arm_poll_handler+0x277/0x6e0 [ 515.944366][T32167] should_failslab+0x5/0x20 [ 515.948958][T32167] kmem_cache_alloc_trace+0x49/0x310 [ 515.954339][T32167] io_arm_poll_handler+0x277/0x6e0 [ 515.959660][T32167] ? io_sqe_buffer_register+0xb90/0xb90 [ 515.965201][T32167] __io_queue_sqe+0x135/0x360 [ 515.970220][T32167] io_submit_sqe+0x1695/0x3400 [ 515.975256][T32167] ? kmem_cache_alloc_bulk+0x289/0x340 [ 515.980902][T32167] io_submit_sqes+0x822/0xe50 [ 515.985675][T32167] __se_sys_io_uring_enter+0x1c7/0xa20 [ 515.991313][T32167] ? __fget_light+0x21b/0x260 [ 515.996400][T32167] ? fput+0x2d/0x130 [ 516.000303][T32167] __x64_sys_io_uring_enter+0x74/0x80 [ 516.005786][T32167] do_syscall_64+0x3d/0x90 [ 516.010238][T32167] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 516.016135][T32167] RIP: 0033:0x4665e9 07:23:15 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xf1, 0x0, 0x0, 0x0, 0xe) [ 516.020025][T32167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 516.039812][T32167] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 516.048675][T32167] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 516.056733][T32167] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 516.065024][T32167] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 516.073512][T32167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.081679][T32167] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:16 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) pipe(&(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:16 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xf2, 0x0, 0x0, 0x0, 0xe) 07:23:16 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:16 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x163046, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[], 0x1000000c8) sendfile(r3, r0, &(0x7f0000000000)=0x7f, 0x7fd) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) io_destroy(r4) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:16 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xf3, 0x0, 0x0, 0x0, 0xe) 07:23:16 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xf4, 0x0, 0x0, 0x0, 0xe) 07:23:16 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa5", 0x4b, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:16 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff45) 07:23:16 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xf5, 0x0, 0x0, 0x0, 0xe) 07:23:16 executing program 0 (fault-call:6 fault-nth:39): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:16 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 516.838498][T32225] FAULT_INJECTION: forcing a failure. [ 516.838498][T32225] name failslab, interval 1, probability 0, space 0, times 0 [ 516.851476][T32225] CPU: 0 PID: 32225 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 516.860956][T32225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.871373][T32225] Call Trace: [ 516.874659][T32225] dump_stack_lvl+0xb7/0x103 [ 516.879426][T32225] dump_stack+0x11/0x1a [ 516.883616][T32225] should_fail+0x23c/0x250 [ 516.888019][T32225] __should_failslab+0x81/0x90 [ 516.893460][T32225] should_failslab+0x5/0x20 [ 516.898250][T32225] kmem_cache_alloc_bulk+0x40/0x340 [ 516.903449][T32225] io_submit_sqes+0x491/0xe50 [ 516.908396][T32225] __se_sys_io_uring_enter+0x1c7/0xa20 [ 516.914070][T32225] ? __fget_light+0x21b/0x260 [ 516.918928][T32225] ? fput+0x2d/0x130 [ 516.923084][T32225] __x64_sys_io_uring_enter+0x74/0x80 [ 516.928667][T32225] do_syscall_64+0x3d/0x90 [ 516.933182][T32225] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 516.939714][T32225] RIP: 0033:0x4665e9 [ 516.943696][T32225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 516.963839][T32225] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 516.973043][T32225] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 07:23:16 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xf6, 0x0, 0x0, 0x0, 0xe) [ 516.981109][T32225] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 516.989762][T32225] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 516.999497][T32225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 517.007777][T32225] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:17 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:17 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x30000033fe0, 0x0) ftruncate(0xffffffffffffffff, 0x6) close(r5) splice(r2, 0x0, r5, 0x0, 0x30000033fe2, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="09af67726574ef28921c1c58c54f167f", @ANYRES32=0x0, @ANYBLOB="0080008000008001000000054e1e00b800670000812f9078ac1e0101e00000028313b5ac1e0101ac141430ac1414bbac1414328309edd305e3198db54404af704424c123e000000100000002ac14141b000000057f000001000000010a01010200000004890b30ac1414aa7f000001441406f0000000050000000200000003000000cc442cfc0000000fa5000007ff000000090000800100000101000000090000002600000002000000080000000983131864010101ffffffffac1414347f0000010000"]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', r7, 0x4, 0x7, 0xa4, 0x2, 0x0, @local, @empty, 0x700, 0x8000, 0x9, 0xc95}}) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:17 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) pipe(&(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:17 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xf7, 0x0, 0x0, 0x0, 0xe) 07:23:17 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:17 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xf8, 0x0, 0x0, 0x0, 0xe) 07:23:17 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f", 0x26, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:17 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff46) 07:23:17 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xf9, 0x0, 0x0, 0x0, 0xe) 07:23:17 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c7742253cd8918ccd9a7434f", 0x26, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:17 executing program 0 (fault-call:6 fault-nth:40): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 517.930790][T32275] FAULT_INJECTION: forcing a failure. [ 517.930790][T32275] name failslab, interval 1, probability 0, space 0, times 0 [ 517.943871][T32275] CPU: 1 PID: 32275 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 517.952840][T32275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.963062][T32275] Call Trace: [ 517.966423][T32275] dump_stack_lvl+0xb7/0x103 [ 517.971418][T32275] dump_stack+0x11/0x1a [ 517.975675][T32275] should_fail+0x23c/0x250 [ 517.980105][T32275] __should_failslab+0x81/0x90 [ 517.984884][T32275] should_failslab+0x5/0x20 [ 517.989474][T32275] kmem_cache_alloc_node+0x58/0x2b0 [ 517.994728][T32275] ? __alloc_skb+0xed/0x420 [ 517.999315][T32275] __alloc_skb+0xed/0x420 [ 518.003742][T32275] alloc_skb_with_frags+0x90/0x390 [ 518.008872][T32275] ? unix_write_space+0x128/0x130 [ 518.013898][T32275] ? __kfree_skb+0xfe/0x150 [ 518.018560][T32275] sock_alloc_send_pskb+0x436/0x4e0 [ 518.023857][T32275] unix_dgram_sendmsg+0x478/0x1600 [ 518.028974][T32275] ? selinux_socket_sendmsg+0x7e/0x140 [ 518.034606][T32275] ? unix_dgram_poll+0x3e0/0x3e0 [ 518.039644][T32275] sock_sendmsg+0x75/0xa0 [ 518.044189][T32275] io_issue_sqe+0x1f4f/0x64b0 [ 518.048873][T32275] ? __list_add_valid+0x28/0x90 [ 518.053940][T32275] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 518.060178][T32275] ? __io_queue_proc+0xa7/0x2b0 [ 518.065122][T32275] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 518.070777][T32275] ? unix_dgram_connect+0x840/0x840 [ 518.077610][T32275] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 518.083158][T32275] ? io_arm_poll_handler+0x55c/0x6e0 [ 518.089018][T32275] ? io_sqe_buffer_register+0xb90/0xb90 [ 518.095222][T32275] __io_queue_sqe+0xe7/0x360 [ 518.099843][T32275] io_submit_sqe+0x1695/0x3400 [ 518.105127][T32275] ? kmem_cache_alloc_bulk+0x289/0x340 [ 518.113945][T32275] io_submit_sqes+0x822/0xe50 [ 518.118726][T32275] __se_sys_io_uring_enter+0x1c7/0xa20 [ 518.125068][T32275] ? __fget_light+0x21b/0x260 07:23:18 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xfa, 0x0, 0x0, 0x0, 0xe) [ 518.130088][T32275] ? fput+0x2d/0x130 [ 518.134273][T32275] __x64_sys_io_uring_enter+0x74/0x80 [ 518.140040][T32275] do_syscall_64+0x3d/0x90 [ 518.144575][T32275] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 518.150548][T32275] RIP: 0033:0x4665e9 [ 518.154442][T32275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:23:18 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xfb, 0x0, 0x0, 0x0, 0xe) [ 518.174768][T32275] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 518.183372][T32275] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 518.191348][T32275] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 518.200108][T32275] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 518.209237][T32275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.217595][T32275] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:18 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r1, r0, &(0x7f0000000000)=0x5, 0x80) 07:23:18 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xfc, 0x0, 0x0, 0x0, 0xe) 07:23:18 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:18 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:18 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xfd, 0x0, 0x0, 0x0, 0xe) 07:23:18 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:18 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff47) 07:23:18 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0xfe, 0x0, 0x0, 0x0, 0xe) 07:23:18 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:18 executing program 0 (fault-call:6 fault-nth:41): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:18 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x102, 0x0, 0x0, 0x0, 0xe) [ 518.857931][T32375] FAULT_INJECTION: forcing a failure. [ 518.857931][T32375] name failslab, interval 1, probability 0, space 0, times 0 [ 518.871862][T32375] CPU: 1 PID: 32375 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 518.881384][T32375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.891650][T32375] Call Trace: [ 518.894964][T32375] dump_stack_lvl+0xb7/0x103 [ 518.899852][T32375] dump_stack+0x11/0x1a 07:23:18 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x103, 0x0, 0x0, 0x0, 0xe) [ 518.904104][T32375] should_fail+0x23c/0x250 [ 518.908699][T32375] __should_failslab+0x81/0x90 [ 518.913638][T32375] should_failslab+0x5/0x20 [ 518.918149][T32375] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 518.924073][T32375] ? __kmalloc_node_track_caller+0x30/0x40 [ 518.929978][T32375] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 518.935649][T32375] __kmalloc_node_track_caller+0x30/0x40 [ 518.941813][T32375] ? alloc_skb_with_frags+0x90/0x390 [ 518.947106][T32375] __alloc_skb+0x187/0x420 [ 518.951545][T32375] alloc_skb_with_frags+0x90/0x390 [ 518.956669][T32375] ? unix_write_space+0x128/0x130 [ 518.962097][T32375] ? __kfree_skb+0xfe/0x150 [ 518.966943][T32375] sock_alloc_send_pskb+0x436/0x4e0 [ 518.972309][T32375] unix_dgram_sendmsg+0x478/0x1600 [ 518.977678][T32375] ? selinux_socket_sendmsg+0x7e/0x140 [ 518.983493][T32375] ? unix_dgram_poll+0x3e0/0x3e0 [ 518.988928][T32375] sock_sendmsg+0x75/0xa0 [ 518.993332][T32375] io_issue_sqe+0x1f4f/0x64b0 [ 518.998120][T32375] ? __list_add_valid+0x28/0x90 [ 519.003484][T32375] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 519.009473][T32375] ? __io_queue_proc+0xa7/0x2b0 [ 519.014674][T32375] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 519.020856][T32375] ? unix_dgram_connect+0x840/0x840 [ 519.026149][T32375] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 519.031889][T32375] ? io_arm_poll_handler+0x55c/0x6e0 [ 519.037167][T32375] ? io_sqe_buffer_register+0xb90/0xb90 [ 519.042929][T32375] __io_queue_sqe+0xe7/0x360 [ 519.049159][T32375] io_submit_sqe+0x1695/0x3400 [ 519.054367][T32375] ? kmem_cache_alloc_bulk+0x289/0x340 [ 519.060021][T32375] io_submit_sqes+0x822/0xe50 [ 519.065361][T32375] __se_sys_io_uring_enter+0x1c7/0xa20 [ 519.071282][T32375] ? __fget_light+0x21b/0x260 [ 519.076464][T32375] ? fput+0x2d/0x130 [ 519.080434][T32375] __x64_sys_io_uring_enter+0x74/0x80 [ 519.085844][T32375] do_syscall_64+0x3d/0x90 [ 519.090264][T32375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 519.096145][T32375] RIP: 0033:0x4665e9 [ 519.100040][T32375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.119881][T32375] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 519.128318][T32375] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 519.136298][T32375] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 519.144607][T32375] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 519.153352][T32375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.161318][T32375] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:19 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x5, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:19 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x104, 0x0, 0x0, 0x0, 0xe) 07:23:19 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea8", 0x14, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:19 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:19 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x105, 0x0, 0x0, 0x0, 0xe) 07:23:19 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea8", 0x14, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:19 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x106, 0x0, 0x0, 0x0, 0xe) 07:23:19 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x80000, 0x1) recvmmsg(r4, &(0x7f0000000700)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000600)=""/255, 0xff}], 0x6, &(0x7f0000001800)=""/157, 0x9d}, 0x6}], 0x1, 0x40000000, &(0x7f00000018c0)={0x77359400}) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:19 executing program 0 (fault-call:6 fault-nth:42): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:19 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff48) 07:23:19 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea8", 0x14, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:19 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x107, 0x0, 0x0, 0x0, 0xe) [ 519.820909][T32468] FAULT_INJECTION: forcing a failure. [ 519.820909][T32468] name failslab, interval 1, probability 0, space 0, times 0 [ 519.835306][T32468] CPU: 1 PID: 32468 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 519.844459][T32468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.854531][T32468] Call Trace: [ 519.857809][T32468] dump_stack_lvl+0xb7/0x103 [ 519.862409][T32468] dump_stack+0x11/0x1a 07:23:19 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x108, 0x0, 0x0, 0x0, 0xe) [ 519.866876][T32468] should_fail+0x23c/0x250 [ 519.871506][T32468] __should_failslab+0x81/0x90 [ 519.876735][T32468] ? io_arm_poll_handler+0x277/0x6e0 [ 519.882410][T32468] should_failslab+0x5/0x20 [ 519.887087][T32468] kmem_cache_alloc_trace+0x49/0x310 [ 519.892537][T32468] io_arm_poll_handler+0x277/0x6e0 [ 519.897908][T32468] ? io_sqe_buffer_register+0xb90/0xb90 [ 519.904159][T32468] __io_queue_sqe+0x135/0x360 [ 519.909204][T32468] io_submit_sqe+0x1695/0x3400 [ 519.914662][T32468] ? kmem_cache_alloc_bulk+0x289/0x340 07:23:19 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x109, 0x0, 0x0, 0x0, 0xe) 07:23:19 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x10a, 0x0, 0x0, 0x0, 0xe) [ 519.920214][T32468] io_submit_sqes+0x822/0xe50 [ 519.924985][T32468] __se_sys_io_uring_enter+0x1c7/0xa20 [ 519.930454][T32468] ? __fget_light+0x21b/0x260 [ 519.935126][T32468] ? fput+0x2d/0x130 [ 519.939023][T32468] __x64_sys_io_uring_enter+0x74/0x80 [ 519.944582][T32468] do_syscall_64+0x3d/0x90 [ 519.949004][T32468] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 519.954929][T32468] RIP: 0033:0x4665e9 [ 519.958812][T32468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.978531][T32468] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 519.986943][T32468] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 519.995788][T32468] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 520.003839][T32468] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 520.011832][T32468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 520.020036][T32468] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:20 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:20 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x10b, 0x0, 0x0, 0x0, 0xe) 07:23:20 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da45", 0x2, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:20 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000780)={{r5}, 0x0, 0x12, @inherit={0x78, &(0x7f0000000000)={0x0, 0x6, 0xfffffffffffffff7, 0x5, {0x20, 0x8e6, 0x1ff, 0x0, 0xffffffff80000001}, [0x6, 0x10001, 0x6, 0xeb, 0x5, 0x4]}}, @devid}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:20 executing program 0 (fault-call:6 fault-nth:43): r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) [ 520.397854][T32517] FAULT_INJECTION: forcing a failure. [ 520.397854][T32517] name failslab, interval 1, probability 0, space 0, times 0 [ 520.413362][T32517] CPU: 0 PID: 32517 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0 [ 520.424856][T32517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.437461][T32517] Call Trace: [ 520.441782][T32517] dump_stack_lvl+0xb7/0x103 [ 520.447431][T32517] dump_stack+0x11/0x1a [ 520.451594][T32517] should_fail+0x23c/0x250 [ 520.456122][T32517] __should_failslab+0x81/0x90 [ 520.461059][T32517] should_failslab+0x5/0x20 [ 520.465567][T32517] kmem_cache_alloc_node+0x58/0x2b0 [ 520.471042][T32517] ? __alloc_skb+0xed/0x420 [ 520.475572][T32517] __alloc_skb+0xed/0x420 [ 520.480234][T32517] alloc_skb_with_frags+0x90/0x390 [ 520.485466][T32517] ? unix_write_space+0x128/0x130 [ 520.490659][T32517] ? __kfree_skb+0xfe/0x150 [ 520.495165][T32517] sock_alloc_send_pskb+0x436/0x4e0 [ 520.500573][T32517] unix_dgram_sendmsg+0x478/0x1600 [ 520.505777][T32517] ? selinux_socket_sendmsg+0x7e/0x140 [ 520.511458][T32517] ? unix_dgram_poll+0x3e0/0x3e0 [ 520.517148][T32517] sock_sendmsg+0x75/0xa0 [ 520.522032][T32517] io_issue_sqe+0x1f4f/0x64b0 [ 520.527818][T32517] ? __list_add_valid+0x28/0x90 [ 520.533844][T32517] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 520.540373][T32517] ? __io_queue_proc+0xa7/0x2b0 [ 520.545719][T32517] ? unix_dgram_peer_wake_me+0x1f5/0x310 [ 520.551456][T32517] ? unix_dgram_connect+0x840/0x840 [ 520.556844][T32517] ? __io_arm_poll_handler+0x3b3/0x5c0 [ 520.562500][T32517] ? io_arm_poll_handler+0x55c/0x6e0 [ 520.568079][T32517] ? io_sqe_buffer_register+0xb90/0xb90 [ 520.573811][T32517] __io_queue_sqe+0xe7/0x360 [ 520.578595][T32517] io_submit_sqe+0x1695/0x3400 [ 520.583538][T32517] ? kmem_cache_alloc_bulk+0x289/0x340 [ 520.589012][T32517] io_submit_sqes+0x822/0xe50 07:23:20 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x10c, 0x0, 0x0, 0x0, 0xe) [ 520.593702][T32517] __se_sys_io_uring_enter+0x1c7/0xa20 [ 520.599149][T32517] ? __fget_light+0x21b/0x260 [ 520.603943][T32517] ? fput+0x2d/0x130 [ 520.608045][T32517] __x64_sys_io_uring_enter+0x74/0x80 [ 520.613892][T32517] do_syscall_64+0x3d/0x90 [ 520.618396][T32517] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 520.625545][T32517] RIP: 0033:0x4665e9 [ 520.630068][T32517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 520.651201][T32517] RSP: 002b:00007f4d7c280188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 520.659622][T32517] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 520.667594][T32517] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 520.675804][T32517] RBP: 00007f4d7c2801d0 R08: 0000000000000000 R09: 000000000000000e [ 520.684248][T32517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 520.692574][T32517] R13: 00007ffc9346906f R14: 00007f4d7c280300 R15: 0000000000022000 07:23:20 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff49) 07:23:20 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x10d, 0x0, 0x0, 0x0, 0xe) 07:23:20 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da45", 0x2, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:20 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x10e, 0x0, 0x0, 0x0, 0xe) [ 520.886692][T32525] ================================================================== [ 520.895274][T32525] BUG: KCSAN: data-race in __add_to_page_cache_locked / file_write_and_wait_range [ 520.905096][T32525] [ 520.907415][T32525] write to 0xffff88812fefcd60 of 8 bytes by task 32519 on cpu 1: [ 520.915300][T32525] __add_to_page_cache_locked+0x256/0x4b0 [ 520.921056][T32525] add_to_page_cache_lru+0xa0/0x1b0 [ 520.928848][T32525] page_cache_ra_unbounded+0x262/0x410 [ 520.937280][T32525] ondemand_readahead+0x579/0x7b0 [ 520.943229][T32525] page_cache_sync_ra+0xaf/0xe0 [ 520.948781][T32525] filemap_read+0x388/0x1220 [ 520.953946][T32525] generic_file_read_iter+0x75/0x2c0 [ 520.960029][T32525] ext4_file_read_iter+0x1db/0x290 [ 520.965166][T32525] generic_file_splice_read+0x22a/0x310 [ 520.970796][T32525] splice_direct_to_actor+0x2aa/0x650 [ 520.976180][T32525] do_splice_direct+0xf5/0x170 [ 520.980994][T32525] do_sendfile+0x773/0xda0 [ 520.985674][T32525] __x64_sys_sendfile64+0xf2/0x130 [ 520.990785][T32525] do_syscall_64+0x3d/0x90 [ 520.995518][T32525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 521.001432][T32525] [ 521.003855][T32525] read to 0xffff88812fefcd60 of 8 bytes by task 32525 on cpu 0: [ 521.011506][T32525] file_write_and_wait_range+0x48/0x210 [ 521.017061][T32525] ext4_sync_file+0x105/0x670 [ 521.021742][T32525] vfs_fsync_range+0x107/0x120 [ 521.026512][T32525] ext4_buffered_write_iter+0x39c/0x3f0 [ 521.032094][T32525] ext4_file_write_iter+0x2e7/0x11d0 [ 521.037675][T32525] do_iter_readv_writev+0x2cb/0x360 [ 521.042884][T32525] do_iter_write+0x112/0x4c0 [ 521.047488][T32525] vfs_iter_write+0x4c/0x70 [ 521.052116][T32525] iter_file_splice_write+0x40a/0x750 [ 521.057665][T32525] direct_splice_actor+0x80/0xa0 [ 521.062893][T32525] splice_direct_to_actor+0x345/0x650 [ 521.068890][T32525] do_splice_direct+0xf5/0x170 [ 521.073759][T32525] do_sendfile+0x773/0xda0 [ 521.079399][T32525] __x64_sys_sendfile64+0xa9/0x130 [ 521.084606][T32525] do_syscall_64+0x3d/0x90 [ 521.089301][T32525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 521.095550][T32525] [ 521.097864][T32525] value changed: 0x00000000000003bb -> 0x00000000000003c0 [ 521.105047][T32525] [ 521.107417][T32525] Reported by Kernel Concurrency Sanitizer on: [ 521.114612][T32525] CPU: 0 PID: 32525 Comm: syz-executor.1 Not tainted 5.14.0-rc4-syzkaller #0 [ 521.124555][T32525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 07:23:21 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da45", 0x2, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) [ 521.135771][T32525] ================================================================== 07:23:21 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x10f, 0x0, 0x0, 0x0, 0xe) 07:23:21 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:21 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb9167c1ec761", 0xb, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:21 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:21 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x110, 0x0, 0x0, 0x0, 0xe) 07:23:21 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x2280000000, 0x8080ffffff10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fallocate(r5, 0x12, 0x81, 0x2367) 07:23:21 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da45", 0x2, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:21 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff4a) 07:23:21 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x111, 0x0, 0x0, 0x0, 0xe) 07:23:21 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da45", 0x2, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:21 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0xe) 07:23:21 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x3, 0x0, 0x0, 0x0, 0xe) 07:23:21 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x112, 0x0, 0x0, 0x0, 0xe) 07:23:22 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:22 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da45", 0x2, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:22 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x4, 0x0, 0x0, 0x0, 0xe) 07:23:22 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x113, 0x0, 0x0, 0x0, 0xe) 07:23:22 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)="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", 0x12a, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:22 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0xe) 07:23:22 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff4b) 07:23:22 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x114, 0x0, 0x0, 0x0, 0xe) 07:23:22 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0xe) 07:23:22 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:22 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4ae833a77d1a5975eac0a82074cad7030ed3b8"}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="5fc4b95accc53014488dc337af995192232a7d206acd19ea7fc2ea78b49a637720c5ad6d471286f898a2ef2636c2f609c3489b169e21042830b8f6b2023a161a58ba7c6d86359a1bbb4259d9e7fee7ea67adc29d222c58598419b730693a1b6e4d88f3e76faa4937", 0x68}, {&(0x7f0000000440)="49f6bb4c269f3c541fcb112bc5f9eb13d928b95f3df3108d7ad36103d0392701d1a98a3c7b31af6306d50a54b570ec053cb3a7927cf99ec463a9d33f1a7448bc1161ec2f597d6b84c7fbfcefbf07f0e074d04b23aec8cada219cc4af6a4b", 0x5e}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x2b8}, 0x28000050) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000004c0)={0x3, 0x200, 0x0, 0xc633, 0x19, "0000e900"}) r4 = syz_open_pts(r3, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000001940)=""/4072, 0xfe8}], 0x1) fcntl$setstatus(r1, 0x4, 0x6800) lseek(0xffffffffffffffff, 0x4203, 0x2) r5 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:22 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da455864eeb916", 0x7, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:22 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x115, 0x0, 0x0, 0x0, 0xe) 07:23:22 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x80, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000440)=""/173) splice(r2, 0x0, r3, 0x0, 0x30000033fe0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0xd73c4000) r4 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="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", 0x12a, 0x2}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:22 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x7, 0x0, 0x0, 0x0, 0xe) 07:23:22 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x116, 0x0, 0x0, 0x0, 0xe) 07:23:22 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:22 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x117, 0x0, 0x0, 0x0, 0xe) 07:23:23 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff4c) 07:23:23 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:23 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0xa900, 0x98) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:23 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x8, 0x0, 0x0, 0x0, 0xe) 07:23:23 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x118, 0x0, 0x0, 0x0, 0xe) 07:23:23 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:23 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x9, 0x0, 0x0, 0x0, 0xe) 07:23:23 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x119, 0x0, 0x0, 0x0, 0xe) 07:23:23 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0xa, 0x0, 0x0, 0x0, 0xe) 07:23:23 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:23 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:23 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0xb, 0x0, 0x0, 0x0, 0xe) 07:23:24 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff4d) 07:23:24 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:24 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0xc, 0x0, 0x0, 0x0, 0xe) 07:23:24 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x11a, 0x0, 0x0, 0x0, 0xe) 07:23:24 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:24 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff08) io_destroy(r3) r5 = socket(0x1a, 0x1, 0x7f) read(r5, &(0x7f0000000440)=""/220, 0xdc) 07:23:24 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x11b, 0x0, 0x0, 0x0, 0xe) 07:23:24 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:24 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0xd, 0x0, 0x0, 0x0, 0xe) 07:23:24 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da45", 0x2, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:24 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x11c, 0x0, 0x0, 0x0, 0xe) 07:23:24 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:25 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x11d, 0x0, 0x0, 0x0, 0xe) 07:23:25 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff4e) 07:23:25 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da45", 0x2, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:25 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:25 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x30000033fe0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) io_submit(0x0, 0x6, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x100, r2, &(0x7f0000000000)="441c65600e70f66c6048d12f86cd373d5d4e7e902d63ec8f407c13ead815fdc8ead0b076a5939ff3604671093049ba6db32a48e2f84cfba6b02e967a98e591818cdba21cbf70d66755d63240c091ffd53f30eccb2a9f6386bfab3020decd5a88", 0x60, 0x20}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000440)="2704bfc9cb7ab3bb4d4122bbd3d49718268d023873387a0c4f65f639e03e4eeaf570d685fa59c8a74ccc1e358314ecb0afa83f13e3320e71e2104b75cdc62e5c421e0f363c485469de0fa022a3301ce4ddcc9804df603bef66c5b38c3d7df01295b9dfc4a5b44cb2c0a323597b06da76881114d1ac434b25ebe103228415301a780bb360ec6910c44f75fd47377a", 0x8e, 0x8, 0x0, 0x3, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x400, 0xffffffffffffffff, &(0x7f0000000580)="4321aec5fa87c6f9fa1096e8d96a8bf81bf2c2d894e564fde955d3f553deed888a531a4cc825758a8b16bcf7458de7b4acdd1768cbaad938c83444c2efc03f6fa844103d141ee7d069894b3e8d4752bd5f655be34b473ab7252cedf53fa19caed2daac021da32ad9ed5cf6987e48522b533ba674e0373b2c91c8afb84653a1afb69397c539a9775018da66ef4c3f87465e3a3c45aeaa770866b360e7bebcb7204d7ebbbe0164f7962ecb638aa58092891ef1441b94d852b44544", 0xba, 0x80, 0x0, 0x1, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000000640)="4debd7d71b175cdbfaffdeffd1504a19f03f37db6928c430270aa256e95409caa24807d9cb00332c04bc1718558b5cf2fbde73735978b84d16d562402e19408cfd0f0b11b39a4bd971b7ff88befeb409c2a5a1b62da19485ddf6589fa63ac75ec5f42211", 0x64, 0x8001, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000780)="201157fce695f0f6675dcb9fcb5b3ac71aacb4f89fa6baed877c07e84ffd8a0b3444a303af6f1f3843e336e830692014d3af35c855ff4ca654e84087e9b4046feb5ac790e9fa96c16a757b2b81ff5cb49aa2aa30fd0b37a2581001f5019256741bfae4f368b208dca0f16c73194a3d8c60d4118606e0a4a100fbf06010a98f27eaafef1c3a14bf3673d1f332fb174e828a3f459caf4d28b3b2c5c23e381a1044", 0xa0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x3, r6, &(0x7f0000000700)="4657fde66fb310622f703175057ad4a564a5451776d143fe61", 0x19, 0x101, 0x0, 0x3, r7}]) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:25 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0xe, 0x0, 0x0, 0x0, 0xe) 07:23:25 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0xf, 0x0, 0x0, 0x0, 0xe) 07:23:25 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x307d, 0x0, 0x0, 0x0, 0xe) 07:23:25 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x10, 0x0, 0x0, 0x0, 0xe) 07:23:25 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da45", 0x2, 0x7, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:25 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:25 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x11, 0x0, 0x0, 0x0, 0xe) 07:23:25 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x0, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:26 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff4f) 07:23:26 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:26 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x12, 0x0, 0x0, 0x0, 0xe) 07:23:26 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x0, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:26 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0xa0c81, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:26 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 07:23:26 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x13, 0x0, 0x0, 0x0, 0xe) 07:23:26 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x0, 0x0, 0x0, r0}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:26 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:26 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x14, 0x0, 0x0, 0x0, 0xe) 07:23:26 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:26 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x15, 0x0, 0x0, 0x0, 0xe) 07:23:27 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff50) 07:23:27 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) fcntl$setstatus(r1, 0x4, 0x6800) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:27 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x16, 0x0, 0x0, 0x0, 0xe) 07:23:27 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:27 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x2, 0x0, 0x0, 0xe) 07:23:27 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xc) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, r2, 0x9f841000) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000500), 0x40, 0x200000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000b00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x3ec, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "566d5420503d264e68c44e6feac1c9926013a53600b715"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x7b, 0x3, "5bdb5f0df15ee10c718364ba2a019ff89ec09eff8297c694768db7995e0b78855243740972e6f6c31f30999b6646ecd995d87880715f1bfce4fe3ef29216f7e66ec53251d29f44f975693c436614737383b360d9be425893e111db24076d958c2cdb2152c499e0f395152d0940380074ed428eaf8ee1bb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0x2c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xfa, 0x3, "46ee59ef1516194985ab8fda4cdc73962a8c2a283b40ccdcec849d183d20f5f40f3c2d3409ed2396465433da888ed9ba8cb068ba556f3a2e72d838e95d90b59b8f1cafc96ea80b09fd4cafa30ece5abcf45d9e54c37387c9f932f13fe5dce5dc2f8e192d5bbdfc68db0cd93212cf9bc6e9ea774e82da012143bd51d15084d1fa0479ae2f3767517686053a673b81d56e32f42aadf8338cb609b91fa8cb9c0bea9de8ef63a84f8806635e799e4f2eba3887183a00118684f901520bb7bab0bcedac3758a35ada168486c6b90dd664665addb53472f04a791603d13f2be832ca98ff0ccf0106bbe26d39b84c4e8856506ce780a953f420"}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "b9f000c899c194adf30d8e4f93f8df7a5134f7c806bb914961252d1eac65beb41bf88d1ea9a654b2e303598086f8ed76001e80d1981320862fd93517f7610d3fbb689e3488d841d0b494f646d8b3ffcdb090ed0872191dcbcd66bcbfa13d9a74506c70f2bb3bb10567c1ffdaa3a9a56e32a1c702445efce7af26386eb81837cfbf78858d4cb8f72f79d6630a220bbbc627dcb538b010b9ab86a5bc71c6c32b88d0ffd04558f3bdbc0e0bd8c2b7c1cec8062de1cae64b7e7d3086bd467ebe39d9ac418c9c45f99b9fbb3b8723f19f13a9b63d"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "e58e09d9092d16484a5d1efce5ce0d579165f098aab7ab5991e595e30b0df499d2da53"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "5deae5965b35765060f57eac7833585c7ad370d2fb7a24dcc0d400cc16ced8bb9cd1be"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf0fd}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b03a03ac18651b319d3fc6ef806d55d9df6c318f"}}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x804}, 0xc004) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x18) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:27 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x17, 0x0, 0x0, 0x0, 0xe) 07:23:27 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:27 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:27 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x18, 0x0, 0x0, 0x0, 0xe) 07:23:27 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:27 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x19, 0x0, 0x0, 0x0, 0xe) 07:23:28 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff51) 07:23:28 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x1a, 0x0, 0x0, 0x0, 0xe) 07:23:28 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:28 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x3, 0x0, 0x0, 0xe) 07:23:28 executing program 3: open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6800) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffb) 07:23:28 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x1b, 0x0, 0x0, 0x0, 0xe) 07:23:28 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:28 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:28 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x1c, 0x0, 0x0, 0x0, 0xe) 07:23:28 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:28 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x1d, 0x0, 0x0, 0x0, 0xe) 07:23:29 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(r0, r0, 0x0, 0x8080ffffff10) 07:23:29 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff52) 07:23:29 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x1e, 0x0, 0x0, 0x0, 0xe) 07:23:29 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(r0, r0, 0x0, 0x0) 07:23:29 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x4, 0x0, 0x0, 0xe) 07:23:29 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x30000033fe0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) io_submit(0x0, 0x6, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x100, r2, &(0x7f0000000000)="441c65600e70f66c6048d12f86cd373d5d4e7e902d63ec8f407c13ead815fdc8ead0b076a5939ff3604671093049ba6db32a48e2f84cfba6b02e967a98e591818cdba21cbf70d66755d63240c091ffd53f30eccb2a9f6386bfab3020decd5a88", 0x60, 0x20}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000440)="2704bfc9cb7ab3bb4d4122bbd3d49718268d023873387a0c4f65f639e03e4eeaf570d685fa59c8a74ccc1e358314ecb0afa83f13e3320e71e2104b75cdc62e5c421e0f363c485469de0fa022a3301ce4ddcc9804df603bef66c5b38c3d7df01295b9dfc4a5b44cb2c0a323597b06da76881114d1ac434b25ebe103228415301a780bb360ec6910c44f75fd47377a", 0x8e, 0x8, 0x0, 0x3, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x400, 0xffffffffffffffff, &(0x7f0000000580)="4321aec5fa87c6f9fa1096e8d96a8bf81bf2c2d894e564fde955d3f553deed888a531a4cc825758a8b16bcf7458de7b4acdd1768cbaad938c83444c2efc03f6fa844103d141ee7d069894b3e8d4752bd5f655be34b473ab7252cedf53fa19caed2daac021da32ad9ed5cf6987e48522b533ba674e0373b2c91c8afb84653a1afb69397c539a9775018da66ef4c3f87465e3a3c45aeaa770866b360e7bebcb7204d7ebbbe0164f7962ecb638aa58092891ef1441b94d852b44544", 0xba, 0x80, 0x0, 0x1, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000000640)="4debd7d71b175cdbfaffdeffd1504a19f03f37db6928c430270aa256e95409caa24807d9cb00332c04bc1718558b5cf2fbde73735978b84d16d562402e19408cfd0f0b11b39a4bd971b7ff88befeb409c2a5a1b62da19485ddf6589fa63ac75ec5f42211", 0x64, 0x8001, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000780)="201157fce695f0f6675dcb9fcb5b3ac71aacb4f89fa6baed877c07e84ffd8a0b3444a303af6f1f3843e336e830692014d3af35c855ff4ca654e84087e9b4046feb5ac790e9fa96c16a757b2b81ff5cb49aa2aa30fd0b37a2581001f5019256741bfae4f368b208dca0f16c73194a3d8c60d4118606e0a4a100fbf06010a98f27eaafef1c3a14bf3673d1f332fb174e828a3f459caf4d28b3b2c5c23e381a1044", 0xa0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x3, r6, &(0x7f0000000700)="4657fde66fb310622f703175057ad4a564a5451776d143fe61", 0x19, 0x101, 0x0, 0x3, r7}]) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:29 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x21, 0x0, 0x0, 0x0, 0xe) 07:23:30 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x136) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x6, 0x3) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) pipe(&(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x0, @remote}, &(0x7f0000000c00)=0x10, 0x800) pipe(&(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:30 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(r0, r0, 0x0, 0x0) 07:23:30 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x22, 0x0, 0x0, 0x0, 0xe) 07:23:30 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x23, 0x0, 0x0, 0x0, 0xe) 07:23:30 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da4558", 0x3, 0x7}]) sendfile(r0, r0, 0x0, 0x0) 07:23:30 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x24, 0x0, 0x0, 0x0, 0xe) 07:23:30 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="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", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff53) 07:23:30 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6800) lseek(r2, 0x4200, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080ffffff4e) 07:23:30 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x25, 0x0, 0x0, 0x0, 0xe) 07:23:30 executing program 4: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0xa, 0x0, 0x0, 0xe) 07:23:30 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da455864eeb9167c1ec76189e57e50c68e739ea84e4043521453c701ff8f874b7856a5a7434f6091814e0c7f4f80d24902643c3d4076752752ef6d2b215fa2a85b69f7e26f3abbc9a62fa52d09fd1f96d8ef9bb84710faa5b92bf6c168c6c46c66ee6c8e3fe567dd749027291261984989f79cee47a0d6f29044bbb70ef418a052f1dfe9aab165af7d3b7f7cd5e21cd5b2b3e62b7223290a2aaa95a4045fc2e6247ff36502396ca21c18a60fe6f4699dc563d8b40c84269a24486af086b392ce38e2c573d683282f3a9a345c8dcc7483eda3a26183108d8b16b0c4c651625c833462f9b5ad5e6b276ef0f6b2dadc5e48bc2f736a1e97e4496b770d515271e0c1a32713988e3e6086ca4694973913d27316b6e1d324b155314b217f991a23e3c04cdc00b1e6bf2a912d88", 0xa9f9, 0x7}]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x30000033fe0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000001c0)=ANY=[], 0x1000000c8) io_submit(0x0, 0x6, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x100, r2, &(0x7f0000000000)="441c65600e70f66c6048d12f86cd373d5d4e7e902d63ec8f407c13ead815fdc8ead0b076a5939ff3604671093049ba6db32a48e2f84cfba6b02e967a98e591818cdba21cbf70d66755d63240c091ffd53f30eccb2a9f6386bfab3020decd5a88", 0x60, 0x20}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000440)="2704bfc9cb7ab3bb4d4122bbd3d49718268d023873387a0c4f65f639e03e4eeaf570d685fa59c8a74ccc1e358314ecb0afa83f13e3320e71e2104b75cdc62e5c421e0f363c485469de0fa022a3301ce4ddcc9804df603bef66c5b38c3d7df01295b9dfc4a5b44cb2c0a323597b06da76881114d1ac434b25ebe103228415301a780bb360ec6910c44f75fd47377a", 0x8e, 0x8, 0x0, 0x3, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x400, 0xffffffffffffffff, &(0x7f0000000580)="4321aec5fa87c6f9fa1096e8d96a8bf81bf2c2d894e564fde955d3f553deed888a531a4cc825758a8b16bcf7458de7b4acdd1768cbaad938c83444c2efc03f6fa844103d141ee7d069894b3e8d4752bd5f655be34b473ab7252cedf53fa19caed2daac021da32ad9ed5cf6987e48522b533ba674e0373b2c91c8afb84653a1afb69397c539a9775018da66ef4c3f87465e3a3c45aeaa770866b360e7bebcb7204d7ebbbe0164f7962ecb638aa58092891ef1441b94d852b44544", 0xba, 0x80, 0x0, 0x1, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000000640)="4debd7d71b175cdbfaffdeffd1504a19f03f37db6928c430270aa256e95409caa24807d9cb00332c04bc1718558b5cf2fbde73735978b84d16d562402e19408cfd0f0b11b39a4bd971b7ff88befeb409c2a5a1b62da19485ddf6589fa63ac75ec5f42211", 0x64, 0x8001, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000780)="201157fce695f0f6675dcb9fcb5b3ac71aacb4f89fa6baed877c07e84ffd8a0b3444a303af6f1f3843e336e830692014d3af35c855ff4ca654e84087e9b4046feb5ac790e9fa96c16a757b2b81ff5cb49aa2aa30fd0b37a2581001f5019256741bfae4f368b208dca0f16c73194a3d8c60d4118606e0a4a100fbf06010a98f27eaafef1c3a14bf3673d1f332fb174e828a3f459caf4d28b3b2c5c23e381a1044", 0xa0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x3, r6, &(0x7f0000000700)="4657fde66fb310622f703175057ad4a564a5451776d143fe61", 0x19, 0x101, 0x0, 0x3, r7}]) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100)=0x9, 0x8080ffffff10) 07:23:30 executing program 0: r0 = syz_io_uring_setup(0x78d0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setregid(0x0, 0x0) io_uring_enter(r0, 0x26, 0x0, 0x0, 0x0, 0xe)